205.210.31.5 - - [18/Nov/2022:01:00:29 +0100] "GET / HTTP/1.1" 301 383 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 164.92.231.143 - - [18/Nov/2022:01:13:50 +0100] "GET / HTTP/1.1" 301 383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 2.57.170.31 - - [18/Nov/2022:01:15:54 +0100] "GET /webclient/ HTTP/1.1" 301 393 "-" "Python-urllib/3.11" 194.110.203.47 - - [18/Nov/2022:01:18:08 +0100] "GET /backup_harm.zip HTTP/1.1" 301 392 "-" "Firefox" 20.25.161.86 - - [18/Nov/2022:01:18:37 +0100] "GET /.env HTTP/1.1" 301 304 "-" "python-httpx/0.23.0" 20.25.161.86 - - [18/Nov/2022:01:18:38 +0100] "POST / HTTP/1.1" 301 301 "-" "python-httpx/0.23.0" 54.218.91.6 - - [18/Nov/2022:01:28:04 +0100] "GET / HTTP/1.1" 301 295 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 52.26.57.9 - - [18/Nov/2022:01:28:30 +0100] "GET / HTTP/1.1" 301 295 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 152.89.196.211 - - [18/Nov/2022:02:36:11 +0100] "GET /_ignition/execute-solution HTTP/1.1" 301 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 94.102.61.8 - - [18/Nov/2022:02:44:27 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36" 194.110.203.41 - - [18/Nov/2022:04:15:53 +0100] "GET /dump.tar.gz HTTP/1.1" 301 397 "-" "Firefox" 194.110.203.41 - - [18/Nov/2022:04:16:50 +0100] "GET /dump.tar.gz HTTP/1.1" 301 388 "-" "Firefox" 128.14.134.134 - - [18/Nov/2022:04:32:41 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 192.241.207.134 - - [18/Nov/2022:04:54:16 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 zgrab/0.x" 109.237.98.53 - - [18/Nov/2022:04:57:31 +0100] "GET /.env HTTP/1.1" 301 298 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.53 - - [18/Nov/2022:04:57:32 +0100] "POST /.env HTTP/1.1" 301 298 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.53 - - [18/Nov/2022:04:57:33 +0100] "GET /.aws/credentials HTTP/1.1" 301 304 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.53 - - [18/Nov/2022:04:57:33 +0100] "POST /.aws/credentials HTTP/1.1" 301 304 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.53 - - [18/Nov/2022:04:57:34 +0100] "GET /.aws/config HTTP/1.1" 301 303 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.53 - - [18/Nov/2022:04:57:34 +0100] "POST /.aws/config HTTP/1.1" 301 303 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.53 - - [18/Nov/2022:04:57:35 +0100] "GET /aws/credentials HTTP/1.1" 301 304 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.53 - - [18/Nov/2022:04:57:36 +0100] "POST /aws/credentials HTTP/1.1" 301 304 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.53 - - [18/Nov/2022:04:57:36 +0100] "GET /credentials HTTP/1.1" 301 302 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.53 - - [18/Nov/2022:04:57:37 +0100] "POST /credentials HTTP/1.1" 301 302 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.53 - - [18/Nov/2022:04:57:38 +0100] "GET /test.php HTTP/1.1" 301 300 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.53 - - [18/Nov/2022:04:57:38 +0100] "POST /test.php HTTP/1.1" 301 300 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.53 - - [18/Nov/2022:04:57:39 +0100] "GET /laravel/.env HTTP/1.1" 301 303 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.53 - - [18/Nov/2022:04:57:39 +0100] "POST /laravel/.env HTTP/1.1" 301 303 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.53 - - [18/Nov/2022:04:57:40 +0100] "GET /demo/.env HTTP/1.1" 301 301 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.53 - - [18/Nov/2022:04:57:40 +0100] "POST /demo/.env HTTP/1.1" 301 301 