Summary: one incident discovered from one client

	192.168.21.127 | 1 incident | impact ∑: 13	attacks only
	Description: A targeted scan and random scan yesterday. A total of one incident was discovered by phpids detection modules.
Impact Tags Remote-City Remote-Host Remote-Logname Remote-User Date Request Final-Status Bytes-Sent Referer User-Agent 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 00:03:20 +0100 GET /robots.txt HTTP/1.1 404 462 - Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 00:19:42 +0100 POST / HTTP/1.1 404 456 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 00:20:36 +0100 GET / HTTP/1.1 200 5610 - python-requests/2.28.1 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 00:33:52 +0100 POST /boaform/admin/formLogin HTTP/1.1 404 456 http://91.223.222.117:80/admin/login.asp Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 00:41:05 +0100 GET /mFy1 HTTP/1.1 404 456 - Mozilla/5.0 (X11; U; Linux x86_64; en-US) AppleWebKit/532.9 (KHTML, like Gecko) Chrome/5.0.309.0 Safari/532.9 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 01:15:31 +0100 GET /2022_01_31_vipex_access.log.1.html HTTP/1.1 200 31484 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.5304.110 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 01:52:36 +0100 GET / HTTP/1.1 200 5610 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 02:25:52 +0100 GET / HTTP/1.1 200 108041 - Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 03:19:23 +0100 POST /GponForm/diag_Form?images/ HTTP/1.1 404 451 - Hello, World 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 03:19:39 +0100 GET / HTTP/1.1 200 5610 - Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 03:29:35 +0100 GET / HTTP/1.1 200 108035 - Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 03:48:28 +0100 GET / HTTP/1.1 200 5616 - python-requests/2.9.1 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 03:57:08 +0100 POST / HTTP/1.1 404 456 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 04:18:59 +0100 GET /owa/auth/logon.aspx?url=https://1/ecp/ HTTP/1.1 404 456 - Mozilla/5.0 zgrab/0.x 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 04:57:54 +0100 GET / HTTP/1.1 400 - - - 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 04:59:54 +0100 GET / HTTP/1.1 200 5610 - python-requests/2.28.1 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 05:26:16 +0100 GET / HTTP/1.0 200 107891 - - 13 dt id lfi xss csrf - 192.168.21.127 - - Sun, 13 Nov 2022 06:08:36 +0100 GET ///remote/fgt_lang?lang=/../../../..//////////dev/ HTTP/1.1 404 456 - python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-1160.el7.x86_64 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 06:18:46 +0100 GET / HTTP/1.1 200 5610 - 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101 Firefox/101.0' 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 07:05:28 +0100 GET /2022_01_03_vipex_access.log.1.html HTTP/1.1 200 244 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.5304.110 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 07:18:52 +0100 GET /favicon.ico HTTP/1.1 404 456 https://91.223.222.117/ Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 07:53:26 +0100 GET / HTTP/1.1 200 5630 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.102 Safari/537.36 OPR/90.0.4480.100 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 08:04:45 +0100 GET /actuator/health HTTP/1.1 404 456 - Mozilla/5.0 zgrab/0.x 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 09:03:54 +0100 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1 200 5630 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 09:43:23 +0100 GET / HTTP/1.0 200 108386 - - 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 09:48:23 +0100 GET /favicon.ico HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 10:09:07 +0100 GET / HTTP/1.1 200 5630 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 10:30:49 +0100 GET /actuator/gateway/routes HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 11:08:22 +0100 GET / HTTP/1.1 200 5630 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 11:50:53 +0100 GET /info.php HTTP/1.1 503 569 - Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 11:50:54 +0100 GET /_profiler/phpinfo HTTP/1.1 404 456 - Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 11:51:41 +0100 HEAD / HTTP/1.1 200 146 - - 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 12:13:54 +0100 GET / HTTP/1.1 200 108530 - Hello World 