161.35.86.181 - - [29/Apr/2022:03:15:56 +0200] "GET / HTTP/1.1" 400 379 "-" "-" 161.35.86.181 - - [29/Apr/2022:03:15:57 +0200] "GET / HTTP/1.1" 301 383 "-" "l9tcpid/v1.1.0" 161.35.86.181 - - [29/Apr/2022:03:15:58 +0200] "PUT /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "Go-http-client/1.1" 161.35.86.181 - - [29/Apr/2022:03:15:58 +0200] "HEAD /cgi-bin/blockpage.cgi HTTP/1.1" 301 - "-" "Go-http-client/1.1" 161.35.86.181 - - [29/Apr/2022:03:15:58 +0200] "GET /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts HTTP/1.1" 400 293 "-" "Lkx-TraversalHttpPlugin/0.0.1 (+https://leakix.net/, +https://twitter.com/HaboubiAnis)" 161.35.86.181 - - [29/Apr/2022:03:15:58 +0200] "GET /.DS_Store HTTP/1.1" 301 307 "-" "Go-http-client/1.1" 161.35.86.181 - - [29/Apr/2022:03:15:58 +0200] "GET /favicon.ico HTTP/1.1" 301 309 "-" "l9explore/1.3.0" 161.35.86.181 - - [29/Apr/2022:03:15:58 +0200] "GET /api/geojson?url=file:///etc/hosts HTTP/1.1" 301 325 "-" "l9explore/1.3.0" 161.35.86.181 - - [29/Apr/2022:03:15:58 +0200] "GET /debug/default/view?panel=config HTTP/1.1" 301 325 "-" "l9explore/1.3.0" 161.35.86.181 - - [29/Apr/2022:03:15:59 +0200] "GET /server-status HTTP/1.1" 301 308 "-" "l9explore/1.3.0" 161.35.86.181 - - [29/Apr/2022:03:15:59 +0200] "GET /.git/config HTTP/1.1" 301 310 "-" "l9explore/1.3.0" 161.35.86.181 - - [29/Apr/2022:03:15:59 +0200] "GET /idx_config/ HTTP/1.1" 301 310 "-" "l9explore/1.3.0" 161.35.86.181 - - [29/Apr/2022:03:15:59 +0200] "GET /telescope/requests HTTP/1.1" 301 311 "-" "l9explore/1.3.0" 161.35.86.181 - - [29/Apr/2022:03:15:59 +0200] "GET /login.action HTTP/1.1" 301 311 "-" "l9explore/1.3.0" 161.35.86.181 - - [29/Apr/2022:03:15:59 +0200] "GET /v2/_catalog HTTP/1.1" 301 310 "-" "l9explore/1.3.0" 161.35.86.181 - - [29/Apr/2022:03:15:59 +0200] "GET /.json HTTP/1.1" 301 305 "-" "l9explore/1.3.0" 161.35.86.181 - - [29/Apr/2022:03:15:59 +0200] "GET /api/search?folderIds=0 HTTP/1.1" 301 316 "-" "l9explore/1.3.0" 161.35.86.181 - - [29/Apr/2022:03:16:00 +0200] "GET /s/lkx/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 301 353 "-" "l9explore/1.3.0" 161.35.86.181 - - [29/Apr/2022:03:16:00 +0200] "GET /config.json HTTP/1.1" 301 311 "-" "l9explore/1.3.0" 161.35.86.181 - - [29/Apr/2022:03:16:00 +0200] "GET /info.php HTTP/1.1" 301 307 "-" "l9explore/1.3.0" 161.35.86.181 - - [29/Apr/2022:03:16:00 +0200] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 348 "-" "l9explore/1.3.0" 161.35.86.181 - - [29/Apr/2022:03:16:00 +0200] "GET /frontend_dev.php/$ HTTP/1.1" 301 314 "-" "l9explore/1.3.0" 161.35.86.181 - - [29/Apr/2022:03:16:00 +0200] "GET / HTTP/1.1" 301 301 "-" "l9explore/1.3.0" 161.35.86.181 - - [29/Apr/2022:03:16:00 +0200] "GET /.env HTTP/1.1" 301 304 "-" "l9explore/1.3.0" 192.241.213.37 - - [29/Apr/2022:03:16:27 +0200] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 301 335 "-" "Mozilla/5.0 zgrab/0.x" 185.180.143.7 - - [29/Apr/2022:03:56:25 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 131.220.6.152 - - [29/Apr/2022:04:48:40 +0200] "GET / HTTP/1.1" 301 295 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.134.144.159 - - [29/Apr/2022:04:49:08 +0200] "GET ///remote/fgt_lang?lang=/../../../..//////////dev/ HTTP/1.1" 301 325 "-" "python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-1160.59.1.el7.x86_64" 34.140.248.32 - - [29/Apr/2022:06:54:26 +0200] "GET / HTTP/1.1" 301 301 "-" "python-requests/2.27.1" 80.82.78.39 - - [29/Apr/2022:06:58:14 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0" 77.74.177.119 - - [29/Apr/2022:07:13:19 +0200] "GET / HTTP/1.1" 301 304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36" 208.100.26.236 - - [29/Apr/2022:09:10:23 +0200] "GET / HTTP/1.1" 301 298 "-" "Mozilla/5.0 (Linux; Android 10; ONEPLUS A6003 Build/QKQ1.190716.003; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/84.0.4147.89 