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.53 - - [18/Nov/2022:04:57:41 +0100] "GET /web/.env HTTP/1.1" 301 300 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.53 - - [18/Nov/2022:04:57:42 +0100] "POST /web/.env HTTP/1.1" 301 300 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.53 - - [18/Nov/2022:04:57:42 +0100] "GET /phpinfo HTTP/1.1" 301 300 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.53 - - [18/Nov/2022:04:57:43 +0100] "POST /phpinfo HTTP/1.1" 301 300 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 193.106.29.122 - - [18/Nov/2022:05:09:38 +0100] "GET / HTTP/1.0" 301 388 "-" "Mozilla/5.0" 194.110.203.45 - - [18/Nov/2022:05:53:42 +0100] "GET /dbdump.tar.gz HTTP/1.1" 301 407 "-" "Firefox" 109.206.243.162 - - [18/Nov/2022:06:51:46 +0100] "GET /explore HTTP/1.1" 301 306 "-" "Mozilla/5.0 (Linux; Android 9; SM-G965F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" 194.110.203.46 - - [18/Nov/2022:07:05:09 +0100] "GET /dbdump.tar.gz HTTP/1.1" 301 399 "-" "Firefox" 87.236.176.131 - - [18/Nov/2022:07:13:43 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" 194.110.203.46 - - [18/Nov/2022:07:31:03 +0100] "GET /database.tar.gz HTTP/1.1" 301 392 "-" "Firefox" 128.14.141.34 - - [18/Nov/2022:07:31:28 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 128.14.141.34 - - [18/Nov/2022:07:31:37 +0100] "GET /showLogin.cc HTTP/1.1" 301 311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 192.241.204.39 - - [18/Nov/2022:07:35:16 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 301 335 "-" "Mozilla/5.0 zgrab/0.x" 185.7.214.218 - - [18/Nov/2022:07:42:39 +0100] "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 301 452 "-" "Python-urllib/3.8" 194.110.203.39 - - [18/Nov/2022:07:46:27 +0100] "GET /database.tar.gz HTTP/1.1" 301 401 "-" "Firefox" 152.89.196.211 - - [18/Nov/2022:08:04:10 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.110.203.39 - - [18/Nov/2022:09:18:15 +0100] "GET /localhost.tar.gz HTTP/1.1" 301 393 "-" "Firefox" 192.241.195.189 - - [18/Nov/2022:10:38:33 +0100] "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 301 328 "-" "Mozilla/5.0 zgrab/0.x" 205.210.31.186 - - [18/Nov/2022:11:13:28 +0100] "GET / HTTP/1.1" 301 389 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 164.90.129.48 - - [18/Nov/2022:11:33:18 +0100] "-" 408 - "-" "-" 65.49.20.101 - - [18/Nov/2022:11:40:54 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36 Edg/106.0.1370.42" 154.89.5.99 - - [18/Nov/2022:11:43:22 +0100] "GET / HTTP/1.1" 301 383 "-" "-" 65.49.20.121 - - [18/Nov/2022:11:54:34 +0100] "GET /favicon.ico HTTP/1.1" 301 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:107.0) Gecko/20100101 Firefox/107.0" 65.49.20.125 - - [18/Nov/2022:12:01:23 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:103.0) Gecko/20100101 Firefox/103.0" 65.49.20.93 - - [18/Nov/2022:12:02:35 +0100] "GET /.git/config HTTP/1.1" 301 310 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:106.0) Gecko/20100101 Firefox/106.0" 194.180.48.125 - - [18/Nov/2022:12:21:07 +0100] "GET /docker-compose.yml HTTP/1.1" 301 312 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36" 194.110.203.42 - - [18/Nov/2022:12:21:38 +0100] "GET /localhost_db.tar.gz HTTP/1.1" 301 413 "-" "Firefox" 109.237.98.226 - - [18/Nov/2022:12:52:32 +0100] "GET /.env HTTP/1.1" 301 304 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [18/Nov/2022:12:52:33 +0100] "POST /.env HTTP/1.1" 301 304 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [18/Nov/2022:12:52:33 +0100] "GET /.aws/credentials HTTP/1.1" 301 