152.89.196.222 - - [30/Apr/2023:02:03:06 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 85.208.136.77 - - [30/Apr/2023:02:07:23 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 35.162.85.6 - - [30/Apr/2023:02:10:08 +0200] "GET / HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 54.69.21.179 - - [30/Apr/2023:02:10:35 +0200] "GET /favicon.ico HTTP/1.1" 301 314 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 54.69.21.179 - - [30/Apr/2023:02:10:40 +0200] "GET / HTTP/1.1" 301 307 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 152.89.196.222 - - [30/Apr/2023:02:50:26 +0200] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 23.251.102.74 - - [30/Apr/2023:03:10:38 +0200] "GET /cgi-bin/config.exp HTTP/1.1" 301 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36" 152.89.196.222 - - [30/Apr/2023:03:42:10 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 152.89.196.222 - - [30/Apr/2023:04:02:13 +0200] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 301 390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 152.89.196.222 - - [30/Apr/2023:04:32:04 +0200] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 301 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 74.84.150.150 - - [30/Apr/2023:04:43:00 +0200] "GET / HTTP/1.1" 301 295 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 91.240.118.252 - - [30/Apr/2023:04:51:09 +0200] "GET /.git/config HTTP/1.1" 301 405 "-" "firefox" 154.209.125.66 - - [30/Apr/2023:05:01:36 +0200] "GET / HTTP/1.1" 301 383 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0" 152.89.196.222 - - [30/Apr/2023:05:06:12 +0200] "POST /mifs/.;/services/LogService HTTP/1.1" 301 318 "https://86.59.113.102:443" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 109.237.98.226 - - [30/Apr/2023:05:07:56 +0200] "GET /.env HTTP/1.1" 301 304 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [30/Apr/2023:05:07:57 +0200] "POST /.env HTTP/1.1" 301 304 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [30/Apr/2023:05:07:57 +0200] "GET /.aws/credentials HTTP/1.1" 301 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [30/Apr/2023:05:07:58 +0200] "POST /.aws/credentials HTTP/1.1" 301 311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [30/Apr/2023:05:07:58 +0200] "GET /.aws/config HTTP/1.1" 301 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [30/Apr/2023:05:07:58 +0200] "POST /.aws/config HTTP/1.1" 301 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [30/Apr/2023:05:07:59 +0200] "GET /aws/credentials HTTP/1.1" 301 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [30/Apr/2023:05:07:59 +0200] "POST /aws/credentials HTTP/1.1" 301 310 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [30/Apr/2023:05:08:00 +0200] "GET /credentials HTTP/1.1" 301 308 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 109.237.98.226 - - [30/Apr/2023:05:08:00 +0200] "POST /credentials HTTP/1.1" 301 308 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 152.89.196.222 - - [30/Apr/2023:06:06:31 +0200] "GET /console/ HTTP/1.1" 301 307 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 152.89.196.222 - - [30/Apr/2023:06:38:18 +0200] "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 301 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 152.89.196.222 - - [30/Apr/2023:07:11:38 +0200] "GET /_ignition/execute-solution HTTP/1.1" 301 319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 152.89.196.222 - - [30/Apr/2023:07:57:02 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 152.89.196.222 - - [30/Apr/2023:09:10:56 +0200] "GET /actuator/gateway/routes HTTP/1.1" 301 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 198.199.113.7 - - [30/Apr/2023:09:11:53 +0200] "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 301 328 "-" "Mozilla/5.0 zgrab/0.x" 36.5.68.95 - - [30/Apr/2023:09:12:41 +0200] "GET / HTTP/1.0" 301 383 "-" "-" 124.239.133.128 - - [30/Apr/2023:09:12:58 +0200] "GET / HTTP/1.1" 301 383 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" 20.100.168.244 - - [30/Apr/2023:09:46:29 +0200] "GET / HTTP/1.1" 301 301 "-" "Python/3.8 aiohttp/3.8.4" 167.94.138.33 - - [30/Apr/2023:10:01:23 +0200] "GET / HTTP/1.1" 301 383 "-" "-" 167.94.138.33 - - [30/Apr/2023:10:01:23 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 167.94.138.33 - - [30/Apr/2023:10:01:24 +0200] "PRI * HTTP/2.0" 400 379 "-" "-" 4.184.57.28 - - [30/Apr/2023:10:23:04 +0200] "GET / HTTP/1.1" 301 301 "-" "Python/3.10 aiohttp/3.8.3" 94.102.61.7 - - [30/Apr/2023:11:56:07 +0200] "GET / HTTP/1.1" 301 301 "-" "python-requests/2.26.0" 106.10.122.53 - - [30/Apr/2023:12:31:53 +0200] "GET /.env HTTP/1.1" 301 304 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 106.10.122.53 - - [30/Apr/2023:12:31:54 +0200] "POST / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 104.167.221.206 - - [30/Apr/2023:13:27:05 +0200] "GET / HTTP/1.1" 301 307 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" 152.89.196.144 - - [30/Apr/2023:13:28:50 +0200] "-" 408 - "-" "-" 152.89.196.144 - - [30/Apr/2023:14:09:15 +0200] "GET /geoserver HTTP/1.1" 301 305 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 205.210.31.6 - - [30/Apr/2023:14:37:50 +0200] "GET / HTTP/1.1" 301 385 "-" "-" 152.89.196.144 - - [30/Apr/2023:14:43:51 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 152.89.196.144 - - [30/Apr/2023:15:19:17 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 293 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.61.185.37 - - [30/Apr/2023:15:36:45 +0200] "GET /?a=fetch&content=die(md5(cvbytigdfgfdg)) HTTP/1.1" 301 343 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0" 45.61.185.37 - - [30/Apr/2023:15:36:46 +0200] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 326 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0" 64.226.113.246 - - [30/Apr/2023:15:46:14 +0200] "GET / HTTP/1.1" 301 302 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:59.0.3) Gecko/20100101 Firefox/59.0.3" 54.71.111.130 - - [30/Apr/2023:15:47:29 +0200] "GET / HTTP/1.1" 301 295 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 34.216.232.230 - - [30/Apr/2023:15:48:06 +0200] "GET /favicon.ico HTTP/1.1" 301 302 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.61.185.37 - - [30/Apr/2023:16:58:43 +0200] "GET /index.php?function=call_user_func_array&s=/Index/%09hink%07pp/invokefunction&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 301 390 "-" "Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" 45.61.185.37 - - [30/Apr/2023:16:58:44 +0200] "GET /TP/public/index.php?function=call_user_func_array&s=index/\\think\\app/invokefunction&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 301 392 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36" 45.61.185.37 - - [30/Apr/2023:16:58:45 +0200] "GET /index.php?function=call_user_func_array&s=index/%09hink%07pp/invokefunction&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 301 388 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2224.3 Safari/537.36" 185.224.128.116 - - [30/Apr/2023:17:24:19 +0200] "GET /remote/login?lang=en HTTP/1.1" 301 315 "-" "python-requests/2.28.2" 69.172.232.207 - - [30/Apr/2023:18:03:23 +0200] "GET / HTTP/1.1" 301 295 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.102 Safari/537.36" 45.61.185.37 - - [30/Apr/2023:18:06:27 +0200] "GET /?\"\" HTTP/1.1" 301 333 "https://www.google.com/\"\"" "Mozilliqa\"\"" 45.61.185.37 - - [30/Apr/2023:18:06:27 +0200] "GET /?'' HTTP/1.1" 301 331 "https://www.google.com/''" "Mozilliqa''" 45.61.185.37 - - [30/Apr/2023:18:06:28 +0200] "GET /?'{${print(9347655345-4954366)}}' HTTP/1.1" 301 331 "https://www.google.com/'{${print(9347655345-4954366)}}'" "Mozilliqa'{${print(9347655345-4954366)}}'" 45.61.185.37 - - [30/Apr/2023:18:06:28 +0200] "GET /?\"{${print(9347655345-4954366)}}\" HTTP/1.1" 301 333 "https://www.google.com/\"{${print(9347655345-4954366)}}\"" "Mozilliqa\"{${print(9347655345-4954366)}}\"" 45.61.185.37 - - [30/Apr/2023:18:06:29 +0200] "GET /?'+print(9347655345-4954366)+' HTTP/1.1" 301 323 "https://www.google.com/'+print(9347655345-4954366)+'" "Mozilliqa'+print(9347655345-4954366)+'" 3.231.219.126 - - [30/Apr/2023:18:27:37 +0200] "GET / HTTP/1.1" 301 295 "-" "Mozilla/5.0 (Linux; U; Android 4.1.2; en-us; LG-P870/P87020d Build/JZO54K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" 143.198.88.63 - - [30/Apr/2023:18:42:55 +0200] "GET /ab2g HTTP/1.1" 301 304 "-" "Mozilla/5.0 zgrab/0.x" 143.198.88.63 - - [30/Apr/2023:18:43:01 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 143.198.88.63 - - [30/Apr/2023:18:43:04 +0200] "GET /t4 HTTP/1.1" 301 302 "-" "Mozilla/5.0" 143.198.88.63 - - [30/Apr/2023:18:43:05 +0200] "GET /favicon.ico HTTP/1.1" 301 309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 198.199.107.114 - - [30/Apr/2023:19:42:15 +0200] "GET /actuator/health HTTP/1.1" 301 310 "-" "Mozilla/5.0 zgrab/0.x" 154.209.125.66 - - [30/Apr/2023:22:22:51 +0200] "GET / HTTP/1.1" 301 383 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0" 13.231.215.87 - - [30/Apr/2023:22:42:02 +0200] "GET / HTTP/1.1" 301 301 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:06 +0200] "GET /.env HTTP/1.1" 301 304 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:09 +0200] "GET /.remote HTTP/1.1" 301 305 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:12 +0200] "GET /.local HTTP/1.1" 301 305 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:14 +0200] "GET /.production HTTP/1.1" 301 309 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:16 +0200] "GET //vendor/.env HTTP/1.1" 301 309 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:17 +0200] "GET //lib/.env HTTP/1.1" 301 307 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:19 +0200] "GET //lab/.env HTTP/1.1" 301 307 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:22 +0200] "GET //cronlab/.env HTTP/1.1" 301 310 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:25 +0200] "GET //cron/.env HTTP/1.1" 301 307 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:27 +0200] "GET //core/.env HTTP/1.1" 301 307 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:31 +0200] "GET //core/app/.env HTTP/1.1" 301 309 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:34 +0200] "GET //core/Datavase/.env HTTP/1.1" 301 311 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:36 +0200] "GET //database/.env HTTP/1.1" 301 310 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:38 +0200] "GET //config/.env HTTP/1.1" 301 310 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:40 +0200] "GET //assets/.env HTTP/1.1" 301 308 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:42 +0200] "GET //app/.env HTTP/1.1" 301 307 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:45 +0200] "GET //apps/.env HTTP/1.1" 301 307 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:47 +0200] "GET //uploads/.env HTTP/1.1" 301 310 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:48 +0200] "GET //sitemaps/.env HTTP/1.1" 301 310 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:50 +0200] "GET //saas/.env HTTP/1.1" 301 307 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:53 +0200] "GET //api/.env HTTP/1.1" 301 307 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:55 +0200] "GET //psnlink/.env HTTP/1.1" 301 310 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:56 +0200] "GET //exapi/.env HTTP/1.1" 301 308 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:42:58 +0200] "GET //site/.env HTTP/1.1" 301 307 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:43:05 +0200] "GET //admin/.env HTTP/1.1" 301 308 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:43:11 +0200] "GET //web/.env HTTP/1.1" 301 307 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:43:17 +0200] "GET //public/.env HTTP/1.1" 301 309 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:43:24 +0200] "GET //en/.env HTTP/1.1" 301 306 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:43:30 +0200] "GET //tools/.env HTTP/1.1" 301 308 