Summary: one incident discovered from one client

	192.168.21.127 | 1 incident | impact ∑: 13	attacks only
	Description: A targeted scan and human attacker and random scan yesterday. A total of one incident was discovered by phpids detection modules.
Impact Tags Remote-City Remote-Host Remote-Logname Remote-User Date Request Final-Status Bytes-Sent Referer User-Agent 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 00:27:45 +0100 GET /2021_08_10_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.123 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 00:37:45 +0100 GET / HTTP/1.1 200 53931 - Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 00:39:26 +0100 GET /.env HTTP/1.1 404 360 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 01:53:30 +0100 GET / HTTP/1.1 200 53931 - Hello World 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 02:03:12 +0100 GET / HTTP/1.1 200 2857 - Mozilla/5.0 zgrab/0.x 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 02:42:32 +0100 GET / HTTP/1.1 200 2857 - python-requests/2.31.0 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 02:56:43 +0100 GET / HTTP/1.1 200 53931 - Hello World 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 03:39:47 +0100 GET / HTTP/1.1 200 53931 - Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 03:56:09 +0100 POST /HNAP1/ HTTP/1.1 404 360 - Mozila/5.0 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 04:43:02 +0100 GET / HTTP/1.1 200 2857 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 05:55:10 +0100 GET / HTTP/1.1 200 2857 - Linux Gnu (cow) 13 dt id lfi xss csrf - 192.168.21.127 - - Thu, 23 Nov 2023 06:10:25 +0100 GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1 404 360 - Python-urllib/3.9 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 06:53:20 +0100 GET / HTTP/1.1 200 2889 - Mozilla/5.0 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 07:35:10 +0100 GET / HTTP/1.1 200 2889 - Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 08:07:04 +0100 GET / HTTP/1.1 200 2889 - Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 08:25:24 +0100 GET /robots.txt HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 08:30:10 +0100 GET / HTTP/1.1 200 2889 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 09:19:24 +0100 GET / HTTP/1.1 200 2889 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 09:22:07 +0100 GET /favicon.ico HTTP/1.1 404 360 - Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 09:51:48 +0100 GET / HTTP/1.1 200 54679 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.98 Safari/537.36 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 09:53:53 +0100 GET /sitemap.xml.gz HTTP/1.1 404 360 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 09:58:45 +0100 GET /robots.txt HTTP/1.1 404 360 - Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 10:35:42 +0100 GET / HTTP/1.1 200 2889 - python-requests/2.31.0 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 10:45:59 +0100 GET /sitemap.xml.gz HTTP/1.1 404 360 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 11:05:06 +0100 GET / HTTP/1.1 200 54679 - Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 13:30:45 +0100 GET / HTTP/1.1 200 54679 - Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 13:51:51 +0100 GET /favicon.ico HTTP/1.1 404 360 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 13:57:13 +0100 GET /geoserver/web/ HTTP/1.1 404 360 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 14:06:48 +0100 GET / HTTP/1.1 200 2889 - Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 14:49:29 +0100 GET /.env HTTP/1.1 404 360 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 15:50:17 +0100 GET / HTTP/1.1 200 2889 - Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 16:43:43 +0100 GET /robots.txt HTTP/1.1 404 360 - Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot) 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 16:46:39 +0100 GET /_profiler/phpinfo HTTP/1.1 404 360 - - 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 16:46:40 +0100 GET /phpinfo.php HTTP/1.1 503 473 - - 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 16:46:41 +0100 GET /php.php HTTP/1.1 503 473 - - 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 16:46:52 +0100 GET /2023_01_15_report_access.log.1.html HTTP/1.1 200 33511 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 17:51:51 +0100 GET / HTTP/1.0 200 54590 - - 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 18:49:01 +0100 GET / HTTP/1.1 200 54679 - Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 19:54:52 +0100 GET /robots.txt HTTP/1.1 404 360 - Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 20:00:46 +0100 GET /2021_01_03_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.123 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 20:24:35 +0100 GET /2019_12_01_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.123 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 20:45:46 +0100 GET /2023_08_29_vipex_access.log.1.html HTTP/1.1 304 199 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.123 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 21:03:15 +0100 GET / HTTP/1.0 200 54590 - Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 21:14:46 +0100 GET /2021_12_01_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.123 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 21:43:01 +0100 GET /2022_08_20_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.123 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 21:58:06 +0100 GET /actuator/gateway/routes HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 22:07:16 +0100 GET / HTTP/1.1 200 54679 - - 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 22:44:47 +0100 GET /2020_08_24_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.123 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 23:01:48 +0100 GET / HTTP/1.1 200 2889 - Mozilla/5.0 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 23:20:57 +0100 GET /2021_12_01_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.123 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Thu, 23 Nov 2023 23:32:55 +0100 GET / HTTP/1.1 200 2889 - python-requests/2.31.0