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [18/Nov/2022:12:52:34 +0100] "POST /.aws/credentials HTTP/1.1" 301 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [18/Nov/2022:12:52:34 +0100] "GET /.aws/config HTTP/1.1" 301 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [18/Nov/2022:12:52:34 +0100] "POST /.aws/config HTTP/1.1" 301 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [18/Nov/2022:12:52:35 +0100] "GET /aws/credentials HTTP/1.1" 301 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [18/Nov/2022:12:52:35 +0100] "POST /aws/credentials HTTP/1.1" 301 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [18/Nov/2022:12:52:36 +0100] "GET /credentials HTTP/1.1" 301 308 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [18/Nov/2022:12:52:36 +0100] "POST /credentials HTTP/1.1" 301 308 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [18/Nov/2022:12:52:37 +0100] "GET /test.php HTTP/1.1" 301 306 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [18/Nov/2022:12:52:37 +0100] "POST /test.php HTTP/1.1" 301 306 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [18/Nov/2022:12:52:38 +0100] "GET /laravel/.env HTTP/1.1" 301 309 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [18/Nov/2022:12:52:39 +0100] "POST /laravel/.env HTTP/1.1" 301 309 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [18/Nov/2022:12:52:39 +0100] "GET /demo/.env HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [18/Nov/2022:12:52:40 +0100] "POST /demo/.env HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [18/Nov/2022:12:52:40 +0100] "GET /web/.env HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [18/Nov/2022:12:52:41 +0100] "POST /web/.env HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [18/Nov/2022:12:52:41 +0100] "GET /phpinfo HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [18/Nov/2022:12:52:42 +0100] "POST /phpinfo HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 164.90.129.48 - - [18/Nov/2022:13:13:55 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0" 164.90.129.48 - - [18/Nov/2022:13:13:56 +0100] "GET / HTTP/1.1" 500 754 "https://86.59.113.102/" "Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0" 164.90.129.48 - - [18/Nov/2022:13:13:58 +0100] "GET /favicon.ico HTTP/1.1" 200 1150 "https://www.easydrivers.at/" "Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0" 183.136.225.45 - - [18/Nov/2022:14:16:52 +0100] "GET / HTTP/1.1" 301 385 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0" 183.136.225.45 - - [18/Nov/2022:14:17:29 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE" 183.136.225.45 - - [18/Nov/2022:14:17:31 +0100] "GET /favicon.ico HTTP/1.1" 301 308 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE" 183.136.225.45 - - [18/Nov/2022:14:17:35 +0100] "GET /robots.txt HTTP/1.1" 301 308 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE" 167.71.79.130 - - [18/Nov/2022:14:55:41 +0100] "GET /.env HTTP/1.1" 301 298 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:83.0) Gecko/20100101 Firefox/83.0" 167.71.79.130 - - [18/Nov/2022:14:55:42 +0100] "POST / HTTP/1.1" 301 295 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:83.0) Gecko/20100101 Firefox/83.0" 152.89.196.211 - - [18/Nov/2022:15:28:27 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.110.203.42 - - [18/Nov/2022:15:38:26 +0100] "GET /localhost_database.tar.gz HTTP/1.1" 301 419 "-" "Firefox" 152.89.196.211 - - [18/Nov/2022:16:04:23 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 152.89.196.211 - - [18/Nov/2022:16:32:11 +0100] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 301 390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.241.198.39 - - [18/Nov/2022:16:36:44 +0100] "GET /actuator/health HTTP/1.1" 301 310 "-" "Mozilla/5.0 zgrab/0.x" 194.110.203.44 - - [18/Nov/2022:17:21:37 +0100] "GET /localhost-database.tar.gz HTTP/1.1" 301 402 "-" "Firefox" 152.89.196.211 - - [18/Nov/2022:17:53:07 +0100] "POST /mifs/.;/services/LogService HTTP/1.1" 301 318 "https://86.59.113.102:443" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.110.203.42 - - [18/Nov/2022:18:06:50 +0100] "GET /localhost-database.tar.gz HTTP/1.1" 301 419 "-" "Firefox" 193.118.53.210 - - [18/Nov/2022:18:46:08 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 161.35.67.243 - - [18/Nov/2022:18:52:34 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36" 23.229.104.2 - - [18/Nov/2022:19:21:02 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36" 23.229.104.2 - - [18/Nov/2022:19:21:04 +0100] "GET /robots.txt HTTP/1.1" 301 308 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36" 23.229.104.2 - - [18/Nov/2022:19:21:06 +0100] "GET /ads.txt HTTP/1.1" 301 306 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36" 194.110.203.46 - - [18/Nov/2022:19:46:58 +0100] "GET /localhost_dump.tar.gz HTTP/1.1" 301 415 "-" "Firefox" 198.235.24.54 - - [18/Nov/2022:20:34:03 +0100] "GET / HTTP/1.1" 301 377 "-" "Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com" 118.193.40.46 - - [18/Nov/2022:20:44:17 +0100] "GET / HTTP/1.1" 301 383 "-" "-" 185.7.214.218 - - [18/Nov/2022:20:52:25 +0100] "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 301 452 "-" "Python-urllib/3.8" 194.110.203.41 - - [18/Nov/2022:20:53:58 +0100] "GET /localhost-dump.tar.gz HTTP/1.1" 301 415 "-" "Firefox" 163.172.180.25 - - [18/Nov/2022:21:02:27 +0100] "GET / HTTP/1.1" 301 386 "-" "-" 52.215.44.248 - - [18/Nov/2022:21:09:38 +0100] "GET /robots.txt HTTP/1.1" 301 304 "-" "webprosbot/2.0 (+mailto:abuse-6337@webpros.com)" 52.215.44.248 - - [18/Nov/2022:21:09:38 +0100] "GET /robots.txt HTTP/1.1" 200 101 "-" "webprosbot/2.0 (+mailto:abuse-6337@webpros.com)" 194.110.203.40 - - [18/Nov/2022:21:14:02 +0100] "GET /localhost-dump.tar.gz HTTP/1.1" 301 398 "-" "Firefox" 167.94.138.47 - - [18/Nov/2022:21:42:34 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 167.94.138.47 - - [18/Nov/2022:21:42:35 +0100] "PRI * HTTP/2.0" 400 379 "-" "-" 167.248.133.46 - - [18/Nov/2022:22:32:50 +0100] "GET / HTTP/1.1" 301 383 "-" "-" 167.248.133.46 - - [18/Nov/2022:22:32:51 +0100] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 167.248.133.46 - - [18/Nov/2022:22:32:51 +0100] "PRI * HTTP/2.0" 400 379 "-" "-" 194.110.203.44 - - [18/Nov/2022:22:45:19 +0100] "GET /localhostbackup.tar.gz HTTP/1.1" 301 416 "-" "Firefox" 192.241.212.122 - - [18/Nov/2022:23:05:26 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 301 314 "-" "Mozilla/5.0 zgrab/0.x" 192.241.198.9 - - [18/Nov/2022:23:13:28 +0100] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 301 348 "-" "Mozilla/5.0 zgrab/0.x" 192.241.210.196 - - [18/Nov/2022:23:14:43 +0100] "GET /owa/auth/x.js HTTP/1.1" 301 310 "-" "Mozilla/5.0 zgrab/0.x" 194.110.203.46 - - [19/Nov/2022:00:15:28 +0100] "GET /localhost_backup.tar.gz HTTP/1.1" 301 400 "-" "Firefox" 35.195.93.98 - - [19/Nov/2022:00:20:24 +0100] "GET / HTTP/1.1" 301 301 "-" "python-requests/2.28.1" 179.43.177.154 - - [19/Nov/2022:00:46:43 +0100] "GET /wp-content/.git/config HTTP/1.1" 301 315 "-" "Mozilla/5.0 (X11; FreeBSD amd64) AppleWebKit/536.5 (KHTML like Gecko) Chrome/19.0.1084.56 Safari/536.5"