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:43:36 +0200] "GET //v1/.env HTTP/1.1" 301 306 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:43:42 +0200] "GET //v2/.env HTTP/1.1" 301 306 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:43:48 +0200] "GET //administrator/.env HTTP/1.1" 301 312 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:43:54 +0200] "GET //laravel/.env HTTP/1.1" 301 309 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:01 +0200] "POST / HTTP/1.1" 301 301 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:02 +0200] "POST //admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 335 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:03 +0200] "POST //api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 333 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:04 +0200] "POST //backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 337 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:05 +0200] "POST //blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 335 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:06 +0200] "POST //cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 333 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:07 +0200] "POST //demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 334 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:09 +0200] "POST //dev/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 333 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:10 +0200] "POST //laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 336 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:11 +0200] "POST //lib/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 325 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:12 +0200] "POST //lib/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 326 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:13 +0200] "POST //lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 329 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:14 +0200] "POST //lib/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 327 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:15 +0200] "POST //new/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 333 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:16 +0200] "POST //old/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 333 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:18 +0200] "POST //panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 334 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:19 +0200] "POST //phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 322 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:20 +0200] "POST //phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 323 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:21 +0200] "POST //phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 326 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:22 +0200] "POST //phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 324 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:23 +0200] "POST //protected/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 337 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:24 +0200] "POST //sites/all/libraries/mailchimp/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 350 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:26 +0200] "POST //vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 326 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:27 +0200] "POST //vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 301 328 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:28 +0200] "POST //vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:29 +0200] "POST //vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 329 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:30 +0200] "POST //wp-content/plugins/cloudflare/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 350 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:31 +0200] "POST //wp-content/plugins/dzs-videogallery/class_parts/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 365 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:32 +0200] "POST //wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 354 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:33 +0200] "POST //wp-content/plugins/mm-plugin/inc/vendors/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 353 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 13.231.215.87 - - [30/Apr/2023:22:44:35 +0200] "POST //www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 332 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; WOW64) Gecko/20010510 Firefox/17.0" 51.158.241.133 - - [30/Apr/2023:22:52:50 +0200] "GET / HTTP/1.1" 301 383 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:104.0) Gecko/20100101 Firefox/104.0" 51.158.241.133 - - [30/Apr/2023:22:52:51 +0200] "GET /favicon.ico HTTP/1.1" 301 309 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:104.0) Gecko/20100101 Firefox/104.0" 152.89.196.144 - - [30/Apr/2023:23:52:41 +0200] "GET / HTTP/1.1" 301 301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 192.241.208.67 - - [01/May/2023:00:08:21 +0200] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 301 335 "-" "Mozilla/5.0 zgrab/0.x" 152.89.196.144 - - [01/May/2023:00:13:26 +0200] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 152.89.196.144 - - [01/May/2023:00:30:36 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 152.89.196.144 - - [01/May/2023:00:40:15 +0200] "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 301 390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 93.159.230.87 - - [01/May/2023:01:24:30 +0200] "GET / HTTP/1.1" 301 302 "-" "Mozilla/5.0 (Linux; arm_64; Android 12; CPH2205) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 YaBrowser/23.3.3.86.00 SA/3 Mobile Safari/537.36" 34.77.127.183 - - [01/May/2023:01:31:28 +0200] "GET / HTTP/1.1" 301 301 "-" "python-requests/2.28.2"