157.55.39.125 - - [22/May/2022:02:29:54 +0200] "GET / HTTP/1.1" 301 304 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 35.165.254.170 - - [22/May/2022:02:30:11 +0200] "GET / HTTP/1.1" 301 295 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 54.189.134.142 - - [22/May/2022:02:30:40 +0200] "GET /favicon.ico HTTP/1.1" 301 302 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 192.241.222.5 - - [22/May/2022:03:34:39 +0200] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 301 335 "-" "Mozilla/5.0 zgrab/0.x" 131.220.6.152 - - [22/May/2022:04:52:55 +0200] "GET / HTTP/1.1" 301 295 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 199.16.157.180 - - [22/May/2022:05:28:11 +0200] "GET /robots.txt HTTP/1.1" 301 387 "-" "Twitterbot/1.0" 199.16.157.180 - - [22/May/2022:05:28:12 +0200] "GET / HTTP/1.1" 301 295 "-" "Twitterbot/1.0" 128.14.141.34 - - [22/May/2022:05:35:04 +0200] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 301 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 45.134.144.140 - - [22/May/2022:05:42:14 +0200] "GET ///remote/fgt_lang?lang=/../../../..//////////dev/ HTTP/1.1" 301 325 "-" "python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-1160.el7.x86_64" 34.140.248.32 - - [22/May/2022:06:45:16 +0200] "GET / HTTP/1.1" 301 301 "-" "python-requests/2.27.1" 23.251.102.74 - - [22/May/2022:07:04:32 +0200] "GET /remote/login HTTP/1.1" 301 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 176.113.115.82 - - [22/May/2022:08:30:31 +0200] "-" 408 - "-" "-" 198.235.24.154 - - [22/May/2022:08:36:53 +0200] "GET / HTTP/1.1" 301 392 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 198.235.24.30 - - [22/May/2022:09:57:04 +0200] "GET / HTTP/1.1" 301 377 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 64.62.197.2 - - [22/May/2022:12:39:06 +0200] "GET / HTTP/1.1" 301 383 "-" "-" 118.193.46.79 - - [22/May/2022:12:54:59 +0200] "GET / HTTP/1.0" 301 383 "-" "-" 161.35.178.240 - - [22/May/2022:13:02:34 +0200] "GET /style.php?sig=rename HTTP/1.1" 301 399 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36" 128.14.133.58 - - [22/May/2022:13:07:55 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 192.241.214.163 - - [22/May/2022:13:23:38 +0200] "GET /actuator/health HTTP/1.1" 301 310 "-" "Mozilla/5.0 zgrab/0.x" 192.241.221.172 - - [22/May/2022:13:34:44 +0200] "GET /owa/auth/x.js HTTP/1.1" 301 310 "-" "Mozilla/5.0 zgrab/0.x" 192.241.212.218 - - [22/May/2022:13:35:04 +0200] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 348 "-" "Mozilla/5.0 zgrab/0.x" 192.241.219.237 - - [22/May/2022:13:36:03 +0200] "GET /owa/auth/logon.aspx HTTP/1.1" 301 314 "-" "Mozilla/5.0 zgrab/0.x" 45.155.126.254 - - [22/May/2022:13:37:33 +0200] "-" 408 - "-" "-" 176.113.115.82 - - [22/May/2022:14:34:00 +0200] "-" 408 - "-" "-" 192.241.214.12 - - [22/May/2022:15:47:24 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 zgrab/0.x" 176.113.115.82 - - [22/May/2022:16:34:14 +0200] "-" 408 - "-" "-" 157.55.39.125 - - [22/May/2022:16:41:13 +0200] "GET / HTTP/1.1" 301 304 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 128.14.134.170 - - [22/May/2022:16:44:30 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 205.210.31.14 - - [22/May/2022:17:01:31 +0200] "GET / HTTP/1.1" 301 393 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 193.106.191.48 - - [22/May/2022:19:19:15 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 128.14.209.162 - - [22/May/2022:20:04:00 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 193.106.191.48 - - [22/May/2022:20:04:24 +0200] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.106.191.48 - - [22/May/2022:20:56:24 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 161.35.188.242 - - [22/May/2022:21:31:28 +0200] "GET / HTTP/1.1" 400 379 "-" "-" 161.35.188.242 - - [22/May/2022:21:31:33 +0200] "GET / HTTP/1.1" 301 383 "-" "l9tcpid/v1.1.0" 161.35.188.242 - - [22/May/2022:21:32:20 +0200] "PUT /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "Go-http-client/1.1" 161.35.188.242 - - [22/May/2022:21:32:20 +0200] "HEAD /cgi-bin/blockpage.cgi HTTP/1.1" 301 - "-" "Go-http-client/1.1" 161.35.188.242 - - [22/May/2022:21:32:21 +0200] "GET /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts HTTP/1.1" 400 293 "-" "Lkx-TraversalHttpPlugin/0.0.1 (+https://leakix.net/, +https://twitter.com/HaboubiAnis)" 161.35.188.242 - - [22/May/2022:21:32:21 +0200] "GET /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts HTTP/1.1" 400 293 "-" "Lkx-Apache2449TraversalPlugin/0.0.1 (+https://leakix.net/, +https://twitter.com/HaboubiAnis)" 161.35.188.242 - - [22/May/2022:21:32:22 +0200] "GET /.DS_Store HTTP/1.1" 301 307 "-" "Go-http-client/1.1" 31.7.65.77 - - [22/May/2022:22:00:05 +0200] "GET / HTTP/1.1" 301 295 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) coc_coc_browser/80.0.180 Chrome/74.0.3729.180 Safari/537.36" 193.106.191.48 - - [22/May/2022:22:22:23 +0200] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 301 390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 80.94.93.250 - - [22/May/2022:22:29:07 +0200] "GET /admin/config.php HTTP/1.1" 301 313 "-" "python-requests/2.27.1" 193.106.191.48 - - [22/May/2022:22:33:58 +0200] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 301 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.106.191.48 - - [22/May/2022:23:39:19 +0200] "POST /mifs/.;/services/LogService HTTP/1.1" 301 318 "https://86.59.113.102:443" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 193.106.191.48 - - [23/May/2022:01:01:01 +0200] "GET /console/ HTTP/1.1" 301 307 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 34.208.220.214 - - [23/May/2022:01:32:03 +0200] "GET / HTTP/1.1" 301 306 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 34.221.197.124 - - [23/May/2022:01:32:18 +0200] "GET /favicon.ico HTTP/1.1" 301 313 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 34.221.197.124 - - [23/May/2022:01:32:22 +0200] "GET / HTTP/1.1" 301 306 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 185.83.146.154 - - [23/May/2022:01:46:34 +0200] "GET /.env HTTP/1.1" 301 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.83.146.154 - - [23/May/2022:01:46:35 +0200] "POST /.env HTTP/1.1" 301 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.83.146.154 - - [23/May/2022:01:46:35 +0200] "GET /.aws/credentials HTTP/1.1" 301 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.83.146.154 - - [23/May/2022:01:46:36 +0200] "POST /.aws/credentials HTTP/1.1" 301 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.83.146.154 - - [23/May/2022:01:46:37 +0200] "GET /.aws/config HTTP/1.1" 301 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.83.146.154 - - [23/May/2022:01:46:38 +0200] "POST /.aws/config HTTP/1.1" 301 315 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.83.146.154 - - [23/May/2022:01:46:39 +0200] "GET /aws/credentials HTTP/1.1" 301 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 185.83.146.154 - - [23/May/2022:01:46:39 +0200] "POST /aws/credentials HTTP/1.1" 301 316 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"