Mobile Safari/537.36" 208.100.26.235 - - [29/Apr/2022:09:10:23 +0200] "GET / HTTP/1.1" 301 297 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:63.0) Gecko/20100101 Firefox/63.0.3" 185.189.182.234 - - [29/Apr/2022:09:37:44 +0200] "GET /imN8 HTTP/1.1" 400 379 "-" "-" 213.226.123.30 - - [29/Apr/2022:09:53:25 +0200] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 301 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.180.143.79 - - [29/Apr/2022:10:34:59 +0200] "GET /solr/ HTTP/1.1" 301 304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.134.144.140 - - [29/Apr/2022:11:15:35 +0200] "GET ///remote/fgt_lang?lang=/../../../..//////////dev/ HTTP/1.1" 301 325 "-" "python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-1160.el7.x86_64" 213.226.123.30 - - [29/Apr/2022:11:22:38 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.241.208.53 - - [29/Apr/2022:12:04:31 +0200] "GET /owa/auth/x.js HTTP/1.1" 301 310 "-" "Mozilla/5.0 zgrab/0.x" 192.241.212.218 - - [29/Apr/2022:12:05:44 +0200] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 348 "-" "Mozilla/5.0 zgrab/0.x" 192.241.221.172 - - [29/Apr/2022:12:05:59 +0200] "GET /owa/auth/logon.aspx HTTP/1.1" 301 314 "-" "Mozilla/5.0 zgrab/0.x" 44.242.138.201 - - [29/Apr/2022:12:29:41 +0200] "" 400 379 "-" "-" 213.226.123.30 - - [29/Apr/2022:12:47:05 +0200] "GET /console/ HTTP/1.1" 301 307 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 65.49.20.69 - - [29/Apr/2022:13:12:31 +0200] "GET / HTTP/1.1" 301 383 "-" "-" 138.246.253.24 - - [29/Apr/2022:13:50:49 +0200] "GET /robots.txt HTTP/1.1" 301 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.146 Safari/537.36" 157.55.39.25 - - [29/Apr/2022:13:59:27 +0200] "GET / HTTP/1.1" 301 304 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 172.245.10.242 - - [29/Apr/2022:14:13:39 +0200] "POST /GponForm/diag_Form?style/ HTTP/1.1" 301 406 "-" "curl/7.3.2" 213.226.123.30 - - [29/Apr/2022:15:14:41 +0200] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 301 390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 80.82.78.39 - - [29/Apr/2022:15:15:46 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0" 213.226.123.30 - - [29/Apr/2022:15:46:44 +0200] "GET /actuator/gateway/routes HTTP/1.1" 301 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 164.92.203.196 - - [29/Apr/2022:16:26:49 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36" 213.226.123.30 - - [29/Apr/2022:16:46:26 +0200] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 167.94.146.59 - - [29/Apr/2022:17:42:54 +0200] "GET / HTTP/1.1" 301 383 "-" "-" 167.94.146.59 - - [29/Apr/2022:17:42:54 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 167.94.146.59 - - [29/Apr/2022:17:42:54 +0200] "PRI * HTTP/2.0" 400 379 "-" "-" 213.226.123.30 - - [29/Apr/2022:18:00:09 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 205.210.31.20 - - [29/Apr/2022:18:11:48 +0200] "GET / HTTP/1.1" 301 393 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 192.241.212.149 - - [29/Apr/2022:19:02:24 +0200] "GET /actuator/health HTTP/1.1" 301 310 "-" "Mozilla/5.0 zgrab/0.x" 213.226.123.30 - - [29/Apr/2022:19:16:21 +0200] "POST /mifs/.;/services/LogService HTTP/1.1" 301 318 "https://86.59.113.102:443" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 213.226.123.30 - - [29/Apr/2022:20:03:07 +0200] "GET /_ignition/execute-solution HTTP/1.1" 301 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 185.162.235.162 - - [29/Apr/2022:20:16:09 +0200] "GET / HTTP/1.1" 400 379 "-" "-" 185.162.235.162 - - [29/Apr/2022:20:16:10 +0200] "GET / HTTP/1.1" 301 383 "-" "l9tcpid/v1.1.0" 185.162.235.175 - - [29/Apr/2022:20:16:11 +0200] "GET /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts HTTP/1.1" 400 293 "-" "Lkx-Apache2449TraversalPlugin/0.0.1 (+https://leakix.net/, +https://twitter.com/HaboubiAnis)" 185.162.235.175 - - [29/Apr/2022:20:16:11 +0200] "GET /.DS_Store HTTP/1.1" 301 307 "-" "Go-http-client/1.1" 185.162.235.175 - - [29/Apr/2022:20:16:11 +0200] "GET /server-status HTTP/1.1" 301 308 "-" "l9explore/1.2.2" 185.162.235.175 - - [29/Apr/2022:20:16:11 +0200] "GET /.env HTTP/1.1" 301 304 "-" "l9explore/1.2.2" 185.162.235.175 - - [29/Apr/2022:20:16:11 +0200] "GET /telescope/requests HTTP/1.1" 301 311 "-" "l9explore/1.2.2" 185.162.235.175 - - [29/Apr/2022:20:16:12 +0200] "GET /info.php HTTP/1.1" 301 307 "-" "l9explore/1.2.2" 185.162.235.175 - - [29/Apr/2022:20:16:12 +0200] "GET /s/lkx/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 301 353 "-" "l9explore/1.2.2" 185.162.235.175 - - [29/Apr/2022:20:16:12 +0200] "GET /api/geojson?url=file:///etc/hosts HTTP/1.1" 301 325 "-" "l9explore/1.2.2" 185.162.235.175 - - [29/Apr/2022:20:16:12 +0200] "GET /config.json HTTP/1.1" 301 311 "-" "l9explore/1.2.2" 185.162.235.175 - - [29/Apr/2022:20:16:13 +0200] "GET /.git/config HTTP/1.1" 301 310 "-" "l9explore/1.2.2" 185.162.235.175 - - [29/Apr/2022:20:16:13 +0200] "GET /idx_config/ HTTP/1.1" 301 310 "-" "l9explore/1.2.2" 185.162.235.175 - - [29/Apr/2022:20:16:13 +0200] "GET /.json HTTP/1.1" 301 305 "-" "l9explore/1.2.2" 185.162.235.175 - - [29/Apr/2022:20:16:13 +0200] "GET /login.action HTTP/1.1" 301 311 "-" "l9explore/1.2.2" 23.129.64.149 - - [29/Apr/2022:20:34:01 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 192.169.176.57 - - [29/Apr/2022:21:08:14 +0200] "GET /.env HTTP/1.1" 301 304 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.169.176.57 - - [29/Apr/2022:21:08:18 +0200] "POST / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 192.241.222.138 - - [29/Apr/2022:21:24:13 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 zgrab/0.x" 178.73.215.171 - - [29/Apr/2022:21:42:28 +0200] "GET / HTTP/1.0" 301 388 "-" "-" 178.73.215.171 - - [29/Apr/2022:21:42:50 +0200] "-" 408 - "-" "-" 178.73.215.171 - - [29/Apr/2022:21:42:51 +0200] "-" 408 - "-" "-" 178.73.215.171 - - [29/Apr/2022:21:42:57 +0200] "-" 408 - "-" "-" 198.235.24.149 - - [29/Apr/2022:22:17:02 +0200] "GET / HTTP/1.1" 301 394 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 128.14.233.47 - - [29/Apr/2022:22:26:56 +0200] "GET / HTTP/1.1" 301 383 "-" "curl/7.29.0" 198.23.172.243 - - [29/Apr/2022:22:45:29 +0200] "POST /GponForm/diag_Form?style/ HTTP/1.1" 301 406 "-" "curl/7.3.2" 51.158.118.231 - - [29/Apr/2022:22:50:35 +0200] "GET / HTTP/1.1" 301 392 "-" "-" 157.55.39.25 - - [29/Apr/2022:23:21:01 +0200] "GET / HTTP/1.1" 301 304 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 34.217.215.149 - - [29/Apr/2022:23:26:39 +0200] "GET / HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 18.236.97.31 - - [29/Apr/2022:23:27:09 +0200] "GET / HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 52.40.251.251 - - [29/Apr/2022:23:28:34 +0200] "GET / HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 18.236.97.31 - - [29/Apr/2022:23:29:08 +0200] "GET / HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 35.81.77.95 - - [29/Apr/2022:23:29:30 +0200] "GET /favicon.ico HTTP/1.1" 301 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 109.237.103.118 - - [29/Apr/2022:23:50:10 +0200] "GET /.aws/credentials HTTP/1.1" 301 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.103.118 - - [29/Apr/2022:23:50:10 +0200] "POST /.aws/credentials HTTP/1.1" 301 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 80.82.78.39 - - [29/Apr/2022:23:57:02 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0" 60.217.75.69 - - [30/Apr/2022:01:06:36 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0" 185.180.143.141 - - [30/Apr/2022:01:26:39 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"