162.142.125.210 - - [13/Jul/2022:03:54:49 +0200] "GET / HTTP/1.1" 301 383 "-" "-" 162.142.125.210 - - [13/Jul/2022:03:54:50 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 162.142.125.210 - - [13/Jul/2022:03:54:50 +0200] "PRI * HTTP/2.0" 400 379 "-" "-" 192.241.220.147 - - [13/Jul/2022:04:07:49 +0200] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 301 335 "-" "Mozilla/5.0 zgrab/0.x" 198.235.24.129 - - [13/Jul/2022:04:40:08 +0200] "GET / HTTP/1.1" 301 377 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 192.241.221.98 - - [13/Jul/2022:04:48:22 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 zgrab/0.x" 103.203.57.25 - - [13/Jul/2022:05:09:19 +0200] "GET / HTTP/1.1" 301 383 "-" "HTTP Banner Detection (https://security.ipip.net)" 198.235.24.151 - - [13/Jul/2022:05:31:38 +0200] "GET / HTTP/1.1" 301 394 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 213.32.122.82 - - [13/Jul/2022:06:01:34 +0200] "GET / HTTP/1.1" 301 383 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36" 193.106.29.122 - - [13/Jul/2022:06:28:36 +0200] "GET / HTTP/1.0" 301 388 "-" "Mozilla/5.0" 192.241.223.68 - - [13/Jul/2022:06:47:15 +0200] "GET /login HTTP/1.1" 301 305 "-" "Mozilla/5.0 zgrab/0.x" 162.221.192.26 - - [13/Jul/2022:06:59:42 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 193.46.255.26 - - [13/Jul/2022:08:47:24 +0200] "GET / HTTP/1.1" 301 301 "-" "python-requests/2.22.0" 185.7.214.104 - - [13/Jul/2022:09:22:07 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 198.235.24.2 - - [13/Jul/2022:10:05:43 +0200] "GET / HTTP/1.1" 301 391 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 185.7.214.104 - - [13/Jul/2022:11:45:54 +0200] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 301 390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 154.6.130.144 - - [13/Jul/2022:13:00:05 +0200] "-" 408 - "-" "-" 185.7.214.104 - - [13/Jul/2022:13:14:29 +0200] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 301 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.241.220.24 - - [13/Jul/2022:13:52:19 +0200] "GET /owa/auth/x.js HTTP/1.1" 301 310 "-" "Mozilla/5.0 zgrab/0.x" 192.241.221.43 - - [13/Jul/2022:13:53:44 +0200] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 348 "-" "Mozilla/5.0 zgrab/0.x" 192.241.221.14 - - [13/Jul/2022:13:54:53 +0200] "GET /owa/auth/logon.aspx HTTP/1.1" 301 314 "-" "Mozilla/5.0 zgrab/0.x" 157.55.39.23 - - [13/Jul/2022:14:03:29 +0200] "GET /robots.txt HTTP/1.1" 301 311 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 157.55.39.23 - - [13/Jul/2022:14:03:31 +0200] "GET /robots.txt HTTP/1.1" 301 311 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 157.55.39.33 - - [13/Jul/2022:14:03:37 +0200] "GET / HTTP/1.1" 301 304 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 20.210.217.4 - - [13/Jul/2022:14:13:05 +0200] "GET /.env HTTP/1.1" 301 298 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 20.210.217.4 - - [13/Jul/2022:14:13:06 +0200] "POST / HTTP/1.1" 301 295 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 128.14.209.162 - - [13/Jul/2022:15:22:41 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 74.82.47.5 - - [13/Jul/2022:16:17:06 +0200] "GET / HTTP/1.1" 301 383 "-" "-" 74.82.47.21 - - [13/Jul/2022:16:28:52 +0200] "GET /favicon.ico HTTP/1.1" 301 309 "-" "Mozilla/5.0 zgrab/0.x" 74.82.47.61 - - [13/Jul/2022:16:33:41 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 zgrab/0.x" 20.106.128.119 - - [13/Jul/2022:17:57:29 +0200] "GET /.env HTTP/1.1" 301 304 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 20.106.128.119 - - [13/Jul/2022:17:57:30 +0200] "POST / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 198.235.24.28 - - [13/Jul/2022:18:29:33 +0200] "GET / HTTP/1.1" 301 391 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 137.226.113.44 - - [13/Jul/2022:18:53:16 +0200] "GET / HTTP/1.1" 301 308 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:84.0) Gecko/20100101 Firefox/84.0" 185.220.101.151 - - [13/Jul/2022:18:54:31 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 161.35.86.181 - - [13/Jul/2022:19:29:32 +0200] "GET / HTTP/1.1" 400 379 "-" "-" 161.35.86.181 - - [13/Jul/2022:19:29:33 +0200] "GET / HTTP/1.1" 301 383 "-" "l9tcpid/v1.1.0" 161.35.86.181 - - [13/Jul/2022:19:29:33 +0200] "PUT /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "Go-http-client/1.1" 