5.8.54.27 - - [11/Dec/2018:00:28:49 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:00:28:50 -0500] "GET /login HTTP/1.1" 200 4162 196.52.43.128 - - [11/Dec/2018:00:37:42 -0500] "GET / HTTP/1.0" 302 - 209.17.96.218 - - [11/Dec/2018:01:03:33 -0500] "GET / HTTP/1.1" 302 - 209.17.97.18 - - [11/Dec/2018:01:12:43 -0500] "GET / HTTP/1.1" 302 - 209.17.96.194 - - [11/Dec/2018:01:54:29 -0500] "GET / HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:02:26:31 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:02:26:31 -0500] "GET /login HTTP/1.1" 200 4162 209.17.96.58 - - [11/Dec/2018:02:28:35 -0500] "GET / HTTP/1.1" 302 - 209.17.96.194 - - [11/Dec/2018:03:04:26 -0500] "GET / HTTP/1.1" 302 - 209.17.97.66 - - [11/Dec/2018:03:33:54 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [11/Dec/2018:03:37:46 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [11/Dec/2018:03:37:50 -0500] "GET /images/favicon.ico HTTP/1.1" 200 1150 5.8.54.27 - - [11/Dec/2018:04:13:28 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:04:13:29 -0500] "GET /login HTTP/1.1" 200 4162 209.17.97.34 - - [11/Dec/2018:04:16:03 -0500] "GET / HTTP/1.1" 302 - 209.17.97.82 - - [11/Dec/2018:04:20:54 -0500] "GET / HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:06:03:32 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:06:03:33 -0500] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [11/Dec/2018:06:11:13 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [11/Dec/2018:06:11:17 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [11/Dec/2018:06:11:21 -0500] "GET /login HTTP/1.1" 200 4162 209.17.96.58 - - [11/Dec/2018:07:05:12 -0500] "GET / HTTP/1.1" 302 - 209.17.96.58 - - [11/Dec/2018:07:27:54 -0500] "GET / HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:07:29:28 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:07:29:28 -0500] "GET /login HTTP/1.1" 200 4162 209.17.97.122 - - [11/Dec/2018:08:02:27 -0500] "GET / HTTP/1.1" 302 - 209.17.96.18 - - [11/Dec/2018:08:04:26 -0500] "GET / HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:08:19:51 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:08:19:51 -0500] "GET /login HTTP/1.1" 200 4162 45.40.247.240 - - [11/Dec/2018:08:22:23 -0500] "GET /manager/html HTTP/1.1" 401 2538 45.40.247.240 - - [11/Dec/2018:08:22:23 -0500] "GET /manager/html HTTP/1.1" 401 2538 45.40.247.240 - - [11/Dec/2018:08:22:24 -0500] "GET /manager/html HTTP/1.1" 401 2538 45.40.247.240 - - [11/Dec/2018:08:22:24 -0500] "GET /manager/html HTTP/1.1" 401 2538 60.13.136.44 - - [11/Dec/2018:08:22:24 -0500] "CONNECT www.baidu.com HTTP/1.1" 400 - 123.160.235.29 - - [11/Dec/2018:08:22:24 -0500] "GET / HTTP/1.1" 302 - 45.40.247.240 - - [11/Dec/2018:08:22:24 -0500] "GET /manager/html HTTP/1.1" 401 2538 123.160.235.29 - - [11/Dec/2018:08:22:25 -0500] "GET /login HTTP/1.1" 200 4162 61.52.66.160 - - [11/Dec/2018:08:22:25 -0500] "GET / HTTP/1.1" 302 - 121.57.226.211 - - [11/Dec/2018:08:22:26 -0500] "GET /english/ HTTP/1.1" 200 - 123.191.148.106 - - [11/Dec/2018:08:22:27 -0500] "CONNECT www.voanews.com:443 HTTP/1.1" 400 - 221.11.60.153 - - [11/Dec/2018:08:22:27 -0500] "CONNECT cn.bing.com:443 HTTP/1.1" 400 - 60.1.129.210 - - [11/Dec/2018:08:22:31 -0500] "GET / HTTP/1.1" 302 - 59.173.111.44 - - [11/Dec/2018:08:22:31 -0500] "CONNECT www.baidu.com:443 HTTP/1.1" 400 - 116.54.42.94 - - [11/Dec/2018:08:22:31 -0500] "GET / HTTP/1.1" 302 - 60.1.129.210 - - [11/Dec/2018:08:22:31 -0500] "GET /login HTTP/1.1" 200 4162 45.40.247.240 - - [11/Dec/2018:08:22:32 -0500] "GET /manager/html HTTP/1.1" 401 2538 124.90.53.20 - - [11/Dec/2018:08:22:33 -0500] "GET / HTTP/1.1" 302 - 182.101.52.217 - - [11/Dec/2018:08:22:33 -0500] "GET / HTTP/1.1" 302 - 45.40.247.240 - - [11/Dec/2018:08:22:33 -0500] "GET /manager/html HTTP/1.1" 401 2538 182.101.52.217 - - [11/Dec/2018:08:22:33 -0500] "GET /login HTTP/1.1" 200 4162 45.40.247.240 - - [11/Dec/2018:08:22:34 -0500] "GET /manager/html HTTP/1.1" 401 2538 45.40.247.240 - - [11/Dec/2018:08:22:34 -0500] "GET /manager/html HTTP/1.1" 401 2538 209.17.97.34 - - [11/Dec/2018:08:33:09 -0500] "GET / HTTP/1.1" 302 - 209.17.96.194 - - [11/Dec/2018:08:42:08 -0500] "GET / HTTP/1.1" 302 - 209.17.97.2 - - [11/Dec/2018:08:48:53 -0500] "GET / HTTP/1.1" 302 - 209.17.96.210 - - [11/Dec/2018:09:05:45 -0500] "GET / HTTP/1.1" 302 - 209.17.96.34 - - [11/Dec/2018:09:22:01 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [11/Dec/2018:09:57:25 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [11/Dec/2018:09:57:25 -0500] "GET /login HTTP/1.1" 200 4162 209.17.96.58 - - [11/Dec/2018:10:13:47 -0500] "GET / HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:10:30:49 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:10:30:49 -0500] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [11/Dec/2018:11:05:49 -0500] "GET / HTTP/1.1" 302 - 209.17.97.58 - - [11/Dec/2018:11:10:20 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [11/Dec/2018:11:38:27 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [11/Dec/2018:11:38:27 -0500] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [11/Dec/2018:11:38:27 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [11/Dec/2018:11:38:28 -0500] "GET /login HTTP/1.1" 200 4162 209.17.96.250 - - [11/Dec/2018:11:50:55 -0500] "GET / HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:12:23:39 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:12:23:39 -0500] "GET /login HTTP/1.1" 200 4162 209.17.96.66 - - [11/Dec/2018:12:28:46 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [11/Dec/2018:12:28:59 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [11/Dec/2018:12:28:59 -0500] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [11/Dec/2018:12:29:00 -0500] "GET / HTTP/1.1" 302 - 209.17.96.242 - - [11/Dec/2018:13:15:06 -0500] "GET / HTTP/1.1" 302 - 209.17.97.42 - - [11/Dec/2018:13:22:42 -0500] "GET / HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:13:52:38 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:13:52:39 -0500] "GET /login HTTP/1.1" 200 4162 5.8.54.27 - - [11/Dec/2018:14:35:44 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:14:35:44 -0500] "GET /login HTTP/1.1" 200 4162 209.17.96.234 - - [11/Dec/2018:15:22:28 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [11/Dec/2018:15:43:04 -0500] "HEAD / HTTP/1.1" 302 - 127.0.0.1 - - [11/Dec/2018:15:43:04 -0500] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [11/Dec/2018:15:43:05 -0500] "HEAD /plug/comment/commentList.asp?id=0%20unmasterion%20semasterlect%20top%201%20UserID,GroupID,LoginName,Password,now%28%29,null,1%20%20frmasterom%20%7Bprefix%7Duser HTTP/1.1" 200 - 127.0.0.1 - - [11/Dec/2018:15:43:05 -0500] "GET /plug/comment/commentList.asp?id=0%20unmasterion%20semasterlect%20top%201%20UserID,GroupID,LoginName,Password,now%28%29,null,1%20%20frmasterom%20%7Bprefix%7Duser HTTP/1.1" 200 2137 127.0.0.1 - - [11/Dec/2018:15:43:05 -0500] "HEAD /plus/recommend.php HTTP/1.1" 200 - 127.0.0.1 - - [11/Dec/2018:15:43:05 -0500] "GET /plus/recommend.php?aid=1&_FILES%5Btype%5D%5Bname%5D&_FILES%5Btype%5D%5Bsize%5D&_FILES%5Btype%5D%5Btype%5D&_FILES%5Btype%5D%5Btmp_name%5D=aa%5C%27and+char(@%60%27%60)+/*!50000Union*/+/*!50000SeLect*/+1,2,3,concat(0x383839386739617364,group_concat(0x7C,userid,0x3a,pwd,0x7C),0x3C2F6162633E),5,6,7,8,9%20from%20%60%23@__admin%60%23 HTTP/1.1" 200 2137 127.0.0.1 - - [11/Dec/2018:15:43:05 -0500] "HEAD /news/html HTTP/1.1" 200 - 127.0.0.1 - - [11/Dec/2018:15:43:06 -0500] "GET /news/html/?410'union/**/select/**/1/**/from/**/(select/**/count(*),concat(floor(rand(0)*2),0x3a,(select/**/concat(user,0x3a,password)/**/from/**/pwn_base_admin/**/limit/**/0,1),0x3a)a/**/from/**/information_schema.tables/**/group/**/by/**/a)b/**/where'1'='1.html HTTP/1.1" 200 2137 209.17.97.10 - - [11/Dec/2018:15:50:27 -0500] "GET / HTTP/1.1" 302 - 209.17.97.74 - - [11/Dec/2018:15:59:08 -0500] "GET / HTTP/1.1" 302 - 209.17.96.226 - - [11/Dec/2018:16:22:57 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [11/Dec/2018:16:52:31 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [11/Dec/2018:16:52:34 -0500] "GET /images/CSG%20elibrary%20Logo_168.png HTTP/1.1" 200 4223 127.0.0.1 - - [11/Dec/2018:16:52:37 -0500] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [11/Dec/2018:16:56:50 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [11/Dec/2018:16:56:50 -0500] "GET /login HTTP/1.1" 200 4162 209.17.97.34 - - [11/Dec/2018:18:04:24 -0500] "GET / HTTP/1.1" 302 - 209.17.96.18 - - [11/Dec/2018:18:59:15 -0500] "GET / HTTP/1.1" 302 - 209.17.96.26 - - [11/Dec/2018:19:11:24 -0500] "GET / HTTP/1.1" 302 - 111.231.89.130 - - [11/Dec/2018:19:30:30 -0500] "GET /manager/html HTTP/1.1" 401 2538 111.231.89.130 - - [11/Dec/2018:19:30:30 -0500] "GET /manager/html HTTP/1.1" 401 2538 120.39.52.1 - - [11/Dec/2018:19:30:31 -0500] "GET / HTTP/1.1" 302 - 120.39.52.1 - - [11/Dec/2018:19:30:31 -0500] "GET /login HTTP/1.1" 200 4162 111.231.89.130 - - [11/Dec/2018:19:30:32 -0500] "GET /manager/html HTTP/1.1" 401 2538 171.37.138.253 - - [11/Dec/2018:19:30:32 -0500] "CONNECT www.baidu.com HTTP/1.1" 400 - 111.231.89.130 - - [11/Dec/2018:19:30:32 -0500] "GET /manager/html HTTP/1.1" 401 2538 111.231.89.130 - - [11/Dec/2018:19:30:33 -0500] "GET /manager/html HTTP/1.1" 401 2538 111.231.89.130 - - [11/Dec/2018:19:30:33 -0500] "GET /manager/html HTTP/1.1" 401 2538 111.231.89.130 - - [11/Dec/2018:19:30:33 -0500] "GET /manager/html HTTP/1.1" 401 2538 111.231.89.130 - - [11/Dec/2018:19:30:33 -0500] "GET /manager/html HTTP/1.1" 401 2538 111.231.89.130 - - [11/Dec/2018:19:30:34 -0500] "GET /manager/html HTTP/1.1" 401 2538 124.90.54.91 - - [11/Dec/2018:19:30:35 -0500] "GET /english/ HTTP/1.1" 200 - 124.160.236.97 - - [11/Dec/2018:19:30:38 -0500] "CONNECT cn.bing.com:443 HTTP/1.1" 400 - 222.94.140.79 - - [11/Dec/2018:19:30:38 -0500] "CONNECT www.voanews.com:443 HTTP/1.1" 400 - 171.118.225.13 - - [11/Dec/2018:19:30:39 -0500] "GET / HTTP/1.1" 302 - 110.167.91.225 - - [11/Dec/2018:19:30:39 -0500] "GET / HTTP/1.1" 302 - 180.95.225.122 - - [11/Dec/2018:19:30:39 -0500] "GET / HTTP/1.1" 302 - 118.81.13.130 - - [11/Dec/2018:19:30:40 -0500] "CONNECT www.baidu.com:443 HTTP/1.1" 400 - 110.167.91.225 - - [11/Dec/2018:19:30:40 -0500] "GET /login HTTP/1.1" 200 4162 125.76.60.29 - - [11/Dec/2018:19:30:41 -0500] "GET / HTTP/1.1" 302 - 101.249.218.221 - - [11/Dec/2018:19:30:41 -0500] "GET / HTTP/1.1" 302 - 101.249.218.221 - - [11/Dec/2018:19:30:42 -0500] "GET /login HTTP/1.1" 200 4162 209.17.96.42 - - [11/Dec/2018:20:17:12 -0500] "GET / HTTP/1.1" 302 - 209.17.97.2 - - [11/Dec/2018:20:38:07 -0500] "GET / HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:20:42:59 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:20:42:59 -0500] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [11/Dec/2018:20:54:42 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [11/Dec/2018:20:54:42 -0500] "GET /login HTTP/1.1" 200 4162 5.8.54.27 - - [11/Dec/2018:21:30:57 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:21:30:57 -0500] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [11/Dec/2018:22:44:57 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [11/Dec/2018:22:44:57 -0500] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [11/Dec/2018:22:44:58 -0500] "GET /forgotPasswordLink HTTP/1.1" 200 3711 127.0.0.1 - - [11/Dec/2018:22:55:41 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [11/Dec/2018:22:55:44 -0500] "GET /login HTTP/1.1" 200 4162 5.8.54.27 - - [11/Dec/2018:23:42:10 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [11/Dec/2018:23:42:11 -0500] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [11/Dec/2018:23:48:20 -0500] "GET / HTTP/1.1" 302 -