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 13:17:13 +0100 GET /config/getuser?index=0 HTTP/1.1 404 456 - Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 15:52:18 +0100 GET / HTTP/1.1 200 108531 - fasthttp 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 15:52:22 +0100 GET /aab9 HTTP/1.1 404 457 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 16:00:21 +0100 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1 200 5631 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 16:09:27 +0100 GET / HTTP/1.1 200 5630 - Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 16:09:48 +0100 GET /owa/auth/logon.aspx HTTP/1.1 404 456 - Mozilla/5.0 zgrab/0.x 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 16:20:47 +0100 GET /owa/auth/x.js HTTP/1.1 404 456 - Mozilla/5.0 zgrab/0.x 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 16:39:29 +0100 GET / HTTP/1.1 200 5630 - Mozilla/5.0 (iPhone; CPU iPhone OS 15_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) GSA/209.1.445234187 Mobile/15E148 Safari/604.1 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 16:45:11 +0100 GET / HTTP/1.1 200 5630 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 18:02:09 +0100 GET /ab2g HTTP/1.1 404 456 - cyberwarcon 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 18:02:16 +0100 GET / HTTP/1.1 200 5630 - Mozilla/5.0 zgrab/0.x 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 18:19:31 +0100 POST /HNAP1/ HTTP/1.0 408 487 - - 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 18:36:14 +0100 CONNECT 188.214.129.95:4444 HTTP/1.1 400 - - - 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 18:49:22 +0100 GET / HTTP/1.1 200 108531 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 18:49:43 +0100 GET / HTTP/1.1 200 5631 - Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 18:52:32 +0100 CONNECT 188.214.129.95:4444 HTTP/1.1 400 - - - 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 18:57:58 +0100 GET / HTTP/1.1 200 108530 - Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 19:01:19 +0100 CONNECT 188.214.129.95:4444 HTTP/1.1 400 - - - 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 19:13:03 +0100 CONNECT 188.214.129.95:4444 HTTP/1.1 400 - - - 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 19:15:58 +0100 CONNECT 188.214.129.95:4444 HTTP/1.1 400 - - - 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 19:22:08 +0100 GET /robots.txt HTTP/1.1 404 462 - Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 19:24:45 +0100 CONNECT 188.214.129.95:4444 HTTP/1.1 400 - - - 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 19:25:16 +0100 POST /HNAP1/ HTTP/1.1 404 456 - Mozila/5.0 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 19:30:37 +0100 CONNECT 188.214.129.95:4444 HTTP/1.1 400 - - - 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 19:42:23 +0100 CONNECT 188.214.129.95:4444 HTTP/1.1 400 - - - 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 19:51:19 +0100 CONNECT 188.214.129.95:4444 HTTP/1.1 400 - - - 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 19:57:05 +0100 CONNECT 188.214.129.95:4444 HTTP/1.1 400 - - - 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 20:06:34 +0100 CONNECT 188.214.129.95:4444 HTTP/1.1 400 - - - 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 20:08:10 +0100 CONNECT 188.214.129.95:4444 HTTP/1.1 400 - - - 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 20:29:00 +0100 GET / HTTP/1.1 200 108536 - Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 20:43:32 +0100 GET / HTTP/1.1 200 5630 - 'Mozilla/5.0 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 21:14:37 +0100 GET /2019_11_27_vipex_access.log.1.html HTTP/1.1 304 147 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.5304.110 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 21:23:51 +0100 POST /HNAP1/ HTTP/1.1 404 456 - Mozila/5.0 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 22:07:31 +0100 GET / HTTP/1.1 200 5631 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.95 Safari/537.36 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 22:43:13 +0100 GET / HTTP/1.1 200 108536 - Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 23:08:49 +0100 GET / HTTP/1.1 200 108530 - Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 23:13:31 +0100 GET / HTTP/1.1 200 108530 - - 0 none - 192.168.21.127 - - Sun, 13 Nov 2022 23:17:27 +0100 GET /config/getuser?index=0 HTTP/1.1 404 456 - Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0