192.241.204.38 - - [22/Feb/2022:01:19:19 +0100] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 348 "-" "Mozilla/5.0 zgrab/0.x" 192.241.206.146 - - [22/Feb/2022:01:25:00 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 301 335 "-" "Mozilla/5.0 zgrab/0.x" 34.77.162.25 - - [22/Feb/2022:03:04:38 +0100] "GET / HTTP/1.1" 301 385 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 51.158.118.231 - - [22/Feb/2022:04:26:55 +0100] "GET / HTTP/1.1" 301 391 "-" "-" 192.241.213.55 - - [22/Feb/2022:04:27:06 +0100] "GET /actuator/health HTTP/1.1" 301 310 "-" "Mozilla/5.0 zgrab/0.x" 45.72.48.130 - - [22/Feb/2022:04:51:23 +0100] "GET / HTTP/1.1" 301 295 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36" 131.220.6.152 - - [22/Feb/2022:04:54:37 +0100] "GET / HTTP/1.1" 301 295 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 71.6.232.7 - - [22/Feb/2022:06:16:30 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Safari/537.36" 35.233.62.116 - - [22/Feb/2022:06:38:21 +0100] "GET / HTTP/1.1" 301 301 "-" "python-requests/2.27.1" 172.105.161.246 - - [22/Feb/2022:07:10:58 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 128.14.209.170 - - [22/Feb/2022:08:01:57 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.146.165.37 - - [22/Feb/2022:08:44:29 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 87.106.114.236 - - [22/Feb/2022:09:19:20 +0100] "GET / HTTP/1.1" 301 394 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8" 157.55.39.47 - - [22/Feb/2022:09:48:52 +0100] "GET / HTTP/1.1" 301 304 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 23.224.186.225 - - [22/Feb/2022:09:59:19 +0100] "GET / HTTP/1.1" 301 383 "-" "-" 23.224.186.225 - - [22/Feb/2022:09:59:23 +0100] "GET /favicon.ico HTTP/1.1" 301 309 "-" "Go-http-client/1.1" 23.224.186.225 - - [22/Feb/2022:09:59:29 +0100] "GET /robots.txt HTTP/1.1" 301 308 "-" "Go-http-client/1.1" 23.224.186.225 - - [22/Feb/2022:09:59:41 +0100] "GET /sitemap.xml HTTP/1.1" 301 309 "-" "Go-http-client/1.1" 45.146.165.37 - - [22/Feb/2022:10:19:49 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.146.165.37 - - [22/Feb/2022:11:02:22 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 301 390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 184.105.139.69 - - [22/Feb/2022:11:16:18 +0100] "GET / HTTP/1.1" 301 383 "-" "-" 192.241.211.115 - - [22/Feb/2022:12:07:10 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 zgrab/0.x" 45.146.165.37 - - [22/Feb/2022:12:18:46 +0100] "POST /mifs/.;/services/LogService HTTP/1.1" 301 318 "https://86.59.113.102:443" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 208.100.26.233 - - [22/Feb/2022:12:41:58 +0100] "GET / HTTP/1.1" 301 297 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4164.0 Safari/537.36" 45.146.165.37 - - [22/Feb/2022:13:01:58 +0100] "GET /console/ HTTP/1.1" 301 307 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.79.77.138 - - [22/Feb/2022:13:02:22 +0100] "OPTIONS / HTTP/1.0" 301 383 "-" "-" 45.146.165.37 - - [22/Feb/2022:13:55:12 +0100] "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 301 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 51.15.205.3 - - [22/Feb/2022:13:55:47 +0100] "GET / HTTP/1.1" 301 385 "-" "-" 45.146.165.37 - - [22/Feb/2022:15:31:48 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 162.142.125.210 - - [22/Feb/2022:16:33:31 +0100] "GET / HTTP/1.1" 301 383 "-" "-" 162.142.125.210 - - [22/Feb/2022:16:33:31 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 162.142.125.210 - - [22/Feb/2022:16:33:32 +0100] "PRI * HTTP/2.0" 400 379 "-" "-" 45.146.165.37 - - [22/Feb/2022:17:25:59 +0100] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 293 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 154.89.5.76 - - [22/Feb/2022:17:47:05 +0100] "GET / HTTP/1.0" 301 383 "-" "-" 45.146.165.37 - - [22/Feb/2022:18:12:24 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.241.211.11 - - [22/Feb/2022:19:13:44 +0100] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 348 "-" "Mozilla/5.0 zgrab/0.x" 192.241.213.104 - - [22/Feb/2022:19:14:06 +0100] "GET /owa/auth/x.js HTTP/1.1" 301 310 "-" "Mozilla/5.0 zgrab/0.x" 192.241.211.186 - - [22/Feb/2022:19:14:26 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 301 314 "-" "Mozilla/5.0 zgrab/0.x" 157.55.39.47 - - [22/Feb/2022:19:31:37 +0100] "GET / HTTP/1.1" 301 304 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 170.130.187.54 - - [22/Feb/2022:21:58:12 +0100] "GET / HTTP/1.1" 301 383 "-" "https://gdnplus.com:Gather Analyze Provide." 18.237.49.245 - - [22/Feb/2022:22:12:48 +0100] "GET / HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 44.234.58.174 - - [22/Feb/2022:22:13:21 +0100] "GET /favicon.ico HTTP/1.1" 301 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 54.200.144.133 - - [22/Feb/2022:23:20:11 +0100] "GET / HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 54.218.7.31 - - [22/Feb/2022:23:20:42 +0100] "GET /favicon.ico HTTP/1.1" 301 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 54.218.7.31 - - [22/Feb/2022:23:20:47 +0100] "GET / HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 54.244.111.73 - - [23/Feb/2022:00:59:57 +0100] "GET / HTTP/1.1" 301 306 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"