127.0.0.1 - - [14/Jul/2020:00:02:28 -0400] "GET /css/new-style.css HTTP/1.1" 200 5564 127.0.0.1 - - [14/Jul/2020:00:32:09 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:00:32:09 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:00:32:11 -0400] "GET /forgotPasswordLink HTTP/1.1" 200 3725 127.0.0.1 - - [14/Jul/2020:00:32:11 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:00:32:11 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:00:51:02 -0400] "POST /?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:00:51:02 -0400] "POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:00:51:03 -0400] "POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:00:51:03 -0400] "POST /cgi-bin/php4?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:00:51:03 -0400] "POST /cgi-bin/php-cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:00:51:04 -0400] "POST /cgi-bin/php.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:00:51:04 -0400] "GET /index.php?s=/Index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=sha1&vars[1][]=xyzt HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:00:51:05 -0400] "GET /index.php/module/action/param1/$%7B@die(sha1(xyzt))%7D HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:00:51:05 -0400] "GET /App/?content=die(sha1(xyzt)) HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:00:51:06 -0400] "GET /index.php?s=/module/action/param1/${@die(sha1(xyzt))} HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:00:53:32 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:00:53:33 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:00:53:33 -0400] "GET /css/new-style.css HTTP/1.1" 200 5564 127.0.0.1 - - [14/Jul/2020:00:53:33 -0400] "GET /images/CSG%20elibrary%20Logo.png HTTP/1.1" 404 990 127.0.0.1 - - [14/Jul/2020:00:53:33 -0400] "GET /images/Pocket_textbooks_LOGO.png HTTP/1.1" 200 69538 127.0.0.1 - - [14/Jul/2020:00:53:34 -0400] "GET /images/eLibrary%20Pro%20Logo%20-%20Powered%20by%203.png HTTP/1.1" 200 213908 127.0.0.1 - - [14/Jul/2020:00:53:34 -0400] "GET /images/bg.png HTTP/1.1" 200 166566 127.0.0.1 - - [14/Jul/2020:00:53:35 -0400] "GET /fonts/opensans-regular-webfont.woff2 HTTP/1.1" 404 990 127.0.0.1 - - [14/Jul/2020:00:57:21 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:00:57:21 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:00:57:22 -0400] "GET /css/new-style.css HTTP/1.1" 200 5564 127.0.0.1 - - [14/Jul/2020:00:57:23 -0400] "GET /fonts/opensans-regular-webfont.woff2 HTTP/1.1" 404 990 127.0.0.1 - - [14/Jul/2020:00:57:23 -0400] "GET /images/eLibrary%20Pro%20Logo%20-%20Powered%20by%203.png HTTP/1.1" 200 213908 127.0.0.1 - - [14/Jul/2020:00:57:23 -0400] "GET /images/bg.png HTTP/1.1" 200 166566 127.0.0.1 - - [14/Jul/2020:00:57:23 -0400] "GET /fonts/opensans-regular-webfont.woff HTTP/1.1" 404 990 127.0.0.1 - - [14/Jul/2020:00:57:23 -0400] "GET /images/Pocket_textbooks_LOGO.png HTTP/1.1" 200 69538 127.0.0.1 - - [14/Jul/2020:00:57:23 -0400] "GET /images/CSG%20elibrary%20Logo.png HTTP/1.1" 404 990 127.0.0.1 - - [14/Jul/2020:00:57:23 -0400] "GET /fonts/opensans-regular-webfont.ttf HTTP/1.1" 404 990 127.0.0.1 - - [14/Jul/2020:00:57:24 -0400] "GET /images/favicon.ico HTTP/1.1" 200 1150 127.0.0.1 - - [14/Jul/2020:00:57:45 -0400] "GET /images/elibrary2.png HTTP/1.1" 200 2162688 185.39.11.105 - - [14/Jul/2020:03:53:03 -0400] "GET / HTTP/1.1" 302 - 185.39.11.105 - - [14/Jul/2020:03:53:03 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:04:32:14 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:04:32:14 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:05:13:09 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:05:13:10 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:05:13:10 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:05:13:11 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:07:10:55 -0400] "POST /?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:07:10:55 -0400] "POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:07:10:55 -0400] "POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:07:10:55 -0400] "POST /cgi-bin/php4?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:07:10:56 -0400] "POST /cgi-bin/php-cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:07:10:56 -0400] "POST /cgi-bin/php.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:07:10:56 -0400] "POST /cgi-bin/php4.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:07:10:56 -0400] "POST /cgi-bin/php5.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:07:10:57 -0400] "GET /index.php?s=/Index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=sha1&vars[1][]=xyzt HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:07:10:57 -0400] "GET /index.php/module/action/param1/$%7B@die(sha1(xyzt))%7D HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:07:10:57 -0400] "GET /App/?content=die(sha1(xyzt)) HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:07:10:57 -0400] "GET /index.php?s=/module/action/param1/${@die(sha1(xyzt))} HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:07:30:19 -0400] "HEAD / HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:07:30:19 -0400] "HEAD /login HTTP/1.1" 200 - 127.0.0.1 - - [14/Jul/2020:07:30:19 -0400] "HEAD / HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:07:30:20 -0400] "HEAD /login HTTP/1.1" 200 - 209.126.3.185 - - [14/Jul/2020:07:46:30 -0400] "-" 400 - 209.126.3.185 - - [14/Jul/2020:07:46:30 -0400] "GET / HTTP/1.1" 302 - 209.126.3.185 - - [14/Jul/2020:07:46:30 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:07:53:25 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:07:53:25 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:07:53:25 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:07:53:26 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:08:10:23 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:08:10:23 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:08:10:23 -0400] "GET /blog/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:23 -0400] "GET /wp/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:23 -0400] "GET /wordpress/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:24 -0400] "GET /new/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:24 -0400] "GET /old/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:24 -0400] "GET /test/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:24 -0400] "GET /main/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:24 -0400] "GET /site/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:24 -0400] "GET /backup/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:24 -0400] "GET /demo/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:25 -0400] "GET /home/ HTTP/1.1" 404 1038 127.0.0.1 - - [14/Jul/2020:08:10:25 -0400] "GET /tmp/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:26 -0400] "GET /cms/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:26 -0400] "GET /dev/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:26 -0400] "GET /old-wp/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:26 -0400] "GET /web/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:27 -0400] "GET /old-site/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:27 -0400] "GET /temp/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:27 -0400] "GET /2018/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:27 -0400] "GET /2019/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:27 -0400] "GET /bk/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:28 -0400] "GET /wp1/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:28 -0400] "GET /wp2/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:28 -0400] "GET /v1/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:28 -0400] "GET /v2/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:28 -0400] "GET /bak/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:28 -0400] "GET /install/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:29 -0400] "GET /2020/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:08:10:29 -0400] "GET /new-site/ HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:09:31:05 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:10:13:05 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:10:13:05 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:10:13:08 -0400] "GET /forgotPasswordLink HTTP/1.1" 200 3725 127.0.0.1 - - [14/Jul/2020:10:13:09 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:10:13:09 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:11:08:14 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:11:08:15 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:11:22:41 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:11:22:45 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:12:11:30 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:12:11:30 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:12:11:31 -0400] "GET /forgotPasswordLink HTTP/1.1" 200 3725 127.0.0.1 - - [14/Jul/2020:12:11:32 -0400] "GET /dashboard HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:12:11:33 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:12:23:56 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:12:23:56 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:13:35:52 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:13:35:53 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:13:53:28 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:13:53:28 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:13:53:28 -0400] "GET /bin/linux%20bash%20tutorial.pdf HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:14:49:07 -0400] "GET /telerik.web.ui.dialoghandler.aspx HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:14:49:08 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:14:49:09 -0400] "GET /DesktopModules/Admin/RadEditorProvider/telerik.web.ui.dialoghandler.aspx HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:14:49:09 -0400] "GET /DesktopModules/RadEditorProvider/telerik.web.ui.dialoghandler.aspx HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:14:49:10 -0400] "GET /modules/shop/manage/telerik.web.ui.dialoghandler.aspx HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:14:49:11 -0400] "GET /Providers/HtmlEditorProviders/Telerik/telerik.web.ui.dialoghandler.aspx HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:14:49:12 -0400] "GET /common/admin/PhotoGallery2/telerik.web.ui.dialoghandler.aspx HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:14:56:42 -0400] "GET /wp-login.php HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:14:56:42 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:14:56:42 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:14:56:42 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:15:39:21 -0400] "GET /bin/home HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:18:13:37 -0400] "POST /?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:18:13:38 -0400] "POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:18:13:38 -0400] "POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:18:13:38 -0400] "POST /cgi-bin/php4?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:18:13:39 -0400] "POST /cgi-bin/php-cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:18:13:39 -0400] "POST /cgi-bin/php.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:18:13:40 -0400] "POST /cgi-bin/php4.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:18:13:40 -0400] "POST /cgi-bin/php5.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:18:13:40 -0400] "GET /index.php?s=/Index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=sha1&vars[1][]=xyzt HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:18:13:41 -0400] "GET /index.php/module/action/param1/$%7B@die(sha1(xyzt))%7D HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:18:13:41 -0400] "GET /App/?content=die(sha1(xyzt)) HTTP/1.1" 200 2145 127.0.0.1 - - [14/Jul/2020:18:13:42 -0400] "GET /index.php?s=/module/action/param1/${@die(sha1(xyzt))} HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:19:04:19 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:19:04:19 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:20:10:42 -0400] "GET /app-ads.txt HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:21:34:02 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:21:34:02 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [14/Jul/2020:21:34:02 -0400] "GET /app-ads.txt HTTP/1.1" 302 - 127.0.0.1 - - [14/Jul/2020:21:34:03 -0400] "GET /login HTTP/1.1" 200 4254