161.35.86.181 - - [13/Jul/2022:19:29:33 +0200] "HEAD /cgi-bin/blockpage.cgi HTTP/1.1" 301 - "-" "Go-http-client/1.1" 161.35.86.181 - - [13/Jul/2022:19:29:34 +0200] "GET /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts HTTP/1.1" 400 293 "-" "Lkx-TraversalHttpPlugin/0.0.1 (+https://leakix.net/, +https://twitter.com/HaboubiAnis)" 161.35.86.181 - - [13/Jul/2022:19:29:34 +0200] "GET /.DS_Store HTTP/1.1" 301 307 "-" "Go-http-client/1.1" 161.35.86.181 - - [13/Jul/2022:19:29:34 +0200] "GET /api/geojson?url=file:///etc/hosts HTTP/1.1" 301 325 "-" "l9explore/1.3.0" 161.35.86.181 - - [13/Jul/2022:19:29:34 +0200] "GET /api/search?folderIds=0 HTTP/1.1" 301 316 "-" "l9explore/1.3.0" 161.35.86.181 - - [13/Jul/2022:19:29:35 +0200] "GET /server-status HTTP/1.1" 301 308 "-" "l9explore/1.3.0" 161.35.86.181 - - [13/Jul/2022:19:29:35 +0200] "GET /idx_config/ HTTP/1.1" 301 310 "-" "l9explore/1.3.0" 161.35.86.181 - - [13/Jul/2022:19:29:35 +0200] "GET /info.php HTTP/1.1" 301 307 "-" "l9explore/1.3.0" 161.35.86.181 - - [13/Jul/2022:19:29:35 +0200] "GET /.json HTTP/1.1" 301 305 "-" "l9explore/1.3.0" 161.35.86.181 - - [13/Jul/2022:19:29:35 +0200] "GET /favicon.ico HTTP/1.1" 301 309 "-" "l9explore/1.3.0" 161.35.86.181 - - [13/Jul/2022:19:29:35 +0200] "GET /frontend_dev.php/$ HTTP/1.1" 301 314 "-" "l9explore/1.3.0" 161.35.86.181 - - [13/Jul/2022:19:29:35 +0200] "GET /v2/_catalog HTTP/1.1" 301 310 "-" "l9explore/1.3.0" 161.35.86.181 - - [13/Jul/2022:19:29:36 +0200] "GET /s/lkx/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 301 353 "-" "l9explore/1.3.0" 161.35.86.181 - - [13/Jul/2022:19:29:36 +0200] "GET /.env HTTP/1.1" 301 304 "-" "l9explore/1.3.0" 161.35.86.181 - - [13/Jul/2022:19:29:36 +0200] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 348 "-" "l9explore/1.3.0" 161.35.86.181 - - [13/Jul/2022:19:29:36 +0200] "GET /debug/default/view?panel=config HTTP/1.1" 301 325 "-" "l9explore/1.3.0" 161.35.86.181 - - [13/Jul/2022:19:29:36 +0200] "GET /telescope/requests HTTP/1.1" 301 311 "-" "l9explore/1.3.0" 43.153.10.221 - - [13/Jul/2022:19:43:26 +0200] "GET / HTTP/1.1" 400 500 "-" "curl/7.64.1" 209.141.36.231 - - [13/Jul/2022:19:51:15 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36" 205.185.122.184 - - [13/Jul/2022:19:51:18 +0200] "GET /favicon.ico HTTP/1.1" 301 309 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36" 8.26.182.26 - - [13/Jul/2022:19:51:18 +0200] "GET / HTTP/1.1" 301 307 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36" 205.185.122.184 - - [13/Jul/2022:19:51:22 +0200] "GET /favicon.ico HTTP/1.1" 301 314 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36" 198.235.24.21 - - [13/Jul/2022:20:11:55 +0200] "GET / HTTP/1.1" 301 391 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 162.221.192.26 - - [13/Jul/2022:21:03:10 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 205.210.31.154 - - [13/Jul/2022:21:13:12 +0200] "GET / HTTP/1.1" 301 391 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 94.102.61.8 - - [13/Jul/2022:21:28:08 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36" 198.235.24.25 - - [13/Jul/2022:22:55:17 +0200] "GET / HTTP/1.1" 301 391 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 183.136.225.35 - - [13/Jul/2022:23:15:01 +0200] "GET / HTTP/1.1" 301 383 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0" 157.55.39.33 - - [13/Jul/2022:23:25:22 +0200] "GET / HTTP/1.1" 301 304 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 35.88.253.108 - - [13/Jul/2022:23:46:57 +0200] "GET / HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 18.237.203.248 - - [13/Jul/2022:23:47:25 +0200] "GET /favicon.ico HTTP/1.1" 301 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 18.237.203.248 - - [13/Jul/2022:23:47:28 +0200] "GET / HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 88.214.43.118 - - [14/Jul/2022:00:54:45 +0200] "GET /.env.credentials HTTP/1.1" 301 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 88.214.43.118 - - [14/Jul/2022:00:54:45 +0200] "POST /.env.credentials HTTP/1.1" 301 317 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 139.59.33.87 - - [14/Jul/2022:01:46:29 +0200] "GET /ab2g HTTP/1.1" 301 304 "-" "Mozilla/5.0 zgrab/0.x" 139.59.33.87 - - [14/Jul/2022:01:46:31 +0200] "GET /ab2h HTTP/1.1" 301 304 "-" "Mozilla/5.0 zgrab/0.x"